$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa File: AS154336.roa (raw, json) Hash identifier: iKj9s6gxLD5Zl0WyzbYI++WGQYvCMvc+qoWzgEhPars= Subject key identifier: B8:CF:B1:1B:3B:15:ED:1E:AF:0A:E0:8B:29:2F:51:33:F4:83:BF:81 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 513B6711628B476E4DAAE6772FB94658124F7533 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa Signing time: Thu 05 Nov 2026 02:15:28 +0000 ROA not before: Thu 05 Nov 2026 02:10:28 +0000 ROA not after: Thu 04 Nov 2027 02:15:28 +0000 asID: 154336 IP address blocks: 45.248.113.0/24 maxlen: 24 2001:df6:3cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 05:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3b:67:11:62:8b:47:6e:4d:aa:e6:77:2f:b9:46:58:12:4f:75:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 5 02:10:28 2026 GMT Not After : Nov 4 02:15:28 2027 GMT Subject: CN=B8CFB11B3B15ED1EAF0AE08B292F5133F483BF81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:e2:66:f8:29:f2:56:15:4a:98:79:80:dc: de:cb:e0:74:57:75:57:01:77:f2:d4:5a:63:ec:bd: ae:5b:03:71:23:c2:6f:b2:b7:10:bc:82:ff:67:8c: a4:ac:82:49:d2:9d:2e:0c:df:40:02:79:a9:7c:8c: bd:6d:c7:f5:41:2e:22:f6:76:56:1d:a1:6d:94:0b: 6d:c3:92:46:95:e6:da:d1:52:30:fe:95:a1:3b:e7: ce:7b:50:51:54:96:43:30:11:52:c5:92:eb:80:d8: 4b:e0:d0:66:47:91:ab:7c:d7:80:5c:a3:3f:35:a7: a7:10:db:d3:eb:80:a7:dc:22:1b:5c:6a:27:49:16: 5d:17:b6:66:cf:3d:33:21:f8:fd:a5:39:8b:33:93: 88:da:25:14:f3:b4:ed:c8:3e:d8:fd:e5:5f:78:05: c8:b7:61:50:7f:1f:9a:4c:cf:6b:30:66:39:64:6d: 6d:d9:34:1b:64:86:80:fd:76:c5:67:28:46:13:8f: f8:c9:01:37:37:33:43:5e:8b:d3:c6:ae:6b:86:cf: e9:9e:ed:96:cf:f6:26:eb:ee:de:c1:6e:46:ce:d5: 3e:9b:a0:5d:f9:71:6f:ff:cb:56:f1:47:7c:d2:14: 00:95:71:7e:99:4f:cd:81:24:13:30:61:d9:db:48: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CF:B1:1B:3B:15:ED:1E:AF:0A:E0:8B:29:2F:51:33:F4:83:BF:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.113.0/24 IPv6: 2001:df6:3cc0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:a0:97:48:e7:93:43:d1:6b:60:89:e8:b7:bb:a0:0c:4c:79: a6:d6:d0:e7:a7:05:91:e2:83:04:3a:06:3c:b0:ed:5d:e4:2c: af:5b:bb:2e:06:7b:0d:ed:1e:72:75:f0:3e:1b:3c:ac:2a:f3: ef:8b:42:e0:92:55:0f:c0:38:90:c6:45:ba:4b:1d:83:bc:8a: 03:25:3a:a2:2d:ac:1b:fe:f6:96:5a:6f:5a:97:89:f3:7f:ad: 88:35:32:e2:63:4c:b5:12:47:bd:a1:3e:38:df:cf:c6:82:e7: 79:94:a1:78:f4:81:35:ce:61:7c:58:2c:c4:37:f8:ae:d3:74: 79:0c:31:3d:dd:14:b7:b2:e0:8c:67:11:f2:16:00:b5:e7:d9: 7a:da:85:5a:76:b4:06:97:7f:ed:0f:72:16:3f:cb:77:5e:94: 31:8c:8a:98:c8:b0:f5:4e:3e:29:e5:39:ed:61:cb:66:47:17: a5:b8:9b:d7:bd:80:89:89:1a:13:2f:37:97:ee:51:85:53:5c: 2d:fc:d4:4f:04:ff:35:45:85:c8:c0:a1:09:37:57:a1:d3:7d: 9c:86:31:63:e4:ea:49:92:ba:48:c8:73:33:40:7b:ba:97:ab: 94:33:11:f7:69:b1:de:4c:1e:f0:7a:77:49:b2:43:36:67:47: e6:73:2e:bb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUTtnEWKLR25NquZ3L7lGWBJPdTMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNTAyMTAyOFoX DTI3MTEwNDAyMTUyOFowMzExMC8GA1UEAxMoQjhDRkIxMUIzQjE1RUQxRUFGMEFF MDhCMjkyRjUxMzNGNDgzQkY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqW4mb4KfJWFUqYeYDc3svgdFd1VwF38tRaY+y9rlsDcSPCb7K3ELyC/2eM pKyCSdKdLgzfQAJ5qXyMvW3H9UEuIvZ2Vh2hbZQLbcOSRpXm2tFSMP6VoTvnzntQ UVSWQzARUsWS64DYS+DQZkeRq3zXgFyjPzWnpxDb0+uAp9wiG1xqJ0kWXRe2Zs89 MyH4/aU5izOTiNolFPO07cg+2P3lX3gFyLdhUH8fmkzPazBmOWRtbdk0G2SGgP12 xWcoRhOP+MkBNzczQ16L08aua4bP6Z7tls/2Juvu3sFuRs7VPpugXflxb//LVvFH fNIUAJVxfplPzYEkEzBh2dtI/b0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBS4z7Eb OxXtHq8K4IspL1Ez9IO/gTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MzM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQALfhxMA8EAgACMAkDBwAgAQ32PMAwDQYJKoZIhvcNAQELBQADggEBAC+g l0jnk0PRa2CJ6Le7oAxMeabW0OenBZHigwQ6Bjyw7V3kLK9buy4Gew3tHnJ18D4b PKwq8++LQuCSVQ/AOJDGRbpLHYO8igMlOqItrBv+9pZab1qXifN/rYg1MuJjTLUS R72hPjjfz8aC53mUoXj0gTXOYXxYLMQ3+K7TdHkMMT3dFLey4IxnEfIWALXn2Xra hVp2tAaXf+0PchY/y3delDGMipjIsPVOPinlOe1hy2ZHF6W4m9e9gImJGhMvN5fu UYVTXC381E8E/zVFhcjAoQk3V6HTfZyGMWPk6kmSukjIczNAe7qXq5QzEfdpsd5M HvB6d0myQzZnR+ZzLrs= -----END CERTIFICATE-----Generated at Sat Nov 7 14:29:54 2026 by rpki-client