$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154505.roa File: AS154505.roa (raw, json) Hash identifier: NxRBDq+p6aPjRIjhRtd1kSYltn2cafwEw4olCJh60Uo= Subject key identifier: 58:3D:D7:0C:23:51:CF:4A:62:00:8A:A4:31:D0:72:D4:7E:B4:66:FB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FA84B2989578A654023A2BAE2D8C15DD87A8B04 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154505.roa Signing time: Mon 08 Jun 2026 02:14:15 +0000 ROA not before: Mon 08 Jun 2026 02:09:15 +0000 ROA not after: Mon 07 Jun 2027 02:14:15 +0000 asID: 154505 IP address blocks: 2001:df6:a9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a8:4b:29:89:57:8a:65:40:23:a2:ba:e2:d8:c1:5d:d8:7a:8b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 8 02:09:15 2026 GMT Not After : Jun 7 02:14:15 2027 GMT Subject: CN=583DD70C2351CF4A62008AA431D072D47EB466FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:f8:aa:ce:be:77:46:81:5a:dc:24:4e:37: b5:67:f8:a2:f0:0a:ae:1c:4c:ed:06:30:be:9d:a0: c9:c0:1d:78:b5:7a:43:11:54:84:6e:3e:12:81:01: e7:cd:70:a9:6d:14:88:a8:36:9c:d1:2b:cf:b9:52: 61:8e:81:c8:2b:20:fa:31:95:f1:ce:53:ab:d6:14: fe:e7:8a:79:6d:65:dc:54:53:8a:69:b8:b2:d4:13: 74:6c:16:7d:bb:05:fc:e9:78:c3:45:8e:fa:46:71: 50:74:1e:27:e3:09:eb:56:ed:b1:dc:2a:62:43:33: 4f:a0:d0:74:50:44:4d:f2:6d:1c:51:85:54:24:22: e0:f2:eb:aa:4b:c0:02:aa:8d:a8:a4:28:67:22:6e: 3e:8e:4f:42:f4:e4:8a:18:17:76:2a:0c:7c:a7:a9: b2:d8:66:fa:13:90:e5:ea:3b:b3:d2:d8:b9:3d:de: 73:6c:23:21:43:85:72:95:07:41:8f:84:b4:87:b1: 2d:e6:dc:0a:11:e7:4a:9f:a0:9f:9c:2a:bf:51:91: c7:a9:39:8b:b8:fd:19:50:bb:e5:df:7b:2b:77:e0: 47:75:40:41:8e:7b:2f:6b:bd:a2:7d:35:9f:cb:08: e5:3a:8c:c2:b3:9c:eb:92:58:b6:1d:53:24:53:a7: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3D:D7:0C:23:51:CF:4A:62:00:8A:A4:31:D0:72:D4:7E:B4:66:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154505.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a9c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:9c:8b:e9:1e:70:d0:f1:7f:d7:ff:4a:dd:9a:ce:3b:23:0a: ef:1c:74:97:3b:df:57:25:c0:e4:e4:26:99:02:2a:9d:1e:c4: 2d:31:0a:5f:ae:aa:af:4b:12:b1:b6:b8:0d:af:07:e0:74:70: b0:f3:f4:e4:34:21:fe:7d:77:7d:86:96:fa:c2:77:11:1e:47: 8b:f7:e0:c0:2a:03:92:90:50:23:f0:33:93:b4:d0:22:e9:47: 91:87:63:c1:65:f2:d9:4e:9d:29:df:62:dc:c4:27:66:28:66: b3:fa:ed:56:8e:3e:6e:46:6b:11:88:03:19:ad:15:0d:5d:f3: c5:1b:49:67:37:51:be:60:12:29:6a:94:df:ed:a5:39:35:8d: 56:2a:b5:53:18:74:71:e9:b3:17:62:4c:98:c2:0c:e8:d7:eb: 27:ac:b2:84:0e:4f:53:e4:43:ab:e8:33:f6:a4:de:6e:1f:72: 1a:73:a8:8f:bb:b7:20:de:54:58:2b:24:54:fd:33:fc:5c:01: f2:49:3d:7b:f4:f7:7b:23:27:92:e1:eb:96:65:51:1f:3a:99: 61:6c:34:fc:a4:08:1d:0d:21:f2:f2:25:c0:0d:6b:0a:a7:9e: 69:12:9b:67:6e:a5:78:ba:df:a5:09:b5:e2:5d:84:bb:2b:81: 7b:a1:23:94 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUP6hLKYlXimVAI6K64tjBXdh6iwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYwODAyMDkxNVoX DTI3MDYwNzAyMTQxNVowMzExMC8GA1UEAxMoNTgzREQ3MEMyMzUxQ0Y0QTYyMDA4 QUE0MzFEMDcyRDQ3RUI0NjZGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgT+KrOvndGgVrcJE43tWf4ovAKrhxM7QYwvp2gycAdeLV6QxFUhG4+EoEB 581wqW0UiKg2nNErz7lSYY6ByCsg+jGV8c5Tq9YU/ueKeW1l3FRTimm4stQTdGwW fbsF/Ol4w0WO+kZxUHQeJ+MJ61btsdwqYkMzT6DQdFBETfJtHFGFVCQi4PLrqkvA AqqNqKQoZyJuPo5PQvTkihgXdioMfKepsthm+hOQ5eo7s9LYuT3ec2wjIUOFcpUH QY+EtIexLebcChHnSp+gn5wqv1GRx6k5i7j9GVC75d97K3fgR3VAQY57L2u9on01 n8sI5TqMwrOc65JYth1TJFOngs0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRYPdcM I1HPSmIAiqQx0HLUfrRm+zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9qnAMA0GCSqGSIb3DQEBCwUAA4IBAQAYnIvpHnDQ8X/X/0rdms47 IwrvHHSXO99XJcDk5CaZAiqdHsQtMQpfrqqvSxKxtrgNrwfgdHCw8/TkNCH+fXd9 hpb6wncRHkeL9+DAKgOSkFAj8DOTtNAi6UeRh2PBZfLZTp0p32LcxCdmKGaz+u1W jj5uRmsRiAMZrRUNXfPFG0lnN1G+YBIpapTf7aU5NY1WKrVTGHRx6bMXYkyYwgzo 1+snrLKEDk9T5EOr6DP2pN5uH3Iac6iPu7cg3lRYKyRU/TP8XAHyST179Pd7IyeS 4euWZVEfOplhbDT8pAgdDSHy8iXADWsKp55pEptnbqV4ut+lCbXiXYS7K4F7oSOU -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:33 2026 by rpki-client