$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154652.roa File: AS154652.roa (raw, json) Hash identifier: thzhsD20NEqHxJmYSf98QJq+UPi13vbLxAPy7kt+gos= Subject key identifier: 2E:B7:92:91:0E:47:9E:CD:01:6A:65:3D:AC:11:55:39:C9:44:F0:FB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67F8B6869DE4A00A91AA39E344B8AAB5477C8B07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154652.roa Signing time: Mon 27 Jul 2026 03:22:10 +0000 ROA not before: Mon 27 Jul 2026 03:17:10 +0000 ROA not after: Mon 26 Jul 2027 03:22:10 +0000 asID: 154652 IP address blocks: 2001:df6:fe40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f8:b6:86:9d:e4:a0:0a:91:aa:39:e3:44:b8:aa:b5:47:7c:8b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 27 03:17:10 2026 GMT Not After : Jul 26 03:22:10 2027 GMT Subject: CN=2EB792910E479ECD016A653DAC115539C944F0FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:62:de:d3:26:f0:f2:17:83:e4:5b:88:bf: 56:61:cd:61:1f:fa:2f:84:d0:d5:fd:fc:4f:ba:d9: 47:c0:3a:a9:49:17:62:f2:17:5e:63:6b:bc:36:83: 4c:8a:33:05:0d:c1:1f:b2:ae:b0:5c:eb:d2:a9:4a: ff:25:a4:72:a2:45:02:38:cc:1f:3a:c6:02:31:a9: 53:28:72:29:f1:bd:ac:93:bc:6c:63:0f:43:a3:db: ee:31:4e:df:72:75:87:58:43:c7:a2:39:7d:a6:16: ac:72:e8:5e:11:b5:9c:bc:00:53:57:13:30:18:23: 0e:05:b0:8e:71:74:64:e7:f6:3b:0c:61:41:f9:c5: 8a:f6:42:77:0a:17:c8:1a:de:f2:bf:3f:29:7c:b5: 22:0f:7c:57:c0:62:00:c4:1a:82:85:4d:6c:85:bc: 30:99:7d:02:47:8a:41:80:81:78:c4:c7:e3:b8:61: 76:37:d6:f0:ce:48:5b:24:64:9d:49:89:1c:f7:ee: 52:96:2b:33:77:06:2f:e5:e1:14:c8:05:ad:43:7a: 07:97:2f:95:c6:b6:85:2e:fe:1a:c4:82:71:94:f2: e2:c2:64:9b:88:fd:f2:d0:cf:0b:76:9c:c6:2e:d6: 34:85:0c:42:30:e9:ad:31:e1:2f:ba:76:bf:52:ef: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:92:91:0E:47:9E:CD:01:6A:65:3D:AC:11:55:39:C9:44:F0:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:fe40::/48 Signature Algorithm: sha256WithRSAEncryption 12:fe:df:59:f0:c4:cf:92:4e:6f:59:51:8b:c7:16:d8:e8:68: 44:65:8a:2a:cb:a2:bd:bb:50:f3:01:b6:1b:aa:fc:5c:0d:69: ac:d3:09:c7:37:34:ce:95:c0:1c:12:1f:5d:99:da:f8:c5:b9: 7e:18:c9:0a:19:78:a7:35:f9:16:f6:ea:bf:d6:c8:9a:a3:bb: 9e:92:f0:67:31:1f:76:36:9e:da:35:80:30:24:d5:a4:bb:d4: 7b:98:47:f8:f7:a2:aa:f2:86:78:7e:01:98:1d:cc:a1:02:7e: 88:67:d4:be:99:74:41:c6:c4:17:bb:ba:da:56:d0:db:db:92: 75:75:37:42:06:bc:fd:76:3a:96:d3:91:12:37:f4:bf:ba:ac: 65:1e:e3:9a:21:49:e3:5a:08:f6:68:01:19:8a:ce:98:63:b4: 64:45:7d:e9:cf:c5:45:ea:b9:d9:f1:eb:c8:c2:c3:33:79:1d: 11:31:3e:82:d7:83:bb:a2:5f:88:f9:89:2f:ba:07:ba:52:0f: 3b:53:ad:bd:33:63:0f:f1:4e:f2:47:f5:d5:9d:69:52:18:34: 27:49:25:17:2d:1e:7b:7d:9a:07:d9:70:e0:42:84:aa:8a:09: 84:39:c6:ed:dd:2d:0c:47:df:d2:61:89:6b:78:39:85:b3:58: 82:5f:b4:99 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZ/i2hp3koAqRqjnjRLiqtUd8iwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyNzAzMTcxMFoX DTI3MDcyNjAzMjIxMFowMzExMC8GA1UEAxMoMkVCNzkyOTEwRTQ3OUVDRDAxNkE2 NTNEQUMxMTU1MzlDOTQ0RjBGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9OYt7TJvDyF4PkW4i/VmHNYR/6L4TQ1f38T7rZR8A6qUkXYvIXXmNrvDaD TIozBQ3BH7KusFzr0qlK/yWkcqJFAjjMHzrGAjGpUyhyKfG9rJO8bGMPQ6Pb7jFO 33J1h1hDx6I5faYWrHLoXhG1nLwAU1cTMBgjDgWwjnF0ZOf2OwxhQfnFivZCdwoX yBre8r8/KXy1Ig98V8BiAMQagoVNbIW8MJl9AkeKQYCBeMTH47hhdjfW8M5IWyRk nUmJHPfuUpYrM3cGL+XhFMgFrUN6B5cvlca2hS7+GsSCcZTy4sJkm4j98tDPC3ac xi7WNIUMQjDprTHhL7p2v1LvvsMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQut5KR DkeezQFqZT2sEVU5yUTw+zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NjUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9v5AMA0GCSqGSIb3DQEBCwUAA4IBAQAS/t9Z8MTPkk5vWVGLxxbY 6GhEZYoqy6K9u1DzAbYbqvxcDWms0wnHNzTOlcAcEh9dmdr4xbl+GMkKGXinNfkW 9uq/1siao7uekvBnMR92Np7aNYAwJNWku9R7mEf496Kq8oZ4fgGYHcyhAn6IZ9S+ mXRBxsQXu7raVtDb25J1dTdCBrz9djqW05ESN/S/uqxlHuOaIUnjWgj2aAEZis6Y Y7RkRX3pz8VF6rnZ8evIwsMzeR0RMT6C14O7ol+I+Ykvuge6Ug87U629M2MP8U7y R/XVnWlSGDQnSSUXLR57fZoH2XDgQoSqigmEOcbt3S0MR9/SYYlreDmFs1iCX7SZ -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:27 2026 by rpki-client