$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154709.roa File: AS154709.roa (raw, json) Hash identifier: Uxb6uUlqxeCcp9rvX7UeO//wcuxhGL84werNjRbZKTo= Subject key identifier: 20:2D:E5:B2:C8:EA:5E:58:09:C7:92:DD:86:E5:E8:84:56:59:0A:BA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 56DEA54460E105F56159BCA10F3F3769B170D2D5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154709.roa Signing time: Fri 12 Jun 2026 07:31:07 +0000 ROA not before: Fri 12 Jun 2026 07:26:07 +0000 ROA not after: Fri 11 Jun 2027 07:31:07 +0000 asID: 154709 IP address blocks: 2001:df7:17c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:de:a5:44:60:e1:05:f5:61:59:bc:a1:0f:3f:37:69:b1:70:d2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 12 07:26:07 2026 GMT Not After : Jun 11 07:31:07 2027 GMT Subject: CN=202DE5B2C8EA5E5809C792DD86E5E88456590ABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:2d:bb:d3:c5:e4:48:b2:42:09:fd:b5:b1: b7:50:b2:e8:00:25:f0:1d:b7:0f:4b:3e:c1:c4:08: 0e:ed:78:68:37:4a:40:4a:8c:48:dd:6e:71:3f:ab: 51:ba:16:32:94:fa:37:53:42:c1:2e:c3:ce:a4:74: 55:95:ab:51:84:08:5c:5a:a0:9f:ce:26:ad:fc:d7: ea:5f:33:55:fa:5e:72:05:e5:18:a1:d2:72:e3:2a: fc:e1:28:b7:68:ea:10:dd:5c:31:1b:0b:64:fc:9e: b7:b5:e4:06:a2:ac:39:8c:2a:cf:c5:41:d3:47:b6: 41:6e:19:ce:c8:3d:2a:f2:c6:8d:dc:1f:46:c8:94: 40:80:ee:44:f7:a2:59:af:be:58:65:3a:7b:25:c4: 95:e6:11:d7:9e:e5:b7:17:ac:e7:f4:17:29:71:03: a0:4e:39:0a:ff:c0:b9:45:76:51:8f:b4:b3:05:1e: 84:6b:c7:cf:45:37:5e:08:3d:8e:db:08:69:af:9d: 67:40:25:e0:75:45:e7:8a:94:e1:c7:fe:f2:e7:b3: c1:b7:3a:28:f6:79:4e:d4:37:8f:91:c2:a4:6b:58: aa:d7:90:35:11:ea:31:f9:84:44:09:f1:62:6f:af: 9b:15:8e:5a:e2:6e:39:99:28:5c:74:a5:ea:d7:29: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2D:E5:B2:C8:EA:5E:58:09:C7:92:DD:86:E5:E8:84:56:59:0A:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154709.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:17c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:7f:38:0d:4a:c1:54:7b:88:50:91:a2:c6:98:15:0a:72:a1: f1:2e:b8:d6:a0:3f:5a:9e:b3:25:03:19:86:18:f2:13:61:8e: 61:78:9e:74:bb:03:3c:f6:a2:12:47:54:b3:36:59:58:65:39: dc:a5:c3:82:11:9e:d4:37:70:17:51:1f:10:48:c0:6e:53:55: 10:f6:f4:f8:27:d4:13:de:0f:5d:3f:4e:7a:ba:ba:c0:7d:a3: 88:43:87:ca:36:01:d3:cb:ec:d0:e0:90:fe:e2:ed:c7:3e:7f: 52:4f:e6:08:d0:06:6b:f1:c6:7f:f7:cf:70:2d:18:19:6d:5b: 2c:da:0d:23:06:0e:cc:af:46:5c:8d:0e:b3:7b:aa:0a:fa:1e: e0:b9:16:e1:20:3e:51:51:cf:83:08:5f:e2:60:a5:68:59:1c: 1d:fa:b1:3f:67:0b:c4:46:dc:f3:fa:29:a6:d4:6c:bf:7b:d1: 69:25:d8:bb:c1:4f:f9:d0:23:97:9a:ce:60:41:aa:94:54:68: e3:fe:14:26:87:2e:61:4c:1c:79:00:60:92:89:04:aa:c7:ba: de:68:1f:63:73:55:83:e0:d8:55:06:33:f0:0c:8f:66:cc:00: c8:46:76:05:82:86:a5:88:7d:b9:ba:11:2f:14:2f:4a:d4:40: 67:2f:8f:ec -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUVt6lRGDhBfVhWbyhDz83abFw0tUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYxMjA3MjYwN1oX DTI3MDYxMTA3MzEwN1owMzExMC8GA1UEAxMoMjAyREU1QjJDOEVBNUU1ODA5Qzc5 MkREODZFNUU4ODQ1NjU5MEFCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXeLbvTxeRIskIJ/bWxt1Cy6AAl8B23D0s+wcQIDu14aDdKQEqMSN1ucT+r UboWMpT6N1NCwS7DzqR0VZWrUYQIXFqgn84mrfzX6l8zVfpecgXlGKHScuMq/OEo t2jqEN1cMRsLZPyet7XkBqKsOYwqz8VB00e2QW4Zzsg9KvLGjdwfRsiUQIDuRPei Wa++WGU6eyXEleYR157ltxes5/QXKXEDoE45Cv/AuUV2UY+0swUehGvHz0U3Xgg9 jtsIaa+dZ0Al4HVF54qU4cf+8uezwbc6KPZ5TtQ3j5HCpGtYqteQNRHqMfmERAnx Ym+vmxWOWuJuOZkoXHSl6tcplSMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQgLeWy yOpeWAnHkt2G5eiEVlkKujAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9xfAMA0GCSqGSIb3DQEBCwUAA4IBAQAYfzgNSsFUe4hQkaLGmBUK cqHxLrjWoD9anrMlAxmGGPITYY5heJ50uwM89qISR1SzNllYZTncpcOCEZ7UN3AX UR8QSMBuU1UQ9vT4J9QT3g9dP056urrAfaOIQ4fKNgHTy+zQ4JD+4u3HPn9ST+YI 0AZr8cZ/989wLRgZbVss2g0jBg7Mr0ZcjQ6ze6oK+h7guRbhID5RUc+DCF/iYKVo WRwd+rE/ZwvERtzz+imm1Gy/e9FpJdi7wU/50COXms5gQaqUVGjj/hQmhy5hTBx5 AGCSiQSqx7reaB9jc1WD4NhVBjPwDI9mzADIRnYFgoaliH25uhEvFC9K1EBnL4/s -----END CERTIFICATE-----Generated at Wed Jun 17 08:25:13 2026 by rpki-client