$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154899.roa File: AS154899.roa (raw, json) Hash identifier: mVvfPY9nK6OtFeU0dSLUrm+Jdo3XN9WltWKNxH+c43I= Subject key identifier: 4F:8C:20:E2:A1:05:AE:24:92:70:2E:B3:18:40:96:40:9A:C4:F5:81 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79A3576D897195EB421C65ABD1A60AEE440B3838 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154899.roa Signing time: Thu 08 Oct 2026 01:48:07 +0000 ROA not before: Thu 08 Oct 2026 01:43:07 +0000 ROA not after: Thu 07 Oct 2027 01:48:07 +0000 asID: 154899 IP address blocks: 163.52.145.0/24 maxlen: 24 2001:df7:7b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a3:57:6d:89:71:95:eb:42:1c:65:ab:d1:a6:0a:ee:44:0b:38:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 8 01:43:07 2026 GMT Not After : Oct 7 01:48:07 2027 GMT Subject: CN=4F8C20E2A105AE2492702EB3184096409AC4F581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:bc:67:49:f4:de:f9:71:0c:cc:9b:33:b1: 16:9b:d7:4b:66:9c:0f:29:14:61:9e:f8:3e:f9:ea: b2:29:be:a9:71:aa:e0:3f:ef:b7:ba:83:c7:f9:eb: 5c:ab:9e:33:15:ab:45:80:18:62:88:2a:a5:ad:cb: 0f:0b:3b:9d:a9:fb:1e:99:83:cb:cc:06:5a:03:57: 77:27:15:b1:25:da:01:35:95:42:0f:89:3a:6f:7a: 8c:e6:a1:40:79:e0:4f:ad:20:a7:6a:ed:c9:48:b3: 83:9c:f7:53:0d:1d:b8:09:a2:06:dd:b6:89:53:25: c5:ff:b6:37:9d:71:96:35:a2:ca:a5:7f:d6:1d:ba: 36:f6:a0:a9:7f:9a:8b:83:b6:25:5a:87:86:68:bd: 9f:ca:52:04:f8:a3:77:74:fd:e7:c1:a3:c7:fb:6c: f8:39:3e:17:5a:fa:53:0b:20:dc:4e:75:f4:e2:19: 18:1e:0c:3e:ef:fd:66:ac:87:13:7d:3f:05:b8:4c: b4:2a:10:c8:68:af:77:b0:36:a2:c3:b3:e7:74:34: f0:69:e4:00:5c:69:e4:3a:42:d8:bc:07:6a:85:6c: 7a:96:bb:cd:ae:29:c1:2a:4d:82:56:2c:e2:aa:e0: 92:4d:18:22:7e:22:dd:01:9c:f2:b0:24:e8:28:ca: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:20:E2:A1:05:AE:24:92:70:2E:B3:18:40:96:40:9A:C4:F5:81 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.145.0/24 IPv6: 2001:df7:7b40::/48 Signature Algorithm: sha256WithRSAEncryption 35:a3:e1:87:2c:92:bc:1e:7f:0b:a3:7d:6e:d1:6e:e9:0a:7a: 38:f5:15:fa:0c:9a:b9:50:d8:94:e8:f8:38:ca:95:e4:82:1b: d5:e2:86:ef:52:81:84:fd:09:b1:e1:c1:bd:e3:6d:1d:44:59: 52:c4:6c:23:d1:d4:5b:e6:7f:44:8b:65:f7:b5:f1:6d:5c:73: 9d:53:48:d7:45:85:8c:6c:78:11:1c:de:bf:a0:36:c3:ac:d5: 1f:98:4c:bb:33:2e:1e:1c:7f:ec:79:bc:14:c5:91:17:67:8a: db:cd:2a:f3:63:03:f4:24:e7:ed:46:3c:a6:00:a6:87:94:93: 89:fe:8b:42:e7:e7:66:70:29:2a:0d:ba:47:1b:13:ae:ce:c8: 41:57:7f:af:2a:e7:94:44:ee:84:ab:a2:84:e8:e8:1e:0f:b1: 09:32:36:88:99:2b:12:0c:eb:0b:12:9c:e4:74:bb:2b:98:8b: 74:cc:7f:f0:ee:c3:cd:82:60:c3:a6:d2:de:5f:aa:a2:e1:33: 37:d3:31:ef:22:39:74:6b:b5:46:e8:8d:43:bb:f4:23:86:cd: 68:4e:e8:1b:62:73:67:41:1e:60:cc:f7:71:f0:af:d4:ba:08: 2b:34:99:bb:9a:04:21:9f:c2:b0:c8:74:63:1a:8e:6d:c0:ba: 98:7d:52:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeaNXbYlxletCHGWr0aYK7kQLODgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwODAxNDMwN1oX DTI3MTAwNzAxNDgwN1owMzExMC8GA1UEAxMoNEY4QzIwRTJBMTA1QUUyNDkyNzAy RUIzMTg0MDk2NDA5QUM0RjU4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUivGdJ9N75cQzMmzOxFpvXS2acDykUYZ74Pvnqsim+qXGq4D/vt7qDx/nr XKueMxWrRYAYYogqpa3LDws7nan7HpmDy8wGWgNXdycVsSXaATWVQg+JOm96jOah QHngT60gp2rtyUizg5z3Uw0duAmiBt22iVMlxf+2N51xljWiyqV/1h26NvagqX+a i4O2JVqHhmi9n8pSBPijd3T958Gjx/ts+Dk+F1r6Uwsg3E519OIZGB4MPu/9ZqyH E30/BbhMtCoQyGivd7A2osOz53Q08GnkAFxp5DpC2LwHaoVsepa7za4pwSpNglYs 4qrgkk0YIn4i3QGc8rAk6CjKyUcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRPjCDi oQWuJJJwLrMYQJZAmsT1gTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0ODk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSRMA8EAgACMAkDBwAgAQ33e0AwDQYJKoZIhvcNAQELBQADggEBADWj 4YcskrwefwujfW7RbukKejj1FfoMmrlQ2JTo+DjKleSCG9Xihu9SgYT9CbHhwb3j bR1EWVLEbCPR1Fvmf0SLZfe18W1cc51TSNdFhYxseBEc3r+gNsOs1R+YTLszLh4c f+x5vBTFkRdnitvNKvNjA/Qk5+1GPKYApoeUk4n+i0Ln52ZwKSoNukcbE67OyEFX f68q55RE7oSrooTo6B4PsQkyNoiZKxIM6wsSnOR0uyuYi3TMf/Duw82CYMOm0t5f qqLhMzfTMe8iOXRrtUbojUO79COGzWhO6Btic2dBHmDM93Hwr9S6CCs0mbuaBCGf wrDIdGMajm3Auph9Un4= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:24 2026 by rpki-client