$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154928.roa File: AS154928.roa (raw, json) Hash identifier: hy35vvArs9keifEiVGtup2KK4mSsc0kC6lxwD+Qvkoc= Subject key identifier: 60:B5:4B:CF:11:F4:E2:28:5F:6F:5F:2C:C6:9C:A5:3C:79:7C:F4:20 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A14439D8F6ADF3BAC48B5B21D10E8EB6278692A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154928.roa Signing time: Mon 19 Oct 2026 03:59:18 +0000 ROA not before: Mon 19 Oct 2026 03:54:18 +0000 ROA not after: Mon 18 Oct 2027 03:59:18 +0000 asID: 154928 IP address blocks: 163.52.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:14:43:9d:8f:6a:df:3b:ac:48:b5:b2:1d:10:e8:eb:62:78:69:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 03:54:18 2026 GMT Not After : Oct 18 03:59:18 2027 GMT Subject: CN=60B54BCF11F4E2285F6F5F2CC69CA53C797CF420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:e7:88:b4:e1:f7:91:26:40:6a:1a:05:73: 77:d7:02:22:5c:58:b4:1a:b9:ae:54:bb:61:f9:07: a2:1d:4e:80:97:8e:e3:73:9b:67:9c:4e:ed:bb:bb: e2:c5:e4:cf:45:97:2a:7b:71:ac:fe:65:ea:f1:4c: d2:60:04:47:46:db:be:10:b1:d8:fa:cc:e1:40:46: 67:73:5d:fb:77:9b:a3:e1:5b:f6:7b:d3:0b:4d:11: 88:8d:97:9a:7b:be:89:f3:ba:64:ed:c9:cd:6d:e1: eb:9e:c0:ed:68:75:08:1a:60:67:ef:0e:0c:b2:6a: 62:cc:e5:57:64:8a:bc:90:ec:9b:3f:5c:55:fe:70: fb:77:39:b2:60:10:33:59:d8:d2:ce:cc:38:70:d6: 35:16:0e:e3:e0:25:1c:e6:dd:a5:5d:5a:46:24:24: 38:28:93:b2:5c:22:7a:ca:43:f2:5a:d0:50:cf:01: 17:98:c0:a4:49:32:71:66:f9:20:2f:f7:d9:d3:d9: 55:79:f4:5a:2c:0f:d1:b9:8a:d1:25:9c:ca:4c:12: 94:69:ff:fc:bf:94:26:25:ba:bf:91:58:5f:72:28: 67:5b:35:9d:5a:af:c7:12:cb:79:da:2c:55:47:3d: 84:ed:94:26:18:a4:d6:48:22:5c:1e:53:b9:23:00: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B5:4B:CF:11:F4:E2:28:5F:6F:5F:2C:C6:9C:A5:3C:79:7C:F4:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154928.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.202.0/24 Signature Algorithm: sha256WithRSAEncryption a0:82:c0:2f:93:53:9e:03:b8:b6:95:be:39:ba:bc:27:67:b1: ba:f3:b5:f7:7b:0a:39:23:bc:b7:88:6a:59:bc:d7:8c:e8:b6: 9d:4b:b4:8b:bd:00:54:3a:8f:62:5c:23:e5:0a:8a:60:c3:42: dd:cc:90:c8:79:ac:7c:d0:c3:79:47:b6:c5:5e:12:aa:91:b5: 26:7f:da:d3:69:68:9f:97:9b:6b:5c:f6:27:ba:4f:12:7b:05: c8:b0:b8:58:76:9e:36:68:79:98:6a:ec:ce:aa:9b:b9:69:52: 02:86:81:9f:e6:11:18:3a:31:1e:a3:0e:84:30:39:05:fc:5f: 89:6e:a1:0b:69:76:9b:3b:9b:d9:ec:39:30:a3:75:01:43:4a: c6:0a:06:4a:4d:9f:32:c2:e8:f8:c6:54:30:c6:25:a6:42:f9: 7b:0a:08:ef:c2:69:50:59:6a:fb:9f:63:83:f0:d6:3b:09:b3: f1:46:aa:77:5a:4b:88:93:d8:24:01:6d:4a:be:71:20:5b:2b: 17:39:c7:e3:0f:1f:0a:af:d4:98:fe:5e:83:d6:47:be:d7:ea: 4b:29:8a:0c:31:12:75:65:08:6e:7d:55:89:18:37:8d:41:06: 54:1a:0b:97:ec:f0:c9:94:6e:99:58:d2:e4:66:7e:f0:57:29: f8:b3:eb:cd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUShRDnY9q3zusSLWyHRDo62J4aSowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTAzNTQxOFoX DTI3MTAxODAzNTkxOFowMzExMC8GA1UEAxMoNjBCNTRCQ0YxMUY0RTIyODVGNkY1 RjJDQzY5Q0E1M0M3OTdDRjQyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMr54i04feRJkBqGgVzd9cCIlxYtBq5rlS7YfkHoh1OgJeO43ObZ5xO7bu7 4sXkz0WXKntxrP5l6vFM0mAER0bbvhCx2PrM4UBGZ3Nd+3ebo+Fb9nvTC00RiI2X mnu+ifO6ZO3JzW3h657A7Wh1CBpgZ+8ODLJqYszlV2SKvJDsmz9cVf5w+3c5smAQ M1nY0s7MOHDWNRYO4+AlHObdpV1aRiQkOCiTslwiespD8lrQUM8BF5jApEkycWb5 IC/32dPZVXn0WiwP0bmK0SWcykwSlGn//L+UJiW6v5FYX3IoZ1s1nVqvxxLLedos VUc9hO2UJhik1kgiXB5TuSMA1+ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRgtUvP EfTiKF9vXyzGnKU8eXz0IDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAozTKMA0GCSqGSIb3DQEBCwUAA4IBAQCggsAvk1OeA7i2lb45urwnZ7G6 87X3ewo5I7y3iGpZvNeM6LadS7SLvQBUOo9iXCPlCopgw0LdzJDIeax80MN5R7bF XhKqkbUmf9rTaWifl5trXPYnuk8SewXIsLhYdp42aHmYauzOqpu5aVIChoGf5hEY OjEeow6EMDkF/F+JbqELaXabO5vZ7Dkwo3UBQ0rGCgZKTZ8ywuj4xlQwxiWmQvl7 CgjvwmlQWWr7n2OD8NY7CbPxRqp3WkuIk9gkAW1KvnEgWysXOcfjDx8Kr9SY/l6D 1ke+1+pLKYoMMRJ1ZQhufVWJGDeNQQZUGguX7PDJlG6ZWNLkZn7wVyn4s+vN -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:43 2026 by rpki-client