$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154929.roa File: AS154929.roa (raw, json) Hash identifier: aQe5nN1XcxXCCenL4lV21WvRiB4vlVHV1tuIcLbq+9A= Subject key identifier: 43:83:C2:D1:C1:3F:47:78:72:C4:0A:94:BE:C9:7C:3C:07:D7:56:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34FF4EF78E6EE7BCA2E633F455C56883E410AAE3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154929.roa Signing time: Thu 17 Sep 2026 04:27:37 +0000 ROA not before: Thu 17 Sep 2026 04:22:37 +0000 ROA not after: Thu 16 Sep 2027 04:27:37 +0000 asID: 154929 IP address blocks: 163.52.175.0/24 maxlen: 24 2001:df7:83c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ff:4e:f7:8e:6e:e7:bc:a2:e6:33:f4:55:c5:68:83:e4:10:aa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 17 04:22:37 2026 GMT Not After : Sep 16 04:27:37 2027 GMT Subject: CN=4383C2D1C13F477872C40A94BEC97C3C07D756AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:5b:5e:99:5d:a5:85:07:52:c1:fc:39:71: 3d:49:9d:87:98:bb:e2:f4:49:49:44:56:d6:e7:0c: 31:e8:47:a5:02:1c:e8:5e:22:d8:fc:c6:bd:16:27: 61:81:e0:40:e0:35:c5:77:c0:01:17:f0:86:d6:01: 87:c2:6e:0b:63:03:9d:c7:1e:f7:f2:89:02:ed:1d: c9:68:cf:84:79:56:13:f9:bb:7f:79:75:09:7a:62: ac:e3:16:5d:55:33:65:16:98:7d:d1:d2:8b:6a:f0: d8:1f:29:18:2c:c5:6d:c3:d4:57:6e:23:11:23:ac: c8:d7:2e:c4:5f:d3:d8:52:f7:e5:2a:a4:92:44:db: f3:e8:f4:70:e1:7d:74:64:ea:72:56:44:37:43:40: 64:0b:55:b1:76:94:b7:c8:94:7b:ea:f7:e7:16:03: b9:83:3e:e1:8a:72:bc:fd:ce:70:72:00:bb:f6:1d: 74:0d:39:c8:da:e5:fd:59:a6:f0:f2:7d:d2:46:30: 28:b9:81:d8:9e:54:e8:0f:d3:d9:9b:2c:be:df:9a: f2:7c:e6:99:e3:69:41:93:33:71:9a:1f:bf:42:20: 43:1a:49:7a:f0:2a:41:bb:d4:1e:f6:df:7f:e8:78: 5b:04:90:72:8c:34:d5:64:48:a8:e4:98:dc:72:9e: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:C2:D1:C1:3F:47:78:72:C4:0A:94:BE:C9:7C:3C:07:D7:56:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154929.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.175.0/24 IPv6: 2001:df7:83c0::/48 Signature Algorithm: sha256WithRSAEncryption 4d:86:e6:bb:fd:29:27:59:12:f8:a8:c9:7d:48:52:80:a6:d9: 4d:24:57:1a:95:75:4e:15:a3:7f:ea:87:db:a1:1b:df:28:d4: c0:e7:b3:c1:4a:e3:ac:c8:cf:f4:ff:6a:2e:be:e2:53:5b:04: c2:d6:40:1f:5e:c5:dd:99:ac:d8:0f:e1:f3:66:01:5e:f7:55: da:c6:ad:17:43:bb:a2:de:e8:eb:17:2d:57:e9:6c:5a:fa:7f: c0:04:a2:5c:aa:aa:fd:42:f7:56:d6:7a:28:a1:58:b6:3c:4e: 30:26:5d:1c:a9:e8:b5:f0:87:bd:6b:ff:ad:df:be:09:94:9e: de:24:76:5d:4d:d0:9c:dd:f4:6f:ba:d8:0e:fb:d3:be:50:10: fa:5d:40:4a:33:81:0f:8e:4a:fa:7e:75:79:96:2d:86:d7:be: 63:24:f0:d4:74:e9:9e:76:fe:87:c5:08:5c:03:21:d2:20:92: 4f:d7:14:8a:47:3a:c4:e7:a3:69:04:b1:57:e8:aa:16:82:84: 34:c4:d3:ce:be:57:55:49:ab:67:10:73:30:33:cf:38:55:60: 8d:cd:11:5f:12:dc:3c:68:68:0f:19:67:52:24:66:f6:bc:cb: 92:e3:90:9f:c4:e1:a4:b6:9f:bf:0b:96:48:cb:b6:92:c0:47: 19:24:19:88 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNP9O945u57yi5jP0VcVog+QQquMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNzA0MjIzN1oX DTI3MDkxNjA0MjczN1owMzExMC8GA1UEAxMoNDM4M0MyRDFDMTNGNDc3ODcyQzQw QTk0QkVDOTdDM0MwN0Q3NTZBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnQW16ZXaWFB1LB/DlxPUmdh5i74vRJSURW1ucMMehHpQIc6F4i2PzGvRYn YYHgQOA1xXfAARfwhtYBh8JuC2MDncce9/KJAu0dyWjPhHlWE/m7f3l1CXpirOMW XVUzZRaYfdHSi2rw2B8pGCzFbcPUV24jESOsyNcuxF/T2FL35SqkkkTb8+j0cOF9 dGTqclZEN0NAZAtVsXaUt8iUe+r35xYDuYM+4YpyvP3OcHIAu/YddA05yNrl/Vmm 8PJ90kYwKLmB2J5U6A/T2Zssvt+a8nzmmeNpQZMzcZofv0IgQxpJevAqQbvUHvbf f+h4WwSQcow01WRIqOSY3HKewEsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRDg8LR wT9HeHLECpS+yXw8B9dWrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozSvMA8EAgACMAkDBwAgAQ33g8AwDQYJKoZIhvcNAQELBQADggEBAE2G 5rv9KSdZEvioyX1IUoCm2U0kVxqVdU4Vo3/qh9uhG98o1MDns8FK46zIz/T/ai6+ 4lNbBMLWQB9exd2ZrNgP4fNmAV73VdrGrRdDu6Le6OsXLVfpbFr6f8AEolyqqv1C 91bWeiihWLY8TjAmXRyp6LXwh71r/63fvgmUnt4kdl1N0Jzd9G+62A77075QEPpd QEozgQ+OSvp+dXmWLYbXvmMk8NR06Z52/ofFCFwDIdIgkk/XFIpHOsTno2kEsVfo qhaChDTE086+V1VJq2cQczAzzzhVYI3NEV8S3DxoaA8ZZ1IkZva8y5LjkJ/E4aS2 n78LlkjLtpLARxkkGYg= -----END CERTIFICATE-----Generated at Sun Sep 20 16:29:30 2026 by rpki-client