$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154939.roa File: AS154939.roa (raw, json) Hash identifier: OL2DjES/92xduQL8alS0BYEMpqMQTKzMmjq47Ut0ZZk= Subject key identifier: 98:96:4E:88:6F:7F:FC:C4:49:E9:D8:32:0B:12:B7:82:16:4B:0D:15 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 73AE4DB1326305E25BEA58385C86A42F5532074A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154939.roa Signing time: Mon 09 Nov 2026 08:18:58 +0000 ROA not before: Mon 09 Nov 2026 08:13:58 +0000 ROA not after: Mon 08 Nov 2027 08:18:58 +0000 asID: 154939 IP address blocks: 163.52.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ae:4d:b1:32:63:05:e2:5b:ea:58:38:5c:86:a4:2f:55:32:07:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 9 08:13:58 2026 GMT Not After : Nov 8 08:18:58 2027 GMT Subject: CN=98964E886F7FFCC449E9D8320B12B782164B0D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:b8:9e:49:e7:18:88:9f:65:98:53:b1:d7: 53:72:ba:96:1b:3a:9c:c0:26:6a:f8:95:bf:7f:5e: cb:ad:7f:06:76:06:f4:04:d2:5f:37:e6:ac:36:6e: 1b:e9:71:7a:3a:cb:6d:1e:5a:f9:6e:df:7c:67:cf: 52:6a:9f:e7:7b:a2:9d:94:2c:70:1a:a7:1f:4c:9e: 06:53:76:a7:0e:10:98:60:ca:d2:bd:6b:2a:4b:94: b6:c5:b5:06:c1:00:0d:38:9c:5b:7b:29:1d:5e:07: 69:9a:13:3c:ec:e8:3f:df:a1:53:a0:1b:2b:02:72: 77:a7:16:ae:1c:f8:bd:93:84:2e:fe:6e:e1:76:69: cc:96:2c:1e:b7:21:04:1b:1e:02:ee:72:96:32:03: aa:29:29:bd:4f:4e:70:93:43:2b:40:75:be:47:34: ee:51:a3:c3:62:f2:f6:12:eb:3f:b3:38:b9:7e:ae: 86:02:5b:da:18:92:1c:d7:7d:17:8c:57:81:54:61: a6:51:c6:50:eb:01:2d:0e:26:df:73:cb:b2:4d:9d: a3:d5:57:70:aa:f0:8a:be:b3:0a:02:a4:62:09:4e: 1e:78:c4:e2:cd:f0:02:e7:9e:89:20:75:58:97:94: 09:fe:18:57:a1:45:a7:3c:53:e1:10:0d:f4:0b:a1: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:96:4E:88:6F:7F:FC:C4:49:E9:D8:32:0B:12:B7:82:16:4B:0D:15 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:a0:5b:7c:43:55:5c:1a:22:32:f4:86:a0:e2:e7:b5:5e:ce: 44:7b:49:04:60:53:ca:bb:b1:f9:f2:ef:16:5b:2d:6d:0a:39: d5:06:12:67:ae:44:96:fd:5e:2c:81:02:38:2d:5e:3b:cc:fc: 74:09:14:be:4f:02:b7:d5:95:35:4c:16:24:71:fa:11:3c:3d: fc:08:43:39:f8:66:7f:4b:0a:25:cc:34:44:4d:bc:46:2e:94: c2:76:19:e7:89:fc:fd:e9:53:6b:e5:e8:1c:91:74:3c:8a:a1: 2c:16:e7:76:0f:b8:f5:1a:76:a6:fd:bf:7a:c4:d9:03:e2:65: 25:ce:a2:f6:9c:a0:22:79:e2:b0:24:86:74:dc:d0:5d:f9:d0: 3d:07:73:fb:1b:d3:59:3c:4c:2b:70:7c:35:10:c9:15:a3:ad: cd:63:5d:31:0e:b7:dc:75:5d:5c:4a:0c:82:41:37:aa:ab:c5: ed:14:d7:18:67:ee:e8:30:79:e6:7a:a7:b4:ea:28:44:d2:4a: e5:63:43:d5:6f:e3:22:a2:8f:63:84:13:a9:77:ac:37:a1:e3: 0c:b8:f5:9b:f3:bb:a2:21:3e:fc:c2:24:40:71:50:e3:6f:f6: 79:ae:e6:71:de:1d:7c:e4:73:1f:72:cc:f2:10:a1:49:d9:93: 6d:b3:fd:53 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUc65NsTJjBeJb6lg4XIakL1UyB0owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwOTA4MTM1OFoX DTI3MTEwODA4MTg1OFowMzExMC8GA1UEAxMoOTg5NjRFODg2RjdGRkNDNDQ5RTlE ODMyMEIxMkI3ODIxNjRCMEQxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7CuJ5J5xiIn2WYU7HXU3K6lhs6nMAmaviVv39ey61/BnYG9ATSXzfmrDZu G+lxejrLbR5a+W7ffGfPUmqf53uinZQscBqnH0yeBlN2pw4QmGDK0r1rKkuUtsW1 BsEADTicW3spHV4HaZoTPOzoP9+hU6AbKwJyd6cWrhz4vZOELv5u4XZpzJYsHrch BBseAu5yljIDqikpvU9OcJNDK0B1vkc07lGjw2Ly9hLrP7M4uX6uhgJb2hiSHNd9 F4xXgVRhplHGUOsBLQ4m33PLsk2do9VXcKrwir6zCgKkYglOHnjE4s3wAueeiSB1 WJeUCf4YV6FFpzxT4RAN9AuhRFECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSYlk6I b3/8xEnp2DILEreCFksNFTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAozTYMA0GCSqGSIb3DQEBCwUAA4IBAQBsoFt8Q1VcGiIy9Iag4ue1Xs5E e0kEYFPKu7H58u8WWy1tCjnVBhJnrkSW/V4sgQI4LV47zPx0CRS+TwK31ZU1TBYk cfoRPD38CEM5+GZ/SwolzDRETbxGLpTCdhnnifz96VNr5egckXQ8iqEsFud2D7j1 Gnam/b96xNkD4mUlzqL2nKAieeKwJIZ03NBd+dA9B3P7G9NZPEwrcHw1EMkVo63N Y10xDrfcdV1cSgyCQTeqq8XtFNcYZ+7oMHnmeqe06ihE0krlY0PVb+Mioo9jhBOp d6w3oeMMuPWb87uiIT78wiRAcVDjb/Z5ruZx3h185HMfcszyEKFJ2ZNts/1T -----END CERTIFICATE-----Generated at Tue Nov 10 00:04:45 2026 by rpki-client