$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154942.roa File: AS154942.roa (raw, json) Hash identifier: 73RLDvZL/C9qEpSYzv1pceUBG6aeNlv8KOpHJCZhG8U= Subject key identifier: 7B:62:CB:26:62:93:BF:57:3E:9E:8C:56:97:4D:9D:F3:CA:86:AD:77 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70CD5A641B21392CE04372D7F0D2EC4E87EB6B0F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154942.roa Signing time: Thu 15 Oct 2026 05:09:54 +0000 ROA not before: Thu 15 Oct 2026 05:04:54 +0000 ROA not after: Thu 14 Oct 2027 05:09:54 +0000 asID: 154942 IP address blocks: 163.52.229.0/24 maxlen: 24 2001:df7:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cd:5a:64:1b:21:39:2c:e0:43:72:d7:f0:d2:ec:4e:87:eb:6b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 15 05:04:54 2026 GMT Not After : Oct 14 05:09:54 2027 GMT Subject: CN=7B62CB266293BF573E9E8C56974D9DF3CA86AD77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ca:88:f5:c7:6b:d1:4c:32:ad:70:cd:36:ad: ac:71:50:46:c1:ab:9d:19:2f:5b:45:bd:db:b9:4c: 43:6c:ff:0a:eb:14:4c:ac:ce:37:c9:af:e6:09:01: ec:93:ee:b0:fc:11:c4:46:32:af:a0:af:fa:6d:f0: 1f:28:49:9a:12:29:af:e4:77:c8:f6:63:1e:12:2e: 30:0d:a3:b3:0b:34:d4:00:46:4d:0f:d5:a0:23:ff: c2:24:62:b8:38:4f:08:75:5a:36:98:1b:ad:ce:a1: d8:08:6b:7b:34:73:56:60:0f:ac:00:11:0b:8a:65: ea:6e:f0:5c:73:c6:fc:5b:37:6e:28:58:d0:d4:02: 9e:dd:c2:6d:80:6a:dc:dd:18:a8:ce:ea:c7:f4:55: 31:3c:83:f8:e2:90:e2:bc:e3:cb:f1:b6:1f:93:2f: 03:e1:dd:82:12:12:d3:0a:66:5c:04:1c:5a:32:6c: 7f:2d:f7:3a:5c:df:10:46:78:f9:b1:4f:f9:7e:7a: f6:3a:35:4e:97:fb:2a:8a:31:51:94:19:a3:84:ee: 5d:36:29:fd:29:fd:9b:8c:4a:04:6a:97:f2:ac:6d: 69:94:75:b7:8d:9b:da:93:c2:ca:aa:e3:b2:98:de: a7:36:cd:a3:ca:bd:46:41:96:45:80:3d:b3:12:2c: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:62:CB:26:62:93:BF:57:3E:9E:8C:56:97:4D:9D:F3:CA:86:AD:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.229.0/24 IPv6: 2001:df7:9040::/48 Signature Algorithm: sha256WithRSAEncryption 65:c3:75:11:a2:86:61:d2:47:4b:0d:b0:dc:16:32:28:35:a1: e3:e2:dd:fc:75:a1:7a:5e:da:84:63:37:42:79:5c:f0:2d:22: 44:bc:85:25:87:ac:1d:2e:48:96:a4:54:10:39:b8:65:e4:7a: a9:5e:a9:fe:95:0e:a6:bd:0b:b1:ce:63:f3:6f:dc:24:5c:67: 53:c7:9e:f7:18:45:cd:76:64:b6:36:de:11:8f:4f:8c:3d:fc: d9:bc:d0:81:d5:5b:80:76:a2:4f:21:93:a1:8f:ef:55:d0:1d: d1:95:8f:7c:d4:dc:61:22:36:d0:8f:7b:83:98:86:c7:6b:0e: a9:ab:b4:63:cb:2e:6f:a5:bd:bc:fe:79:f7:31:8c:bb:e8:ad: e4:ad:50:73:4d:98:9a:b3:85:7f:0f:22:64:77:af:3f:a7:44: b1:6f:45:f0:ee:53:e6:51:de:0e:61:7b:39:4d:0b:e2:64:c5: a9:da:1a:4a:dc:b7:e1:c5:74:b4:03:91:4d:36:41:3a:a7:33: bd:5c:6a:7c:fe:8b:12:db:9c:48:7e:dd:e4:ca:a2:28:fe:8f: 8c:c5:82:46:f8:c9:1a:ec:c9:68:02:9b:30:32:d3:6c:8b:ca: cf:7e:a7:f1:23:dd:e4:17:72:16:2f:ff:fa:26:ea:cf:c1:66: c0:61:45:4c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcM1aZBshOSzgQ3LX8NLsTofraw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNTA1MDQ1NFoX DTI3MTAxNDA1MDk1NFowMzExMC8GA1UEAxMoN0I2MkNCMjY2MjkzQkY1NzNFOUU4 QzU2OTc0RDlERjNDQTg2QUQ3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDKiPXHa9FMMq1wzTatrHFQRsGrnRkvW0W927lMQ2z/CusUTKzON8mv5gkB 7JPusPwRxEYyr6Cv+m3wHyhJmhIpr+R3yPZjHhIuMA2jsws01ABGTQ/VoCP/wiRi uDhPCHVaNpgbrc6h2AhrezRzVmAPrAARC4pl6m7wXHPG/Fs3bihY0NQCnt3CbYBq 3N0YqM7qx/RVMTyD+OKQ4rzjy/G2H5MvA+HdghIS0wpmXAQcWjJsfy33OlzfEEZ4 +bFP+X569jo1Tpf7KooxUZQZo4TuXTYp/Sn9m4xKBGqX8qxtaZR1t42b2pPCyqrj spjepzbNo8q9RkGWRYA9sxIsxzMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR7Yssm YpO/Vz6ejFaXTZ3zyoatdzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozTlMA8EAgACMAkDBwAgAQ33kEAwDQYJKoZIhvcNAQELBQADggEBAGXD dRGihmHSR0sNsNwWMig1oePi3fx1oXpe2oRjN0J5XPAtIkS8hSWHrB0uSJakVBA5 uGXkeqleqf6VDqa9C7HOY/Nv3CRcZ1PHnvcYRc12ZLY23hGPT4w9/Nm80IHVW4B2 ok8hk6GP71XQHdGVj3zU3GEiNtCPe4OYhsdrDqmrtGPLLm+lvbz+efcxjLvoreSt UHNNmJqzhX8PImR3rz+nRLFvRfDuU+ZR3g5hezlNC+JkxanaGkrct+HFdLQDkU02 QTqnM71canz+ixLbnEh+3eTKoij+j4zFgkb4yRrsyWgCmzAy02yLys9+p/Ej3eQX chYv//om6s/BZsBhRUw= -----END CERTIFICATE-----Generated at Mon Nov 9 15:15:42 2026 by rpki-client