$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154943.roa File: AS154943.roa (raw, json) Hash identifier: GvSgGCCSvRdxC/arpXRajmylNfK0WnjMl7GdUDRlY/o= Subject key identifier: CD:60:99:4D:9F:15:88:20:09:DB:D8:CF:3C:79:D8:EA:E6:50:4E:EE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 682B4E003C54BE578A621B8FBFBDF4EA613D0CFC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154943.roa Signing time: Fri 09 Oct 2026 02:27:59 +0000 ROA not before: Fri 09 Oct 2026 02:22:59 +0000 ROA not after: Fri 08 Oct 2027 02:27:59 +0000 asID: 154943 IP address blocks: 163.52.230.0/24 maxlen: 24 2001:df7:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2b:4e:00:3c:54:be:57:8a:62:1b:8f:bf:bd:f4:ea:61:3d:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 9 02:22:59 2026 GMT Not After : Oct 8 02:27:59 2027 GMT Subject: CN=CD60994D9F15882009DBD8CF3C79D8EAE6504EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:67:39:2d:af:7e:cf:cc:b7:84:01:56:42: 03:86:18:25:f6:f1:9f:0d:27:80:1c:51:6d:da:49: a2:71:f7:83:54:46:02:8f:36:08:07:00:22:28:74: d3:1e:b7:3d:6c:f4:fb:c6:56:78:01:ab:07:9b:88: db:13:f3:ad:bc:98:ff:63:37:f8:a3:99:17:40:b6: 51:e5:b5:61:19:6a:62:31:c9:c3:06:ca:93:a3:e7: 6b:9d:7d:9a:ce:85:4c:62:71:1e:1d:15:cc:0d:64: 49:34:ed:b4:27:0b:1a:2e:f4:d8:ed:4f:2e:54:a9: 00:bd:b5:2e:d7:64:40:3b:fb:82:87:7e:97:c9:01: cc:85:49:31:d0:2c:15:48:a2:c6:e4:48:fe:be:67: 23:b4:b0:92:d3:b4:08:d7:e3:eb:8a:38:40:42:45: 8a:76:63:b2:7f:4d:20:d2:db:01:6b:00:df:0f:de: 59:ef:7c:9c:b6:d9:7c:c8:13:f7:85:3d:93:9e:7a: 39:b7:0e:b0:9b:60:6b:58:ca:dd:97:71:39:a3:eb: fb:e1:dc:3c:1f:7d:97:98:24:22:26:33:76:ca:45: a6:e6:86:44:7c:0e:54:8f:05:37:33:ac:2c:fc:d5: 93:58:67:ab:23:a6:b3:cb:24:c5:fe:c6:5f:d1:d1: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:60:99:4D:9F:15:88:20:09:DB:D8:CF:3C:79:D8:EA:E6:50:4E:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.230.0/24 IPv6: 2001:df7:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:fb:fb:4d:6b:08:75:9f:59:3e:63:cc:8b:2d:5f:59:50:03: 8f:9e:d1:10:9f:00:52:12:84:c0:ec:56:35:e8:2b:7a:ae:2b: e5:65:6e:15:70:37:ac:95:61:60:46:f0:a8:65:ee:aa:60:97: e9:58:e5:af:1f:1c:fa:bd:02:31:f0:87:dc:24:65:d1:f5:82: 8d:3b:4f:e5:34:55:84:fa:f6:cc:d3:fb:dd:43:1a:55:00:c6: d0:bc:72:c4:31:11:f2:cd:6a:70:aa:67:17:92:de:18:93:20: 16:29:db:94:00:3d:0d:42:74:ab:7a:b8:b7:b1:5d:46:c8:6b: 56:5d:72:99:1a:5f:61:8d:8f:40:0b:ec:c6:53:81:84:34:a9: 3c:ae:97:11:52:cf:41:eb:f4:f2:c2:8e:9f:0e:a6:cc:2d:e6: 38:2c:f0:5e:ef:b1:7f:82:86:80:54:4e:0e:6e:24:e9:47:c3: 5f:e4:21:24:11:a4:53:51:ce:6c:ef:04:ff:a9:ca:04:b2:b0: c9:2b:15:a3:fe:e0:d8:a7:40:d4:db:6c:3a:e0:0a:a0:e2:9c: d4:8b:3d:03:9f:67:9b:28:df:61:f4:86:af:d2:b4:7e:b0:bf: ea:2e:f8:72:b0:09:82:02:12:72:93:ab:20:fc:44:90:bc:50: 5c:c5:58:e0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaCtOADxUvleKYhuPv7306mE9DPwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwOTAyMjI1OVoX DTI3MTAwODAyMjc1OVowMzExMC8GA1UEAxMoQ0Q2MDk5NEQ5RjE1ODgyMDA5REJE OENGM0M3OUQ4RUFFNjUwNEVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2fZzktr37PzLeEAVZCA4YYJfbxnw0ngBxRbdpJonH3g1RGAo82CAcAIih0 0x63PWz0+8ZWeAGrB5uI2xPzrbyY/2M3+KOZF0C2UeW1YRlqYjHJwwbKk6Pna519 ms6FTGJxHh0VzA1kSTTttCcLGi702O1PLlSpAL21LtdkQDv7god+l8kBzIVJMdAs FUiixuRI/r5nI7SwktO0CNfj64o4QEJFinZjsn9NINLbAWsA3w/eWe98nLbZfMgT 94U9k556ObcOsJtga1jK3ZdxOaPr++HcPB99l5gkIiYzdspFpuaGRHwOVI8FNzOs LPzVk1hnqyOms8skxf7GX9HREjUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTNYJlN nxWIIAnb2M88edjq5lBO7jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozTmMA8EAgACMAkDBwAgAQ33kMAwDQYJKoZIhvcNAQELBQADggEBAAb7 +01rCHWfWT5jzIstX1lQA4+e0RCfAFIShMDsVjXoK3quK+VlbhVwN6yVYWBG8Khl 7qpgl+lY5a8fHPq9AjHwh9wkZdH1go07T+U0VYT69szT+91DGlUAxtC8csQxEfLN anCqZxeS3hiTIBYp25QAPQ1CdKt6uLexXUbIa1ZdcpkaX2GNj0AL7MZTgYQ0qTyu lxFSz0Hr9PLCjp8Opswt5jgs8F7vsX+ChoBUTg5uJOlHw1/kISQRpFNRzmzvBP+p ygSysMkrFaP+4NinQNTbbDrgCqDinNSLPQOfZ5so32H0hq/StH6wv+ou+HKwCYIC EnKTqyD8RJC8UFzFWOA= -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:52 2026 by rpki-client