$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154981.roa File: AS154981.roa (raw, json) Hash identifier: D6hkFqih7L3+rEBBPww131e63S8/x0e0uHM+DlZ4f2Q= Subject key identifier: 45:F3:90:54:DF:DD:32:C3:14:6B:26:DA:A7:09:46:EC:F9:25:FF:2D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F38509CB8E46E59414F8D30A1CA9429E1594D39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154981.roa Signing time: Fri 09 Oct 2026 02:41:42 +0000 ROA not before: Fri 09 Oct 2026 02:36:42 +0000 ROA not after: Fri 08 Oct 2027 02:41:42 +0000 asID: 154981 IP address blocks: 43.228.252.0/24 maxlen: 24 2001:df7:a6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:38:50:9c:b8:e4:6e:59:41:4f:8d:30:a1:ca:94:29:e1:59:4d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 9 02:36:42 2026 GMT Not After : Oct 8 02:41:42 2027 GMT Subject: CN=45F39054DFDD32C3146B26DAA70946ECF925FF2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:94:33:74:e8:56:5c:a7:b7:3e:ca:c4:1e: 09:53:ed:e3:e3:be:aa:07:9e:55:b7:c2:78:7d:85: 53:04:54:0f:26:c2:ce:09:47:a5:ad:de:92:41:94: e2:53:9b:e9:6d:b9:6b:f3:6b:2a:53:ca:6e:75:99: 5f:5e:e3:4a:65:c7:b4:df:b8:57:20:28:59:ac:b7: 3b:c2:ad:56:02:2b:ba:6c:8b:d0:04:37:2b:4f:66: 2d:2c:6d:2a:ec:0c:3f:d5:ff:de:5f:f2:92:67:32: 2f:15:dd:be:07:a6:04:cf:e1:ce:f6:b3:83:42:4e: d9:a7:0d:b4:f7:3c:bc:68:61:5f:4a:68:a8:2b:60: 35:73:27:c2:48:09:43:d3:a8:81:04:01:a5:bb:b2: df:be:38:18:23:3f:a4:45:2e:1a:95:34:eb:30:72: c5:cd:62:e2:ee:c8:9e:19:b4:5d:5c:f1:2b:e8:32: b5:ec:71:24:85:31:21:da:a3:0c:a8:65:40:4f:51: dd:8f:ea:12:f3:78:e7:e6:78:de:f4:0e:72:07:8c: 50:9a:1b:05:2b:76:4e:e9:4c:71:06:c8:18:ad:53: 46:95:1d:9f:fb:87:43:70:0f:d5:ca:07:db:d3:9c: 7e:c3:7c:54:36:a3:46:01:18:6e:ea:ea:8d:9d:ad: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F3:90:54:DF:DD:32:C3:14:6B:26:DA:A7:09:46:EC:F9:25:FF:2D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.252.0/24 IPv6: 2001:df7:a6c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:48:7a:18:bd:35:6e:ff:10:a1:31:43:6c:9f:c8:7e:58:56: 15:d6:79:6b:a3:48:84:59:df:e2:e1:c6:d5:17:dc:c4:62:d4: 10:24:77:fa:9c:18:fd:06:12:58:dd:76:40:ce:e4:85:5e:3b: 10:6a:bd:05:21:21:76:eb:77:a9:38:b0:56:63:87:f1:3a:4f: 35:a8:b9:8a:f4:3c:23:ee:38:ac:c1:df:35:96:e2:49:57:32: 44:c2:6d:0e:8b:b7:09:0e:65:1b:49:ae:4e:cd:0a:07:8f:4e: a4:43:b1:9b:f7:65:e4:e6:0f:b0:08:8b:e4:39:27:4c:99:ca: 48:be:71:73:22:1f:14:e4:73:07:9e:10:21:f8:9e:58:7f:e4: a5:64:c1:3e:04:65:4a:e5:68:2b:2b:1e:ee:31:5d:cd:89:a1: 7a:95:cc:71:d7:b2:3b:ec:21:ba:1a:4a:e4:c3:a9:58:69:0c: fd:a7:4b:0a:96:8c:b7:f8:96:da:18:6f:7a:cd:63:8c:cc:a8: f6:cf:60:11:4f:f3:e6:dd:f2:f0:67:38:b3:bd:86:c6:77:3b: 34:6f:0f:94:68:45:21:c0:c2:ee:10:2f:4f:f7:81:76:91:b2: a3:19:5b:30:ee:40:ab:f6:a5:fa:3f:d6:15:a4:a9:4d:5f:ed: b9:f9:59:82 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfzhQnLjkbllBT40wocqUKeFZTTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwOTAyMzY0MloX DTI3MTAwODAyNDE0MlowMzExMC8GA1UEAxMoNDVGMzkwNTRERkREMzJDMzE0NkIy NkRBQTcwOTQ2RUNGOTI1RkYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPIlDN06FZcp7c+ysQeCVPt4+O+qgeeVbfCeH2FUwRUDybCzglHpa3ekkGU 4lOb6W25a/NrKlPKbnWZX17jSmXHtN+4VyAoWay3O8KtVgIrumyL0AQ3K09mLSxt KuwMP9X/3l/ykmcyLxXdvgemBM/hzvazg0JO2acNtPc8vGhhX0poqCtgNXMnwkgJ Q9OogQQBpbuy3744GCM/pEUuGpU06zByxc1i4u7Inhm0XVzxK+gytexxJIUxIdqj DKhlQE9R3Y/qEvN45+Z43vQOcgeMUJobBSt2TulMcQbIGK1TRpUdn/uHQ3AP1coH 29OcfsN8VDajRgEYburqjZ2t/bUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRF85BU 390ywxRrJtqnCUbs+SX/LTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAK+T8MA8EAgACMAkDBwAgAQ33psAwDQYJKoZIhvcNAQELBQADggEBAIdI ehi9NW7/EKExQ2yfyH5YVhXWeWujSIRZ3+LhxtUX3MRi1BAkd/qcGP0GEljddkDO 5IVeOxBqvQUhIXbrd6k4sFZjh/E6TzWouYr0PCPuOKzB3zWW4klXMkTCbQ6LtwkO ZRtJrk7NCgePTqRDsZv3ZeTmD7AIi+Q5J0yZyki+cXMiHxTkcweeECH4nlh/5KVk wT4EZUrlaCsrHu4xXc2JoXqVzHHXsjvsIboaSuTDqVhpDP2nSwqWjLf4ltoYb3rN Y4zMqPbPYBFP8+bd8vBnOLO9hsZ3OzRvD5RoRSHAwu4QL0/3gXaRsqMZWzDuQKv2 pfo/1hWkqU1f7bn5WYI= -----END CERTIFICATE-----Generated at Mon Nov 9 15:20:54 2026 by rpki-client