$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154985.roa File: AS154985.roa (raw, json) Hash identifier: Z9GrPuForLqoP1UnMKJ8e2jgkjWX4dTT/d2Qv+F4vVY= Subject key identifier: 6A:24:48:84:06:B5:32:7F:2B:A9:99:32:18:3D:01:09:44:3D:94:46 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 12C31302EEE0A19ECD141283DC1FBA150D666DE2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154985.roa Signing time: Wed 14 Oct 2026 02:25:38 +0000 ROA not before: Wed 14 Oct 2026 02:20:38 +0000 ROA not after: Wed 13 Oct 2027 02:25:38 +0000 asID: 154985 IP address blocks: 123.253.68.0/24 maxlen: 24 2001:df7:a840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c3:13:02:ee:e0:a1:9e:cd:14:12:83:dc:1f:ba:15:0d:66:6d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 14 02:20:38 2026 GMT Not After : Oct 13 02:25:38 2027 GMT Subject: CN=6A24488406B5327F2BA99932183D0109443D9446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:e4:dc:df:41:b0:54:b5:a8:b5:f1:2c:45: e1:0a:1c:14:79:f3:48:fa:29:ba:55:a5:0d:cd:ed: d2:02:4b:f8:49:36:d5:3e:3a:e0:93:8e:5d:f6:a3: 30:1f:28:36:91:33:f4:51:72:f8:26:58:e0:0e:ce: 3d:a1:85:65:0a:c7:22:d0:23:7b:2e:a8:9c:d2:ca: 55:1d:d3:ff:c5:91:4f:5f:7d:43:36:f2:60:ae:72: 96:66:72:57:a9:7f:38:fd:51:3c:95:8e:cf:b6:59: 8a:93:6b:81:68:64:d4:bf:1c:69:26:41:2a:18:18: 20:b6:16:68:1f:75:e6:8c:6d:08:e3:7f:ec:be:2f: 9a:dd:e0:3f:50:11:79:c2:f4:9b:c2:67:b0:34:24: 11:03:20:06:82:49:c0:dd:8e:6c:c6:73:49:bf:cf: 31:8d:2c:dd:cf:7f:fd:6b:71:25:ba:26:ae:b1:fe: 29:94:d8:a9:7e:e6:f2:d3:aa:6a:d7:df:c0:79:dc: ae:7e:5f:06:4c:c0:32:68:63:12:d6:83:71:3d:a8: 98:48:3d:7c:50:06:37:0f:15:de:46:09:68:68:dc: 5c:92:ec:db:00:c7:e7:90:c8:58:10:72:b6:19:07: fb:22:f4:92:5c:6b:f9:0d:9d:dd:e0:a2:7a:10:7d: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:24:48:84:06:B5:32:7F:2B:A9:99:32:18:3D:01:09:44:3D:94:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154985.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.68.0/24 IPv6: 2001:df7:a840::/48 Signature Algorithm: sha256WithRSAEncryption 11:e1:a3:96:95:3b:5b:f7:98:cc:eb:29:2b:93:07:ee:ca:1d: e9:44:a6:af:c8:f9:32:1e:b0:66:dd:b0:d9:4a:b2:31:32:17: be:eb:54:43:7d:ea:5f:4d:3a:33:d1:f0:53:ad:52:79:26:63: fd:f4:7d:d2:c7:fb:8c:b2:8a:7a:3e:70:fc:3b:6f:c4:08:c0: 39:e5:b9:e6:db:be:cb:b9:37:aa:b7:7b:85:d6:04:ea:b5:e6: dc:74:90:32:b4:51:d9:48:0e:7b:f2:71:38:81:4f:91:f9:0a: 67:62:c1:53:90:01:34:e0:6e:9b:19:51:26:3a:b3:a6:76:44: a3:f2:58:c0:b0:f0:02:f9:94:b1:da:71:cf:74:d2:5b:52:b6: d2:a1:27:f7:53:fd:f8:8c:74:c4:bf:e8:9a:18:a6:33:35:a6: 26:b5:df:d1:77:72:ab:7f:a8:83:30:3b:b0:e6:05:0d:fc:5b: 1f:02:ba:4a:fa:2b:49:59:a1:b4:9e:3a:7f:14:34:db:2c:55: 5a:a7:2b:de:c1:e9:ac:e3:24:b7:80:98:da:e4:21:2b:f1:4b: 84:69:7e:04:90:d3:cd:66:65:c2:04:f6:50:3a:99:85:a7:ec: 4b:15:75:ae:58:cc:c8:78:8b:0a:f2:58:fd:d5:ac:e4:66:e7: 9b:68:3e:e7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEsMTAu7goZ7NFBKD3B+6FQ1mbeIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNDAyMjAzOFoX DTI3MTAxMzAyMjUzOFowMzExMC8GA1UEAxMoNkEyNDQ4ODQwNkI1MzI3RjJCQTk5 OTMyMTgzRDAxMDk0NDNEOTQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbh5NzfQbBUtai18SxF4QocFHnzSPopulWlDc3t0gJL+Ek21T464JOOXfaj MB8oNpEz9FFy+CZY4A7OPaGFZQrHItAjey6onNLKVR3T/8WRT199QzbyYK5ylmZy V6l/OP1RPJWOz7ZZipNrgWhk1L8caSZBKhgYILYWaB915oxtCON/7L4vmt3gP1AR ecL0m8JnsDQkEQMgBoJJwN2ObMZzSb/PMY0s3c9//WtxJbomrrH+KZTYqX7m8tOq atffwHncrn5fBkzAMmhjEtaDcT2omEg9fFAGNw8V3kYJaGjcXJLs2wDH55DIWBBy thkH+yL0klxr+Q2d3eCiehB9tTECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRqJEiE BrUyfyupmTIYPQEJRD2URjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAe/1EMA8EAgACMAkDBwAgAQ33qEAwDQYJKoZIhvcNAQELBQADggEBABHh o5aVO1v3mMzrKSuTB+7KHelEpq/I+TIesGbdsNlKsjEyF77rVEN96l9NOjPR8FOt UnkmY/30fdLH+4yyino+cPw7b8QIwDnluebbvsu5N6q3e4XWBOq15tx0kDK0UdlI DnvycTiBT5H5CmdiwVOQATTgbpsZUSY6s6Z2RKPyWMCw8AL5lLHacc900ltSttKh J/dT/fiMdMS/6JoYpjM1pia139F3cqt/qIMwO7DmBQ38Wx8Cukr6K0lZobSeOn8U NNssVVqnK97B6azjJLeAmNrkISvxS4RpfgSQ081mZcIE9lA6mYWn7EsVda5YzMh4 iwryWP3VrORm55toPuc= -----END CERTIFICATE-----Generated at Mon Nov 9 14:00:04 2026 by rpki-client