$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154992.roa File: AS154992.roa (raw, json) Hash identifier: JUYt5GIoqESfXYen4ZVQkHqHfLE1i0qqaJI8/CnYDhA= Subject key identifier: 31:FD:BE:9C:CF:04:D1:71:4E:60:7F:17:A2:83:35:D3:BF:41:F5:7D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F7826C5EB21FC4D1A885E9EDD35D4DDB389EBC0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154992.roa Signing time: Thu 08 Oct 2026 02:17:45 +0000 ROA not before: Thu 08 Oct 2026 02:12:45 +0000 ROA not after: Thu 07 Oct 2027 02:17:45 +0000 asID: 154992 IP address blocks: 203.23.54.0/24 maxlen: 24 2001:df7:a4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:78:26:c5:eb:21:fc:4d:1a:88:5e:9e:dd:35:d4:dd:b3:89:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 8 02:12:45 2026 GMT Not After : Oct 7 02:17:45 2027 GMT Subject: CN=31FDBE9CCF04D1714E607F17A28335D3BF41F57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:37:36:0d:12:4c:3f:27:9b:e0:3f:ae:fd:d6: df:b1:f4:1d:7b:96:e7:cf:ed:0f:69:88:7c:d5:ce: 5f:cb:0b:d7:be:45:bb:52:6d:d1:13:42:fd:60:7b: c8:0f:2f:a9:20:18:96:6e:28:c9:af:d6:3e:9c:c0: 2a:12:c7:87:7a:f7:e0:1b:5b:62:fe:42:a8:8c:88: ba:3e:c6:e4:58:e2:a4:4e:04:b8:a9:d2:11:5a:6a: b0:f9:38:7c:da:3e:c6:1d:4e:42:40:ea:b3:a1:77: 54:0e:67:f5:85:43:b2:4e:2a:c6:90:d1:03:98:40: 4a:59:f6:78:e3:d4:33:70:fa:5b:c5:95:03:3d:5b: 41:5a:28:81:81:e9:bf:77:3d:d1:95:e8:cf:77:f4: e5:23:1c:8c:3c:00:d2:34:54:37:de:4a:21:2b:c3: ff:05:10:34:f8:dc:06:c6:0d:b7:fa:ba:5b:60:b8: a6:0d:f0:b7:d4:98:b1:46:af:ac:3d:d0:db:9f:1d: f6:eb:15:ab:8e:b8:e6:09:84:3f:dc:ec:50:02:14: 7a:95:a8:7a:4d:5a:d6:8b:20:37:8e:00:07:a0:de: 70:26:4e:7b:4e:02:0d:2e:97:9a:cb:81:c2:63:5d: 4e:25:c0:a4:5c:0d:e3:02:93:dc:f0:85:b7:43:fb: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FD:BE:9C:CF:04:D1:71:4E:60:7F:17:A2:83:35:D3:BF:41:F5:7D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.23.54.0/24 IPv6: 2001:df7:a4c0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:02:ef:31:96:0a:7e:2d:93:ae:f2:9d:94:0f:77:97:66:e4: e2:ae:eb:cf:bb:ca:6d:58:93:02:ff:3c:94:fa:ff:b0:5b:05: 5b:21:e8:87:51:35:da:04:9b:a5:fe:29:e8:15:a9:06:a5:89: 20:52:5a:c6:2b:c3:95:33:37:a5:9a:25:cc:44:f6:ea:7c:54: ec:20:a6:8d:14:aa:a7:7e:f6:7d:57:6a:2f:f6:9f:73:c1:87: 13:a8:62:04:01:74:89:99:52:ff:22:ad:b6:74:b7:41:33:f5: 5f:61:b7:f7:60:63:89:c0:fd:71:46:3b:8b:e9:d1:b7:c6:df: 8a:99:ca:7f:ac:d7:fb:48:cb:69:57:ba:4f:2e:54:b6:51:02: 42:66:a4:5f:67:5a:6e:0d:7d:eb:99:af:8c:e0:00:15:e8:f8: 88:7a:79:0b:5b:5b:a7:0e:69:d9:b4:d7:f7:b2:74:87:1c:06: 88:74:ff:17:84:a0:d1:36:6b:58:cc:4f:07:d8:76:14:ba:b3: 11:e5:b4:90:a3:7f:c5:d1:19:12:f1:5e:28:b6:c5:e2:e1:1f: 6e:25:41:2c:85:49:1e:c9:22:24:6a:bb:46:61:76:10:83:2a: d8:36:18:53:2d:56:4a:90:c3:23:6b:f4:be:47:81:ce:21:37: 30:5c:b3:24 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUT3gmxesh/E0aiF6e3TXU3bOJ68AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwODAyMTI0NVoX DTI3MTAwNzAyMTc0NVowMzExMC8GA1UEAxMoMzFGREJFOUNDRjA0RDE3MTRFNjA3 RjE3QTI4MzM1RDNCRjQxRjU3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO43Ng0STD8nm+A/rv3W37H0HXuW58/tD2mIfNXOX8sL175Fu1Jt0RNC/WB7 yA8vqSAYlm4oya/WPpzAKhLHh3r34BtbYv5CqIyIuj7G5FjipE4EuKnSEVpqsPk4 fNo+xh1OQkDqs6F3VA5n9YVDsk4qxpDRA5hASln2eOPUM3D6W8WVAz1bQVoogYHp v3c90ZXoz3f05SMcjDwA0jRUN95KISvD/wUQNPjcBsYNt/q6W2C4pg3wt9SYsUav rD3Q258d9usVq4645gmEP9zsUAIUepWoek1a1osgN44AB6DecCZOe04CDS6XmsuB wmNdTiXApFwN4wKT3PCFt0P7wa0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQx/b6c zwTRcU5gfxeigzXTv0H1fTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAyxc2MA8EAgACMAkDBwAgAQ33pMAwDQYJKoZIhvcNAQELBQADggEBAG4C 7zGWCn4tk67ynZQPd5dm5OKu68+7ym1YkwL/PJT6/7BbBVsh6IdRNdoEm6X+KegV qQaliSBSWsYrw5UzN6WaJcxE9up8VOwgpo0Uqqd+9n1Xai/2n3PBhxOoYgQBdImZ Uv8irbZ0t0Ez9V9ht/dgY4nA/XFGO4vp0bfG34qZyn+s1/tIy2lXuk8uVLZRAkJm pF9nWm4NfeuZr4zgABXo+Ih6eQtbW6cOadm01/eydIccBoh0/xeEoNE2a1jMTwfY dhS6sxHltJCjf8XRGRLxXii2xeLhH24lQSyFSR7JIiRqu0ZhdhCDKtg2GFMtVkqQ wyNr9L5Hgc4hNzBcsyQ= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:28 2026 by rpki-client