$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155006.roa File: AS155006.roa (raw, json) Hash identifier: Z4TxdbuYwbv7k4YfHB+qlGvP8klLC4jlZCz4LtWfKSo= Subject key identifier: 5F:9D:87:DF:96:E6:5A:85:C9:27:5B:2A:DD:4E:C5:8D:87:FA:DD:2F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6A7C2BB1D0F5B32D2490A260F9C0EAD97CBD976B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155006.roa Signing time: Thu 22 Oct 2026 06:11:43 +0000 ROA not before: Thu 22 Oct 2026 06:06:43 +0000 ROA not after: Thu 21 Oct 2027 06:11:43 +0000 asID: 155006 IP address blocks: 45.248.185.0/24 maxlen: 24 2001:df7:b140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7c:2b:b1:d0:f5:b3:2d:24:90:a2:60:f9:c0:ea:d9:7c:bd:97:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 22 06:06:43 2026 GMT Not After : Oct 21 06:11:43 2027 GMT Subject: CN=5F9D87DF96E65A85C9275B2ADD4EC58D87FADD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:3d:f5:13:ad:f6:42:9a:15:1c:b7:64:2c: 9a:47:28:f4:4d:45:e6:5a:94:99:c8:a9:66:0e:e0: 24:1d:ee:98:f1:58:b9:c5:25:aa:2c:40:cc:81:97: fe:23:39:0c:6d:74:17:37:8d:61:20:3d:5e:e3:b8: a1:35:30:d9:b5:0d:06:5c:c6:dc:55:cd:1e:31:db: 64:3a:a8:53:0c:1f:a0:b2:ff:78:71:96:33:ac:fd: 6a:9c:36:42:31:e5:4d:d2:9a:85:72:a0:30:fc:ad: 35:b8:c6:11:97:24:13:d0:30:64:73:0b:31:a0:91: 96:83:61:91:e0:7f:e8:a5:49:76:c3:c9:02:d4:ec: 34:e7:c9:07:5e:a0:0d:e5:f5:29:80:97:d6:4e:7f: 99:40:7c:2e:73:49:d3:67:e7:6c:c8:ae:e3:69:ef: e8:26:f2:3b:80:28:c5:c8:a1:9f:9e:db:eb:a4:8a: 75:73:19:46:8d:a2:63:68:8a:db:81:8e:84:b3:2a: 97:d1:3f:e4:df:e6:12:7b:6d:89:3b:e6:08:f2:2b: 27:8f:4e:ac:24:18:db:26:53:0a:51:cb:a1:45:2d: 0c:2d:81:49:bb:3c:f2:b3:7b:d2:6d:bc:90:f2:b9: 03:36:1c:0b:d0:44:ee:bf:10:83:da:42:73:7c:24: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:87:DF:96:E6:5A:85:C9:27:5B:2A:DD:4E:C5:8D:87:FA:DD:2F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.185.0/24 IPv6: 2001:df7:b140::/48 Signature Algorithm: sha256WithRSAEncryption 30:52:79:ef:b0:73:29:c8:18:44:8a:bd:9d:16:39:71:b6:bf: 14:db:7e:98:f1:0b:86:a3:45:df:75:7b:f1:60:14:08:4d:6b: 9c:1a:9f:c7:88:cc:e0:ac:d8:c0:58:b4:7b:cc:19:d7:44:e1: 09:aa:bb:62:9d:36:a0:95:a5:e3:89:a9:be:c6:cb:de:cb:09: 20:ad:66:ab:a1:1f:c5:56:ec:08:1a:b0:5f:3d:87:bc:90:2f: cd:cd:bd:59:7c:14:a9:22:1d:6c:3e:6b:70:a6:e2:4d:8f:66: 70:8d:ba:d3:c9:6e:40:20:ef:88:14:ab:d0:0c:93:34:9e:94: f7:b2:1f:8b:1e:5d:6a:ec:25:3d:29:0c:fc:ca:b8:2b:f4:fc: 9f:d1:2b:ac:99:3c:63:15:5d:66:b8:3b:c3:36:27:59:27:7e: 1c:de:54:2a:97:ff:36:61:62:99:6f:6f:da:da:b9:40:04:dc: 3d:aa:6a:90:2a:fd:e8:d4:6d:43:2c:00:fd:f8:51:e4:ec:24: f5:8e:98:df:60:ad:63:5b:09:82:53:63:62:f6:ad:ab:f9:55: 57:a7:e1:bf:82:13:22:24:b9:9f:59:69:5e:79:66:f8:95:96: 3d:11:9c:75:63:7e:df:e9:43:5a:67:3c:67:61:9e:3f:8a:af: c8:e7:2d:74 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUanwrsdD1sy0kkKJg+cDq2Xy9l2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMjA2MDY0M1oX DTI3MTAyMTA2MTE0M1owMzExMC8GA1UEAxMoNUY5RDg3REY5NkU2NUE4NUM5Mjc1 QjJBREQ0RUM1OEQ4N0ZBREQyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsFPfUTrfZCmhUct2Qsmkco9E1F5lqUmcipZg7gJB3umPFYucUlqixAzIGX /iM5DG10FzeNYSA9XuO4oTUw2bUNBlzG3FXNHjHbZDqoUwwfoLL/eHGWM6z9apw2 QjHlTdKahXKgMPytNbjGEZckE9AwZHMLMaCRloNhkeB/6KVJdsPJAtTsNOfJB16g DeX1KYCX1k5/mUB8LnNJ02fnbMiu42nv6CbyO4Aoxcihn57b66SKdXMZRo2iY2iK 24GOhLMql9E/5N/mEnttiTvmCPIrJ49OrCQY2yZTClHLoUUtDC2BSbs88rN70m28 kPK5AzYcC9BE7r8Qg9pCc3wkNc8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRfnYff luZahcknWyrdTsWNh/rdLzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQALfi5MA8EAgACMAkDBwAgAQ33sUAwDQYJKoZIhvcNAQELBQADggEBADBS ee+wcynIGESKvZ0WOXG2vxTbfpjxC4ajRd91e/FgFAhNa5wan8eIzOCs2MBYtHvM GddE4Qmqu2KdNqCVpeOJqb7Gy97LCSCtZquhH8VW7AgasF89h7yQL83NvVl8FKki HWw+a3Cm4k2PZnCNutPJbkAg74gUq9AMkzSelPeyH4seXWrsJT0pDPzKuCv0/J/R K6yZPGMVXWa4O8M2J1knfhzeVCqX/zZhYplvb9rauUAE3D2qapAq/ejUbUMsAP34 UeTsJPWOmN9grWNbCYJTY2L2rav5VVen4b+CEyIkuZ9ZaV55ZviVlj0RnHVjft/p Q1pnPGdhnj+Kr8jnLXQ= -----END CERTIFICATE-----Generated at Mon Nov 9 12:34:24 2026 by rpki-client