$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155008.roa File: AS155008.roa (raw, json) Hash identifier: BU1ZGhkHE5hGueS4WJJnetpSQqf2hpNWdj17UMkGDNI= Subject key identifier: 33:ED:60:D3:EA:8D:64:36:EB:0F:4B:87:80:39:08:11:7D:2F:7A:98 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59E2AECF7EF860ED47EC05AF780E05BF7337F84C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155008.roa Signing time: Mon 19 Oct 2026 04:19:11 +0000 ROA not before: Mon 19 Oct 2026 04:14:11 +0000 ROA not after: Mon 18 Oct 2027 04:19:11 +0000 asID: 155008 IP address blocks: 45.248.186.0/23 maxlen: 24 2001:df7:aec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e2:ae:cf:7e:f8:60:ed:47:ec:05:af:78:0e:05:bf:73:37:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 04:14:11 2026 GMT Not After : Oct 18 04:19:11 2027 GMT Subject: CN=33ED60D3EA8D6436EB0F4B87803908117D2F7A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:62:d4:68:39:ea:59:98:3b:b5:a4:5e:86: d9:38:7d:aa:14:51:5b:ac:49:bb:a7:48:ca:4c:1d: 75:27:1b:22:e5:f3:9f:d5:d3:4a:e8:37:44:f0:87: e9:41:de:01:c2:38:56:29:b9:ad:fc:be:f9:10:a7: 2d:a8:24:7a:b3:1e:85:4f:ca:27:2e:11:60:47:13: 51:09:9f:ad:de:69:80:1b:4e:f4:21:f8:47:3d:53: af:c8:d3:e9:e7:d1:97:10:d6:43:5b:56:82:12:08: 6b:13:b1:e1:c6:c5:2c:95:65:65:fe:0e:92:67:6c: 20:22:ec:71:a5:20:45:b6:db:f7:79:87:70:02:ae: b8:63:ee:af:24:83:1e:08:86:17:5f:eb:fa:38:5f: b4:51:ff:96:ec:a7:3d:28:5c:e0:b8:b7:95:f4:76: 9d:7f:93:18:d0:1f:5e:25:2f:74:a7:df:54:9c:91: d1:4b:b4:24:33:37:10:0f:ce:9c:ba:ef:64:26:f3: 96:5c:1f:0c:ec:79:27:03:50:ee:fa:2f:34:6d:40: 61:92:7e:86:10:b2:7a:fa:07:19:2c:5f:e2:6e:95: 1e:5e:ad:a0:be:8e:96:29:02:2a:ad:5b:44:52:57: 1e:2c:5c:da:c9:c4:93:0a:92:af:a0:65:f6:f0:76: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:ED:60:D3:EA:8D:64:36:EB:0F:4B:87:80:39:08:11:7D:2F:7A:98 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155008.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.186.0/23 IPv6: 2001:df7:aec0::/48 Signature Algorithm: sha256WithRSAEncryption 85:2c:b2:64:63:b7:d4:d3:42:2b:35:a5:af:e0:d9:c9:6d:db: f9:87:90:a0:13:00:45:19:48:36:83:d5:29:59:62:02:a8:65: fd:2c:18:05:f7:e7:7e:27:61:ae:91:96:4d:d1:cb:fc:0c:1e: 7f:c8:ed:0e:83:4a:e6:61:b7:22:d0:32:e4:43:e3:04:54:ff: 46:c5:24:00:1a:15:8a:a4:75:34:38:a7:4d:d7:cb:3b:f0:58: a2:43:ca:44:0e:36:fe:b7:c1:9b:0e:40:a3:4e:ac:f2:69:65: 2b:6b:e4:09:d4:9b:1c:0b:3d:0c:41:ab:53:b9:50:1f:73:07: 8f:75:5b:82:49:54:8b:9e:a5:89:05:b6:1b:99:ef:79:3d:fb: 8d:c3:51:ea:84:5a:a4:ca:bb:01:1b:9d:03:d3:72:da:22:8a: a4:ce:69:d5:1b:e7:fd:c7:73:07:fe:6a:e5:be:70:ab:4c:23: 89:2a:15:90:23:54:ff:fa:8b:f5:80:97:a1:a1:94:24:a3:72: f8:b4:21:27:64:6c:69:d4:ad:8e:50:ac:9b:ae:16:42:0c:1b: 78:87:d3:0b:c3:16:42:56:5b:58:86:a5:38:4d:72:64:dd:4d: 76:02:d8:34:93:c0:a3:8a:e4:79:13:5e:89:ba:d3:26:78:9e: cf:0c:7c:15 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWeKuz374YO1H7AWveA4Fv3M3+EwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTA0MTQxMVoX DTI3MTAxODA0MTkxMVowMzExMC8GA1UEAxMoMzNFRDYwRDNFQThENjQzNkVCMEY0 Qjg3ODAzOTA4MTE3RDJGN0E5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJCTYtRoOepZmDu1pF6G2Th9qhRRW6xJu6dIykwddScbIuXzn9XTSug3RPCH 6UHeAcI4Vim5rfy++RCnLagkerMehU/KJy4RYEcTUQmfrd5pgBtO9CH4Rz1Tr8jT 6efRlxDWQ1tWghIIaxOx4cbFLJVlZf4OkmdsICLscaUgRbbb93mHcAKuuGPurySD HgiGF1/r+jhftFH/luynPShc4Li3lfR2nX+TGNAfXiUvdKffVJyR0Uu0JDM3EA/O nLrvZCbzllwfDOx5JwNQ7vovNG1AYZJ+hhCyevoHGSxf4m6VHl6toL6OlikCKq1b RFJXHixc2snEkwqSr6Bl9vB2Y8sCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQz7WDT 6o1kNusPS4eAOQgRfS96mDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDA4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBLfi6MA8EAgACMAkDBwAgAQ33rsAwDQYJKoZIhvcNAQELBQADggEBAIUs smRjt9TTQis1pa/g2clt2/mHkKATAEUZSDaD1SlZYgKoZf0sGAX3534nYa6Rlk3R y/wMHn/I7Q6DSuZhtyLQMuRD4wRU/0bFJAAaFYqkdTQ4p03XyzvwWKJDykQONv63 wZsOQKNOrPJpZStr5AnUmxwLPQxBq1O5UB9zB491W4JJVIuepYkFthuZ73k9+43D UeqEWqTKuwEbnQPTctoiiqTOadUb5/3Hcwf+auW+cKtMI4kqFZAjVP/6i/WAl6Gh lCSjcvi0ISdkbGnUrY5QrJuuFkIMG3iH0wvDFkJWW1iGpThNcmTdTXYC2DSTwKOK 5HkTXom60yZ4ns8MfBU= -----END CERTIFICATE-----Generated at Mon Nov 9 12:34:26 2026 by rpki-client