$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155017.roa File: AS155017.roa (raw, json) Hash identifier: r02dlsk7hgPxsgI0fNFgrntYQy/5za/kCTbe4J/Yj1c= Subject key identifier: FE:6A:E7:68:16:71:5C:BC:56:34:38:25:C0:54:5D:71:29:55:57:B9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DF32101709551FD7DADDE67D7265A22CEC7A752 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155017.roa Signing time: Mon 19 Oct 2026 04:10:21 +0000 ROA not before: Mon 19 Oct 2026 04:05:21 +0000 ROA not after: Mon 18 Oct 2027 04:10:21 +0000 asID: 155017 IP address blocks: 160.202.191.0/24 maxlen: 24 2001:df7:b3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f3:21:01:70:95:51:fd:7d:ad:de:67:d7:26:5a:22:ce:c7:a7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 04:05:21 2026 GMT Not After : Oct 18 04:10:21 2027 GMT Subject: CN=FE6AE76816715CBC56343825C0545D71295557B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:0e:67:61:38:6f:1d:05:f3:6d:b3:68:b6: 16:7b:76:5c:cf:8d:74:0c:30:4b:df:df:b0:3a:e1: 47:58:21:6b:29:9c:d3:ed:09:f3:f4:65:6d:0b:3d: cf:99:e6:77:a1:3a:77:8c:4c:d5:2b:d1:d8:69:fb: e3:0b:90:3a:67:2b:ba:99:20:5d:b1:c5:9a:ee:ce: 52:3f:9e:69:94:bb:d2:fc:95:56:c2:7e:82:75:e6: 24:5a:0f:31:18:76:d9:8d:67:9c:62:48:78:a5:81: c9:6f:ea:e3:dd:ff:62:4a:b5:de:05:ee:55:bc:d9: 5e:f2:62:b5:81:63:b9:c9:2e:19:9f:2a:23:b2:62: 4f:09:eb:c7:37:05:13:5a:91:db:1f:f6:c8:6a:ab: f6:cf:b3:f9:da:ff:1f:9c:fb:71:38:8d:89:5c:b6: 2c:50:32:ad:bb:67:42:80:8b:5d:ff:cc:e0:16:a3: 0c:32:c4:ac:5b:fb:9c:47:b0:75:9d:7c:3a:78:c7: 68:dc:dc:18:ca:61:1d:d1:09:52:b6:f1:93:41:b1: 56:a8:dc:78:0c:3d:2c:81:d7:de:3b:ba:cb:5e:64: b1:9c:93:90:df:0b:03:4a:38:58:ae:04:f9:00:1e: c8:01:1f:a3:8e:ed:53:cf:ae:d9:58:a3:5e:74:9e: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6A:E7:68:16:71:5C:BC:56:34:38:25:C0:54:5D:71:29:55:57:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155017.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.202.191.0/24 IPv6: 2001:df7:b3c0::/48 Signature Algorithm: sha256WithRSAEncryption 33:50:9f:3b:25:25:1e:9e:49:f0:47:0e:3f:19:8e:15:87:76: 05:30:89:86:06:78:f1:66:cf:6e:8b:a7:00:31:23:6c:99:ca: 15:1f:39:5d:81:c4:0b:82:ef:b9:a6:ca:b7:5d:3e:0f:56:38: 7b:71:09:ef:b9:2d:a1:d3:d2:67:d0:3c:91:6f:91:05:13:60: 04:ac:ba:48:7e:5a:af:10:e5:b0:38:48:a5:97:41:43:3a:f6: bc:6e:c2:21:7f:8a:d2:65:07:f4:b2:b8:29:57:8a:81:b5:7f: b8:60:d2:fa:d3:9c:23:a6:99:d3:79:81:8e:a0:09:d6:00:3c: 5a:79:cf:79:3a:72:37:7e:38:63:b7:0d:f2:f6:6f:71:18:5d: 34:cb:ad:16:10:1d:c5:7b:a6:fc:91:15:d1:45:8c:dd:b1:61: 67:8b:d6:92:4a:9a:73:f5:21:f4:ae:51:66:31:2e:b6:0f:05: 2f:52:58:f6:3f:e2:77:aa:d9:f3:2e:1b:b7:29:d9:2b:01:11: 58:1f:06:5a:c9:34:09:08:40:2b:c2:94:85:66:75:06:20:44: be:44:44:be:6c:83:fb:cb:0f:37:e8:5d:16:4c:e5:83:f1:88: db:f8:63:bb:ac:87:fc:cc:83:e2:65:0e:9f:30:81:01:ce:a2: 0c:a2:74:22 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDfMhAXCVUf19rd5n1yZaIs7Hp1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTA0MDUyMVoX DTI3MTAxODA0MTAyMVowMzExMC8GA1UEAxMoRkU2QUU3NjgxNjcxNUNCQzU2MzQz ODI1QzA1NDVENzEyOTU1NTdCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKS2DmdhOG8dBfNts2i2Fnt2XM+NdAwwS9/fsDrhR1ghaymc0+0J8/RlbQs9 z5nmd6E6d4xM1SvR2Gn74wuQOmcrupkgXbHFmu7OUj+eaZS70vyVVsJ+gnXmJFoP MRh22Y1nnGJIeKWByW/q493/Ykq13gXuVbzZXvJitYFjuckuGZ8qI7JiTwnrxzcF E1qR2x/2yGqr9s+z+dr/H5z7cTiNiVy2LFAyrbtnQoCLXf/M4BajDDLErFv7nEew dZ18OnjHaNzcGMphHdEJUrbxk0GxVqjceAw9LIHX3ju6y15ksZyTkN8LA0o4WK4E +QAeyAEfo47tU8+u2VijXnSef+ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT+audo FnFcvFY0OCXAVF1xKVVXuTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAoMq/MA8EAgACMAkDBwAgAQ33s8AwDQYJKoZIhvcNAQELBQADggEBADNQ nzslJR6eSfBHDj8ZjhWHdgUwiYYGePFmz26LpwAxI2yZyhUfOV2BxAuC77mmyrdd Pg9WOHtxCe+5LaHT0mfQPJFvkQUTYASsukh+Wq8Q5bA4SKWXQUM69rxuwiF/itJl B/SyuClXioG1f7hg0vrTnCOmmdN5gY6gCdYAPFp5z3k6cjd+OGO3DfL2b3EYXTTL rRYQHcV7pvyRFdFFjN2xYWeL1pJKmnP1IfSuUWYxLrYPBS9SWPY/4neq2fMuG7cp 2SsBEVgfBlrJNAkIQCvClIVmdQYgRL5ERL5sg/vLDzfoXRZM5YPxiNv4Y7ush/zM g+JlDp8wgQHOogyidCI= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:49 2026 by rpki-client