$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155021.roa File: AS155021.roa (raw, json) Hash identifier: XycXPV4dzCJudrQmEn8TT/080PYwPoBM+SbQsMpZewE= Subject key identifier: 01:4D:50:17:E3:AC:34:45:E0:6E:B4:69:55:34:7C:F2:6E:AD:33:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 087AEBF2D43AE085BA2762478DA38B6088338491 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155021.roa Signing time: Mon 19 Oct 2026 09:13:58 +0000 ROA not before: Mon 19 Oct 2026 09:08:58 +0000 ROA not after: Mon 18 Oct 2027 09:13:58 +0000 asID: 155021 IP address blocks: 192.140.237.0/24 maxlen: 24 2001:df7:b4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7a:eb:f2:d4:3a:e0:85:ba:27:62:47:8d:a3:8b:60:88:33:84:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 09:08:58 2026 GMT Not After : Oct 18 09:13:58 2027 GMT Subject: CN=014D5017E3AC3445E06EB46955347CF26EAD3340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:94:4c:e5:fb:76:8e:78:8d:5a:4f:57:1d: c9:fb:8b:8f:a3:6f:8e:88:1d:80:98:e9:18:0e:85: f0:bd:a0:9d:a8:10:27:55:42:cd:2f:59:7b:79:b8: 5f:1b:34:f9:06:60:d9:d5:1c:5d:40:62:5e:ed:92: 44:45:82:23:90:67:82:fd:f8:de:61:db:33:59:f0: a7:95:da:56:1c:1c:49:b6:d0:1d:b5:ff:2d:86:ae: 00:0c:59:af:e2:1b:eb:b6:cb:eb:a7:79:50:2f:ab: 39:b2:41:1d:25:1f:d3:90:64:d6:a7:10:39:7d:b9: ec:dd:cb:02:8f:20:4b:6d:d0:4c:55:17:a3:92:9c: 4a:47:92:2a:96:9b:12:1b:f1:9f:d0:4b:bd:91:63: e0:35:ca:a9:c9:8e:6d:26:6c:7a:80:eb:65:ec:24: e4:cc:74:4e:fb:b5:8d:4b:2b:87:21:a2:b2:86:65: 4c:68:b5:38:10:5c:de:64:2e:40:3f:08:72:e6:72: 80:99:48:7c:b3:80:2f:ac:12:95:1a:bf:f8:d8:1f: b8:fd:eb:6e:f0:3a:0a:87:83:62:9d:97:40:36:0f: 42:86:96:ef:af:3d:fd:f7:0e:13:dc:82:b8:bb:ba: 43:1b:f6:08:ba:6b:14:fe:ef:2d:d4:cc:10:78:13: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4D:50:17:E3:AC:34:45:E0:6E:B4:69:55:34:7C:F2:6E:AD:33:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155021.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.237.0/24 IPv6: 2001:df7:b4c0::/48 Signature Algorithm: sha256WithRSAEncryption 82:29:b2:8c:22:52:0a:2d:31:b7:4d:ef:f1:da:97:7c:97:6f: a4:fb:c1:c8:80:84:4c:db:9d:76:fb:b0:4a:89:06:50:05:32: 05:f8:d6:d0:82:69:44:22:11:4f:3c:b1:ef:0b:1a:74:e7:8f: ab:72:7c:7b:37:ad:8b:33:29:3a:d3:ea:33:24:f7:79:58:c1: 2e:c4:99:19:1e:e0:4b:d9:d9:a0:7e:42:ca:0a:c7:18:51:1a: e9:77:a0:00:57:48:9f:4f:00:52:18:99:89:20:af:fe:01:04: c7:09:e8:a6:58:b9:41:c0:d4:14:5d:ef:a5:07:a5:76:70:b7: 5d:a2:6c:89:15:82:ab:35:ed:96:11:16:3b:75:f2:ca:04:45: f2:24:38:e9:12:96:ee:6a:d1:ee:e9:09:93:aa:f9:a9:d6:e7: 37:82:f6:18:aa:d5:2d:89:ec:65:89:30:20:d0:20:cf:67:cc: 67:8b:ed:2d:47:87:7e:98:76:b4:09:88:75:98:44:50:c1:58: f9:a0:c9:24:d5:6f:be:b1:c5:63:9b:46:8a:9e:40:8a:28:be: b4:92:48:5d:d9:2b:7b:da:c5:7b:9d:65:44:96:c0:bd:6d:d2: 77:0c:ee:fe:8d:6f:d2:37:ab:b7:c3:1f:fd:30:9f:e3:0a:cb: 6a:ae:6e:22 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCHrr8tQ64IW6J2JHjaOLYIgzhJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTA5MDg1OFoX DTI3MTAxODA5MTM1OFowMzExMC8GA1UEAxMoMDE0RDUwMTdFM0FDMzQ0NUUwNkVC NDY5NTUzNDdDRjI2RUFEMzM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtnlEzl+3aOeI1aT1cdyfuLj6NvjogdgJjpGA6F8L2gnagQJ1VCzS9Ze3m4 Xxs0+QZg2dUcXUBiXu2SREWCI5Bngv343mHbM1nwp5XaVhwcSbbQHbX/LYauAAxZ r+Ib67bL66d5UC+rObJBHSUf05Bk1qcQOX257N3LAo8gS23QTFUXo5KcSkeSKpab Ehvxn9BLvZFj4DXKqcmObSZseoDrZewk5Mx0Tvu1jUsrhyGisoZlTGi1OBBc3mQu QD8IcuZygJlIfLOAL6wSlRq/+NgfuP3rbvA6CoeDYp2XQDYPQoaW7689/fcOE9yC uLu6Qxv2CLprFP7vLdTMEHgTaX8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQBTVAX 46w0ReButGlVNHzybq0zQDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAwIztMA8EAgACMAkDBwAgAQ33tMAwDQYJKoZIhvcNAQELBQADggEBAIIp sowiUgotMbdN7/Hal3yXb6T7wciAhEzbnXb7sEqJBlAFMgX41tCCaUQiEU88se8L GnTnj6tyfHs3rYszKTrT6jMk93lYwS7EmRke4EvZ2aB+QsoKxxhRGul3oABXSJ9P AFIYmYkgr/4BBMcJ6KZYuUHA1BRd76UHpXZwt12ibIkVgqs17ZYRFjt18soERfIk OOkSlu5q0e7pCZOq+anW5zeC9hiq1S2J7GWJMCDQIM9nzGeL7S1Hh36YdrQJiHWY RFDBWPmgySTVb76xxWObRoqeQIoovrSSSF3ZK3vaxXudZUSWwL1t0ncM7v6Nb9I3 q7fDH/0wn+MKy2qubiI= -----END CERTIFICATE-----Generated at Mon Nov 9 15:08:44 2026 by rpki-client