$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155024.roa File: AS155024.roa (raw, json) Hash identifier: cBpA1co9A+c/eoX7U0r9V8CH/4IxZIBFVCMGyguTu8U= Subject key identifier: E6:9D:68:CB:64:B3:0D:40:3B:DA:71:82:73:FB:CF:58:0B:F0:5C:B6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 306A40D51632B7F33A88B221C1CF0EB4D11BEFAD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155024.roa Signing time: Mon 09 Nov 2026 03:01:55 +0000 ROA not before: Mon 09 Nov 2026 02:56:55 +0000 ROA not after: Mon 08 Nov 2027 03:01:55 +0000 asID: 155024 IP address blocks: 192.140.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6a:40:d5:16:32:b7:f3:3a:88:b2:21:c1:cf:0e:b4:d1:1b:ef:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 9 02:56:55 2026 GMT Not After : Nov 8 03:01:55 2027 GMT Subject: CN=E69D68CB64B30D403BDA718273FBCF580BF05CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:80:1e:9a:a5:7d:d7:00:d3:99:c7:76:f1: fb:13:70:9d:74:d0:8e:01:bd:ee:58:6f:f6:28:aa: 90:cb:02:86:6b:d6:51:2e:99:ff:2a:01:08:13:4a: b9:72:79:eb:51:80:ba:81:a5:91:51:79:e1:0e:27: 80:c0:36:4d:3a:28:43:f7:b6:d5:97:fa:b2:9a:52: de:bb:b6:2b:59:1b:7c:ff:7e:38:92:ca:9d:52:de: f1:2a:27:71:fd:de:61:46:80:7b:57:bc:0e:95:ef: 21:1e:51:53:8d:9b:3b:7f:6a:ec:c2:f9:b9:41:0a: af:d7:36:ee:9f:4d:7a:b1:7e:e3:ca:73:2c:58:e4: 0a:62:ec:f0:d0:5d:cd:ee:a0:03:a7:33:16:e7:9c: 87:86:f4:4a:c9:47:87:23:c3:91:32:0e:49:d3:9f: 63:0d:a4:79:ee:bd:27:14:4d:1c:c4:0b:92:dc:79: b7:2e:3c:64:db:2c:59:ae:e3:d9:e0:45:6f:ba:bf: d0:2b:60:1a:91:92:aa:34:9e:94:aa:0a:1a:37:f3: 2a:c9:de:30:64:a6:dc:87:95:7d:6b:93:59:a7:44: 93:f3:e0:cf:34:10:9c:47:b0:22:84:5f:26:ec:49: 30:25:33:75:93:9c:20:6c:ee:07:28:ae:c9:0d:3f: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:68:CB:64:B3:0D:40:3B:DA:71:82:73:FB:CF:58:0B:F0:5C:B6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.240.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:c3:d6:cd:f4:79:94:75:a6:53:c8:aa:8d:66:10:4a:be:4d: da:1e:3e:19:6c:0a:f9:7f:61:5b:4d:af:98:11:85:a3:53:b3: 17:4b:eb:5d:32:dd:f1:db:5c:2b:2f:46:7a:3a:a5:db:ff:32: 55:4f:41:c3:02:58:51:1d:f7:73:bb:26:15:31:a6:bf:56:ad: ce:e2:a8:ba:f5:e5:0d:5f:f2:31:a2:04:9d:3f:8c:43:cb:63: a7:c6:bd:00:f0:df:b4:fd:6e:26:4d:ad:a2:a9:6b:bd:69:8b: ce:c5:0d:92:5f:07:cc:e2:3e:28:24:33:6c:c8:18:c0:b9:a2: 12:7e:7a:51:a4:5c:a7:d8:1b:46:6c:a8:26:2f:07:a7:7f:71: 71:99:9e:52:5a:bc:38:0d:b9:34:89:65:90:d9:d4:71:bf:a8: 84:8d:1c:8d:91:91:5f:24:1e:25:95:f2:7f:be:38:cd:36:fb: 6b:19:2b:37:12:cd:a2:44:c0:32:f2:ef:37:6f:f2:7b:d0:2f: 36:e1:0c:a9:73:ba:e9:f0:73:6a:fe:4f:30:4b:cb:30:16:94: 54:43:be:f4:93:5d:d1:b6:09:43:5e:b5:5a:02:f0:b4:9c:03: f6:36:32:2a:3f:a1:9d:56:76:7d:1f:f2:5a:d7:80:b8:2e:0a: ab:16:0d:c5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMGpA1RYyt/M6iLIhwc8OtNEb760wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwOTAyNTY1NVoX DTI3MTEwODAzMDE1NVowMzExMC8GA1UEAxMoRTY5RDY4Q0I2NEIzMEQ0MDNCREE3 MTgyNzNGQkNGNTgwQkYwNUNCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn9gB6apX3XANOZx3bx+xNwnXTQjgG97lhv9iiqkMsChmvWUS6Z/yoBCBNK uXJ561GAuoGlkVF54Q4ngMA2TTooQ/e21Zf6sppS3ru2K1kbfP9+OJLKnVLe8Son cf3eYUaAe1e8DpXvIR5RU42bO39q7ML5uUEKr9c27p9NerF+48pzLFjkCmLs8NBd ze6gA6czFuech4b0SslHhyPDkTIOSdOfYw2kee69JxRNHMQLktx5ty48ZNssWa7j 2eBFb7q/0CtgGpGSqjSelKoKGjfzKsneMGSm3IeVfWuTWadEk/PgzzQQnEewIoRf JuxJMCUzdZOcIGzuByiuyQ0/b+UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTmnWjL ZLMNQDvacYJz+89YC/BctjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBwIzwMA0GCSqGSIb3DQEBCwUAA4IBAQCdw9bN9HmUdaZTyKqNZhBKvk3a Hj4ZbAr5f2FbTa+YEYWjU7MXS+tdMt3x21wrL0Z6OqXb/zJVT0HDAlhRHfdzuyYV Maa/Vq3O4qi69eUNX/IxogSdP4xDy2Onxr0A8N+0/W4mTa2iqWu9aYvOxQ2SXwfM 4j4oJDNsyBjAuaISfnpRpFyn2BtGbKgmLwenf3FxmZ5SWrw4Dbk0iWWQ2dRxv6iE jRyNkZFfJB4llfJ/vjjNNvtrGSs3Es2iRMAy8u83b/J70C824Qypc7rp8HNq/k8w S8swFpRUQ770k13RtglDXrVaAvC0nAP2NjIqP6GdVnZ9H/Ja14C4LgqrFg3F -----END CERTIFICATE-----Generated at Mon Nov 9 14:00:08 2026 by rpki-client