$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155058.roa File: AS155058.roa (raw, json) Hash identifier: TfdSDjC80aLDrWJu7mf+TBPGcHSIZMryhaTGbpaODAo= Subject key identifier: A2:F3:88:49:99:F4:07:FD:50:6E:77:E9:3F:8E:F0:23:C4:D5:33:2A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 763B552D121E721E70B7B1B1738C96ACF387A590 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155058.roa Signing time: Wed 04 Nov 2026 02:27:54 +0000 ROA not before: Wed 04 Nov 2026 02:22:54 +0000 ROA not after: Wed 03 Nov 2027 02:27:54 +0000 asID: 155058 IP address blocks: 180.214.165.0/24 maxlen: 24 2001:df7:c4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3b:55:2d:12:1e:72:1e:70:b7:b1:b1:73:8c:96:ac:f3:87:a5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 4 02:22:54 2026 GMT Not After : Nov 3 02:27:54 2027 GMT Subject: CN=A2F3884999F407FD506E77E93F8EF023C4D5332A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:2b:34:86:95:5e:40:08:cf:bb:38:3e:5f: 69:d7:c2:a8:5f:e9:62:61:0b:8b:09:30:6f:6d:cd: 75:9d:f0:e3:82:b7:d7:63:bd:76:8d:4c:60:e7:52: 2c:51:11:c0:a3:bf:70:1d:c7:b6:29:1f:c6:ca:29: ac:2e:86:fb:db:fc:dc:b8:b4:52:08:ff:bc:b3:3e: c8:15:4b:1e:9c:f2:e5:94:84:43:5e:88:03:4a:da: 88:23:87:0e:b7:ab:32:ce:79:36:04:1f:62:a6:46: 08:8d:57:a9:d3:11:d6:52:50:23:4d:0a:9c:6a:81: 23:15:2b:05:2f:d8:48:4a:ba:28:bf:0c:09:48:61: bd:b4:9f:ec:d1:5d:38:1c:19:b6:2b:84:d3:3c:38: c8:92:c1:93:5c:67:b4:99:ab:54:48:09:6b:db:e7: 31:08:86:9d:05:1a:7d:93:51:ee:03:ed:72:1e:ab: 2b:cf:13:09:7e:0f:b8:03:66:86:81:0a:a8:b7:77: 7c:41:fb:e1:5e:17:65:c8:18:bc:2c:d7:35:52:a9: 59:96:cd:b1:5b:30:06:51:22:03:e6:4c:d9:0d:6d: 2b:9f:ec:33:72:0b:37:44:91:e0:3d:05:c0:2c:69: fa:91:16:c6:c1:d9:a3:52:5c:4d:80:06:4a:85:84: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F3:88:49:99:F4:07:FD:50:6E:77:E9:3F:8E:F0:23:C4:D5:33:2A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.165.0/24 IPv6: 2001:df7:c4c0::/48 Signature Algorithm: sha256WithRSAEncryption a0:c6:71:8a:a7:f8:b6:79:98:3c:bc:2a:64:fe:c7:be:69:6d: 26:ad:3c:66:9a:69:34:eb:b8:e6:14:cb:93:cc:f8:09:7b:df: 93:05:77:1a:3b:f7:89:de:6c:85:09:46:e9:ad:ee:8b:0e:1b: 91:02:3b:d5:a7:a9:8c:ad:fd:29:90:fe:eb:cc:17:02:91:62: 92:7d:33:ab:ff:8f:bd:15:93:4b:9d:b5:8a:62:d7:f1:c7:5f: 72:eb:09:b0:6d:4b:73:e8:57:2a:66:7a:bd:fd:89:76:f0:eb: 77:d0:e3:88:bc:1d:75:19:84:10:af:50:07:43:ba:d9:c4:b8: 8d:d2:8c:06:6f:74:ae:38:fa:e0:f9:aa:58:13:58:a9:a2:6e: 38:c8:df:86:40:e6:e3:b8:ed:0f:ca:ac:52:09:c1:ec:07:38: 16:e4:b1:37:f3:0e:06:06:5a:ef:e5:b4:48:4e:19:ad:c6:38: 34:2a:33:14:9f:82:df:fe:dd:8c:d2:35:27:5b:5d:c9:aa:55: 67:eb:62:da:76:1a:d5:7a:1c:d6:be:2d:e2:49:36:5f:2a:8a: 38:66:02:0b:f9:86:43:a6:54:23:eb:56:df:6e:7c:6a:a1:3d: ce:4a:ce:79:b1:13:16:23:70:6b:e9:d3:c5:d8:17:11:cf:b1: 66:60:8c:68 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdjtVLRIech5wt7Gxc4yWrPOHpZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNDAyMjI1NFoX DTI3MTEwMzAyMjc1NFowMzExMC8GA1UEAxMoQTJGMzg4NDk5OUY0MDdGRDUwNkU3 N0U5M0Y4RUYwMjNDNEQ1MzMyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0yKzSGlV5ACM+7OD5fadfCqF/pYmELiwkwb23NdZ3w44K312O9do1MYOdS LFERwKO/cB3HtikfxsoprC6G+9v83Li0Ugj/vLM+yBVLHpzy5ZSEQ16IA0raiCOH DrerMs55NgQfYqZGCI1XqdMR1lJQI00KnGqBIxUrBS/YSEq6KL8MCUhhvbSf7NFd OBwZtiuE0zw4yJLBk1xntJmrVEgJa9vnMQiGnQUafZNR7gPtch6rK88TCX4PuANm hoEKqLd3fEH74V4XZcgYvCzXNVKpWZbNsVswBlEiA+ZM2Q1tK5/sM3ILN0SR4D0F wCxp+pEWxsHZo1JcTYAGSoWEInECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSi84hJ mfQH/VBud+k/jvAjxNUzKjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDU4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAtNalMA8EAgACMAkDBwAgAQ33xMAwDQYJKoZIhvcNAQELBQADggEBAKDG cYqn+LZ5mDy8KmT+x75pbSatPGaaaTTruOYUy5PM+Al735MFdxo794nebIUJRumt 7osOG5ECO9WnqYyt/SmQ/uvMFwKRYpJ9M6v/j70Vk0udtYpi1/HHX3LrCbBtS3Po Vypmer39iXbw63fQ44i8HXUZhBCvUAdDutnEuI3SjAZvdK44+uD5qlgTWKmibjjI 34ZA5uO47Q/KrFIJwewHOBbksTfzDgYGWu/ltEhOGa3GODQqMxSfgt/+3YzSNSdb XcmqVWfrYtp2GtV6HNa+LeJJNl8qijhmAgv5hkOmVCPrVt9ufGqhPc5KznmxExYj cGvp08XYFxHPsWZgjGg= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:30 2026 by rpki-client