$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155066.roa File: AS155066.roa (raw, json) Hash identifier: Lhvf3AcA7CVZ8A83QdLBqV+BG0EOi0oXeCWgfyxVS8k= Subject key identifier: B0:F4:D2:0D:DF:01:C5:C0:D7:5D:8A:D9:00:B3:15:08:10:CD:1F:ED Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BA1A070CF670DADED4822063E64F5B8D4B68495 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155066.roa Signing time: Fri 30 Oct 2026 02:19:10 +0000 ROA not before: Fri 30 Oct 2026 02:14:10 +0000 ROA not after: Fri 29 Oct 2027 02:19:10 +0000 asID: 155066 IP address blocks: 27.98.201.0/24 maxlen: 24 2001:df7:c940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a1:a0:70:cf:67:0d:ad:ed:48:22:06:3e:64:f5:b8:d4:b6:84:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 30 02:14:10 2026 GMT Not After : Oct 29 02:19:10 2027 GMT Subject: CN=B0F4D20DDF01C5C0D75D8AD900B3150810CD1FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:34:72:7f:8f:e0:dc:06:db:e2:83:09:71: 77:43:b6:28:21:b2:02:36:c5:de:e3:dc:6a:db:47: 34:7d:cb:cd:6c:80:a0:e5:05:a4:b4:1d:d2:8c:b4: 28:4e:f9:9a:30:d0:d0:08:6f:79:ba:ca:3f:aa:fa: 6c:99:c3:92:7b:de:2d:8f:86:ef:37:a1:9c:08:fd: 69:2e:f6:9b:cf:20:64:ff:8e:f1:3c:c2:63:63:f8: 50:53:87:e1:26:99:8f:9c:54:6e:9a:62:27:f8:85: f2:f3:ac:4c:9e:59:3d:56:bd:e4:fa:0b:3c:b7:79: 10:96:6c:14:b9:8e:c6:99:05:c9:3e:90:c4:e5:e4: 16:41:f4:66:cd:e9:26:51:31:be:b6:75:d3:17:2c: 7e:78:65:e2:1a:02:6e:0d:f2:54:9c:76:09:75:33: e6:5c:d2:a9:95:1e:6f:94:81:af:f1:bb:50:cf:ae: 03:49:da:fa:3a:4a:c8:f3:d4:c1:78:81:aa:a9:99: b5:d6:b6:9a:37:27:d2:2d:eb:af:c6:e7:a6:80:7b: 85:f7:88:c6:f9:66:2f:ad:c3:e9:50:04:e2:18:d3: 91:4d:5d:4d:88:8a:4e:9e:15:1c:28:e4:e3:d7:53: ef:74:0c:b6:7a:b6:27:6a:0e:ab:27:1a:a2:24:e7: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:D2:0D:DF:01:C5:C0:D7:5D:8A:D9:00:B3:15:08:10:CD:1F:ED X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.98.201.0/24 IPv6: 2001:df7:c940::/48 Signature Algorithm: sha256WithRSAEncryption 19:32:1a:52:fa:c1:33:d9:04:a8:34:8e:a4:d1:f6:a8:e0:80: e9:ff:b7:5c:2c:f2:05:c6:0c:65:9d:08:95:0b:e7:de:6c:93: b5:b4:49:dc:68:53:c7:67:e2:ff:3f:d7:8c:22:cf:50:54:1e: 7f:de:d7:98:c1:d9:8e:62:42:ca:47:fa:93:d5:99:11:5f:48: ae:20:f5:c2:b8:ff:92:28:bc:2c:3c:13:e3:bd:31:fe:a1:fa: 64:2f:3f:f0:9e:5d:d5:bb:b7:0b:0d:71:7c:17:57:5f:17:ec: 7f:3d:1f:28:7d:0c:3e:36:9c:4d:06:a4:ee:2a:16:fe:d3:ea: 06:06:41:b7:9b:37:b4:18:ca:ed:7b:0a:f9:7f:e2:ae:58:ed: 42:03:c7:12:65:2e:65:54:51:36:a9:59:ba:56:c5:7f:14:81: 0a:ad:7e:f9:1b:04:c7:af:08:d9:fe:b5:f0:1b:d7:bf:6b:31: 10:72:47:e6:54:15:d3:5c:40:1f:eb:a6:ed:bd:76:bc:ac:e4: 0a:5e:7f:81:c1:89:63:0b:54:68:01:fc:c6:da:53:d1:f2:db: 59:0f:13:08:96:3a:0f:96:e2:6e:99:5a:e1:c4:f7:61:dd:e8: a8:e0:a6:f6:5c:7e:c5:19:aa:42:f2:88:1e:94:0d:ab:89:c3: 5a:a8:92:65 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUO6GgcM9nDa3tSCIGPmT1uNS2hJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAzMDAyMTQxMFoX DTI3MTAyOTAyMTkxMFowMzExMC8GA1UEAxMoQjBGNEQyMERERjAxQzVDMEQ3NUQ4 QUQ5MDBCMzE1MDgxMENEMUZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaiNHJ/j+DcBtvigwlxd0O2KCGyAjbF3uPcattHNH3LzWyAoOUFpLQd0oy0 KE75mjDQ0AhvebrKP6r6bJnDknveLY+G7zehnAj9aS72m88gZP+O8TzCY2P4UFOH 4SaZj5xUbppiJ/iF8vOsTJ5ZPVa95PoLPLd5EJZsFLmOxpkFyT6QxOXkFkH0Zs3p JlExvrZ10xcsfnhl4hoCbg3yVJx2CXUz5lzSqZUeb5SBr/G7UM+uA0na+jpKyPPU wXiBqqmZtda2mjcn0i3rr8bnpoB7hfeIxvlmL63D6VAE4hjTkU1dTYiKTp4VHCjk 49dT73QMtnq2J2oOqycaoiTnnrcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSw9NIN 3wHFwNdditkAsxUIEM0f7TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAG2LJMA8EAgACMAkDBwAgAQ33yUAwDQYJKoZIhvcNAQELBQADggEBABky GlL6wTPZBKg0jqTR9qjggOn/t1ws8gXGDGWdCJUL595sk7W0SdxoU8dn4v8/14wi z1BUHn/e15jB2Y5iQspH+pPVmRFfSK4g9cK4/5IovCw8E+O9Mf6h+mQvP/CeXdW7 twsNcXwXV18X7H89Hyh9DD42nE0GpO4qFv7T6gYGQbebN7QYyu17Cvl/4q5Y7UID xxJlLmVUUTapWbpWxX8UgQqtfvkbBMevCNn+tfAb179rMRByR+ZUFdNcQB/rpu29 drys5Apef4HBiWMLVGgB/MbaU9Hy21kPEwiWOg+W4m6ZWuHE92Hd6KjgpvZcfsUZ qkLyiB6UDauJw1qokmU= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:40 2026 by rpki-client