$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155072.roa File: AS155072.roa (raw, json) Hash identifier: 6HyrIaNWKRlXwOQPtqpNczNnhRgqwevzTGEYkcRiuEU= Subject key identifier: 37:B8:F4:6E:D0:0F:15:95:3E:9C:56:B5:D6:9A:0D:F8:CE:80:B4:C2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5BEA5E9A78DF715F7BD23E8689018BBB08F0D8CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155072.roa Signing time: Fri 30 Oct 2026 06:25:06 +0000 ROA not before: Fri 30 Oct 2026 06:20:06 +0000 ROA not after: Fri 29 Oct 2027 06:25:06 +0000 asID: 155072 IP address blocks: 202.84.23.0/24 maxlen: 24 2001:df7:ca40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ea:5e:9a:78:df:71:5f:7b:d2:3e:86:89:01:8b:bb:08:f0:d8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 30 06:20:06 2026 GMT Not After : Oct 29 06:25:06 2027 GMT Subject: CN=37B8F46ED00F15953E9C56B5D69A0DF8CE80B4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1b:d4:1a:92:5c:01:70:06:ba:1c:32:ba:2f: 15:f3:a8:65:28:4d:cc:3c:07:5b:91:01:1f:9c:9a: f4:6b:2f:94:2f:ec:1e:52:7e:ef:9d:07:2d:ce:cb: 0a:0d:15:35:7e:ab:36:85:ea:66:d8:50:0a:3c:c6: a7:f2:a1:ff:03:54:07:a1:4e:03:88:3a:24:99:b7: be:1d:0c:e8:28:36:cc:b4:81:0e:78:cb:58:d6:c1: e4:08:b8:ca:28:ed:93:d1:99:05:4e:f7:2b:79:3b: 2d:f1:2c:96:5f:eb:1f:db:52:23:46:3e:54:07:b5: e7:71:24:b6:06:00:43:a7:9c:f0:d3:05:f6:89:65: 3b:59:b8:11:96:c3:1d:5f:cc:99:bf:ce:1b:0c:dd: 44:dc:52:0e:9a:a6:06:f8:bf:86:fc:af:09:62:19: 99:0d:6e:bd:03:45:c9:94:14:8d:27:62:a3:26:97: f2:d7:59:de:b7:23:8d:19:3c:9c:5f:13:5d:5a:e8: fd:fa:d5:20:ea:87:5f:8a:15:38:60:56:54:8d:64: d7:66:2d:f7:2e:3c:af:8b:cd:ff:9b:9f:91:15:1d: 35:fe:8a:24:80:32:6a:8c:08:b2:c3:23:79:73:e0: 5f:3f:a9:af:38:8f:c2:6f:dd:ef:6c:67:74:fb:e0: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:F4:6E:D0:0F:15:95:3E:9C:56:B5:D6:9A:0D:F8:CE:80:B4:C2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155072.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.84.23.0/24 IPv6: 2001:df7:ca40::/48 Signature Algorithm: sha256WithRSAEncryption 05:a2:0b:c8:f5:cf:49:98:b9:90:5e:fe:f6:9e:73:03:80:6b: 0f:0a:c7:64:e9:9e:03:c2:d7:1d:af:9a:01:80:b7:78:86:fb: 11:fe:f3:13:d2:37:3f:18:d4:45:60:af:c5:64:f8:d3:3d:5b: e8:d3:58:0f:ff:6c:e4:7f:46:7d:17:56:22:6f:6b:68:63:b2: 57:33:8b:9a:56:b2:05:dc:5c:f6:aa:6c:fc:41:e5:51:cc:88: dd:dd:19:50:76:13:eb:ac:a1:71:d3:e3:15:2c:a2:e1:10:ae: 00:c6:1b:09:4c:39:12:53:25:73:03:9e:80:34:75:5c:49:d0: 13:90:dd:48:48:94:3a:a1:39:dc:61:d4:78:85:fb:e5:40:70: 09:57:88:33:da:3b:47:85:56:94:90:6e:3b:bc:0f:f2:e0:49: e0:fd:2a:08:96:9d:be:0b:a8:34:02:12:5f:62:df:6b:fd:10: 08:50:9c:72:4a:f7:f7:c3:f3:3d:23:89:08:a2:96:0c:d0:e2: c0:95:fa:87:95:80:2c:8c:d7:a7:d6:f7:fc:3a:7d:95:8a:5d: e0:e1:18:dc:6f:db:ca:e8:f4:0e:66:4d:84:99:46:9c:2c:ba: a8:94:23:9d:6e:08:82:9b:fe:3d:b2:62:53:ae:b7:ea:4f:68: 32:8b:75:c4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUW+pemnjfcV970j6GiQGLuwjw2M4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAzMDA2MjAwNloX DTI3MTAyOTA2MjUwNlowMzExMC8GA1UEAxMoMzdCOEY0NkVEMDBGMTU5NTNFOUM1 NkI1RDY5QTBERjhDRTgwQjRDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwb1BqSXAFwBrocMrovFfOoZShNzDwHW5EBH5ya9GsvlC/sHlJ+750HLc7L Cg0VNX6rNoXqZthQCjzGp/Kh/wNUB6FOA4g6JJm3vh0M6Cg2zLSBDnjLWNbB5Ai4 yijtk9GZBU73K3k7LfEsll/rH9tSI0Y+VAe153EktgYAQ6ec8NMF9ollO1m4EZbD HV/Mmb/OGwzdRNxSDpqmBvi/hvyvCWIZmQ1uvQNFyZQUjSdioyaX8tdZ3rcjjRk8 nF8TXVro/frVIOqHX4oVOGBWVI1k12Yt9y48r4vN/5ufkRUdNf6KJIAyaowIssMj eXPgXz+prziPwm/d72xndPvgFl8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQ3uPRu 0A8VlT6cVrXWmg34zoC0wjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAylQXMA8EAgACMAkDBwAgAQ33ykAwDQYJKoZIhvcNAQELBQADggEBAAWi C8j1z0mYuZBe/vaecwOAaw8Kx2TpngPC1x2vmgGAt3iG+xH+8xPSNz8Y1EVgr8Vk +NM9W+jTWA//bOR/Rn0XViJva2hjslczi5pWsgXcXPaqbPxB5VHMiN3dGVB2E+us oXHT4xUsouEQrgDGGwlMORJTJXMDnoA0dVxJ0BOQ3UhIlDqhOdxh1HiF++VAcAlX iDPaO0eFVpSQbju8D/LgSeD9KgiWnb4LqDQCEl9i32v9EAhQnHJK9/fD8z0jiQii lgzQ4sCV+oeVgCyM16fW9/w6fZWKXeDhGNxv28ro9A5mTYSZRpwsuqiUI51uCIKb /j2yYlOut+pPaDKLdcQ= -----END CERTIFICATE-----Generated at Mon Nov 9 12:34:57 2026 by rpki-client