$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155074.roa File: AS155074.roa (raw, json) Hash identifier: Q7FDCjb09Hho87bTpMZ2f47vzJz+htxxDCqBZliMITc= Subject key identifier: 14:F3:3E:40:3D:ED:F1:1E:3E:FB:10:D8:18:C2:9D:27:26:10:3C:27 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71431424D5755BBC6A6124E63E84B52CB12EDA74 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155074.roa Signing time: Thu 05 Nov 2026 09:26:07 +0000 ROA not before: Thu 05 Nov 2026 09:21:07 +0000 ROA not after: Thu 04 Nov 2027 09:26:07 +0000 asID: 155074 IP address blocks: 103.71.217.0/24 maxlen: 24 2001:df7:cbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:43:14:24:d5:75:5b:bc:6a:61:24:e6:3e:84:b5:2c:b1:2e:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 5 09:21:07 2026 GMT Not After : Nov 4 09:26:07 2027 GMT Subject: CN=14F33E403DEDF11E3EFB10D818C29D2726103C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:fc:9d:45:fa:e6:5d:d9:2a:fc:c1:68:1b: c5:24:86:bf:9d:09:e1:32:9e:3b:21:76:0e:85:9b: 5d:47:01:5b:e7:de:00:49:ad:58:06:11:68:53:d9: db:1b:5e:70:0a:d4:89:06:a6:8e:8b:f5:e2:6a:96: f8:ac:4a:0e:66:e1:63:98:44:c6:da:e4:02:31:7f: 13:85:30:a1:dd:21:75:76:35:a4:64:e9:05:a3:5d: 63:56:c0:62:2a:17:47:dd:ae:02:15:2e:54:20:9b: 4a:c6:2e:56:61:d4:22:47:70:52:28:84:1e:36:0b: 98:a0:7f:02:4b:46:c9:4d:e8:c7:97:8b:83:9b:58: bb:57:3f:ef:52:aa:77:72:2b:7f:aa:61:a6:9f:93: f5:59:6b:a3:ed:fe:b9:dc:f4:c5:e4:d3:10:a2:88: 5a:0b:ad:25:2d:0e:bb:e2:a7:53:44:6b:1c:a3:43: 9c:48:dd:25:63:20:a0:92:8a:e5:20:2c:1d:26:04: de:0d:5a:95:5e:38:af:0b:72:5f:4a:42:a8:1c:b7: 9a:55:13:4a:db:80:4b:5d:6e:ec:ee:ed:7a:5f:25: 9e:b3:63:9a:ac:44:9b:49:55:c4:ec:58:c7:68:46: 8d:06:a3:5c:4d:ae:d9:d5:9f:fa:57:7d:04:d1:8d: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F3:3E:40:3D:ED:F1:1E:3E:FB:10:D8:18:C2:9D:27:26:10:3C:27 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155074.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.217.0/24 IPv6: 2001:df7:cbc0::/48 Signature Algorithm: sha256WithRSAEncryption 2c:16:27:71:b0:85:a2:8b:2d:c5:e2:89:86:f4:00:2d:10:84: f6:4a:4b:fc:3b:35:38:12:7d:d1:23:ef:87:5d:d0:c8:18:00: a7:bf:66:d3:05:85:ec:fe:7d:bf:65:84:52:de:e1:71:54:97: c0:6e:ed:2c:10:70:d7:a6:ae:19:10:02:c8:d9:65:e7:73:3a: ed:b2:e2:06:90:fd:be:69:05:d4:d3:c0:a7:36:3e:a1:10:42: 8f:83:49:84:5a:bb:b9:2a:ee:0b:de:e7:73:a7:cd:b8:9c:0d: 61:6a:5e:e6:7a:80:3b:ba:2f:42:9e:91:8e:3e:77:2a:30:0a: 08:d6:34:bf:c8:ae:04:6c:15:67:f1:87:7b:ec:4a:d1:71:8b: 6b:ca:a7:24:ae:2d:f5:58:98:65:06:08:b4:72:b2:c6:18:4b: 82:3b:37:cb:db:b2:6a:12:bf:f9:9f:f0:bd:0a:8f:66:72:d3: ec:dd:63:09:7a:c0:4d:17:29:93:e5:0a:02:06:13:da:87:b2: 41:34:7a:dc:a6:0b:83:33:97:b0:a6:6f:93:e4:50:ba:7e:97: 12:8a:18:85:60:a8:79:0a:7a:4e:5e:15:b4:8d:0f:6d:e7:b8: df:90:a6:a5:96:0a:6a:38:53:56:77:f1:42:77:19:82:5d:c1: c9:64:66:66 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcUMUJNV1W7xqYSTmPoS1LLEu2nQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNTA5MjEwN1oX DTI3MTEwNDA5MjYwN1owMzExMC8GA1UEAxMoMTRGMzNFNDAzREVERjExRTNFRkIx MEQ4MThDMjlEMjcyNjEwM0MyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9n/J1F+uZd2Sr8wWgbxSSGv50J4TKeOyF2DoWbXUcBW+feAEmtWAYRaFPZ 2xtecArUiQamjov14mqW+KxKDmbhY5hExtrkAjF/E4Uwod0hdXY1pGTpBaNdY1bA YioXR92uAhUuVCCbSsYuVmHUIkdwUiiEHjYLmKB/AktGyU3ox5eLg5tYu1c/71Kq d3Irf6phpp+T9Vlro+3+udz0xeTTEKKIWgutJS0Ou+KnU0RrHKNDnEjdJWMgoJKK 5SAsHSYE3g1alV44rwtyX0pCqBy3mlUTStuAS11u7O7tel8lnrNjmqxEm0lVxOxY x2hGjQajXE2u2dWf+ld9BNGNDY0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQU8z5A Pe3xHj77ENgYwp0nJhA8JzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ0fZMA8EAgACMAkDBwAgAQ33y8AwDQYJKoZIhvcNAQELBQADggEBACwW J3GwhaKLLcXiiYb0AC0QhPZKS/w7NTgSfdEj74dd0MgYAKe/ZtMFhez+fb9lhFLe 4XFUl8Bu7SwQcNemrhkQAsjZZedzOu2y4gaQ/b5pBdTTwKc2PqEQQo+DSYRau7kq 7gve53OnzbicDWFqXuZ6gDu6L0KekY4+dyowCgjWNL/IrgRsFWfxh3vsStFxi2vK pySuLfVYmGUGCLRyssYYS4I7N8vbsmoSv/mf8L0Kj2Zy0+zdYwl6wE0XKZPlCgIG E9qHskE0etymC4Mzl7Cmb5PkULp+lxKKGIVgqHkKek5eFbSND23nuN+QpqWWCmo4 U1Z38UJ3GYJdwclkZmY= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:26 2026 by rpki-client