$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155077.roa File: AS155077.roa (raw, json) Hash identifier: OxCNdqbuaG13P+9EjCn3K6gI6lEY0Yr9jXArgI9du3o= Subject key identifier: A8:10:CB:1E:04:A7:CA:63:A2:D5:94:AF:39:39:F6:43:4C:94:BE:77 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47E2CD727BEBB50AD2538A049473B9AF67E26C2A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155077.roa Signing time: Mon 09 Nov 2026 06:00:58 +0000 ROA not before: Mon 09 Nov 2026 05:55:58 +0000 ROA not after: Mon 08 Nov 2027 06:00:58 +0000 asID: 155077 IP address blocks: 203.1.2.0/24 maxlen: 24 2001:df7:cf40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e2:cd:72:7b:eb:b5:0a:d2:53:8a:04:94:73:b9:af:67:e2:6c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 9 05:55:58 2026 GMT Not After : Nov 8 06:00:58 2027 GMT Subject: CN=A810CB1E04A7CA63A2D594AF3939F6434C94BE77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:b9:03:8d:1e:88:8a:58:f8:3e:f7:fc:98: 5e:19:e9:cf:3a:97:20:f3:ac:18:a5:08:17:a1:56: 7c:d4:bd:4d:5b:ca:f6:2d:56:23:26:f0:c5:b2:2a: 6a:e3:db:5a:29:1f:f8:40:03:48:74:01:f7:30:a5: 6b:e3:64:e6:4d:5e:9f:b5:5c:7a:ee:6b:8c:44:13: b9:c0:9b:e6:fd:35:48:63:1d:3e:26:23:04:d3:ab: 00:cf:0a:02:27:f2:ee:c1:f2:9f:da:f6:8f:9c:f6: df:59:10:e5:d2:6b:f7:b5:b0:c9:85:97:98:8f:30: 50:ea:8d:09:30:a6:78:b0:10:52:d5:56:de:cf:e5: 42:da:2e:12:1f:55:9f:43:e1:8e:50:76:ff:c5:6b: 34:19:8d:6a:81:fd:3e:77:6f:41:7e:93:6a:a9:fb: de:cf:16:c6:00:6b:b7:5e:bd:1b:3e:0c:22:1f:9c: 5b:73:b7:3b:46:e2:7d:97:85:5f:98:bb:8e:92:78: c3:2a:9f:f9:13:6f:eb:72:a3:88:dd:53:83:56:0c: dc:40:9f:fc:cf:9a:d9:8d:db:06:8e:5a:03:44:3e: 11:5e:73:cd:99:bd:28:c5:fa:88:eb:66:85:e4:a5: 7d:f3:0b:4f:33:a7:f5:36:4d:59:11:2e:76:ce:fe: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:10:CB:1E:04:A7:CA:63:A2:D5:94:AF:39:39:F6:43:4C:94:BE:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155077.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.1.2.0/24 IPv6: 2001:df7:cf40::/48 Signature Algorithm: sha256WithRSAEncryption 4a:5b:11:22:60:05:3d:a8:9e:e5:0e:ac:4a:05:58:02:53:dc: a3:22:1a:be:99:42:41:bb:3a:ab:0c:9e:f3:2e:46:4e:b0:8e: eb:cf:9c:bd:b6:4a:23:b6:19:5e:c5:cf:79:0f:5d:ba:58:a4: b3:5b:95:67:88:03:53:9c:d8:80:3e:bc:d6:4a:e3:bc:3b:12: 58:ad:9a:82:21:5a:37:da:09:8a:f7:95:f0:16:0c:13:6d:35: 1a:08:ac:49:16:a8:ec:1d:13:48:ed:79:ed:64:f2:22:96:c8: d4:54:e9:e2:c9:c3:91:f5:08:d2:bb:eb:91:f2:e8:72:f9:4e: 25:94:92:0e:07:a4:80:ff:c7:b0:ca:9a:2d:f3:62:27:a8:3c: 95:96:d8:8c:a8:0e:89:47:e7:d4:49:a2:89:1d:df:b6:82:1a: 2a:61:5d:aa:74:71:a8:0d:9c:7b:05:33:12:49:4b:72:40:a0: f4:df:1d:db:64:a7:d1:d2:57:b1:f7:36:79:85:50:4b:1a:60: 1a:c1:16:7d:2f:a7:b4:12:68:5f:d2:41:c4:2f:39:55:60:64: e4:6a:d1:6c:f3:18:23:9d:85:de:b3:e1:4f:58:87:00:7b:0a: b3:f3:a6:86:ba:ec:dd:0f:89:a9:ff:5e:f7:fe:95:cc:e6:a0: fc:4b:cc:b4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUR+LNcnvrtQrSU4oElHO5r2fibCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwOTA1NTU1OFoX DTI3MTEwODA2MDA1OFowMzExMC8GA1UEAxMoQTgxMENCMUUwNEE3Q0E2M0EyRDU5 NEFGMzkzOUY2NDM0Qzk0QkU3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpFuQONHoiKWPg+9/yYXhnpzzqXIPOsGKUIF6FWfNS9TVvK9i1WIybwxbIq auPbWikf+EADSHQB9zCla+Nk5k1en7Vceu5rjEQTucCb5v01SGMdPiYjBNOrAM8K Aify7sHyn9r2j5z231kQ5dJr97WwyYWXmI8wUOqNCTCmeLAQUtVW3s/lQtouEh9V n0PhjlB2/8VrNBmNaoH9PndvQX6Taqn73s8WxgBrt169Gz4MIh+cW3O3O0bifZeF X5i7jpJ4wyqf+RNv63KjiN1Tg1YM3ECf/M+a2Y3bBo5aA0Q+EV5zzZm9KMX6iOtm heSlffMLTzOn9TZNWREuds7+PaMCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSoEMse BKfKY6LVlK85OfZDTJS+dzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAywECMA8EAgACMAkDBwAgAQ33z0AwDQYJKoZIhvcNAQELBQADggEBAEpb ESJgBT2onuUOrEoFWAJT3KMiGr6ZQkG7OqsMnvMuRk6wjuvPnL22SiO2GV7Fz3kP XbpYpLNblWeIA1Oc2IA+vNZK47w7ElitmoIhWjfaCYr3lfAWDBNtNRoIrEkWqOwd E0jtee1k8iKWyNRU6eLJw5H1CNK765Hy6HL5TiWUkg4HpID/x7DKmi3zYieoPJWW 2IyoDolH59RJookd37aCGiphXap0cagNnHsFMxJJS3JAoPTfHdtkp9HSV7H3NnmF UEsaYBrBFn0vp7QSaF/SQcQvOVVgZORq0WzzGCOdhd6z4U9YhwB7CrPzpoa67N0P ian/Xvf+lczmoPxLzLQ= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:17 2026 by rpki-client