$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS155085.roa File: AS155085.roa (raw, json) Hash identifier: sauhpBvNib2yP+rYugTAtvL9xqm9kYgglen8DhuZxAA= Subject key identifier: A1:6B:33:A6:DB:53:EA:76:76:87:3E:A5:16:13:45:98:7F:E1:FB:05 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5ECCA4E10B7F43171585578E11906E21705B72F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155085.roa Signing time: Thu 05 Nov 2026 09:17:09 +0000 ROA not before: Thu 05 Nov 2026 09:12:09 +0000 ROA not after: Thu 04 Nov 2027 09:17:09 +0000 asID: 155085 IP address blocks: 103.71.216.0/24 maxlen: 24 2001:df7:cb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cc:a4:e1:0b:7f:43:17:15:85:57:8e:11:90:6e:21:70:5b:72:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 5 09:12:09 2026 GMT Not After : Nov 4 09:17:09 2027 GMT Subject: CN=A16B33A6DB53EA7676873EA5161345987FE1FB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:34:48:33:63:a9:e1:70:ca:74:57:30:15: 7a:21:ab:3d:fe:91:0c:23:5f:83:df:c4:f0:cc:74: 07:d4:c3:40:26:d0:13:ce:17:c5:a9:d3:79:a4:06: d1:e2:e9:1c:0e:25:df:af:3a:be:70:29:ae:ef:88: 34:b3:97:97:e6:8d:7d:ef:85:bc:f8:37:ef:6a:e3: a7:76:ab:59:c7:21:de:15:02:ca:6b:0e:18:be:2d: b4:20:8e:2c:87:dc:aa:ae:3e:16:e9:36:2a:f4:bd: 7b:d1:0f:69:40:bf:00:68:e4:72:8b:55:76:d0:c8: 91:74:f1:06:1e:0b:0a:10:7e:59:9a:05:98:d9:93: b3:53:d0:20:b3:8c:44:97:14:f0:9d:1e:25:1f:f5: 98:97:c2:3c:32:c3:ca:ed:d0:19:c8:cb:55:89:6d: 39:e4:e5:b5:34:e5:1e:ec:2b:49:b3:74:b2:07:f7: fb:0f:dc:f6:41:21:8c:17:bc:14:0b:00:90:00:0e: 82:78:a3:51:00:40:2f:3f:88:8b:fd:0b:ca:f3:f2: 74:d1:04:8e:00:b9:69:4b:91:0a:10:b1:74:66:f3: b0:77:20:49:cc:2c:e0:f6:06:2f:82:97:af:2f:65: 3d:ed:de:09:51:7b:c8:ab:34:c4:4e:71:ee:8c:fc: 5a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:33:A6:DB:53:EA:76:76:87:3E:A5:16:13:45:98:7F:E1:FB:05 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS155085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.216.0/24 IPv6: 2001:df7:cb40::/48 Signature Algorithm: sha256WithRSAEncryption 0a:c1:d0:d1:2e:4c:e3:6e:3d:cc:6d:81:35:b0:78:dc:21:dc: ec:bf:90:b6:49:31:c9:45:c8:2b:5f:71:cf:af:8f:11:ec:6a: 52:27:b0:fc:1a:58:69:f7:2a:68:77:d1:cc:ad:fe:e0:a9:92: ac:cf:30:22:45:77:ca:5b:48:0e:52:0c:7e:9f:31:52:95:27: d6:fe:bc:ca:bd:2c:eb:d6:de:87:ae:ea:30:15:b0:e5:d1:df: cc:9e:97:2c:92:54:98:5c:d1:e7:7f:93:eb:ed:a6:d6:47:7a: 23:2c:e9:d4:d4:8e:b2:bd:b0:f0:83:44:8b:4c:e7:a8:d5:dc: 38:dc:6a:77:19:54:19:fc:ce:c9:ae:be:38:14:1b:9a:a3:c5: b6:18:5b:a0:0f:20:48:d3:9b:8f:27:24:5b:43:70:fd:85:c9: f9:43:ff:63:32:21:aa:4f:69:b6:7b:e9:e3:9c:82:0f:d5:a6: 86:65:ec:46:b4:14:c2:c1:e5:1d:5f:85:85:74:79:73:79:07: 8d:06:41:d3:c8:d9:bf:f7:04:57:00:5b:74:f4:0f:c5:52:16: eb:00:0d:0a:85:62:83:89:83:3a:df:db:b3:31:2c:68:7e:ab: e5:30:85:5a:b6:44:3b:10:d8:2d:cc:14:37:a8:a4:c3:b8:d2: eb:24:05:b4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXsyk4Qt/QxcVhVeOEZBuIXBbcvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNTA5MTIwOVoX DTI3MTEwNDA5MTcwOVowMzExMC8GA1UEAxMoQTE2QjMzQTZEQjUzRUE3Njc2ODcz RUE1MTYxMzQ1OTg3RkUxRkIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBqNEgzY6nhcMp0VzAVeiGrPf6RDCNfg9/E8Mx0B9TDQCbQE84XxanTeaQG 0eLpHA4l3686vnApru+INLOXl+aNfe+FvPg372rjp3arWcch3hUCymsOGL4ttCCO LIfcqq4+Fuk2KvS9e9EPaUC/AGjkcotVdtDIkXTxBh4LChB+WZoFmNmTs1PQILOM RJcU8J0eJR/1mJfCPDLDyu3QGcjLVYltOeTltTTlHuwrSbN0sgf3+w/c9kEhjBe8 FAsAkAAOgnijUQBALz+Ii/0LyvPydNEEjgC5aUuRChCxdGbzsHcgScws4PYGL4KX ry9lPe3eCVF7yKs0xE5x7oz8WsUCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBShazOm 21PqdnaHPqUWE0WYf+H7BTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU1MDg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ0fYMA8EAgACMAkDBwAgAQ33y0AwDQYJKoZIhvcNAQELBQADggEBAArB 0NEuTONuPcxtgTWweNwh3Oy/kLZJMclFyCtfcc+vjxHsalInsPwaWGn3Kmh30cyt /uCpkqzPMCJFd8pbSA5SDH6fMVKVJ9b+vMq9LOvW3oeu6jAVsOXR38yelyySVJhc 0ed/k+vtptZHeiMs6dTUjrK9sPCDRItM56jV3DjcancZVBn8zsmuvjgUG5qjxbYY W6APIEjTm48nJFtDcP2FyflD/2MyIapPabZ76eOcgg/VpoZl7Ea0FMLB5R1fhYV0 eXN5B40GQdPI2b/3BFcAW3T0D8VSFusADQqFYoOJgzrf27MxLGh+q+UwhVq2RDsQ 2C3MFDeopMO40uskBbQ= -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:22 2026 by rpki-client