$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154123.roa File: AS154123.roa (raw, json) Hash identifier: jae1Zz67+irSPBCToJeHnEUDCaRQDTwem6UfEnCJzDo= Subject key identifier: 5D:9E:15:06:56:5D:BF:FF:51:D9:7D:D2:2D:46:51:E9:B0:64:0F:1A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32C737C6D8818928D754CDB943391C96838B80F9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154123.roa Signing time: Wed 23 Sep 2026 03:03:32 +0000 ROA not before: Wed 23 Sep 2026 02:58:32 +0000 ROA not after: Wed 22 Sep 2027 03:03:32 +0000 asID: 154123 IP address blocks: 163.52.215.0/24 maxlen: 24 2001:df5:eec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:37:c6:d8:81:89:28:d7:54:cd:b9:43:39:1c:96:83:8b:80:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 23 02:58:32 2026 GMT Not After : Sep 22 03:03:32 2027 GMT Subject: CN=5D9E1506565DBFFF51D97DD22D4651E9B0640F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:f7:f4:ea:3d:9b:f6:a9:35:01:2b:7b:9a: 45:ee:d8:c6:7f:4e:3a:21:a9:ca:98:43:cb:8b:3a: 64:97:e9:0e:a4:1d:bc:9c:9f:b0:51:1a:cb:94:65: 93:53:02:ac:8f:0b:44:c1:4c:44:83:7c:18:ff:1c: 34:1a:5b:55:00:75:de:e3:22:7e:90:2f:c1:31:1e: 4a:26:2b:b4:55:47:fe:32:cd:f9:18:ad:91:31:66: a1:f1:c7:5f:95:38:56:14:44:9e:f2:b5:e8:63:57: f6:7c:75:b8:e6:41:1b:18:c8:f2:be:79:c1:55:2f: 3c:d5:1a:a8:10:c7:35:21:7a:8e:85:4f:b2:3f:95: f4:ea:6d:46:0d:08:ce:37:32:47:97:5a:28:80:11: 48:8b:b6:22:36:5a:41:79:b6:f9:78:64:38:f0:44: e1:3f:6f:b7:c1:82:a1:74:30:a1:31:0f:37:fa:a4: c0:97:42:a6:63:73:02:c3:1b:4d:7b:4e:d2:f4:16: 5e:79:45:74:4b:c8:1b:cf:6c:4b:4e:24:6f:3f:52: 0d:2d:ba:21:8c:d0:e8:44:73:5c:a8:b8:84:49:23: 83:82:af:d4:13:2e:37:ec:f9:fa:fe:99:72:f2:09: fe:21:1d:c9:e3:2b:be:da:c1:bb:30:2e:4d:99:56: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9E:15:06:56:5D:BF:FF:51:D9:7D:D2:2D:46:51:E9:B0:64:0F:1A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.215.0/24 IPv6: 2001:df5:eec0::/48 Signature Algorithm: sha256WithRSAEncryption 62:55:54:50:98:32:8d:2c:1c:21:10:c1:3c:c1:72:23:c6:50: e1:89:e5:da:19:be:91:c7:7e:34:be:1d:ba:ea:3a:23:cc:ba: 72:4f:3f:66:e6:0a:46:9d:ba:0f:7e:81:a4:98:6d:2f:b4:f7: 26:62:30:7c:98:74:a4:7c:f4:28:f2:98:87:3b:4c:8c:43:c5: ef:ba:54:57:c7:85:d2:58:b2:52:aa:48:ef:08:35:45:38:bd: 28:00:b9:65:44:5c:3e:43:e3:12:ef:6c:39:cb:0f:6a:f9:ce: 6a:be:4d:9f:89:d0:6f:91:5f:b4:51:e5:06:e2:ea:1f:5f:25: 4c:0f:08:cb:d4:cc:d1:df:d8:29:24:78:c0:60:e4:a2:8c:35: fd:43:8d:72:fd:f0:82:fc:f6:42:e0:c9:5d:4f:e4:95:14:17: 0f:8e:24:d9:df:ea:5c:95:d4:2d:44:79:b6:f6:9e:f2:53:3f: 45:77:da:4c:39:28:84:7d:48:09:0d:de:a2:ab:e9:aa:60:73: d1:9b:7d:38:9a:45:2e:10:c1:25:63:fc:5e:1f:f2:db:f7:90: 68:01:ea:b7:63:fd:5c:ec:0b:6b:12:ae:52:a5:52:2e:b3:67: 4e:75:3a:84:48:a1:1b:d6:e3:27:f3:4f:7e:f1:22:41:ea:01: 80:b7:81:a6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMsc3xtiBiSjXVM25QzkcloOLgPkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMzAyNTgzMloX DTI3MDkyMjAzMDMzMlowMzExMC8GA1UEAxMoNUQ5RTE1MDY1NjVEQkZGRjUxRDk3 REQyMkQ0NjUxRTlCMDY0MEYxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLW9/TqPZv2qTUBK3uaRe7Yxn9OOiGpyphDy4s6ZJfpDqQdvJyfsFEay5Rl k1MCrI8LRMFMRIN8GP8cNBpbVQB13uMifpAvwTEeSiYrtFVH/jLN+RitkTFmofHH X5U4VhREnvK16GNX9nx1uOZBGxjI8r55wVUvPNUaqBDHNSF6joVPsj+V9OptRg0I zjcyR5daKIARSIu2IjZaQXm2+XhkOPBE4T9vt8GCoXQwoTEPN/qkwJdCpmNzAsMb TXtO0vQWXnlFdEvIG89sS04kbz9SDS26IYzQ6ERzXKi4hEkjg4Kv1BMuN+z5+v6Z cvIJ/iEdyeMrvtrBuzAuTZlWVq0CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRdnhUG Vl2//1HZfdItRlHpsGQPGjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozTXMA8EAgACMAkDBwAgAQ317sAwDQYJKoZIhvcNAQELBQADggEBAGJV VFCYMo0sHCEQwTzBciPGUOGJ5doZvpHHfjS+HbrqOiPMunJPP2bmCkadug9+gaSY bS+09yZiMHyYdKR89CjymIc7TIxDxe+6VFfHhdJYslKqSO8INUU4vSgAuWVEXD5D 4xLvbDnLD2r5zmq+TZ+J0G+RX7RR5Qbi6h9fJUwPCMvUzNHf2CkkeMBg5KKMNf1D jXL98IL89kLgyV1P5JUUFw+OJNnf6lyV1C1Eebb2nvJTP0V32kw5KIR9SAkN3qKr 6apgc9GbfTiaRS4QwSVj/F4f8tv3kGgB6rdj/VzsC2sSrlKlUi6zZ051OoRIoRvW 4yfzT37xIkHqAYC3gaY= -----END CERTIFICATE-----Generated at Wed Sep 23 18:44:41 2026 by rpki-client