$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154536.roa File: AS154536.roa (raw, json) Hash identifier: 7tFePgO7v5HWaKNKg5KAlmDUSm1cQX8e0AdIx/xYhAc= Subject key identifier: 77:BC:05:84:E9:C6:1F:F1:75:72:81:02:90:5A:00:5A:86:36:89:3E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A69F75D4591115C2821B1573BCCC4901FE3263D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154536.roa Signing time: Mon 04 May 2026 05:03:25 +0000 ROA not before: Mon 04 May 2026 04:58:25 +0000 ROA not after: Mon 03 May 2027 05:03:25 +0000 asID: 154536 IP address blocks: 163.128.10.0/24 maxlen: 24 2001:df6:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:69:f7:5d:45:91:11:5c:28:21:b1:57:3b:cc:c4:90:1f:e3:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 4 04:58:25 2026 GMT Not After : May 3 05:03:25 2027 GMT Subject: CN=77BC0584E9C61FF175728102905A005A8636893E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:2e:6f:ef:85:6e:5e:d9:59:d4:8a:08:71: 2d:8f:a7:4c:8d:50:d3:03:e8:11:f3:4f:ae:7b:f0: e1:cc:7b:44:04:9d:e4:c1:fb:e0:19:23:6c:30:a8: 4d:23:cd:12:a8:ed:9e:81:4f:dc:b7:9f:51:ee:db: bd:1e:7c:34:2d:b6:cd:01:da:6c:d0:53:9d:72:c3: 0b:59:ab:34:87:99:73:7b:a5:c1:9e:8e:03:6d:6f: e8:e6:7a:29:9f:07:f5:21:04:1a:6c:0f:e3:ec:f8: 68:50:06:ee:63:f3:bc:e6:be:71:0e:c9:dd:d6:2f: 1e:87:37:b7:2c:01:3b:2f:95:40:e7:d6:24:2a:d4: df:ad:1c:ca:8f:0d:48:97:90:02:38:a3:05:b1:87: 29:d6:ba:20:60:e3:31:ca:c6:63:f1:13:4c:0e:3d: 49:2e:33:99:71:6d:29:52:23:d6:56:9f:ba:15:6a: 03:9d:b1:e8:8b:3a:89:e6:1a:48:47:cf:14:02:4f: cc:25:dc:ca:87:45:96:21:9a:27:10:9c:23:59:9a: 9f:f0:d1:e2:a0:b1:90:59:15:86:21:51:a5:b6:04: 94:50:f4:d5:78:bd:7c:64:8f:1c:3b:ed:d1:c0:3e: 41:39:57:af:40:ea:87:2f:0d:61:e4:79:d0:33:60: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:05:84:E9:C6:1F:F1:75:72:81:02:90:5A:00:5A:86:36:89:3E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.10.0/24 IPv6: 2001:df6:c840::/48 Signature Algorithm: sha256WithRSAEncryption 98:31:de:38:96:e1:da:82:7c:dd:14:f6:4e:fa:f7:0b:4c:66: b2:f4:c2:d5:76:57:c0:a5:1f:ab:b3:f2:2b:31:0f:ee:0e:03: 22:b9:0c:37:51:17:7d:08:3b:db:70:73:9c:e3:cb:c8:35:f7: 83:6e:3e:a8:99:fa:38:38:4a:39:c6:6e:95:cc:53:79:a8:11: a5:ba:67:80:20:cf:44:73:af:6f:e2:92:7a:74:b6:c2:05:de: 35:e1:1d:d3:2e:8a:eb:fa:80:96:79:50:64:fb:12:35:74:9b: d3:93:06:17:b0:57:60:10:a3:47:e1:f3:17:fb:bd:ae:5f:fc: bc:d2:e9:f8:77:8f:63:4f:2c:3b:6a:f8:ff:9b:40:49:60:0e: 61:ae:40:60:10:1b:3a:37:c4:65:e8:e8:aa:aa:e5:5e:a7:2a: ea:d3:ab:24:a2:01:12:f1:e8:09:6a:dc:49:90:fb:9e:93:88: 6c:5c:31:ff:c7:b4:f8:89:7c:90:da:20:0e:55:fa:f5:fa:d5: 2e:a7:95:35:ba:c0:2e:b5:fd:b1:bf:91:90:fe:5d:bd:fd:51: 44:07:5e:e1:a0:fc:e7:d3:37:e9:84:d7:0b:cb:b1:c1:5e:2f: cc:bc:71:71:f4:f2:53:c3:d0:df:30:7b:50:51:d9:02:10:59: 10:b3:86:87 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWmn3XUWREVwoIbFXO8zEkB/jJj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwNDA0NTgyNVoX DTI3MDUwMzA1MDMyNVowMzExMC8GA1UEAxMoNzdCQzA1ODRFOUM2MUZGMTc1NzI4 MTAyOTA1QTAwNUE4NjM2ODkzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4ELm/vhW5e2VnUighxLY+nTI1Q0wPoEfNPrnvw4cx7RASd5MH74BkjbDCo TSPNEqjtnoFP3LefUe7bvR58NC22zQHabNBTnXLDC1mrNIeZc3ulwZ6OA21v6OZ6 KZ8H9SEEGmwP4+z4aFAG7mPzvOa+cQ7J3dYvHoc3tywBOy+VQOfWJCrU360cyo8N SJeQAjijBbGHKda6IGDjMcrGY/ETTA49SS4zmXFtKVIj1lafuhVqA52x6Is6ieYa SEfPFAJPzCXcyodFliGaJxCcI1man/DR4qCxkFkVhiFRpbYElFD01Xi9fGSPHDvt 0cA+QTlXr0Dqhy8NYeR50DNgjtcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR3vAWE 6cYf8XVygQKQWgBahjaJPjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAo4AKMA8EAgACMAkDBwAgAQ32yEAwDQYJKoZIhvcNAQELBQADggEBAJgx 3jiW4dqCfN0U9k769wtMZrL0wtV2V8ClH6uz8isxD+4OAyK5DDdRF30IO9twc5zj y8g194NuPqiZ+jg4SjnGbpXMU3moEaW6Z4Agz0Rzr2/iknp0tsIF3jXhHdMuiuv6 gJZ5UGT7EjV0m9OTBhewV2AQo0fh8xf7va5f/LzS6fh3j2NPLDtq+P+bQElgDmGu QGAQGzo3xGXo6Kqq5V6nKurTqySiARLx6Alq3EmQ+56TiGxcMf/HtPiJfJDaIA5V +vX61S6nlTW6wC61/bG/kZD+Xb39UUQHXuGg/OfTN+mE1wvLscFeL8y8cXH08lPD 0N8we1BR2QIQWRCzhoc= -----END CERTIFICATE-----Generated at Tue May 12 22:43:33 2026 by rpki-client