$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154537.roa File: AS154537.roa (raw, json) Hash identifier: EecLUBqCo9ZRXwrYJpWqYuZ2JJbqoHcGq7BiyoFkYqk= Subject key identifier: DD:C0:E1:C1:EE:ED:15:6F:11:88:7E:B9:DC:EF:1A:2D:78:B8:84:3C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 48FD6A2677E117D551CB3F300830F1E7ABE5EE11 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154537.roa Signing time: Mon 06 Jul 2026 10:43:17 +0000 ROA not before: Mon 06 Jul 2026 10:38:17 +0000 ROA not after: Mon 05 Jul 2027 10:43:17 +0000 asID: 154537 IP address blocks: 2001:df6:a140::/48 maxlen: 48 2001:df7:2cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fd:6a:26:77:e1:17:d5:51:cb:3f:30:08:30:f1:e7:ab:e5:ee:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 6 10:38:17 2026 GMT Not After : Jul 5 10:43:17 2027 GMT Subject: CN=DDC0E1C1EEED156F11887EB9DCEF1A2D78B8843C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:ee:97:99:16:3a:8d:9d:5e:21:56:2e:e7: cb:11:b8:80:b4:3c:62:0a:2e:02:98:89:93:d4:d5: 55:9e:10:9b:7b:6b:ee:3e:74:a0:6e:cf:1e:be:e3: 2d:63:00:e4:53:07:83:3b:05:ea:75:05:10:83:9d: 85:bd:00:21:46:aa:03:d0:ec:ea:4c:e8:ba:06:e7: 63:31:da:66:fc:34:ad:bf:1d:4c:0c:6b:ff:27:2f: 7a:90:af:3b:ea:7c:77:72:f2:58:9a:a7:04:91:72: e3:26:fe:7a:dc:d7:a4:f4:3f:a3:65:a9:7d:47:8c: 81:cb:4e:61:97:d9:f6:cb:6b:8f:03:1c:d3:2f:60: 67:87:c2:e3:72:d1:6b:34:a7:01:9d:2d:1d:93:bd: 31:f2:25:23:80:ec:6d:9f:15:5e:67:ea:39:2c:9e: e7:22:5c:7b:d4:75:fe:51:e4:d1:12:fb:64:be:fd: 3f:cf:56:52:aa:47:b2:1b:e8:5e:b3:83:72:3b:ed: 16:95:02:6a:9e:ec:62:19:ad:58:ae:b1:0a:85:fb: 58:23:cf:5c:32:29:2c:21:62:52:7e:9f:3c:1c:c7: eb:fb:60:2a:63:be:fa:bd:4a:43:3d:a6:1f:72:ef: ba:db:02:68:54:69:ed:f4:40:b2:8e:41:3e:20:8c: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:E1:C1:EE:ED:15:6F:11:88:7E:B9:DC:EF:1A:2D:78:B8:84:3C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a140::/48 2001:df7:2cc0::/48 Signature Algorithm: sha256WithRSAEncryption 00:2a:a4:31:27:39:95:59:4f:a8:cf:df:32:b1:68:c6:77:2b: e3:05:cb:6f:7d:e0:42:a9:d7:62:c4:2e:a3:27:3c:ca:7c:80: 17:37:f2:c7:e5:1a:f6:e1:b8:46:15:f0:b3:b2:af:3f:cd:8d: 77:d9:c2:66:2e:f4:0d:40:bd:fc:67:fc:70:cc:40:8a:a0:39: 47:04:12:ce:19:9f:d9:9f:73:2d:40:ad:e7:10:41:9f:a9:c8: c9:17:86:ec:76:52:42:46:63:46:a0:e6:30:49:7e:bd:a3:84: 3c:9a:b3:a7:54:b7:14:fe:9f:11:2b:59:33:8c:da:fc:c7:7a: 33:44:92:e6:47:7b:69:a2:03:5c:ee:6f:8e:e8:89:ca:f0:ff: 80:a7:3b:67:45:45:54:54:d8:65:bb:03:ce:be:77:64:a1:20: 2f:ba:97:4c:89:47:95:fc:5e:b2:ff:13:17:fe:12:f7:63:b0: 35:e0:7e:b1:62:17:32:b8:05:76:39:36:ef:8d:94:70:0d:43: ef:52:dc:f9:ab:ea:0a:5f:8a:14:17:91:1a:1d:0d:73:20:50: ab:2f:86:bc:5a:a3:ae:fe:fa:6b:77:39:59:8e:04:83:01:ab: 04:57:7f:05:c4:8b:d9:1a:b5:a3:45:14:de:a1:d7:2f:28:ca: a2:aa:66:35 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUSP1qJnfhF9VRyz8wCDDx56vl7hEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcwNjEwMzgxN1oX DTI3MDcwNTEwNDMxN1owMzExMC8GA1UEAxMoRERDMEUxQzFFRUVEMTU2RjExODg3 RUI5RENFRjFBMkQ3OEI4ODQzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTK7peZFjqNnV4hVi7nyxG4gLQ8YgouApiJk9TVVZ4Qm3tr7j50oG7PHr7j LWMA5FMHgzsF6nUFEIOdhb0AIUaqA9Ds6kzougbnYzHaZvw0rb8dTAxr/ycvepCv O+p8d3LyWJqnBJFy4yb+etzXpPQ/o2WpfUeMgctOYZfZ9strjwMc0y9gZ4fC43LR azSnAZ0tHZO9MfIlI4DsbZ8VXmfqOSye5yJce9R1/lHk0RL7ZL79P89WUqpHshvo XrODcjvtFpUCap7sYhmtWK6xCoX7WCPPXDIpLCFiUn6fPBzH6/tgKmO++r1KQz2m H3LvutsCaFRp7fRAso5BPiCMBtMCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBTdwOHB 7u0VbxGIfrnc7xoteLiEPDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NTM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA AjASAwcAIAEN9qFAAwcAIAEN9yzAMA0GCSqGSIb3DQEBCwUAA4IBAQAAKqQxJzmV WU+oz98ysWjGdyvjBctvfeBCqddixC6jJzzKfIAXN/LH5Rr24bhGFfCzsq8/zY13 2cJmLvQNQL38Z/xwzECKoDlHBBLOGZ/Zn3MtQK3nEEGfqcjJF4bsdlJCRmNGoOYw SX69o4Q8mrOnVLcU/p8RK1kzjNr8x3ozRJLmR3tpogNc7m+O6InK8P+ApztnRUVU VNhluwPOvndkoSAvupdMiUeV/F6y/xMX/hL3Y7A14H6xYhcyuAV2OTbvjZRwDUPv Utz5q+oKX4oUF5EaHQ1zIFCrL4a8WqOu/vprdzlZjgSDAasEV38FxIvZGrWjRRTe odcvKMqiqmY1 -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client