$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154704.roa File: AS154704.roa (raw, json) Hash identifier: bzS9otLs/+bcslWL8lM+6PIFNa4nEknORODlppz8Cmo= Subject key identifier: 7B:21:43:91:9B:19:10:3D:90:A6:3D:81:F7:65:3F:20:3B:90:E6:D6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 19754068FD5400AD69D7A0C665D78D287539AA5E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154704.roa Signing time: Mon 29 Jun 2026 03:55:22 +0000 ROA not before: Mon 29 Jun 2026 03:50:22 +0000 ROA not after: Mon 28 Jun 2027 03:55:22 +0000 asID: 154704 IP address blocks: 2001:df7:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:75:40:68:fd:54:00:ad:69:d7:a0:c6:65:d7:8d:28:75:39:aa:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 03:50:22 2026 GMT Not After : Jun 28 03:55:22 2027 GMT Subject: CN=7B2143919B19103D90A63D81F7653F203B90E6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:7a:d7:b4:fe:65:3c:10:6b:5c:6e:00:d6: 23:29:8c:2c:d0:2a:10:c7:fe:3b:6f:b7:fc:0d:bf: b3:9f:0b:41:66:f3:74:8a:f7:b6:e7:2d:9a:75:cc: ac:36:fa:15:6e:fc:65:5a:57:5b:00:2e:ed:2d:f1: 3e:ce:85:fc:58:84:28:1f:11:60:77:33:01:39:39: 81:c0:b3:16:97:e9:4b:e2:74:3e:21:3f:5b:df:39: cc:31:92:e0:a8:8e:0a:65:d6:91:b0:a2:0c:dd:ef: 5e:3f:1b:3f:c3:de:97:d5:c6:1b:f9:c0:56:de:b1: 37:58:e9:84:20:a0:8f:3a:20:b1:67:0d:ce:d3:28: f4:d5:74:af:55:c5:f9:68:7c:7d:fe:60:cf:e8:3c: e7:1e:43:e6:eb:6b:96:dd:73:ee:66:b7:dd:86:ef: ac:9d:5a:e9:98:10:78:25:49:13:4c:26:6a:bd:e1: 73:0c:99:de:7b:58:91:db:96:52:63:ec:42:6e:cd: 82:8a:a5:f0:9d:32:50:ad:17:eb:4d:07:58:a8:87: a9:7c:5e:6e:7d:18:80:54:ca:a5:30:88:d3:da:fe: c2:7e:a9:aa:43:74:f2:5f:c5:68:00:a4:6d:4f:bb: ac:07:de:6c:9e:2a:37:4f:9f:b1:1d:63:da:58:48: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:21:43:91:9B:19:10:3D:90:A6:3D:81:F7:65:3F:20:3B:90:E6:D6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:16c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:c5:6a:62:fb:2e:b3:36:b3:2a:ef:88:01:6b:9e:d5:49:ed: d6:6f:6d:7e:eb:ba:45:bf:63:c5:5c:0d:87:8c:b9:90:4d:29: 67:f7:6a:75:dc:34:5c:8f:16:39:e9:4c:fd:69:1c:bb:ad:cd: 4e:0f:63:5c:69:c9:02:b1:53:43:e0:f4:b7:4e:75:6f:d3:04: 12:c8:c2:e5:70:46:cf:25:1e:5c:0d:87:55:87:e7:e6:46:d8: 20:fe:ed:1d:79:15:b6:92:9a:99:2e:94:ce:7d:12:f5:58:d2: 72:b0:56:6d:31:d1:c5:4e:56:cf:96:20:f8:7e:78:e7:38:31: 92:70:4a:55:79:8b:82:9b:e6:9d:2b:27:ba:b8:b7:87:89:48: 0d:22:89:1e:69:1a:32:f5:45:a3:9d:33:57:72:57:28:ff:b5: 1e:da:55:13:55:0e:e7:c2:d2:ff:53:d8:3f:2a:56:e9:00:41: e8:e0:4e:91:5e:76:54:7b:b5:45:cb:a0:f2:da:a8:bb:69:38: 5e:9d:54:f7:79:63:6c:f1:29:f2:cf:42:9b:e5:67:63:5f:1d: 83:dd:d5:f4:b2:09:a0:f1:de:40:5b:e8:40:51:b8:cf:25:9c: 82:21:2f:6d:d5:32:72:4c:70:40:b6:53:07:b3:f3:a1:01:ad: 28:d5:3a:a6 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGXVAaP1UAK1p16DGZdeNKHU5ql4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTAzNTAyMloX DTI3MDYyODAzNTUyMlowMzExMC8GA1UEAxMoN0IyMTQzOTE5QjE5MTAzRDkwQTYz RDgxRjc2NTNGMjAzQjkwRTZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5Jete0/mU8EGtcbgDWIymMLNAqEMf+O2+3/A2/s58LQWbzdIr3tuctmnXM rDb6FW78ZVpXWwAu7S3xPs6F/FiEKB8RYHczATk5gcCzFpfpS+J0PiE/W985zDGS 4KiOCmXWkbCiDN3vXj8bP8Pel9XGG/nAVt6xN1jphCCgjzogsWcNztMo9NV0r1XF +Wh8ff5gz+g85x5D5utrlt1z7ma33YbvrJ1a6ZgQeCVJE0wmar3hcwyZ3ntYkduW UmPsQm7Ngoql8J0yUK0X600HWKiHqXxebn0YgFTKpTCI09r+wn6pqkN08l/FaACk bU+7rAfebJ4qN0+fsR1j2lhIuusCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR7IUOR mxkQPZCmPYH3ZT8gO5Dm1jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9xbAMA0GCSqGSIb3DQEBCwUAA4IBAQBaxWpi+y6zNrMq74gBa57V Se3Wb21+67pFv2PFXA2HjLmQTSln92p13DRcjxY56Uz9aRy7rc1OD2NcackCsVND 4PS3TnVv0wQSyMLlcEbPJR5cDYdVh+fmRtgg/u0deRW2kpqZLpTOfRL1WNJysFZt MdHFTlbPliD4fnjnODGScEpVeYuCm+adKye6uLeHiUgNIokeaRoy9UWjnTNXclco /7Ue2lUTVQ7nwtL/U9g/KlbpAEHo4E6RXnZUe7VFy6Dy2qi7aThenVT3eWNs8Sny z0Kb5WdjXx2D3dX0sgmg8d5AW+hAUbjPJZyCIS9t1TJyTHBAtlMHs/OhAa0o1Tqm -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:13 2026 by rpki-client