$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154716.roa File: AS154716.roa (raw, json) Hash identifier: aTKKXZzG8JQ8odTX+ASgg+CHU9SYU9jTVt99KytZaOE= Subject key identifier: BC:E2:89:A1:AE:D2:A8:83:0B:64:0E:65:8F:19:6D:FB:7B:A3:5C:59 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 34D4F21725DDFC79B1421924D4F0ACA7B071DCB2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154716.roa Signing time: Fri 19 Jun 2026 02:46:45 +0000 ROA not before: Fri 19 Jun 2026 02:41:45 +0000 ROA not after: Fri 18 Jun 2027 02:46:45 +0000 asID: 154716 IP address blocks: 2001:df7:1ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d4:f2:17:25:dd:fc:79:b1:42:19:24:d4:f0:ac:a7:b0:71:dc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 19 02:41:45 2026 GMT Not After : Jun 18 02:46:45 2027 GMT Subject: CN=BCE289A1AED2A8830B640E658F196DFB7BA35C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:78:71:48:b1:b6:e4:d8:4b:44:be:4a:29: 1a:4b:17:c0:df:be:72:f3:87:02:b0:2c:2a:25:b5: 34:2b:90:19:c9:b6:09:00:9d:2a:af:de:34:cc:79: 47:6d:11:ad:19:2c:22:0e:34:d7:aa:ed:b3:b9:4a: 76:de:a7:64:04:67:4a:13:3a:fc:c9:cd:62:ab:6d: 58:e7:f9:04:89:6c:13:31:f2:1a:be:24:ec:53:ec: 97:68:39:c8:6f:c1:f8:20:b4:72:94:37:97:3f:a4: 30:41:fc:1d:0b:c7:dd:7a:8a:60:99:72:30:ea:68: 98:c6:af:97:28:65:4a:5e:d9:38:e2:ef:7f:46:9c: fc:3d:e7:5a:39:3a:7e:5c:5d:0f:7b:5e:4c:b5:a9: c9:1e:fb:cf:9c:c5:a1:be:ad:fc:9f:0c:57:79:b4: 93:3e:d4:32:d7:4d:8a:86:2e:4c:fb:d1:0d:47:05: 12:6e:17:b1:4c:0c:5b:54:8c:67:59:c1:ff:b7:d0: d3:bf:cd:19:96:cb:34:47:cb:07:01:d4:2d:1f:ab: 86:37:31:1b:42:d9:d5:69:a2:ed:cb:de:50:30:6a: 30:f2:90:c3:6a:7a:5d:77:d4:40:2d:af:64:a9:24: e9:ee:0c:18:33:e6:1a:15:b3:d9:12:37:a8:d7:de: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:89:A1:AE:D2:A8:83:0B:64:0E:65:8F:19:6D:FB:7B:A3:5C:59 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:1ec0::/48 Signature Algorithm: sha256WithRSAEncryption 8e:2e:17:c9:5e:82:04:b9:dc:26:33:1d:6f:59:e8:a6:83:d3: 7f:13:b9:6d:9f:05:a3:ea:88:15:6d:26:4f:10:ae:a8:85:85: 84:5d:75:2d:20:9e:af:2f:f0:0d:b2:27:ac:d0:50:bd:e2:d6: 3a:dd:b1:9a:90:98:53:9f:a5:34:ab:2f:73:63:26:46:24:0b: 79:17:80:03:e8:17:e2:6a:a6:2c:b0:31:91:4c:9f:fd:a1:c5: db:f1:fa:cb:f7:2a:62:1f:90:cf:a3:71:93:41:40:5f:1f:ae: 68:f9:5e:c2:9e:e1:15:d0:61:47:8d:9e:7b:50:14:38:bd:40: df:6b:e8:8f:e6:bc:a2:a0:58:1a:2b:72:16:d7:7c:88:7d:fc: 71:48:f9:e6:8e:38:2d:7e:fb:04:74:9f:74:49:c6:1c:2f:96: 90:7d:73:31:a6:5c:ab:40:1e:e4:b7:9a:c1:f6:7d:da:f1:4c: bd:79:2f:c3:09:29:e8:ca:f2:fe:2d:cd:42:4c:d3:1d:35:63: f7:a9:7d:d6:7d:5b:35:ed:f5:2f:ea:80:14:65:3c:96:98:e8: 06:6c:b4:99:b4:23:42:de:d9:a1:35:6a:e6:17:93:41:ed:37: 83:e9:32:1c:b3:8d:c5:7d:99:f5:35:cd:89:cc:dc:14:7e:fe: 37:9c:f4:49 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNNTyFyXd/HmxQhkk1PCsp7Bx3LIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYxOTAyNDE0NVoX DTI3MDYxODAyNDY0NVowMzExMC8GA1UEAxMoQkNFMjg5QTFBRUQyQTg4MzBCNjQw RTY1OEYxOTZERkI3QkEzNUM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdkeHFIsbbk2EtEvkopGksXwN++cvOHArAsKiW1NCuQGcm2CQCdKq/eNMx5 R20RrRksIg4016rts7lKdt6nZARnShM6/MnNYqttWOf5BIlsEzHyGr4k7FPsl2g5 yG/B+CC0cpQ3lz+kMEH8HQvH3XqKYJlyMOpomMavlyhlSl7ZOOLvf0ac/D3nWjk6 flxdD3teTLWpyR77z5zFob6t/J8MV3m0kz7UMtdNioYuTPvRDUcFEm4XsUwMW1SM Z1nB/7fQ07/NGZbLNEfLBwHULR+rhjcxG0LZ1Wmi7cveUDBqMPKQw2p6XXfUQC2v ZKkk6e4MGDPmGhWz2RI3qNfekq8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBS84omh rtKogwtkDmWPGW37e6NcWTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9x7AMA0GCSqGSIb3DQEBCwUAA4IBAQCOLhfJXoIEudwmMx1vWeim g9N/E7ltnwWj6ogVbSZPEK6ohYWEXXUtIJ6vL/ANsies0FC94tY63bGakJhTn6U0 qy9zYyZGJAt5F4AD6BfiaqYssDGRTJ/9ocXb8frL9ypiH5DPo3GTQUBfH65o+V7C nuEV0GFHjZ57UBQ4vUDfa+iP5ryioFgaK3IW13yIffxxSPnmjjgtfvsEdJ90ScYc L5aQfXMxplyrQB7kt5rB9n3a8Uy9eS/DCSnoyvL+Lc1CTNMdNWP3qX3WfVs17fUv 6oAUZTyWmOgGbLSZtCNC3tmhNWrmF5NB7TeD6TIcs43FfZn1Nc2JzNwUfv43nPRJ -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client