$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154728.roa File: AS154728.roa (raw, json) Hash identifier: NE+o1S978ftlyrOO5AoUl6QbDEKToiMEG9pYMJVUoFI= Subject key identifier: 4F:27:EF:DE:85:82:08:2A:13:82:B3:5D:E0:7D:85:A5:6A:C7:6C:ED Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6F2BC9AE645B8824CA7A19AD4BF825E86F423561 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154728.roa Signing time: Mon 22 Jun 2026 03:02:29 +0000 ROA not before: Mon 22 Jun 2026 02:57:29 +0000 ROA not after: Mon 21 Jun 2027 03:02:29 +0000 asID: 154728 IP address blocks: 2001:df7:ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2b:c9:ae:64:5b:88:24:ca:7a:19:ad:4b:f8:25:e8:6f:42:35:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 22 02:57:29 2026 GMT Not After : Jun 21 03:02:29 2027 GMT Subject: CN=4F27EFDE8582082A1382B35DE07D85A56AC76CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:c5:b6:a4:32:7b:60:db:aa:0d:5e:a2:30: 80:2d:7a:8f:a2:85:ec:b7:3b:eb:42:ec:6a:b9:5c: 11:5b:a2:38:9d:a1:c7:55:73:c2:88:c8:68:10:fc: 64:dc:a9:17:2d:1e:69:f2:0d:34:2e:f4:de:28:b0: d4:f0:ff:31:ca:fb:7b:b7:84:a6:dd:37:9e:5a:d5: 17:45:5b:17:21:c5:aa:78:f8:60:78:1d:bc:30:e1: 75:c7:2e:33:a1:f1:db:55:5c:54:ca:54:c8:19:32: ae:8d:73:af:4e:60:f8:53:2f:96:3d:ca:86:5b:b1: a7:83:9b:ad:e3:ff:67:3c:12:40:56:e1:f4:a2:b8: 27:1f:57:f9:6a:71:35:2a:af:be:80:3e:0f:85:8b: 69:98:fb:f5:a5:f1:a0:db:5b:a0:eb:16:30:e7:9b: a3:82:51:e2:66:77:36:46:4d:e4:27:64:f0:45:c9: b4:1b:34:e7:f4:61:b2:a4:a7:b0:ad:a5:85:bd:d1: 28:23:e1:e9:2c:dc:72:87:3f:4a:3a:4b:75:4f:0e: 4d:74:59:58:4f:0a:e3:1d:1e:ee:9e:06:9d:7f:52: 48:93:99:65:9c:88:db:39:cf:75:39:5f:2e:a9:a0: 0a:2d:a0:b8:11:fc:9e:56:72:f5:55:df:ec:ed:8b: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:EF:DE:85:82:08:2A:13:82:B3:5D:E0:7D:85:A5:6A:C7:6C:ED X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:74:13:c2:19:de:6f:54:33:e8:a2:c8:b3:69:cf:43:bb:1e: 6c:3a:5c:28:59:8f:77:5b:5c:d1:ac:70:b3:2a:a5:69:2d:1a: 2a:c6:62:26:d4:8f:d1:b5:37:0a:79:9f:6f:1b:1b:28:d9:6f: 6e:19:a1:d9:ce:91:4f:8a:26:47:62:ff:88:44:c6:74:61:9a: a2:e2:06:81:d7:e9:6b:0c:eb:f8:c3:45:85:99:43:73:d7:9a: 7d:4e:c1:f8:d2:25:28:7d:75:9a:91:09:a4:75:bf:8c:21:83: e3:a8:4c:6b:76:35:f1:fc:cd:37:23:16:01:84:14:6e:ce:8d: 9f:76:1a:a9:34:63:f6:19:71:e1:b0:6b:57:d1:ff:8c:bb:e6: 94:1d:21:d1:ae:45:4a:d7:6c:df:6e:7d:2a:a6:07:2b:6c:98: cb:45:22:fa:c4:e3:c7:65:7c:6f:ec:31:db:db:d2:21:c7:03: aa:1d:34:68:83:96:5d:61:e3:8b:bc:52:6b:0a:5a:98:e2:d9: 65:f5:69:67:4d:8a:d9:a7:20:1c:67:34:32:b7:42:ff:f9:d9: 54:ad:50:7a:1f:49:ac:97:ec:96:57:37:78:09:08:3e:4d:e1: 5a:74:b3:a3:5f:b9:4a:27:ca:fc:8c:8d:7b:a4:e6:0d:b6:e1: e3:29:0d:b3 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbyvJrmRbiCTKehmtS/gl6G9CNWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyMjAyNTcyOVoX DTI3MDYyMTAzMDIyOVowMzExMC8GA1UEAxMoNEYyN0VGREU4NTgyMDgyQTEzODJC MzVERTA3RDg1QTU2QUM3NkNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeZxbakMntg26oNXqIwgC16j6KF7Lc760LsarlcEVuiOJ2hx1VzwojIaBD8 ZNypFy0eafINNC703iiw1PD/Mcr7e7eEpt03nlrVF0VbFyHFqnj4YHgdvDDhdccu M6Hx21VcVMpUyBkyro1zr05g+FMvlj3Khluxp4ObreP/ZzwSQFbh9KK4Jx9X+Wpx NSqvvoA+D4WLaZj79aXxoNtboOsWMOebo4JR4mZ3NkZN5Cdk8EXJtBs05/RhsqSn sK2lhb3RKCPh6Szccoc/SjpLdU8OTXRZWE8K4x0e7p4GnX9SSJOZZZyI2znPdTlf LqmgCi2guBH8nlZy9VXf7O2L+TcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRPJ+/e hYIIKhOCs13gfYWlasds7TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9w7AMA0GCSqGSIb3DQEBCwUAA4IBAQAddBPCGd5vVDPoosizac9D ux5sOlwoWY93W1zRrHCzKqVpLRoqxmIm1I/RtTcKeZ9vGxso2W9uGaHZzpFPiiZH Yv+IRMZ0YZqi4gaB1+lrDOv4w0WFmUNz15p9TsH40iUofXWakQmkdb+MIYPjqExr djXx/M03IxYBhBRuzo2fdhqpNGP2GXHhsGtX0f+Mu+aUHSHRrkVK12zfbn0qpgcr bJjLRSL6xOPHZXxv7DHb29IhxwOqHTRog5ZdYeOLvFJrClqY4tll9WlnTYrZpyAc ZzQyt0L/+dlUrVB6H0msl+yWVzd4CQg+TeFadLOjX7lKJ8r8jI17pOYNtuHjKQ2z -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:28 2026 by rpki-client