$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154733.roa File: AS154733.roa (raw, json) Hash identifier: 29yXNCAriFLH/YZ1vS21W4yzUrhlG3byqBjfVN792lc= Subject key identifier: 3B:C6:FE:D5:73:72:CA:9F:7F:B5:6C:95:F2:66:92:CF:BC:79:49:16 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DB05557AF5B023E32267E08A701DB31797A9DE8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154733.roa Signing time: Mon 29 Jun 2026 03:03:00 +0000 ROA not before: Mon 29 Jun 2026 02:58:00 +0000 ROA not after: Mon 28 Jun 2027 03:03:00 +0000 asID: 154733 IP address blocks: 2001:df7:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b0:55:57:af:5b:02:3e:32:26:7e:08:a7:01:db:31:79:7a:9d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 02:58:00 2026 GMT Not After : Jun 28 03:03:00 2027 GMT Subject: CN=3BC6FED57372CA9F7FB56C95F26692CFBC794916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:e4:50:59:9f:23:13:ce:ed:bd:93:48:ed: 91:34:6a:19:e2:84:0d:26:81:08:5c:b4:94:18:5d: 01:c6:1a:68:3b:3f:83:24:17:3a:f3:a7:08:b6:0e: 18:2b:0d:72:5d:4e:eb:f9:f1:72:93:3c:03:38:0f: 1c:de:73:b9:9c:62:4f:65:e6:0b:5d:64:00:cd:9d: 97:be:05:9c:5e:58:c4:69:0f:e5:07:bd:10:3a:fd: 15:8b:79:26:02:01:f2:7f:a5:22:95:12:fe:18:26: 8c:cc:21:f6:77:db:77:6b:96:07:ed:16:8b:95:f7: 14:80:87:df:3f:8f:e0:45:85:09:55:71:1a:5a:d1: c4:5d:a0:d1:be:6a:56:88:4e:f3:47:15:c5:94:4b: 51:33:7c:b7:79:4a:bd:ea:37:96:92:58:19:87:7f: 34:dd:68:b3:44:34:31:79:8a:10:ee:de:7e:86:03: 0b:bd:49:0c:fd:af:d2:c3:66:7d:d0:61:24:fe:1f: 1c:06:61:16:12:9d:df:10:fc:51:cf:0b:8c:ad:c0: 15:9c:59:9d:7a:ac:c2:56:04:dc:c0:4c:00:ca:7b: b0:23:c2:95:08:aa:39:86:e4:d9:ea:69:d1:2e:d5: 0f:e6:2a:d2:74:e0:c2:37:a9:67:d0:80:a5:56:dc: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:FE:D5:73:72:CA:9F:7F:B5:6C:95:F2:66:92:CF:BC:79:49:16 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:2840::/48 Signature Algorithm: sha256WithRSAEncryption 7a:57:a5:cf:f9:86:a8:93:36:e4:c0:3f:eb:72:6f:52:a0:59: 51:f5:c2:71:10:cd:a7:26:6f:8b:cf:71:83:e3:46:12:c1:45: 5f:e6:fd:2c:40:48:a4:a1:6b:7e:38:91:c1:39:43:86:79:53: 37:04:e8:46:8e:5a:3a:89:ca:b3:e5:72:b2:80:a7:96:59:bf: 6e:1c:89:f5:b2:ef:0e:1a:2b:23:9e:fe:46:1d:73:3b:ab:c0: 9b:71:e4:f6:38:81:00:de:5b:8c:78:ee:1c:60:77:a5:37:be: 3a:6b:1c:fc:76:2d:1a:4a:62:68:33:7b:77:63:61:71:9c:da: 5d:45:6c:56:c8:7f:b8:b5:24:20:ed:a7:d0:98:bf:44:c8:b5: 3e:03:de:bd:e3:4f:72:96:21:a8:fa:77:5e:31:56:e0:2e:c4: f7:41:86:82:1f:b1:ee:a6:ea:8f:e2:f8:c2:1e:92:b4:19:8a: f3:70:1a:52:14:9a:df:e5:c7:4a:b2:05:2d:6b:5c:00:8b:39: 68:d1:bb:f7:26:7b:83:a9:3e:8d:3e:c9:89:af:43:17:a0:af: 37:5a:32:85:c3:22:bf:ac:65:21:09:30:15:ef:cd:14:2c:71: de:a9:f1:76:56:ed:80:89:52:90:41:49:0a:59:80:bb:a1:b7: ce:59:43:d3 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDbBVV69bAj4yJn4IpwHbMXl6negwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTAyNTgwMFoX DTI3MDYyODAzMDMwMFowMzExMC8GA1UEAxMoM0JDNkZFRDU3MzcyQ0E5RjdGQjU2 Qzk1RjI2NjkyQ0ZCQzc5NDkxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvD5FBZnyMTzu29k0jtkTRqGeKEDSaBCFy0lBhdAcYaaDs/gyQXOvOnCLYO GCsNcl1O6/nxcpM8AzgPHN5zuZxiT2XmC11kAM2dl74FnF5YxGkP5Qe9EDr9FYt5 JgIB8n+lIpUS/hgmjMwh9nfbd2uWB+0Wi5X3FICH3z+P4EWFCVVxGlrRxF2g0b5q VohO80cVxZRLUTN8t3lKveo3lpJYGYd/NN1os0Q0MXmKEO7efoYDC71JDP2v0sNm fdBhJP4fHAZhFhKd3xD8Uc8LjK3AFZxZnXqswlYE3MBMAMp7sCPClQiqOYbk2epp 0S7VD+Yq0nTgwjepZ9CApVbcuFcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ7xv7V c3LKn3+1bJXyZpLPvHlJFjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9yhAMA0GCSqGSIb3DQEBCwUAA4IBAQB6V6XP+YaokzbkwD/rcm9S oFlR9cJxEM2nJm+Lz3GD40YSwUVf5v0sQEikoWt+OJHBOUOGeVM3BOhGjlo6icqz 5XKygKeWWb9uHIn1su8OGisjnv5GHXM7q8CbceT2OIEA3luMeO4cYHelN746axz8 di0aSmJoM3t3Y2FxnNpdRWxWyH+4tSQg7afQmL9EyLU+A969409yliGo+ndeMVbg LsT3QYaCH7HupuqP4vjCHpK0GYrzcBpSFJrf5cdKsgUta1wAizlo0bv3JnuDqT6N PsmJr0MXoK83WjKFwyK/rGUhCTAV780ULHHeqfF2Vu2AiVKQQUkKWYC7obfOWUPT -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:28 2026 by rpki-client