$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154736.roa File: AS154736.roa (raw, json) Hash identifier: 3kGVwiQ1wC0PSaeRxwlQJB2QsFAbKOV5LhDxX4BwVFU= Subject key identifier: 02:81:D3:17:21:61:3F:2F:1D:AA:ED:65:4D:FF:4D:4F:03:0A:E4:B9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2AE9B3C4AEF02BC1C7A1C4925C40C067736BC3CB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154736.roa Signing time: Mon 29 Jun 2026 09:07:39 +0000 ROA not before: Mon 29 Jun 2026 09:02:39 +0000 ROA not after: Mon 28 Jun 2027 09:07:39 +0000 asID: 154736 IP address blocks: 2001:df7:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e9:b3:c4:ae:f0:2b:c1:c7:a1:c4:92:5c:40:c0:67:73:6b:c3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 09:02:39 2026 GMT Not After : Jun 28 09:07:39 2027 GMT Subject: CN=0281D31721613F2F1DAAED654DFF4D4F030AE4B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:b7:c5:52:75:3e:20:bb:8a:9c:f4:da:03: 92:5b:7f:63:f5:f3:56:f1:15:7e:62:ad:b7:21:a0: 1f:3f:91:f3:73:33:b5:a4:0a:16:af:1c:60:5b:0f: 44:ea:31:db:f2:55:d4:f8:9b:26:8d:c8:44:14:0f: 3d:3f:8d:ba:c5:aa:68:9d:33:c8:91:a0:b6:73:46: 9c:bf:c8:6c:df:ee:12:9a:e0:95:8a:0d:40:5b:75: f7:43:47:07:a6:df:9e:b3:af:2c:d7:d3:74:99:50: 61:ad:86:be:1b:9b:88:a2:d1:01:9c:aa:4d:a1:16: 89:05:08:7d:d6:11:da:62:22:5c:3d:c7:d5:7a:7e: 17:c6:59:39:d5:02:02:92:fb:de:0b:e5:5a:b0:88: 62:d2:be:a0:86:24:51:39:b1:94:07:d5:4e:6a:9a: c6:7e:e6:44:28:d2:ec:d8:59:e1:41:84:01:07:dd: 47:92:8a:92:40:b7:14:82:42:c3:cf:85:5b:66:47: b9:22:3c:88:07:3c:fd:6e:d3:02:95:17:5f:cb:a3: f7:69:02:0c:65:b6:e2:d4:78:c7:1c:b5:82:a2:22: 69:00:8d:bf:b0:96:20:6e:90:2a:56:0c:46:a7:76: cc:2a:f7:8d:88:cf:78:26:ce:77:c2:13:8d:a5:6c: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:81:D3:17:21:61:3F:2F:1D:AA:ED:65:4D:FF:4D:4F:03:0A:E4:B9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 03:f2:8c:36:a1:0d:d0:16:ee:45:48:9b:56:cf:5e:46:03:19: 79:41:62:e6:a7:76:d4:bb:94:cc:51:26:10:15:6e:60:8a:dc: 79:94:15:c0:f2:f5:f4:6e:20:1d:21:7e:d8:63:44:8f:81:72: 1b:94:5d:1f:c8:32:b0:16:88:d6:98:52:00:4f:ce:0e:db:63: f5:61:1f:a7:ab:a6:83:be:b5:6c:8c:12:18:c1:eb:89:bf:ef: ac:47:da:7c:ab:d6:cd:88:f5:83:86:61:47:51:1b:67:bd:38: 04:e3:82:e6:7b:6a:de:75:08:31:50:24:93:c9:7c:67:aa:9f: 1d:32:70:d5:df:58:56:73:f8:3c:38:ed:d1:95:a9:21:d5:38: a1:6c:41:79:56:d5:c3:93:fc:97:cd:76:9b:e8:7f:33:6e:06: d4:b7:a1:cb:1c:4a:fa:c3:fe:f4:6c:c8:cb:ac:13:8a:c3:f4: e0:75:20:1e:8a:1c:fd:11:28:f5:da:ff:2a:e0:13:c3:be:e3: fd:f3:86:8b:bb:91:fc:99:2d:94:42:ea:af:19:18:91:70:26: a4:69:71:f8:39:a9:a4:c0:63:d4:14:dc:5d:52:13:33:05:e5: 68:c4:8e:b8:88:48:52:73:fc:04:3b:57:d3:94:ca:ce:35:1a: d9:e1:7f:b0 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKumzxK7wK8HHocSSXEDAZ3Nrw8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTA5MDIzOVoX DTI3MDYyODA5MDczOVowMzExMC8GA1UEAxMoMDI4MUQzMTcyMTYxM0YyRjFEQUFF RDY1NERGRjRENEYwMzBBRTRCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+at8VSdT4gu4qc9NoDklt/Y/XzVvEVfmKttyGgHz+R83MztaQKFq8cYFsP ROox2/JV1PibJo3IRBQPPT+NusWqaJ0zyJGgtnNGnL/IbN/uEprglYoNQFt190NH B6bfnrOvLNfTdJlQYa2GvhubiKLRAZyqTaEWiQUIfdYR2mIiXD3H1Xp+F8ZZOdUC ApL73gvlWrCIYtK+oIYkUTmxlAfVTmqaxn7mRCjS7NhZ4UGEAQfdR5KKkkC3FIJC w8+FW2ZHuSI8iAc8/W7TApUXX8uj92kCDGW24tR4xxy1gqIiaQCNv7CWIG6QKlYM Rqd2zCr3jYjPeCbOd8ITjaVsSxUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQCgdMX IWE/Lx2q7WVN/01PAwrkuTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NzM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9yjAMA0GCSqGSIb3DQEBCwUAA4IBAQAD8ow2oQ3QFu5FSJtWz15G Axl5QWLmp3bUu5TMUSYQFW5gitx5lBXA8vX0biAdIX7YY0SPgXIblF0fyDKwFojW mFIAT84O22P1YR+nq6aDvrVsjBIYweuJv++sR9p8q9bNiPWDhmFHURtnvTgE44Lm e2redQgxUCSTyXxnqp8dMnDV31hWc/g8OO3Rlakh1TihbEF5VtXDk/yXzXab6H8z bgbUt6HLHEr6w/70bMjLrBOKw/TgdSAeihz9ESj12v8q4BPDvuP984aLu5H8mS2U QuqvGRiRcCakaXH4OamkwGPUFNxdUhMzBeVoxI64iEhSc/wEO1fTlMrONRrZ4X+w -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:26 2026 by rpki-client