$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154940.roa File: AS154940.roa (raw, json) Hash identifier: QV6TrgePlr9As1qlgFMkR7J6ZkT18FD6boR6EeMwssQ= Subject key identifier: 34:4B:58:DA:A5:C9:DF:C6:3F:21:59:D8:3C:85:EB:1D:A1:EE:A2:A9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 54872AA620ED4FD9E4D8778383428E58ED322A9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154940.roa Signing time: Wed 23 Sep 2026 03:24:39 +0000 ROA not before: Wed 23 Sep 2026 03:19:39 +0000 ROA not after: Wed 22 Sep 2027 03:24:39 +0000 asID: 154940 IP address blocks: 163.52.225.0/24 maxlen: 24 2001:df7:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:87:2a:a6:20:ed:4f:d9:e4:d8:77:83:83:42:8e:58:ed:32:2a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 23 03:19:39 2026 GMT Not After : Sep 22 03:24:39 2027 GMT Subject: CN=344B58DAA5C9DFC63F2159D83C85EB1DA1EEA2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:fa:27:59:a9:5e:3c:08:25:93:f2:ab:f7: c6:8f:e2:9b:72:dd:ff:97:c1:88:9a:aa:25:83:83: 7b:d2:bc:0a:15:83:2f:f2:f4:ba:e5:2b:2a:63:64: 5a:67:a3:c3:b4:92:39:80:da:69:2d:d1:e3:d1:b5: b6:b3:a8:44:98:1b:ba:88:31:8d:66:b6:4e:96:3c: 44:10:73:25:c1:97:94:aa:ff:75:8a:35:4b:47:e2: 44:92:b1:11:b5:6a:e7:6c:c3:47:a4:bb:ca:fd:ce: 40:24:68:47:63:05:11:94:3b:c6:5d:b6:e4:79:c7: de:71:9e:0b:7d:56:df:6f:62:f4:86:18:66:06:2c: c7:6d:51:ab:87:1c:6f:06:d0:e4:f6:25:6a:9a:f5: 18:ba:ea:23:62:54:1f:01:4c:0d:90:17:92:8c:e5: 24:45:2e:ec:66:ac:11:3a:e4:e8:10:2f:ac:ff:1e: 9a:3d:3f:37:76:78:d0:b2:e4:20:dd:44:7f:a3:01: b0:1b:9f:6d:94:50:8c:23:57:bf:f6:21:a4:a9:0f: 14:e7:a4:7f:69:45:d0:67:21:a6:11:7c:20:f0:9a: 37:81:0f:2a:f5:9c:b5:49:2f:3c:37:14:52:42:fe: eb:7f:fc:d4:3f:47:da:57:ff:d5:42:ac:88:f1:1f: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:58:DA:A5:C9:DF:C6:3F:21:59:D8:3C:85:EB:1D:A1:EE:A2:A9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.225.0/24 IPv6: 2001:df7:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 28:b6:0a:be:15:4d:93:29:be:79:eb:6c:24:c6:ca:56:90:50: 61:2e:94:6e:44:e5:0e:f3:03:b1:38:66:31:2e:42:b3:36:ac: 1c:87:69:6a:b5:91:a8:f6:6c:f3:b3:12:a0:b9:c8:65:76:d4: 0e:50:ca:81:b8:27:a9:4b:f5:39:c3:cb:9c:c7:33:34:00:26: a4:ef:73:01:c1:40:e9:34:4e:c1:4f:a2:10:97:53:4b:e1:1a: 5a:70:21:64:67:7e:bd:c7:e0:01:9f:d3:41:26:04:d7:cc:1e: 46:a9:f7:c1:3e:b8:2c:bf:1e:cd:c4:42:91:3e:0b:3d:92:fd: 93:43:8b:ab:73:60:da:77:a5:f8:f7:a0:64:45:f5:18:3d:dd: 7a:3b:71:ad:3a:c3:cc:19:d2:84:66:4a:df:54:60:a6:f9:99: cb:1f:35:69:12:48:a3:cd:06:29:7e:6b:06:b6:99:89:c9:b4: b9:1f:92:b0:1e:b8:ba:0a:20:49:75:36:e4:5f:79:87:2c:db: d3:fd:16:8d:05:b0:e7:63:d5:67:74:dc:c4:2b:3e:82:b7:6a: 46:8a:9d:14:05:45:33:94:01:81:7a:5f:cb:ed:25:0d:1a:25: 90:43:54:f3:f7:90:43:19:4a:a2:22:b4:57:5b:14:db:7a:5d: b4:5e:d3:26 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUVIcqpiDtT9nk2HeDg0KOWO0yKpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMzAzMTkzOVoX DTI3MDkyMjAzMjQzOVowMzExMC8GA1UEAxMoMzQ0QjU4REFBNUM5REZDNjNGMjE1 OUQ4M0M4NUVCMURBMUVFQTJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIrY+idZqV48CCWT8qv3xo/im3Ld/5fBiJqqJYODe9K8ChWDL/L0uuUrKmNk Wmejw7SSOYDaaS3R49G1trOoRJgbuogxjWa2TpY8RBBzJcGXlKr/dYo1S0fiRJKx EbVq52zDR6S7yv3OQCRoR2MFEZQ7xl225HnH3nGeC31W329i9IYYZgYsx21Rq4cc bwbQ5PYlapr1GLrqI2JUHwFMDZAXkozlJEUu7GasETrk6BAvrP8emj0/N3Z40LLk IN1Ef6MBsBufbZRQjCNXv/YhpKkPFOekf2lF0GchphF8IPCaN4EPKvWctUkvPDcU UkL+63/81D9H2lf/1UKsiPEf0vsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQ0S1ja pcnfxj8hWdg8hesdoe6iqTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0OTQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozThMA8EAgACMAkDBwAgAQ33j0AwDQYJKoZIhvcNAQELBQADggEBACi2 Cr4VTZMpvnnrbCTGylaQUGEulG5E5Q7zA7E4ZjEuQrM2rByHaWq1kaj2bPOzEqC5 yGV21A5QyoG4J6lL9TnDy5zHMzQAJqTvcwHBQOk0TsFPohCXU0vhGlpwIWRnfr3H 4AGf00EmBNfMHkap98E+uCy/Hs3EQpE+Cz2S/ZNDi6tzYNp3pfj3oGRF9Rg93Xo7 ca06w8wZ0oRmSt9UYKb5mcsfNWkSSKPNBil+awa2mYnJtLkfkrAeuLoKIEl1NuRf eYcs29P9Fo0FsOdj1Wd03MQrPoK3akaKnRQFRTOUAYF6X8vtJQ0aJZBDVPP3kEMZ SqIitFdbFNt6XbRe0yY= -----END CERTIFICATE-----Generated at Wed Sep 23 19:12:37 2026 by rpki-client