$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa File: AS38154.roa (raw, json) Hash identifier: vrk/7AfFIwMaIq5hv3qCcUvAcOGP5b8lH3VSTOE66Lc= Subject key identifier: 56:6A:EA:9C:96:8E:F6:10:6B:B8:90:24:FA:DB:60:A3:6F:1D:FA:D3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7DCDB117674FC094032AC8FE4C27A7F4B19D7805 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa Signing time: Sun 03 May 2026 05:39:44 +0000 ROA not before: Sun 03 May 2026 05:34:44 +0000 ROA not after: Sun 02 May 2027 05:39:44 +0000 asID: 38154 IP address blocks: 116.58.192.0/22 maxlen: 22 2401:78a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cd:b1:17:67:4f:c0:94:03:2a:c8:fe:4c:27:a7:f4:b1:9d:78:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:34:44 2026 GMT Not After : May 2 05:39:44 2027 GMT Subject: CN=566AEA9C968EF6106BB89024FADB60A36F1DFAD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:e9:7a:1b:b0:bb:94:16:d2:4f:2d:db:55: 31:11:79:6f:6c:2c:1f:26:20:08:68:51:eb:bf:7c: 3e:8b:04:c0:55:7c:10:85:9b:00:99:38:f4:16:d0: 4e:ce:49:83:a9:82:3e:4b:c9:79:1f:44:88:87:8d: 83:4b:c8:e4:19:32:bb:f2:5c:78:98:43:c4:fe:0b: 0b:77:74:b3:9c:79:a7:bc:4f:42:5a:82:9b:a0:72: 76:9e:78:c5:16:e4:6d:1b:dc:7c:3c:ca:30:26:bd: af:6b:d7:4e:73:99:91:b4:ef:62:f2:c2:d7:5b:27: e0:a2:d0:38:cd:79:1b:66:66:f9:9d:71:b7:96:5f: 54:98:73:43:18:b7:7a:80:4b:48:99:1c:f5:75:6b: d8:f1:17:d8:17:66:ef:3b:fc:b9:d4:e6:15:1c:8b: 9f:79:41:a0:a1:2e:52:54:0f:f4:54:fc:f6:fc:2f: f3:a6:53:12:b8:10:a5:26:97:82:3f:a8:19:e8:d4: 1f:88:8c:09:bd:aa:9a:bc:f4:18:35:b3:19:ce:74: 97:fb:b4:ba:c8:40:bd:44:be:b8:92:14:22:31:42: 35:c9:70:5c:62:18:b3:9c:4a:60:85:55:78:15:18: 1c:40:8c:ce:81:71:3b:f1:c9:81:16:8f:cd:fe:4b: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6A:EA:9C:96:8E:F6:10:6B:B8:90:24:FA:DB:60:A3:6F:1D:FA:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS38154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.58.192.0/22 IPv6: 2401:78a0::/32 Signature Algorithm: sha256WithRSAEncryption a0:b6:87:06:3f:a1:52:7b:0d:4c:15:05:db:de:6e:8d:fa:1f: 4f:c3:52:b4:46:ae:dd:a8:12:3d:99:f7:28:a2:29:60:5f:d8: fa:71:84:fd:cb:6e:90:89:d2:3e:5b:4c:af:bf:a8:ac:39:5c: 74:66:ab:46:79:1c:5c:c1:2b:1c:ad:da:01:96:79:28:bd:da: f2:fb:28:6e:36:84:15:cf:8c:5e:2f:f8:23:8c:09:dd:d4:e9: 6c:e2:8d:4a:67:af:9c:82:71:bc:50:f2:93:5c:e7:f7:7c:d5: 5c:42:41:65:68:f4:44:1b:fd:02:58:cd:d1:f0:fb:65:80:8d: 17:e8:31:b7:a5:b5:8b:c8:41:e4:b3:a6:99:d1:4b:ce:99:59: 11:85:dc:f8:b9:03:08:bb:b4:77:f2:a7:32:da:fe:7f:d7:8f: 96:50:69:2b:28:66:e7:85:38:a9:ab:01:c7:9b:b9:7c:34:b3: 24:dc:7a:5d:f7:4c:1d:64:4c:6b:5d:06:86:01:c4:2d:3c:19: b5:0c:4f:73:96:02:96:89:99:40:3b:1f:87:8a:c7:fe:dc:c9: 66:f0:7f:f0:65:f8:77:52:7d:98:42:f0:f5:ff:15:92:42:f6: fe:d8:b4:f3:7d:a6:6a:c0:70:31:14:c8:48:1e:a8:47:4e:32: ab:08:2f:e6 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUfc2xF2dPwJQDKsj+TCen9LGdeAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1MzQ0NFoX DTI3MDUwMjA1Mzk0NFowMzExMC8GA1UEAxMoNTY2QUVBOUM5NjhFRjYxMDZCQjg5 MDI0RkFEQjYwQTM2RjFERkFEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7y6XobsLuUFtJPLdtVMRF5b2wsHyYgCGhR6798PosEwFV8EIWbAJk49BbQ Ts5Jg6mCPkvJeR9EiIeNg0vI5Bkyu/JceJhDxP4LC3d0s5x5p7xPQlqCm6Bydp54 xRbkbRvcfDzKMCa9r2vXTnOZkbTvYvLC11sn4KLQOM15G2Zm+Z1xt5ZfVJhzQxi3 eoBLSJkc9XVr2PEX2Bdm7zv8udTmFRyLn3lBoKEuUlQP9FT89vwv86ZTErgQpSaX gj+oGejUH4iMCb2qmrz0GDWzGc50l/u0ushAvUS+uJIUIjFCNclwXGIYs5xKYIVV eBUYHECMzoFxO/HJgRaPzf5LyCcCAwEAAaOCAdowggHWMB0GA1UdDgQWBBRWauqc lo72EGu4kCT622Cjbx360zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzgxNTQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB MAYDBAJ0OsAwDQQCAAIwBwMFACQBeKAwDQYJKoZIhvcNAQELBQADggEBAKC2hwY/ oVJ7DUwVBdvebo36H0/DUrRGrt2oEj2Z9yiiKWBf2PpxhP3LbpCJ0j5bTK+/qKw5 XHRmq0Z5HFzBKxyt2gGWeSi92vL7KG42hBXPjF4v+COMCd3U6WzijUpnr5yCcbxQ 8pNc5/d81VxCQWVo9EQb/QJYzdHw+2WAjRfoMbeltYvIQeSzppnRS86ZWRGF3Pi5 Awi7tHfypzLa/n/Xj5ZQaSsoZueFOKmrAcebuXw0syTcel33TB1kTGtdBoYBxC08 GbUMT3OWApaJmUA7H4eKx/7cyWbwf/Bl+HdSfZhC8PX/FZJC9v7YtPN9pmrAcDEU yEgeqEdOMqsIL+Y= -----END CERTIFICATE-----Generated at Tue May 12 22:42:56 2026 by rpki-client