$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154452.roa File: AS154452.roa (raw, json) Hash identifier: Co4ZjQUN0r7fS9GxKAHUr2ywQOEGroaXRPdfSDSoU6k= Subject key identifier: 58:CC:44:1A:D6:16:F8:3E:F2:DA:1C:29:95:81:36:7D:EC:FE:A7:0D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0F32309C2939FDFD8CBB25C97CD0C4B01BFE3CDF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154452.roa Signing time: Fri 13 Mar 2026 02:15:27 +0000 ROA not before: Fri 13 Mar 2026 02:10:27 +0000 ROA not after: Fri 12 Mar 2027 02:15:27 +0000 asID: 154452 IP address blocks: 144.79.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 23:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:32:30:9c:29:39:fd:fd:8c:bb:25:c9:7c:d0:c4:b0:1b:fe:3c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 13 02:10:27 2026 GMT Not After : Mar 12 02:15:27 2027 GMT Subject: CN=58CC441AD616F83EF2DA1C299581367DECFEA70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:95:d0:23:cf:b8:66:d0:bf:ba:3f:c7:2c: 1b:1d:83:51:7d:8b:ac:4c:8a:3b:60:0d:db:c0:e3: d5:cb:69:f5:33:bc:98:ce:24:dd:4c:97:04:e7:ac: bc:38:3a:83:ce:47:b3:63:96:82:42:3c:1e:06:76: cb:4a:49:a7:0e:10:19:6a:fc:60:01:93:d2:f1:ef: 30:3f:fe:70:fb:d8:8e:aa:f0:07:bc:29:ad:7b:29: ef:8e:97:13:ba:9a:ad:83:68:2f:ff:c9:8f:00:bd: 6d:62:a2:de:7b:a9:3d:27:2d:2c:e0:be:48:bb:24: 6e:1a:26:28:dc:a1:11:72:81:cf:b5:74:c4:fa:92: e6:89:37:40:38:11:81:88:81:08:0d:f3:fd:ab:7c: fa:04:4d:97:f1:8d:f0:73:ff:00:4a:2d:a5:8e:09: 7c:54:42:33:02:ab:aa:8e:75:99:3d:67:f9:97:91: 7a:3c:45:d2:63:ce:2a:d2:57:0c:c6:4c:21:76:1a: 4d:38:02:e0:6f:19:04:4c:26:5b:00:fe:fe:3f:09: e9:17:68:cc:12:09:7e:a0:18:97:ef:f2:a3:ca:73: bf:aa:04:84:d6:a3:40:3c:39:c9:87:cc:5e:06:b6: 18:a6:6d:05:66:38:d6:66:1f:79:0d:75:35:3f:2c: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CC:44:1A:D6:16:F8:3E:F2:DA:1C:29:95:81:36:7D:EC:FE:A7:0D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.122.0/24 Signature Algorithm: sha256WithRSAEncryption 11:6f:e2:64:f1:f6:a6:a0:d8:f1:d8:fb:21:d3:9a:a6:89:72: 19:08:31:fd:13:03:26:0d:05:98:9d:92:b5:75:a7:1a:8f:fe: ec:14:04:73:b3:d8:bb:ba:42:7a:3b:ff:e7:58:1c:63:c7:ae: ec:1d:bc:1c:5d:29:d1:0a:69:88:f9:ca:c2:bc:35:1b:2b:f0: 76:4b:73:b4:39:3d:74:0b:e3:1d:d0:54:d6:c3:36:59:2c:ce: e0:90:ab:32:6b:f3:43:83:b4:fd:d7:81:4d:e2:ed:12:ca:c5: 8b:11:b5:2e:e7:5f:5f:1a:e5:9d:d7:ec:bb:48:db:f2:fd:0a: f8:5d:56:ce:79:b3:cb:8b:6f:b3:e7:ee:4a:2b:ac:37:24:fc: e3:d5:96:5b:b0:dc:0a:e0:28:d9:4d:34:9a:a7:dd:b2:e4:e3: 3a:26:54:8f:02:a3:26:e8:e7:bc:6b:86:22:2a:75:11:00:38: 67:fe:68:a5:4f:ce:e8:1a:9b:85:85:88:71:4c:3e:c6:1c:2b: ee:8c:bf:4f:d0:3a:c4:44:ac:6b:c9:b5:cc:20:79:a6:30:b2: 89:3e:8c:86:40:11:8a:22:f1:af:e0:94:ec:2b:ec:83:a4:61: d6:af:90:47:c0:f7:f2:ed:07:24:1e:35:06:ac:f0:50:94:d5: 84:92:df:c0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDzIwnCk5/f2MuyXJfNDEsBv+PN8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxMzAyMTAyN1oX DTI3MDMxMjAyMTUyN1owMzExMC8GA1UEAxMoNThDQzQ0MUFENjE2RjgzRUYyREEx QzI5OTU4MTM2N0RFQ0ZFQTcwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI+ldAjz7hm0L+6P8csGx2DUX2LrEyKO2AN28Dj1ctp9TO8mM4k3UyXBOes vDg6g85Hs2OWgkI8HgZ2y0pJpw4QGWr8YAGT0vHvMD/+cPvYjqrwB7wprXsp746X E7qarYNoL//JjwC9bWKi3nupPSctLOC+SLskbhomKNyhEXKBz7V0xPqS5ok3QDgR gYiBCA3z/at8+gRNl/GN8HP/AEotpY4JfFRCMwKrqo51mT1n+ZeRejxF0mPOKtJX DMZMIXYaTTgC4G8ZBEwmWwD+/j8J6RdozBIJfqAYl+/yo8pzv6oEhNajQDw5yYfM Xga2GKZtBWY41mYfeQ11NT8sDeMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRYzEQa 1hb4PvLaHCmVgTZ97P6nDTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDQ1Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPejANBgkqhkiG9w0BAQsFAAOCAQEAEW/iZPH2pqDY8dj7IdOa polyGQgx/RMDJg0FmJ2StXWnGo/+7BQEc7PYu7pCejv/51gcY8eu7B28HF0p0Qpp iPnKwrw1GyvwdktztDk9dAvjHdBU1sM2WSzO4JCrMmvzQ4O0/deBTeLtEsrFixG1 LudfXxrlndfsu0jb8v0K+F1Wznmzy4tvs+fuSiusNyT849WWW7DcCuAo2U00mqfd suTjOiZUjwKjJujnvGuGIip1EQA4Z/5opU/O6BqbhYWIcUw+xhwr7oy/T9A6xESs a8m1zCB5pjCyiT6MhkARiiLxr+CU7Cvsg6Rh1q+QR8D38u0HJB41BqzwUJTVhJLf wA== -----END CERTIFICATE-----Generated at Thu Mar 19 10:50:44 2026 by rpki-client