$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154775.roa File: AS154775.roa (raw, json) Hash identifier: NEJgC3lHYc/gOAETDvEs8y3liiOGqPCAkk6sVG11ipk= Subject key identifier: 1D:F9:E6:77:9D:60:E1:E4:C8:5A:56:2B:EF:4C:D6:E8:35:ED:B3:9A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2491A1DE29601B5760AA84A0B613E838362B013A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154775.roa Signing time: Tue 27 Oct 2026 06:49:54 +0000 ROA not before: Tue 27 Oct 2026 06:44:54 +0000 ROA not after: Tue 26 Oct 2027 06:49:54 +0000 asID: 154775 IP address blocks: 160.236.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:91:a1:de:29:60:1b:57:60:aa:84:a0:b6:13:e8:38:36:2b:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 27 06:44:54 2026 GMT Not After : Oct 26 06:49:54 2027 GMT Subject: CN=1DF9E6779D60E1E4C85A562BEF4CD6E835EDB39A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c1:bf:88:79:de:fb:d2:7a:79:ae:6c:07:4f: a7:88:e6:d2:a6:8e:da:53:e2:06:cd:a0:bf:0b:aa: 12:b0:2a:c0:ce:7c:bd:b9:26:64:5b:1a:29:f3:cf: 6a:c9:4e:19:5e:54:af:d6:fb:74:e8:1c:4c:f5:3c: 99:2a:cc:11:92:15:6f:27:94:5d:f7:7b:67:4d:89: 81:0f:b5:5d:ff:9d:fc:49:75:e5:2f:93:92:fe:d5: dc:f3:91:3a:0a:ba:d4:99:7b:11:e0:22:8b:a7:b6: 5a:2d:dd:bd:c1:62:9d:67:bf:e2:13:ec:c4:76:35: 22:bf:e8:04:ec:56:ff:ed:88:dd:53:17:51:76:0b: 2b:7c:20:74:4f:e6:eb:06:d5:17:0b:b5:9d:f8:3a: 3b:fc:e7:03:b5:d7:d5:f7:f1:19:51:39:7d:97:78: 77:79:bc:50:50:19:c5:d8:18:a4:ee:94:bb:10:0a: d7:cc:63:18:e6:a3:7f:0c:fd:88:cc:7f:3f:a1:66: 5b:62:24:8c:a0:e4:6f:74:3f:c3:0b:50:7e:1b:6a: bc:80:92:99:a8:0e:1e:dc:8d:b3:0b:c0:16:72:15: 12:83:8d:4a:d1:43:b5:09:14:34:bd:52:c2:74:a0: ff:50:9f:2d:9e:82:c6:46:d2:4d:6f:9c:ed:54:2c: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:E6:77:9D:60:E1:E4:C8:5A:56:2B:EF:4C:D6:E8:35:ED:B3:9A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.173.0/24 Signature Algorithm: sha256WithRSAEncryption 00:28:51:7b:6b:51:b8:9d:7d:5d:37:e9:12:a8:dd:09:39:19: 27:ca:26:bc:31:1f:11:69:32:fc:28:b0:cd:36:cb:fe:04:e7: a5:9d:b5:94:41:08:e4:38:f8:c7:cc:88:e5:b4:ca:0a:cd:c5: 0d:63:f7:b9:bc:d8:fc:5c:97:46:ea:01:21:78:23:ea:fd:26: 0c:31:d1:7a:80:d4:01:98:a3:f6:0e:e7:a3:5c:ad:08:0f:e2: 5f:ad:3e:4e:e5:a0:b2:06:27:bd:d4:fe:e8:4f:25:ee:5d:81: 70:98:1c:1b:b2:a1:79:2c:f7:8b:81:db:b4:8c:13:06:9a:8c: a1:d7:b4:c4:9d:2e:9d:e0:dd:21:42:42:e7:3a:13:0e:6a:c8: b6:83:df:78:3f:f5:f0:ed:8b:e3:0c:14:21:b7:12:b4:f3:2a: 71:3b:f0:6c:d9:a3:80:64:98:b2:09:2d:cd:7f:0a:13:a9:ca: b6:46:20:83:c6:1c:5f:4f:85:a7:70:ce:78:31:4b:10:cd:9c: 2e:98:52:b6:be:90:61:e3:37:2e:b7:2c:3b:6e:49:85:42:fc: b3:d6:2e:6f:89:c2:78:e6:27:5f:f0:8f:2b:79:28:53:c9:e1: 7d:20:0a:6b:dd:19:c1:c5:90:df:b8:b5:06:c4:95:dc:1b:53: 44:60:51:76 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJJGh3ilgG1dgqoSgthPoODYrATowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyNzA2NDQ1NFoX DTI3MTAyNjA2NDk1NFowMzExMC8GA1UEAxMoMURGOUU2Nzc5RDYwRTFFNEM4NUE1 NjJCRUY0Q0Q2RTgzNUVEQjM5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7Bv4h53vvSenmubAdPp4jm0qaO2lPiBs2gvwuqErAqwM58vbkmZFsaKfPP aslOGV5Ur9b7dOgcTPU8mSrMEZIVbyeUXfd7Z02JgQ+1Xf+d/El15S+Tkv7V3POR Ogq61Jl7EeAii6e2Wi3dvcFinWe/4hPsxHY1Ir/oBOxW/+2I3VMXUXYLK3wgdE/m 6wbVFwu1nfg6O/znA7XX1ffxGVE5fZd4d3m8UFAZxdgYpO6UuxAK18xjGOajfwz9 iMx/P6FmW2IkjKDkb3Q/wwtQfhtqvICSmagOHtyNswvAFnIVEoONStFDtQkUNL1S wnSg/1CfLZ6CxkbSTW+c7VQsNdUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQd+eZ3 nWDh5MhaVivvTNboNe2zmjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzc1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOytMA0GCSqGSIb3DQEBCwUAA4IBAQAAKFF7a1G4nX1dN+kSqN0JORkn yia8MR8RaTL8KLDNNsv+BOelnbWUQQjkOPjHzIjltMoKzcUNY/e5vNj8XJdG6gEh eCPq/SYMMdF6gNQBmKP2DuejXK0ID+JfrT5O5aCyBie91P7oTyXuXYFwmBwbsqF5 LPeLgdu0jBMGmoyh17TEnS6d4N0hQkLnOhMOasi2g994P/Xw7YvjDBQhtxK08ypx O/Bs2aOAZJiyCS3NfwoTqcq2RiCDxhxfT4WncM54MUsQzZwumFK2vpBh4zcutyw7 bkmFQvyz1i5vicJ45idf8I8reShTyeF9IApr3RnBxZDfuLUGxJXcG1NEYFF2 -----END CERTIFICATE-----Generated at Mon Nov 2 17:58:27 2026 by rpki-client