$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154423.roa File: AS154423.roa (raw, json) Hash identifier: k6Q8p+izk9PHaHt9mVnKxypL7tuJA2Te241QRlua/GM= Subject key identifier: E6:F4:FF:F4:A6:B7:F5:20:73:C8:E6:EF:2E:9C:EE:6A:F1:D4:D6:EB Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 04B12D88BBCE77CB1B6E14568E31D075E1B05DFB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154423.roa Signing time: Sun 19 Apr 2026 10:09:02 +0000 ROA not before: Sun 19 Apr 2026 10:04:02 +0000 ROA not after: Sun 18 Apr 2027 10:09:02 +0000 asID: 154423 IP address blocks: 144.79.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:2d:88:bb:ce:77:cb:1b:6e:14:56:8e:31:d0:75:e1:b0:5d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 19 10:04:02 2026 GMT Not After : Apr 18 10:09:02 2027 GMT Subject: CN=E6F4FFF4A6B7F52073C8E6EF2E9CEE6AF1D4D6EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:fa:6f:07:3d:7e:30:a2:dd:12:e2:a1:cc: 48:c4:e3:f3:33:71:29:d8:69:49:42:d2:70:69:7c: 9b:d0:eb:98:c9:f4:17:b3:05:d0:07:c5:9f:3c:38: e7:77:19:e1:fd:a1:be:0f:0f:77:67:2d:59:89:79: 13:d2:7d:7b:fe:0b:74:bf:e7:85:5f:8e:52:d5:8f: 7c:de:e3:2d:2f:96:b8:a3:d6:21:b5:64:d2:85:7c: 48:8d:23:f6:d8:e6:23:77:85:88:35:02:f0:ad:75: 0c:a7:40:8c:12:9b:f6:4b:6f:a4:fd:4d:9a:e2:33: 8e:3c:55:32:4c:c0:75:e5:d6:0f:cc:7c:b8:2e:fb: 67:01:75:01:0c:ed:98:01:70:0f:5f:6e:ee:a9:9a: 7b:fd:f1:b2:92:e8:7d:d1:db:09:45:e3:b9:31:ad: 9a:c7:34:32:ff:0e:7a:ac:9c:ee:95:75:6c:fb:8e: ab:44:e1:eb:95:cf:c3:3e:24:bd:d0:8d:9b:71:be: d5:ef:c4:50:60:c9:0d:ea:88:b9:87:9c:d7:cf:8f: 9e:ec:b9:1b:eb:56:fd:f3:e7:6c:8d:96:ec:c7:ad: 85:0b:bf:e2:50:2f:93:ed:2d:75:a4:69:c9:55:6b: 14:70:c2:03:1e:2c:bc:78:2b:91:5a:00:84:52:5a: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:FF:F4:A6:B7:F5:20:73:C8:E6:EF:2E:9C:EE:6A:F1:D4:D6:EB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.96.0/24 Signature Algorithm: sha256WithRSAEncryption 40:50:75:19:fb:2e:59:e5:45:b4:54:4b:9d:36:43:2b:d9:a9: 6e:e4:5c:f6:06:74:79:69:53:3c:dd:95:28:b9:76:60:2c:f3: 13:a7:56:9b:7d:b7:24:31:65:59:1c:29:55:4f:cc:59:eb:8c: 21:f0:b0:e0:7b:67:b4:5c:af:30:1b:9c:22:64:2e:d2:dc:9b: e8:b3:fb:0c:c9:c1:d0:8b:10:99:89:ce:61:a8:7c:f5:ba:69: 15:06:9f:41:81:93:61:24:00:2f:30:63:8e:fb:e4:d5:3c:e6: 15:93:46:70:00:e8:bf:1f:cb:bb:be:be:66:33:4d:7d:82:1c: 9a:18:f7:21:e2:f0:a5:7e:85:c2:de:23:29:ff:ab:00:bb:69: 0b:77:87:6e:cd:91:8f:b6:37:62:7d:ad:08:e1:ce:9d:92:c0: 5a:c4:bc:ca:c1:d8:79:27:5c:6f:ce:1d:2e:12:d3:fb:f1:40: d6:a0:08:a0:28:35:6e:24:76:50:e1:14:87:a0:9f:d3:5f:cc: 0d:22:5b:32:a5:af:de:a9:bb:08:a7:40:9d:5d:3c:86:92:04: 1e:e5:ba:f3:0f:c8:c0:5e:d7:91:81:aa:22:af:d4:b4:21:c4: ed:f1:c9:c3:03:a7:0b:3a:45:a6:96:80:32:06:31:76:7f:af: 26:03:79:b1 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBLEtiLvOd8sbbhRWjjHQdeGwXfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxOTEwMDQwMloX DTI3MDQxODEwMDkwMlowMzExMC8GA1UEAxMoRTZGNEZGRjRBNkI3RjUyMDczQzhF NkVGMkU5Q0VFNkFGMUQ0RDZFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2f+m8HPX4wot0S4qHMSMTj8zNxKdhpSULScGl8m9DrmMn0F7MF0AfFnzw4 53cZ4f2hvg8Pd2ctWYl5E9J9e/4LdL/nhV+OUtWPfN7jLS+WuKPWIbVk0oV8SI0j 9tjmI3eFiDUC8K11DKdAjBKb9ktvpP1NmuIzjjxVMkzAdeXWD8x8uC77ZwF1AQzt mAFwD19u7qmae/3xspLofdHbCUXjuTGtmsc0Mv8Oeqyc7pV1bPuOq0Th65XPwz4k vdCNm3G+1e/EUGDJDeqIuYec18+Pnuy5G+tW/fPnbI2W7MethQu/4lAvk+0tdaRp yVVrFHDCAx4svHgrkVoAhFJaP/kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTm9P/0 prf1IHPI5u8unO5q8dTW6zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDQyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPYDANBgkqhkiG9w0BAQsFAAOCAQEAQFB1GfsuWeVFtFRLnTZD K9mpbuRc9gZ0eWlTPN2VKLl2YCzzE6dWm323JDFlWRwpVU/MWeuMIfCw4HtntFyv MBucImQu0tyb6LP7DMnB0IsQmYnOYah89bppFQafQYGTYSQALzBjjvvk1TzmFZNG cADovx/Lu76+ZjNNfYIcmhj3IeLwpX6Fwt4jKf+rALtpC3eHbs2Rj7Y3Yn2tCOHO nZLAWsS8ysHYeSdcb84dLhLT+/FA1qAIoCg1biR2UOEUh6Cf01/MDSJbMqWv3qm7 CKdAnV08hpIEHuW68w/IwF7XkYGqIq/UtCHE7fHJwwOnCzpFppaAMgYxdn+vJgN5 sQ== -----END CERTIFICATE-----Generated at Wed Apr 22 03:30:16 2026 by rpki-client