$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS147078.roa File: AS147078.roa (raw, json) Hash identifier: gUgKQnE/YTkfdthzZ6++T6OUbeOCpTTZfNS1teNqC0o= Subject key identifier: 4B:EB:7D:3D:DC:32:17:A5:AA:56:7B:3E:46:00:35:BA:18:5A:6A:95 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 11AF5324868D51CB881C78A479F5846D15BFE0D3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS147078.roa Signing time: Mon 14 Sep 2026 04:28:47 +0000 ROA not before: Mon 14 Sep 2026 04:23:47 +0000 ROA not after: Mon 13 Sep 2027 04:28:47 +0000 asID: 147078 IP address blocks: 160.236.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:53:24:86:8d:51:cb:88:1c:78:a4:79:f5:84:6d:15:bf:e0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 14 04:23:47 2026 GMT Not After : Sep 13 04:28:47 2027 GMT Subject: CN=4BEB7D3DDC3217A5AA567B3E460035BA185A6A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:57:88:00:14:b5:34:04:e2:1f:2e:95:6e: d2:a5:22:e8:1c:a5:1b:b1:ba:30:6d:2f:2a:e9:0e: 2e:0c:d2:f1:96:b5:86:c3:96:6c:73:7f:1f:c6:47: 3e:99:e6:a2:98:ea:b9:6d:c1:61:63:29:33:10:8d: 19:41:08:a7:10:72:65:ed:cf:55:3c:90:55:f2:5e: 2c:16:7d:14:07:59:92:9d:7d:0a:3c:8c:2a:4e:43: 78:6c:bb:1e:ee:2f:1e:12:f2:b2:d8:b4:c3:b0:f7: e5:f2:96:4c:de:ec:bf:33:91:2c:03:92:38:0a:fa: de:fe:f1:3c:f4:ee:6b:8a:44:d0:88:82:58:a2:1f: 29:32:30:d5:dc:7c:f1:ed:d5:83:97:a6:ba:01:e9: 87:ca:64:54:8f:19:01:40:a7:bc:e2:3d:90:78:51: b5:68:58:45:59:e3:fa:e1:29:bc:48:44:0d:18:21: 6d:96:d0:cb:43:f3:22:45:7b:53:26:a3:f1:9c:c5: 19:4b:d0:95:b7:a1:c8:18:8a:23:7b:b5:d2:bc:7f: 1b:41:ef:fb:ff:93:be:f0:db:47:da:0f:d8:cc:af: 53:4b:c1:ae:32:47:07:cd:9e:70:32:9a:70:ae:ec: 14:fe:fe:75:58:c1:55:0e:de:85:0e:ce:a5:6b:78: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:7D:3D:DC:32:17:A5:AA:56:7B:3E:46:00:35:BA:18:5A:6A:95 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS147078.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.202.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:c4:bc:58:86:67:4f:2a:ec:fb:e6:f9:60:93:bb:f4:66:5f: 51:ab:21:64:27:6c:98:d2:de:43:d0:ec:f0:13:61:1e:62:e8: b6:89:2c:50:db:6b:53:a9:ba:01:82:40:83:3e:3f:db:47:23: e2:a5:70:14:83:d4:ce:12:68:57:14:11:d6:84:be:33:ea:fb: fd:f5:4d:d7:4a:09:8e:1c:fe:09:be:b4:fd:ee:f7:56:22:e0: be:0c:26:53:77:33:a9:4c:ae:a1:25:d5:52:97:cd:9c:2f:64: e1:b8:16:4b:77:9a:b0:88:07:5a:cd:e8:e0:ec:1b:97:4a:0e: 92:58:70:0a:f2:a8:b9:87:83:31:a0:9b:0d:2e:a3:20:e0:1c: a8:3a:5b:94:f9:13:d4:05:a9:55:49:4a:9f:9a:43:29:47:88: 17:2b:b0:ff:40:ae:52:36:c5:01:52:c1:09:a1:df:32:31:98: 65:fd:18:a0:50:e1:3c:11:78:a2:64:63:f9:36:40:9e:39:2e: 29:ce:d1:22:17:4e:45:2a:6c:8d:e1:ad:39:3d:c4:98:38:c7: 49:a1:42:c6:6b:47:b6:38:d0:c1:48:f3:5f:cc:86:39:61:10: 59:fd:f5:0e:00:f8:37:a7:18:a5:f9:7e:20:74:2d:4b:de:0e: 5b:6e:0b:21 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEa9TJIaNUcuIHHikefWEbRW/4NMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkxNDA0MjM0N1oX DTI3MDkxMzA0Mjg0N1owMzExMC8GA1UEAxMoNEJFQjdEM0REQzMyMTdBNUFBNTY3 QjNFNDYwMDM1QkExODVBNkE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMiWV4gAFLU0BOIfLpVu0qUi6BylG7G6MG0vKukOLgzS8Za1hsOWbHN/H8ZH PpnmopjquW3BYWMpMxCNGUEIpxByZe3PVTyQVfJeLBZ9FAdZkp19CjyMKk5DeGy7 Hu4vHhLysti0w7D35fKWTN7svzORLAOSOAr63v7xPPTua4pE0IiCWKIfKTIw1dx8 8e3Vg5emugHph8pkVI8ZAUCnvOI9kHhRtWhYRVnj+uEpvEhEDRghbZbQy0PzIkV7 Uyaj8ZzFGUvQlbehyBiKI3u10rx/G0Hv+/+TvvDbR9oP2MyvU0vBrjJHB82ecDKa cK7sFP7+dVjBVQ7ehQ7OpWt4Fs8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRL6309 3DIXpapWez5GADW6GFpqlTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQ3MDc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzKMA0GCSqGSIb3DQEBCwUAA4IBAQB6xLxYhmdPKuz75vlgk7v0Zl9R qyFkJ2yY0t5D0OzwE2EeYui2iSxQ22tTqboBgkCDPj/bRyPipXAUg9TOEmhXFBHW hL4z6vv99U3XSgmOHP4JvrT97vdWIuC+DCZTdzOpTK6hJdVSl82cL2ThuBZLd5qw iAdazejg7BuXSg6SWHAK8qi5h4MxoJsNLqMg4ByoOluU+RPUBalVSUqfmkMpR4gX K7D/QK5SNsUBUsEJod8yMZhl/RigUOE8EXiiZGP5NkCeOS4pztEiF05FKmyN4a05 PcSYOMdJoULGa0e2ONDBSPNfzIY5YRBZ/fUOAPg3pxil+X4gdC1L3g5bbgsh -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:49 2026 by rpki-client