$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154008.roa File: AS154008.roa (raw, json) Hash identifier: cbVQLr+gQsjbYbKPJNP0zXycZS5g8SLS5eNlG1xWlBw= Subject key identifier: 4D:C6:CB:1A:06:D1:E5:10:99:3A:BD:2C:6B:81:9A:82:1F:4F:AD:F8 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 583E5E9756F6F6699647C01AAF1A700DAB167EE3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154008.roa Signing time: Sat 02 May 2026 09:24:55 +0000 ROA not before: Sat 02 May 2026 09:19:55 +0000 ROA not after: Sat 01 May 2027 09:24:55 +0000 asID: 154008 IP address blocks: 165.101.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3e:5e:97:56:f6:f6:69:96:47:c0:1a:af:1a:70:0d:ab:16:7e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:55 2026 GMT Not After : May 1 09:24:55 2027 GMT Subject: CN=4DC6CB1A06D1E510993ABD2C6B819A821F4FADF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:45:01:7a:79:13:74:c7:00:3a:cb:49:5c: a4:23:64:9f:74:c6:26:e5:cb:18:27:d3:94:77:ea: 72:14:c4:f9:c3:52:18:93:94:d4:3f:0a:7b:34:61: ae:42:88:ee:8b:90:ef:41:c9:cb:22:40:29:d8:10: 45:af:6c:93:47:96:e0:14:6d:e2:13:17:e5:68:60: 6e:67:49:39:7c:0e:04:aa:7f:8b:f3:41:6c:0e:73: 50:be:0c:29:7e:58:30:f0:5c:b4:18:ec:a4:8d:06: c6:37:dd:59:00:f9:22:23:50:9d:6c:0d:0a:c1:e3: ce:fc:a5:9d:22:25:b9:53:51:89:55:4d:00:7d:f4: 6a:c9:be:ed:a3:7e:2d:df:bb:8f:81:f3:80:e6:fe: c8:a4:df:8a:9a:df:e6:99:61:19:cf:c4:36:ce:3d: 22:0a:20:d1:b8:99:f9:dc:f0:a7:f1:78:4b:ce:d6: e7:f8:14:25:63:b4:50:2a:a8:27:d1:de:7d:3c:da: 9e:08:51:a5:ab:77:05:86:69:06:fc:34:72:6a:56: e8:d1:53:53:07:06:1e:46:f0:eb:7d:16:fa:2e:3e: 67:84:0e:de:f2:b2:9d:32:2e:0b:c2:e9:eb:dd:74: 60:90:5e:1b:45:3e:62:c6:de:82:a1:ab:e1:0f:b1: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C6:CB:1A:06:D1:E5:10:99:3A:BD:2C:6B:81:9A:82:1F:4F:AD:F8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154008.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.84.0/24 Signature Algorithm: sha256WithRSAEncryption 24:52:1e:bd:e2:65:66:40:34:90:51:48:13:6c:d2:bd:b9:22: 17:ca:33:dd:72:9e:02:19:50:04:41:84:4c:3c:00:37:62:eb: ce:d4:02:f8:34:9f:5f:8f:28:b7:d3:5a:90:d9:9a:56:97:30: 04:fd:b9:54:5b:b6:94:30:78:d5:dd:c1:9a:5b:82:92:b0:74: fb:b5:7a:ad:8e:3b:7a:b4:d7:20:da:4a:2d:4e:06:5c:d3:9f: 56:98:ac:8c:67:36:f6:14:40:53:b4:bd:86:48:f5:94:63:6c: a8:79:84:b7:a6:8d:da:28:e7:c2:9a:04:26:cf:af:d9:94:29: 2b:70:61:80:74:d9:99:80:85:00:d2:48:fb:59:6e:8e:4a:21: 16:76:39:dc:20:4c:92:a0:6d:81:8e:b7:60:9a:ad:c7:a5:36: 33:4d:9c:62:4c:2d:4a:bb:47:b8:a7:93:c0:3c:d1:7d:d1:a6: f0:52:ae:e0:5d:c6:d4:9f:d7:85:6e:97:a1:c1:63:a4:ea:be: 34:ed:43:b2:aa:44:d1:2f:1e:01:5f:a5:ee:54:b8:93:d8:6c: 9d:4b:dd:91:f8:44:b8:dd:25:8b:44:a1:e1:ed:74:a1:cd:19: c8:3d:2a:2d:07:9d:d0:12:00:68:e2:6a:29:df:17:cd:59:79: 61:06:7a:58 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWD5el1b29mmWR8AarxpwDasWfuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTk1NVoX DTI3MDUwMTA5MjQ1NVowMzExMC8GA1UEAxMoNERDNkNCMUEwNkQxRTUxMDk5M0FC RDJDNkI4MTlBODIxRjRGQURGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0uRQF6eRN0xwA6y0lcpCNkn3TGJuXLGCfTlHfqchTE+cNSGJOU1D8KezRh rkKI7ouQ70HJyyJAKdgQRa9sk0eW4BRt4hMX5WhgbmdJOXwOBKp/i/NBbA5zUL4M KX5YMPBctBjspI0GxjfdWQD5IiNQnWwNCsHjzvylnSIluVNRiVVNAH30asm+7aN+ Ld+7j4HzgOb+yKTfiprf5plhGc/ENs49Igog0biZ+dzwp/F4S87W5/gUJWO0UCqo J9HefTzanghRpat3BYZpBvw0cmpW6NFTUwcGHkbw630W+i4+Z4QO3vKynTIuC8Lp 6910YJBeG0U+YsbegqGr4Q+xOrcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRNxssa BtHlEJk6vSxrgZqCH0+t+DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MDA4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWVUMA0GCSqGSIb3DQEBCwUAA4IBAQAkUh694mVmQDSQUUgTbNK9uSIX yjPdcp4CGVAEQYRMPAA3YuvO1AL4NJ9fjyi301qQ2ZpWlzAE/blUW7aUMHjV3cGa W4KSsHT7tXqtjjt6tNcg2kotTgZc059WmKyMZzb2FEBTtL2GSPWUY2yoeYS3po3a KOfCmgQmz6/ZlCkrcGGAdNmZgIUA0kj7WW6OSiEWdjncIEySoG2Bjrdgmq3HpTYz TZxiTC1Ku0e4p5PAPNF90abwUq7gXcbUn9eFbpehwWOk6r407UOyqkTRLx4BX6Xu VLiT2GydS92R+ES43SWLRKHh7XShzRnIPSotB53QEgBo4mop3xfNWXlhBnpY -----END CERTIFICATE-----Generated at Sat May 2 21:04:48 2026 by rpki-client