$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154023.roa File: AS154023.roa (raw, json) Hash identifier: J1+EVRu5daeqN5n/9y4mguRG6iXP6zOYtF38xDWnAxw= Subject key identifier: 62:D9:12:B1:88:01:9D:CE:5A:F7:03:D7:75:EA:46:86:3D:F6:66:64 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7C6CBA867B43A528FFB90B492640F7A92901922A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154023.roa Signing time: Sat 02 May 2026 09:24:53 +0000 ROA not before: Sat 02 May 2026 09:19:53 +0000 ROA not after: Sat 01 May 2027 09:24:53 +0000 asID: 154023 IP address blocks: 165.101.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6c:ba:86:7b:43:a5:28:ff:b9:0b:49:26:40:f7:a9:29:01:92:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:53 2026 GMT Not After : May 1 09:24:53 2027 GMT Subject: CN=62D912B188019DCE5AF703D775EA46863DF66664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:95:12:9b:f3:fa:3f:7e:9c:dd:d3:2d:c9:52: 64:47:92:7b:51:37:4d:95:4c:06:07:59:b2:98:f2: aa:b4:f1:b2:8a:4e:a9:3c:ca:f4:8d:5f:0c:ff:29: a5:55:d8:09:3b:95:77:01:25:6e:37:ec:66:00:e7: 9c:6b:b6:5c:97:c6:7e:65:b4:28:11:fb:76:1b:f0: e1:71:7a:b3:99:c9:56:cb:48:3a:65:7c:b6:e9:8f: 71:51:88:4a:94:3e:63:0b:78:14:a1:92:74:ca:f7: 93:f3:eb:36:0b:1c:6b:d9:3c:a3:47:c4:2d:be:8e: ae:a9:3a:10:d1:2f:6e:af:b7:c3:40:52:d2:e2:3e: bb:f4:8f:41:00:a8:b6:30:cb:e4:6b:e2:52:9c:60: 60:7e:43:5e:4d:3e:32:0e:c8:55:01:aa:61:fd:a0: 3a:fc:87:31:37:cb:a8:ca:52:60:01:3b:6a:39:85: 91:d4:5b:25:e1:24:78:43:b7:d0:11:d0:d3:44:de: 1f:fe:2b:69:46:8c:2b:42:0e:b8:0a:17:d1:8a:cc: ed:9c:aa:bb:68:0a:c2:bc:29:8a:f9:4c:d8:a5:a9: 5e:6b:15:ef:57:da:46:1c:7c:86:71:b0:99:9e:a8: 81:c7:a2:9e:be:03:ac:2e:43:d4:ca:b5:ae:14:74: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:12:B1:88:01:9D:CE:5A:F7:03:D7:75:EA:46:86:3D:F6:66:64 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.82.0/24 Signature Algorithm: sha256WithRSAEncryption 33:51:45:7e:b6:53:67:f0:94:33:88:22:2c:19:2e:b0:53:c9: 68:35:22:c1:7a:5a:66:30:4f:63:36:8c:ae:04:30:92:1d:74: f7:e4:f8:d4:86:c1:12:ef:a8:cd:e1:3a:0b:0d:24:66:84:f7: d0:71:ca:d3:16:b8:d4:4b:01:ac:fd:ac:16:ff:0d:f7:1c:98: fe:87:5c:77:65:bf:7c:8f:33:9e:63:fe:d3:f6:c9:c9:c1:56: 59:b2:98:e7:27:e3:9c:7c:80:8f:f1:34:e1:db:58:2f:c4:70: c7:d6:3b:02:a6:2a:dc:00:e9:3a:78:23:d6:99:52:75:30:27: ca:0c:9b:49:8f:9c:6e:2e:94:ca:97:60:5f:5d:bc:7c:e1:c6: 4e:38:cf:f5:7e:1a:9d:50:5e:70:fa:6f:be:fd:67:60:d7:17: c2:93:0d:69:21:ad:55:b5:cc:85:ca:38:ee:82:14:af:31:4c: 37:df:cb:c4:63:54:8b:b0:fc:4c:72:0e:1b:cd:07:e1:7a:28: 81:f3:19:fd:ac:e4:02:3f:9f:61:2c:01:12:39:e7:c0:83:ae: 9e:a0:5c:8c:01:34:a2:f9:84:44:a0:3b:44:0f:4d:a7:16:9a: d7:5b:90:37:31:07:14:16:fc:a5:92:a2:12:aa:7e:c8:82:12: 92:a5:54:d9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfGy6hntDpSj/uQtJJkD3qSkBkiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTk1M1oX DTI3MDUwMTA5MjQ1M1owMzExMC8GA1UEAxMoNjJEOTEyQjE4ODAxOURDRTVBRjcw M0Q3NzVFQTQ2ODYzREY2NjY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJyVEpvz+j9+nN3TLclSZEeSe1E3TZVMBgdZspjyqrTxsopOqTzK9I1fDP8p pVXYCTuVdwElbjfsZgDnnGu2XJfGfmW0KBH7dhvw4XF6s5nJVstIOmV8tumPcVGI SpQ+Ywt4FKGSdMr3k/PrNgsca9k8o0fELb6Orqk6ENEvbq+3w0BS0uI+u/SPQQCo tjDL5GviUpxgYH5DXk0+Mg7IVQGqYf2gOvyHMTfLqMpSYAE7ajmFkdRbJeEkeEO3 0BHQ00TeH/4raUaMK0IOuAoX0YrM7Zyqu2gKwrwpivlM2KWpXmsV71faRhx8hnGw mZ6ogceinr4DrC5D1Mq1rhR0y98CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRi2RKx iAGdzlr3A9d16kaGPfZmZDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MDIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWVSMA0GCSqGSIb3DQEBCwUAA4IBAQAzUUV+tlNn8JQziCIsGS6wU8lo NSLBelpmME9jNoyuBDCSHXT35PjUhsES76jN4ToLDSRmhPfQccrTFrjUSwGs/awW /w33HJj+h1x3Zb98jzOeY/7T9snJwVZZspjnJ+OcfICP8TTh21gvxHDH1jsCpirc AOk6eCPWmVJ1MCfKDJtJj5xuLpTKl2BfXbx84cZOOM/1fhqdUF5w+m++/Wdg1xfC kw1pIa1VtcyFyjjughSvMUw338vEY1SLsPxMcg4bzQfheiiB8xn9rOQCP59hLAES OefAg66eoFyMATSi+YREoDtED02nFprXW5A3MQcUFvylkqISqn7IghKSpVTZ -----END CERTIFICATE-----Generated at Sat May 2 21:03:50 2026 by rpki-client