$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154067.roa File: AS154067.roa (raw, json) Hash identifier: QswdzOqi+/I2Cm2kuqXY49wGgnv0KmkDLePbFosoKxs= Subject key identifier: 1D:AC:9E:5F:99:0D:D5:6A:5E:0F:E1:12:3B:79:61:3F:84:93:8D:38 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3D09049DDA6225AD78E4B223698FBF3B3F5099E6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154067.roa Signing time: Sat 02 May 2026 09:23:17 +0000 ROA not before: Sat 02 May 2026 09:18:17 +0000 ROA not after: Sat 01 May 2027 09:23:17 +0000 asID: 154067 IP address blocks: 165.101.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:09:04:9d:da:62:25:ad:78:e4:b2:23:69:8f:bf:3b:3f:50:99:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:17 2026 GMT Not After : May 1 09:23:17 2027 GMT Subject: CN=1DAC9E5F990DD56A5E0FE1123B79613F84938D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:9e:f1:94:8d:57:c8:33:d1:69:fd:8a:6e: ec:c3:b0:1b:96:8e:a1:08:67:22:50:13:90:84:ea: 88:c7:3d:bd:48:48:47:5e:f8:87:9f:66:4a:06:78: 67:84:d1:38:6d:45:e0:a0:72:21:26:4b:4d:22:4b: ba:5a:a1:a6:10:9d:5d:ff:b8:52:5a:ca:23:1f:a2: 36:5c:f7:7a:93:a0:63:09:31:64:24:c8:5f:cb:75: da:75:b0:58:ee:da:cc:76:4e:1a:87:cc:be:46:9e: 1a:ce:14:e8:ff:99:bc:37:d2:5f:6b:05:bb:09:44: 94:1e:d4:19:d3:26:31:73:7f:48:e6:79:91:ef:94: 87:2c:ec:26:3f:6d:8c:b5:da:c5:20:d8:9c:31:8f: 38:70:10:ee:6a:34:27:d3:8f:29:91:9d:0c:40:8a: da:b4:43:b4:28:f1:c6:be:8f:36:39:52:b9:bd:a5: 7b:2b:67:19:7e:d7:58:a2:0e:b1:89:55:ab:26:e1: 28:9c:5e:5e:d3:77:51:92:06:42:42:24:ae:f0:e1: 7e:50:4b:8f:e7:4f:c0:28:fb:48:ba:ce:49:d6:a1: c1:cb:fa:c6:15:5b:30:84:d7:ca:ea:69:e9:44:44: 57:1f:95:bc:09:d2:15:a3:47:c2:a6:83:c6:e0:37: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AC:9E:5F:99:0D:D5:6A:5E:0F:E1:12:3B:79:61:3F:84:93:8D:38 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.121.0/24 Signature Algorithm: sha256WithRSAEncryption 80:e5:0c:fd:de:97:b8:ce:eb:25:48:3d:b6:9d:4d:96:52:fd: e2:ae:1c:c7:b6:36:53:90:c4:1d:3c:2b:d1:20:0f:fc:2e:80: 00:d1:14:df:61:5a:f3:5f:6c:35:65:4e:a8:06:55:69:37:1e: 7e:cd:de:e8:cd:96:e4:09:75:c1:9b:8e:a2:94:6c:6c:0e:18: e2:eb:9e:73:d0:84:4f:2b:1b:c1:5d:c4:ec:b8:31:43:c6:33: f3:7a:43:7b:f9:b4:c0:e9:e0:e2:0d:00:3c:b2:fe:9e:fd:af: 89:2c:16:6f:fe:c4:10:cb:68:9e:f7:5f:da:ba:10:28:bc:0b: a4:62:23:75:2c:52:cd:08:93:62:69:4e:74:76:3a:ba:8d:b4: 2f:50:c4:e0:12:13:29:77:4b:94:70:b0:34:7a:ee:c7:4f:f9: 27:c7:3e:1e:12:c5:93:1b:a9:c7:09:27:e4:b4:77:bb:e7:4c: cf:b9:c9:31:68:9c:36:8a:f4:75:ad:9f:d7:06:c3:f4:6c:6a: 77:77:02:e9:8f:34:a1:e2:9f:52:d7:08:68:9b:f8:e8:a1:8b: bd:0d:6c:3f:dd:f8:4e:72:19:d6:10:cd:91:51:f8:3b:48:97: 56:8f:ba:70:72:73:ea:bb:b4:dc:fd:95:44:b5:f5:5d:bf:04: 31:fe:0f:17 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPQkEndpiJa145LIjaY+/Oz9QmeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxN1oX DTI3MDUwMTA5MjMxN1owMzExMC8GA1UEAxMoMURBQzlFNUY5OTBERDU2QTVFMEZF MTEyM0I3OTYxM0Y4NDkzOEQzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6BnvGUjVfIM9Fp/Ypu7MOwG5aOoQhnIlATkITqiMc9vUhIR174h59mSgZ4 Z4TROG1F4KByISZLTSJLulqhphCdXf+4UlrKIx+iNlz3epOgYwkxZCTIX8t12nWw WO7azHZOGofMvkaeGs4U6P+ZvDfSX2sFuwlElB7UGdMmMXN/SOZ5ke+UhyzsJj9t jLXaxSDYnDGPOHAQ7mo0J9OPKZGdDECK2rRDtCjxxr6PNjlSub2leytnGX7XWKIO sYlVqybhKJxeXtN3UZIGQkIkrvDhflBLj+dPwCj7SLrOSdahwcv6xhVbMITXyupp 6UREVx+VvAnSFaNHwqaDxuA3PJMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQdrJ5f mQ3Val4P4RI7eWE/hJONODAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MDY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWV5MA0GCSqGSIb3DQEBCwUAA4IBAQCA5Qz93pe4zuslSD22nU2WUv3i rhzHtjZTkMQdPCvRIA/8LoAA0RTfYVrzX2w1ZU6oBlVpNx5+zd7ozZbkCXXBm46i lGxsDhji655z0IRPKxvBXcTsuDFDxjPzekN7+bTA6eDiDQA8sv6e/a+JLBZv/sQQ y2ie91/auhAovAukYiN1LFLNCJNiaU50djq6jbQvUMTgEhMpd0uUcLA0eu7HT/kn xz4eEsWTG6nHCSfktHe750zPuckxaJw2ivR1rZ/XBsP0bGp3dwLpjzSh4p9S1who m/jooYu9DWw/3fhOchnWEM2RUfg7SJdWj7pwcnPqu7Tc/ZVEtfVdvwQx/g8X -----END CERTIFICATE-----Generated at Sat May 2 21:03:45 2026 by rpki-client