$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154073.roa File: AS154073.roa (raw, json) Hash identifier: FEH00TQGkSm/qFfDRTASqugUpETPW7M+b+PW4uTePJk= Subject key identifier: 2D:D2:76:F6:00:48:E8:8C:D5:F4:1D:C5:3C:56:B9:9F:F6:95:0F:CC Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 71005D8BC16682719F97D147CAC3A1E1DD4E6784 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154073.roa Signing time: Thu 30 Jul 2026 09:10:20 +0000 ROA not before: Thu 30 Jul 2026 09:05:20 +0000 ROA not after: Thu 29 Jul 2027 09:10:20 +0000 asID: 154073 IP address blocks: 160.236.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:5d:8b:c1:66:82:71:9f:97:d1:47:ca:c3:a1:e1:dd:4e:67:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 09:05:20 2026 GMT Not After : Jul 29 09:10:20 2027 GMT Subject: CN=2DD276F60048E88CD5F41DC53C56B99FF6950FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:75:5b:ae:5c:fb:0a:42:b4:3b:43:0d:a6:a0: 69:92:73:74:6f:ce:9d:4c:27:1a:c7:98:f4:84:ac: 18:d5:a0:84:08:22:47:8a:7d:01:04:79:f4:7b:f9: d6:aa:30:79:51:26:c7:93:92:09:46:62:98:d1:29: 78:df:33:ff:e8:5d:02:b6:f0:8e:2a:8c:34:8d:03: fd:b2:05:07:43:1d:63:e7:f0:d0:a2:50:a6:b0:6f: 5c:75:e5:a1:10:d9:c6:be:f4:87:e5:99:c1:f7:b8: c5:b8:58:8c:0a:3f:16:29:5d:21:75:b0:af:e6:c3: 9e:5f:35:6d:a4:78:86:46:89:6a:32:6b:2b:d5:04: 40:60:8a:3a:0e:45:cd:fd:45:19:17:a4:78:40:5c: bb:e7:17:75:0f:45:df:53:66:90:03:d2:a3:d6:0f: 2b:e9:a6:8e:a8:1a:76:9e:08:81:d2:74:ec:2f:96: 37:9b:59:ec:6b:40:71:6f:b4:ad:64:0b:a0:d4:06: ec:36:e3:16:7f:44:2a:d5:5d:1c:47:f1:b2:dc:5f: b8:d3:ee:ae:0f:97:b3:26:a6:45:f4:7a:1f:0d:1a: 4e:fe:8b:1b:3a:e5:78:6d:55:ae:70:17:5d:79:3f: 05:db:23:ab:ac:7d:dc:19:72:0e:94:7d:d3:07:56: 5e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D2:76:F6:00:48:E8:8C:D5:F4:1D:C5:3C:56:B9:9F:F6:95:0F:CC X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.158.0/24 Signature Algorithm: sha256WithRSAEncryption ac:a7:28:e1:a2:c9:12:d2:3a:ca:0c:d0:b4:32:9e:ec:00:9a: 71:43:91:4b:c3:73:62:c0:04:35:6a:f4:6c:58:63:e2:5a:d9: bd:57:0e:9e:82:38:66:cd:a9:79:7f:55:84:c0:58:db:89:18: cb:03:48:62:c3:a0:dc:df:d3:d6:b4:51:f4:36:fb:6c:3e:61: 7d:1c:4f:30:47:b0:d6:a9:e7:42:e0:8e:05:5b:3c:ab:19:9d: e0:8c:3c:92:06:68:e1:90:e2:f5:14:04:2c:6b:88:06:37:3e: ad:d0:0b:90:d8:c4:43:0c:af:51:47:62:72:50:7e:e6:4d:d4: 3e:6f:2c:85:42:dc:1f:90:c1:38:03:fc:a6:15:69:81:6e:cd: 9b:b5:b9:2c:7a:a6:1b:ae:c3:35:fb:14:bb:f3:f3:48:17:98: 43:0c:74:15:64:7b:b6:50:d5:7e:8c:db:38:3f:92:59:04:09: 53:a4:2d:f1:3d:c2:79:b0:d4:17:b6:eb:5f:a1:3a:90:38:41: 62:a8:fd:b1:81:48:e6:2f:c7:c4:6c:d9:a1:42:dc:14:ee:c7: 35:97:93:97:27:b1:7e:93:25:23:de:72:6a:94:6b:3a:d0:18: cc:e4:ec:9f:dc:c0:24:e3:2b:e6:c8:63:5e:53:a8:96:8d:1d: 76:2f:ef:a5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcQBdi8FmgnGfl9FHysOh4d1OZ4QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDA5MDUyMFoX DTI3MDcyOTA5MTAyMFowMzExMC8GA1UEAxMoMkREMjc2RjYwMDQ4RTg4Q0Q1RjQx REM1M0M1NkI5OUZGNjk1MEZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOd1W65c+wpCtDtDDaagaZJzdG/OnUwnGseY9ISsGNWghAgiR4p9AQR59Hv5 1qoweVEmx5OSCUZimNEpeN8z/+hdArbwjiqMNI0D/bIFB0MdY+fw0KJQprBvXHXl oRDZxr70h+WZwfe4xbhYjAo/FildIXWwr+bDnl81baR4hkaJajJrK9UEQGCKOg5F zf1FGRekeEBcu+cXdQ9F31NmkAPSo9YPK+mmjqgadp4IgdJ07C+WN5tZ7GtAcW+0 rWQLoNQG7DbjFn9EKtVdHEfxstxfuNPurg+XsyamRfR6Hw0aTv6LGzrleG1VrnAX XXk/Bdsjq6x93BlyDpR90wdWXlECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQt0nb2 AEjojNX0HcU8Vrmf9pUPzDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MDczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyeMA0GCSqGSIb3DQEBCwUAA4IBAQCspyjhoskS0jrKDNC0Mp7sAJpx Q5FLw3NiwAQ1avRsWGPiWtm9Vw6egjhmzal5f1WEwFjbiRjLA0hiw6Dc39PWtFH0 NvtsPmF9HE8wR7DWqedC4I4FWzyrGZ3gjDySBmjhkOL1FAQsa4gGNz6t0AuQ2MRD DK9RR2JyUH7mTdQ+byyFQtwfkME4A/ymFWmBbs2btbkseqYbrsM1+xS78/NIF5hD DHQVZHu2UNV+jNs4P5JZBAlTpC3xPcJ5sNQXtutfoTqQOEFiqP2xgUjmL8fEbNmh QtwU7sc1l5OXJ7F+kyUj3nJqlGs60BjM5Oyf3MAk4yvmyGNeU6iWjR12L++l -----END CERTIFICATE-----Generated at Sun Aug 2 16:58:16 2026 by rpki-client