$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154101.roa File: AS154101.roa (raw, json) Hash identifier: 1DCLxxuDdfMUmxp8GHWAxDy+mHP8+1w63vyYBP00KBE= Subject key identifier: 92:81:E1:59:89:9F:99:73:7B:4D:52:08:01:9E:90:B6:A4:FF:16:5B Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 42B1952734E1F58E4CD31F6D1974685D61D16018 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154101.roa Signing time: Sat 02 May 2026 09:25:09 +0000 ROA not before: Sat 02 May 2026 09:20:09 +0000 ROA not after: Sat 01 May 2027 09:25:09 +0000 asID: 154101 IP address blocks: 192.135.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b1:95:27:34:e1:f5:8e:4c:d3:1f:6d:19:74:68:5d:61:d1:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:09 2026 GMT Not After : May 1 09:25:09 2027 GMT Subject: CN=9281E159899F99737B4D5208019E90B6A4FF165B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:82:12:bb:df:5f:ff:97:e6:e9:df:62:56:77: 75:2b:db:10:26:3f:7b:27:eb:3e:3f:a6:f2:fb:e6: 40:3e:1b:4b:af:ca:bd:b2:11:d6:57:0f:8a:2c:f0: 7a:d0:71:b3:cc:db:b5:2f:f2:31:c0:1f:07:00:80: 22:de:e4:b1:1c:73:ab:8d:f6:aa:a5:5b:67:b7:50: 38:d0:c2:61:27:06:ea:d2:12:20:ba:fd:52:41:a7: ad:16:6e:67:a8:20:b5:4c:d9:b1:52:aa:01:9e:f5: 2d:1b:d5:85:af:ce:29:de:ab:3b:b8:19:6b:4b:bd: 19:61:11:07:dc:36:ae:8c:17:b8:25:cb:2c:a0:ca: a3:37:d4:ab:02:2c:b8:d1:f2:99:3e:80:ce:93:3a: fb:af:0e:9b:1e:dd:5c:b6:7b:99:ba:cb:2c:08:22: 4f:61:91:f9:55:81:21:06:ce:89:0e:d3:06:c5:d4: a2:04:3f:21:fe:eb:eb:cf:4d:27:84:43:61:16:0d: 75:a8:d2:d5:89:9d:29:9c:eb:f3:49:17:61:a1:30: e3:36:62:ce:65:bf:71:ae:98:a5:8c:5b:c3:ee:2b: ab:a3:28:f0:72:b7:e8:1b:ec:54:02:c1:11:b6:08: 9a:3b:ff:43:f1:f4:f4:ba:ca:4b:e1:b0:4f:64:39: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:81:E1:59:89:9F:99:73:7B:4D:52:08:01:9E:90:B6:A4:FF:16:5B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.135.98.0/24 Signature Algorithm: sha256WithRSAEncryption 45:16:7c:ce:fb:27:88:65:5b:1f:06:41:d4:ef:5c:9b:39:f0: ac:8b:78:1c:46:e2:a2:c2:6e:aa:fc:44:bb:9b:39:c3:76:e1: 98:1b:f6:22:a8:65:52:b2:0f:0f:24:b3:3a:ef:b2:22:fb:b9: fe:78:b0:f7:19:d8:61:fc:17:7e:84:5a:93:d2:62:00:95:54: c4:94:13:86:c5:7f:2f:82:0d:16:06:40:12:df:11:4c:2e:a0: 01:5d:a9:f8:79:e2:75:e7:a4:b6:80:f7:24:7d:c4:b2:05:36: 52:fe:c2:06:fa:74:99:00:53:c6:bc:d6:f9:ac:8c:db:69:60: 1b:8b:85:4e:c8:d3:aa:99:45:f9:7f:d2:c5:6b:59:b2:1e:31: 79:67:b0:2f:b9:34:11:7e:9b:6f:2a:f4:27:b4:4a:49:05:5d: 73:c4:1d:ce:5e:47:9d:70:74:60:95:09:8e:1a:bf:ba:db:a8: 07:5d:c5:18:a0:c1:a1:4e:d8:29:3f:00:23:5d:26:a9:d1:6b: 1d:98:85:b9:a8:df:fa:12:2c:23:02:e1:d0:3e:49:3f:4e:e5: 1b:bc:ce:2a:2f:37:f5:f6:d9:79:ae:b0:58:3e:69:76:8f:d5: c1:41:d1:4f:93:cd:5d:e7:ed:c9:b2:24:b5:fe:f4:8a:91:c2: 0f:d0:33:6c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQrGVJzTh9Y5M0x9tGXRoXWHRYBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwOVoX DTI3MDUwMTA5MjUwOVowMzExMC8GA1UEAxMoOTI4MUUxNTk4OTlGOTk3MzdCNEQ1 MjA4MDE5RTkwQjZBNEZGMTY1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWCErvfX/+X5unfYlZ3dSvbECY/eyfrPj+m8vvmQD4bS6/KvbIR1lcPiizw etBxs8zbtS/yMcAfBwCAIt7ksRxzq432qqVbZ7dQONDCYScG6tISILr9UkGnrRZu Z6ggtUzZsVKqAZ71LRvVha/OKd6rO7gZa0u9GWERB9w2rowXuCXLLKDKozfUqwIs uNHymT6AzpM6+68Omx7dXLZ7mbrLLAgiT2GR+VWBIQbOiQ7TBsXUogQ/If7r689N J4RDYRYNdajS1YmdKZzr80kXYaEw4zZizmW/ca6YpYxbw+4rq6Mo8HK36BvsVALB EbYImjv/Q/H09LrKS+GwT2Q5Z6UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSSgeFZ iZ+Zc3tNUggBnpC2pP8WWzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MTAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwIdiMA0GCSqGSIb3DQEBCwUAA4IBAQBFFnzO+yeIZVsfBkHU71ybOfCs i3gcRuKiwm6q/ES7mznDduGYG/YiqGVSsg8PJLM677Ii+7n+eLD3Gdhh/Bd+hFqT 0mIAlVTElBOGxX8vgg0WBkAS3xFMLqABXan4eeJ156S2gPckfcSyBTZS/sIG+nSZ AFPGvNb5rIzbaWAbi4VOyNOqmUX5f9LFa1myHjF5Z7AvuTQRfptvKvQntEpJBV1z xB3OXkedcHRglQmOGr+626gHXcUYoMGhTtgpPwAjXSap0WsdmIW5qN/6EiwjAuHQ Pkk/TuUbvM4qLzf19tl5rrBYPml2j9XBQdFPk81d5+3JsiS1/vSKkcIP0DNs -----END CERTIFICATE-----Generated at Sat May 2 21:03:34 2026 by rpki-client