$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154122.roa File: AS154122.roa (raw, json) Hash identifier: 7psrPABf4Bh8ULuuvi/wNIiLTrsWHCyl16f/7DBWnXw= Subject key identifier: 97:59:33:2C:14:52:8F:2E:3C:B7:9C:1C:94:9E:9E:44:01:12:3A:47 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 26778995F67C89C35521F42625CA2735F63BE83A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154122.roa Signing time: Sat 02 May 2026 09:25:17 +0000 ROA not before: Sat 02 May 2026 09:20:17 +0000 ROA not after: Sat 01 May 2027 09:25:17 +0000 asID: 154122 IP address blocks: 165.101.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:77:89:95:f6:7c:89:c3:55:21:f4:26:25:ca:27:35:f6:3b:e8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:17 2026 GMT Not After : May 1 09:25:17 2027 GMT Subject: CN=9759332C14528F2E3CB79C1C949E9E4401123A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:f5:d5:a3:47:2f:27:cc:11:2b:e5:0b:b2: 4f:06:13:93:f0:09:29:78:81:1c:ac:1e:d0:13:43: 64:4f:3b:1e:70:41:01:d8:c4:75:9d:d3:17:f3:f9: 15:19:84:f2:4f:08:c1:d5:dd:f8:40:dd:56:d3:06: fa:8a:a7:b8:b1:63:cf:10:52:0d:d9:ce:a1:cd:c4: a4:b4:f2:79:ff:01:80:8e:cc:74:22:3a:1a:d5:ca: 86:ad:ad:f2:c1:8e:92:cb:48:de:9d:08:22:d5:4d: 79:8b:3c:a0:84:7c:15:e7:b2:b3:da:44:d9:c8:42: ba:83:91:84:38:8d:7c:03:41:5a:a2:25:d0:39:d8: d0:34:76:ef:38:9a:1d:8c:2d:63:54:58:1e:37:02: 37:a3:4e:8e:3f:9e:52:ad:0e:78:0e:a0:d0:59:31: 03:9d:27:df:c1:1e:0d:3b:40:70:68:3c:92:66:f6: bd:7c:a6:ea:43:66:2a:0a:9d:6d:bb:c2:e6:05:06: d2:6c:fe:87:81:b0:a1:2d:ce:1b:c1:8d:c2:7e:c0: 90:78:be:f2:f3:6a:13:04:05:b0:af:95:51:4a:db: 0b:5a:0a:d3:18:08:f2:dc:7d:d6:4c:19:34:2b:b9: 29:be:2b:e1:8d:07:90:09:99:6a:62:33:95:d2:38: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:59:33:2C:14:52:8F:2E:3C:B7:9C:1C:94:9E:9E:44:01:12:3A:47 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.212.0/24 Signature Algorithm: sha256WithRSAEncryption 23:93:80:26:93:77:de:16:05:95:22:ac:ee:c8:8c:23:7d:82: 64:c8:bc:e0:7c:9c:37:24:57:31:70:c0:6b:6e:09:5d:09:4a: dd:fe:85:a5:47:68:64:7c:84:18:65:1d:95:b5:50:9a:d7:81: 61:2b:08:02:9c:16:b1:a1:e0:30:20:29:83:f9:ad:f0:2c:a6: 79:37:8b:95:05:68:de:ea:6e:81:a7:f1:d8:0a:53:65:2b:01: e3:98:81:bd:bd:02:49:37:9e:a6:02:68:43:31:b3:cb:da:84: 08:9c:b0:28:d9:3c:b7:9d:e4:ac:7c:2c:ab:5f:d7:d4:15:81: 0e:b1:5f:c3:62:4d:80:f1:aa:95:7d:9a:ce:0a:19:b2:ef:12: dc:d2:2f:c7:6b:0a:99:eb:d0:02:d1:df:b8:86:7a:b2:f9:c6: e6:a3:99:98:03:de:47:4a:f0:11:f1:6c:eb:76:6d:cf:d3:5f: 8c:c4:c2:2b:3d:f3:90:b1:74:cc:92:f8:70:c2:6c:3b:20:30: a2:27:b5:13:31:93:a8:61:88:51:3c:91:08:4b:2f:fc:91:54: 5d:73:23:9f:28:29:f0:16:ae:3c:a3:e9:89:c0:db:36:38:99: 5d:e0:dc:a9:f4:28:17:e6:81:6e:7a:0c:06:04:18:0b:d6:74: 92:22:5b:81 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJneJlfZ8icNVIfQmJconNfY76DowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxN1oX DTI3MDUwMTA5MjUxN1owMzExMC8GA1UEAxMoOTc1OTMzMkMxNDUyOEYyRTNDQjc5 QzFDOTQ5RTlFNDQwMTEyM0E0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDP9dWjRy8nzBEr5QuyTwYTk/AJKXiBHKwe0BNDZE87HnBBAdjEdZ3TF/P5 FRmE8k8IwdXd+EDdVtMG+oqnuLFjzxBSDdnOoc3EpLTyef8BgI7MdCI6GtXKhq2t 8sGOkstI3p0IItVNeYs8oIR8Feeys9pE2chCuoORhDiNfANBWqIl0DnY0DR27zia HYwtY1RYHjcCN6NOjj+eUq0OeA6g0FkxA50n38EeDTtAcGg8kmb2vXym6kNmKgqd bbvC5gUG0mz+h4GwoS3OG8GNwn7AkHi+8vNqEwQFsK+VUUrbC1oK0xgI8tx91kwZ NCu5Kb4r4Y0HkAmZamIzldI4RasCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSXWTMs FFKPLjy3nByUnp5EARI6RzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MTIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWXUMA0GCSqGSIb3DQEBCwUAA4IBAQAjk4Amk3feFgWVIqzuyIwjfYJk yLzgfJw3JFcxcMBrbgldCUrd/oWlR2hkfIQYZR2VtVCa14FhKwgCnBaxoeAwICmD +a3wLKZ5N4uVBWje6m6Bp/HYClNlKwHjmIG9vQJJN56mAmhDMbPL2oQInLAo2Ty3 neSsfCyrX9fUFYEOsV/DYk2A8aqVfZrOChmy7xLc0i/HawqZ69AC0d+4hnqy+cbm o5mYA95HSvAR8Wzrdm3P01+MxMIrPfOQsXTMkvhwwmw7IDCiJ7UTMZOoYYhRPJEI Sy/8kVRdcyOfKCnwFq48o+mJwNs2OJld4Nyp9CgX5oFuegwGBBgL1nSSIluB -----END CERTIFICATE-----Generated at Sat May 2 21:05:17 2026 by rpki-client