$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154145.roa File: AS154145.roa (raw, json) Hash identifier: brjZt83aQ7Nj3kEluJnGhMHDOlGf2YN8HjU1ZBiRpsY= Subject key identifier: 86:2B:9C:61:46:43:22:BE:66:25:D4:58:0E:CF:F3:27:90:F1:58:EF Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 328EE2E60ED2060CE27E3FC5047276B7DCDB4F7A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154145.roa Signing time: Sat 02 May 2026 09:24:56 +0000 ROA not before: Sat 02 May 2026 09:19:56 +0000 ROA not after: Sat 01 May 2027 09:24:56 +0000 asID: 154145 IP address blocks: 192.188.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8e:e2:e6:0e:d2:06:0c:e2:7e:3f:c5:04:72:76:b7:dc:db:4f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:56 2026 GMT Not After : May 1 09:24:56 2027 GMT Subject: CN=862B9C61464322BE6625D4580ECFF32790F158EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:bb:b8:55:d9:d6:0a:45:f9:b9:04:35:ee: 2e:a5:20:ec:e1:7e:19:27:3d:bf:7c:b9:45:f3:9c: 36:77:f0:e3:c9:b8:de:3d:5a:9f:2a:af:9c:83:60: c6:84:90:b4:85:6f:1a:e0:f2:ad:c9:70:f5:9b:92: 24:7e:e1:36:15:77:cb:9e:90:94:2b:08:79:ee:a3: b6:ee:5b:7b:8d:4e:30:8a:a0:2f:50:08:9d:19:85: 80:35:af:cc:58:95:bb:60:63:7d:1a:d1:54:24:1a: 21:5c:7c:fe:2e:b3:92:25:af:10:f0:5a:78:2e:f0: c9:e1:dd:ee:28:6f:49:45:bb:24:bf:9b:b0:cb:48: b6:bc:38:45:30:14:d3:7f:2e:d6:7d:1c:ac:94:12: 96:c9:cf:98:c9:f2:de:17:c9:1e:e0:94:e5:68:e8: 6b:82:2d:92:6f:22:11:ed:d6:18:fd:cb:8d:8f:69: 16:1e:50:96:69:c2:1b:8b:99:5f:2e:0b:84:85:e2: 76:03:8f:bb:61:50:44:eb:bf:f7:67:a6:83:51:f6: 3a:76:85:ee:d2:22:4e:4e:53:a0:e6:ba:e0:b7:41: 10:58:84:b9:c3:11:fe:01:df:cf:27:48:52:d4:de: 44:36:a3:74:ba:fa:d6:a9:4e:11:12:cb:db:59:ba: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:9C:61:46:43:22:BE:66:25:D4:58:0E:CF:F3:27:90:F1:58:EF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154145.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.188.89.0/24 Signature Algorithm: sha256WithRSAEncryption 94:9c:5b:56:37:45:c0:c9:77:79:d6:ab:14:d4:68:f1:67:3d: a4:90:09:9a:ae:da:2a:fa:e1:f5:4e:1f:05:16:33:41:6b:9d: 54:91:cc:01:d3:9d:15:6f:cb:8c:e0:be:66:08:3b:36:1b:95: f2:c8:80:f3:01:2c:79:bf:99:d2:03:fb:d7:82:8a:04:a3:ef: 04:b0:70:79:de:c8:98:41:37:c9:a8:31:35:91:60:1f:4e:1c: 37:32:84:b6:62:9c:19:23:cf:60:ea:a6:bf:4e:ce:3f:85:e7: c1:ca:83:9b:f1:7b:6d:0e:f3:a3:2b:59:78:22:56:8d:bc:48: d8:7a:1d:9b:8b:1c:7e:50:7c:91:02:c3:41:dc:8b:b8:05:35: e2:00:25:d2:fa:8f:99:5f:f7:91:61:bc:93:50:c9:40:26:f3: 40:9e:db:16:8f:10:ce:31:27:6b:5c:c1:e7:78:3a:d0:15:f2: ff:fe:92:51:97:9d:d0:d1:f9:7b:76:8a:db:2b:30:fe:40:c6: a6:34:9d:04:20:37:d5:40:65:50:e1:d4:3e:a6:f2:1e:05:ef: 52:d8:77:c7:8f:3e:42:27:9d:71:c4:ad:31:e6:7f:8e:c5:1f: 51:16:a3:ed:bb:0e:a7:5d:8c:15:e4:4d:2e:18:0d:53:29:f6: 01:b5:e9:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMo7i5g7SBgzifj/FBHJ2t9zbT3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTk1NloX DTI3MDUwMTA5MjQ1NlowMzExMC8GA1UEAxMoODYyQjlDNjE0NjQzMjJCRTY2MjVE NDU4MEVDRkYzMjc5MEYxNThFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0pu7hV2dYKRfm5BDXuLqUg7OF+GSc9v3y5RfOcNnfw48m43j1anyqvnINg xoSQtIVvGuDyrclw9ZuSJH7hNhV3y56QlCsIee6jtu5be41OMIqgL1AInRmFgDWv zFiVu2BjfRrRVCQaIVx8/i6zkiWvEPBaeC7wyeHd7ihvSUW7JL+bsMtItrw4RTAU 038u1n0crJQSlsnPmMny3hfJHuCU5Wjoa4Itkm8iEe3WGP3LjY9pFh5QlmnCG4uZ Xy4LhIXidgOPu2FQROu/92emg1H2OnaF7tIiTk5ToOa64LdBEFiEucMR/gHfzydI UtTeRDajdLr61qlOERLL21m6UaMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSGK5xh RkMivmYl1FgOz/MnkPFY7zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MTQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwLxZMA0GCSqGSIb3DQEBCwUAA4IBAQCUnFtWN0XAyXd51qsU1GjxZz2k kAmartoq+uH1Th8FFjNBa51UkcwB050Vb8uM4L5mCDs2G5XyyIDzASx5v5nSA/vX gooEo+8EsHB53siYQTfJqDE1kWAfThw3MoS2YpwZI89g6qa/Ts4/hefByoOb8Xtt DvOjK1l4IlaNvEjYeh2bixx+UHyRAsNB3Iu4BTXiACXS+o+ZX/eRYbyTUMlAJvNA ntsWjxDOMSdrXMHneDrQFfL//pJRl53Q0fl7dorbKzD+QMamNJ0EIDfVQGVQ4dQ+ pvIeBe9S2HfHjz5CJ51xxK0x5n+OxR9RFqPtuw6nXYwV5E0uGA1TKfYBtenw -----END CERTIFICATE-----Generated at Sat May 2 21:04:40 2026 by rpki-client