$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154146.roa File: AS154146.roa (raw, json) Hash identifier: /eP5LmfnOcW7Q82hnQD0zjkPeBpiWxO+bj+i0zO49/8= Subject key identifier: 7B:C5:B2:B7:49:31:CD:57:18:75:81:04:A6:FD:6A:DC:EF:B5:F7:7E Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3FA1578F8E10282137134AEC356382C22790BECD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154146.roa Signing time: Sat 02 May 2026 09:25:16 +0000 ROA not before: Sat 02 May 2026 09:20:16 +0000 ROA not after: Sat 01 May 2027 09:25:16 +0000 asID: 154146 IP address blocks: 192.147.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a1:57:8f:8e:10:28:21:37:13:4a:ec:35:63:82:c2:27:90:be:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:16 2026 GMT Not After : May 1 09:25:16 2027 GMT Subject: CN=7BC5B2B74931CD5718758104A6FD6ADCEFB5F77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:a7:c5:98:35:76:c2:d5:f7:c0:5f:47:5c: a8:11:20:5e:18:1f:45:26:3d:20:ab:2b:4d:00:d0: eb:da:5a:36:ed:0c:ce:0b:79:e4:4e:a7:7e:b8:b1: 83:89:47:55:6e:a6:d1:6d:b7:e2:c8:4e:17:af:69: 6f:5b:63:06:aa:4e:86:bf:66:fe:be:4c:b4:38:7e: b4:3e:be:5e:1b:38:db:29:38:a4:83:9e:0c:b2:73: e4:76:e2:98:c7:b1:a4:9d:ca:82:eb:9a:52:16:a6: 28:1a:45:77:d3:86:62:7c:18:69:57:88:b4:96:b3: c7:9d:95:76:54:13:09:d5:ef:bd:cb:56:fd:36:33: 59:b5:16:9d:b0:f8:8c:fc:04:60:bd:68:d4:59:a1: dc:77:42:28:9b:57:9b:9c:75:c3:59:b2:16:3e:25: d8:60:40:7c:60:c7:b2:40:49:9e:79:00:d3:00:09: 7c:a9:00:ee:d3:f0:01:a7:91:01:39:6a:59:9a:0a: 5b:13:9e:23:f6:a5:a5:44:dd:1e:ec:55:d5:cf:94: 60:a7:81:39:f2:b5:f2:5b:94:4f:b8:8c:a1:6b:a9: a7:8a:b7:b4:65:b7:c9:7c:a0:8d:4f:fc:f4:07:e0: f1:fa:12:b2:dd:27:60:97:2a:c2:3a:15:06:60:58: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:B2:B7:49:31:CD:57:18:75:81:04:A6:FD:6A:DC:EF:B5:F7:7E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.147.114.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:1d:1c:2b:d7:e1:c9:7a:d0:96:ca:12:88:0e:c4:a5:54:25: be:83:86:0a:9f:67:55:1f:2b:0b:f0:21:35:18:c2:10:ab:9b: ef:5a:ab:c5:0c:9c:9d:a9:74:7e:0b:0d:8f:00:b0:1d:07:d8: da:23:b5:cd:51:be:cc:57:46:4f:37:83:42:e6:a8:92:02:a5: da:48:e2:c7:ff:37:5b:d3:53:45:e0:57:78:26:00:f7:5a:63: 0e:59:76:85:4c:b3:c3:1b:89:29:09:73:28:24:8a:a9:20:08: a2:eb:78:f9:2e:95:34:ea:2b:c4:67:75:1f:58:70:f9:2f:15: b7:94:8c:3b:9f:97:08:77:59:ed:de:dd:2b:29:08:a8:6d:d4: e6:19:a1:2f:c0:55:ac:64:2f:96:67:f6:10:31:b0:3b:91:e2: 4d:16:d8:5f:15:29:5d:0f:d4:47:66:23:22:58:3c:ad:9d:81: 21:9e:42:dc:81:db:e4:da:31:9b:66:c7:c3:a9:bf:e9:cb:24: d1:90:5b:8d:6c:88:3f:c3:8b:26:c1:b6:0c:66:84:fc:d0:f4: b7:ed:9a:7d:2f:74:c4:4e:21:e3:9e:a2:df:62:23:c7:e8:7a: 13:d0:d0:0b:0c:d5:9b:d0:7a:73:9e:21:c7:0d:c2:76:bd:e1: 6a:40:54:9c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUP6FXj44QKCE3E0rsNWOCwieQvs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxNloX DTI3MDUwMTA5MjUxNlowMzExMC8GA1UEAxMoN0JDNUIyQjc0OTMxQ0Q1NzE4NzU4 MTA0QTZGRDZBRENFRkI1Rjc3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8Vp8WYNXbC1ffAX0dcqBEgXhgfRSY9IKsrTQDQ69paNu0Mzgt55E6nfrix g4lHVW6m0W234shOF69pb1tjBqpOhr9m/r5MtDh+tD6+Xhs42yk4pIOeDLJz5Hbi mMexpJ3KguuaUhamKBpFd9OGYnwYaVeItJazx52VdlQTCdXvvctW/TYzWbUWnbD4 jPwEYL1o1Fmh3HdCKJtXm5x1w1myFj4l2GBAfGDHskBJnnkA0wAJfKkA7tPwAaeR ATlqWZoKWxOeI/alpUTdHuxV1c+UYKeBOfK18luUT7iMoWupp4q3tGW3yXygjU/8 9Afg8foSst0nYJcqwjoVBmBYcg8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR7xbK3 STHNVxh1gQSm/Wrc77X3fjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MTQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwJNyMA0GCSqGSIb3DQEBCwUAA4IBAQCMHRwr1+HJetCWyhKIDsSlVCW+ g4YKn2dVHysL8CE1GMIQq5vvWqvFDJydqXR+Cw2PALAdB9jaI7XNUb7MV0ZPN4NC 5qiSAqXaSOLH/zdb01NF4Fd4JgD3WmMOWXaFTLPDG4kpCXMoJIqpIAii63j5LpU0 6ivEZ3UfWHD5LxW3lIw7n5cId1nt3t0rKQiobdTmGaEvwFWsZC+WZ/YQMbA7keJN FthfFSldD9RHZiMiWDytnYEhnkLcgdvk2jGbZsfDqb/pyyTRkFuNbIg/w4smwbYM ZoT80PS37Zp9L3TETiHjnqLfYiPH6HoT0NALDNWb0HpzniHHDcJ2veFqQFSc -----END CERTIFICATE-----Generated at Sat May 2 21:05:08 2026 by rpki-client