$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154178.roa File: AS154178.roa (raw, json) Hash identifier: 0MNEmvFsHyzUIkHQ4BILR/xzLPEYKIPymLiu8QYHpqY= Subject key identifier: 3E:72:AE:8D:02:52:3E:EE:92:8C:47:F5:FC:7E:07:02:E9:48:8E:E1 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 468A7AF18783798B490CBD90C8DC865C7EA0A5E3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154178.roa Signing time: Sat 02 May 2026 09:25:10 +0000 ROA not before: Sat 02 May 2026 09:20:10 +0000 ROA not after: Sat 01 May 2027 09:25:10 +0000 asID: 154178 IP address blocks: 165.101.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8a:7a:f1:87:83:79:8b:49:0c:bd:90:c8:dc:86:5c:7e:a0:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:10 2026 GMT Not After : May 1 09:25:10 2027 GMT Subject: CN=3E72AE8D02523EEE928C47F5FC7E0702E9488EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:36:0e:65:c5:ab:9b:34:9f:11:73:14:2b:6e: 26:be:44:c3:6c:ce:c4:22:68:98:ed:39:96:f4:cb: 2e:ec:2f:80:18:4b:9f:36:ef:86:fc:a2:3b:64:27: a9:87:42:90:fd:6b:87:8c:76:c6:4d:05:f8:3f:fe: 48:9e:4f:f2:37:61:df:d5:39:32:8a:90:7d:47:b1: 88:ac:d2:c6:0b:4b:44:45:40:fc:cd:f5:53:40:1e: f5:2a:b6:fa:04:2c:82:c0:26:7c:b4:28:7f:32:f9: be:7c:2c:05:26:36:70:06:9a:7e:4e:ef:9d:5d:b9: 30:f4:da:13:cd:74:fa:a0:2d:19:f2:1e:22:ae:4c: 6d:38:11:75:0c:84:28:9d:90:56:c7:e1:bf:77:7e: f6:96:7d:29:2b:56:d5:8c:b4:a5:fe:05:f1:e2:09: 59:b2:64:bd:2b:03:50:df:9a:f2:5f:ad:6c:ef:9f: 3d:1b:26:a1:fc:a3:41:00:12:81:86:73:58:2b:89: 4c:3d:bd:34:a6:19:3e:f6:70:6d:ca:c6:f1:38:c2: d4:e1:80:41:98:ae:e4:d9:8c:aa:d7:6e:fd:cf:b2: 29:71:28:3d:9f:91:a4:68:dc:00:ff:96:de:c3:a5: 93:f6:0e:5f:34:6d:d0:f7:1b:52:64:66:3e:0a:d5: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:72:AE:8D:02:52:3E:EE:92:8C:47:F5:FC:7E:07:02:E9:48:8E:E1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.150.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:e5:75:24:4f:be:fe:11:4a:67:9e:12:29:01:db:2e:f5:96: 8a:1e:2b:9b:25:6e:25:2e:c4:dc:2f:79:2a:ed:d6:ae:c8:ee: 8c:d0:52:56:db:a4:e4:be:f6:e1:a6:c6:8e:41:e6:2b:95:99: d1:c0:7e:49:77:18:4f:6e:28:2c:a4:af:ce:26:86:59:0e:93: 0f:c9:fa:af:ad:4d:5e:c0:47:c9:88:ec:02:83:78:a0:ba:4a: 5a:75:de:da:fe:ae:7a:34:58:3e:f5:5f:74:15:cf:08:50:a9: 0e:35:f7:2e:85:3a:e9:40:29:85:2d:82:24:bb:04:f6:e3:f7: ef:f3:84:48:d9:ad:47:59:90:a1:52:09:72:3b:f3:2d:e3:bc: 0b:86:f9:3d:7f:07:2f:eb:f5:3e:b2:60:e7:09:a2:42:33:d3: 1b:00:a7:06:41:ad:66:c2:5f:0a:4d:24:97:63:17:d2:59:3a: 8a:6a:0d:f2:14:a5:82:4b:2c:8d:dc:50:88:3f:a1:22:4e:5e: 00:2e:b9:1b:21:2d:49:fa:23:78:16:62:86:8e:33:2c:e7:fc: cd:e9:4a:65:15:71:36:11:bf:fb:ad:a7:e8:b5:6c:c9:f2:52: 48:20:06:27:30:ec:7a:b8:b5:26:80:f8:3b:d0:79:62:87:a4: 74:d6:49:1a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURop68YeDeYtJDL2QyNyGXH6gpeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxMFoX DTI3MDUwMTA5MjUxMFowMzExMC8GA1UEAxMoM0U3MkFFOEQwMjUyM0VFRTkyOEM0 N0Y1RkM3RTA3MDJFOTQ4OEVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ42DmXFq5s0nxFzFCtuJr5Ew2zOxCJomO05lvTLLuwvgBhLnzbvhvyiO2Qn qYdCkP1rh4x2xk0F+D/+SJ5P8jdh39U5MoqQfUexiKzSxgtLREVA/M31U0Ae9Sq2 +gQsgsAmfLQofzL5vnwsBSY2cAaafk7vnV25MPTaE810+qAtGfIeIq5MbTgRdQyE KJ2QVsfhv3d+9pZ9KStW1Yy0pf4F8eIJWbJkvSsDUN+a8l+tbO+fPRsmofyjQQAS gYZzWCuJTD29NKYZPvZwbcrG8TjC1OGAQZiu5NmMqtdu/c+yKXEoPZ+RpGjcAP+W 3sOlk/YOXzRt0PcbUmRmPgrV9AMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ+cq6N AlI+7pKMR/X8fgcC6UiO4TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MTc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWWWMA0GCSqGSIb3DQEBCwUAA4IBAQCM5XUkT77+EUpnnhIpAdsu9ZaK HiubJW4lLsTcL3kq7dauyO6M0FJW26TkvvbhpsaOQeYrlZnRwH5JdxhPbigspK/O JoZZDpMPyfqvrU1ewEfJiOwCg3igukpadd7a/q56NFg+9V90Fc8IUKkONfcuhTrp QCmFLYIkuwT24/fv84RI2a1HWZChUglyO/Mt47wLhvk9fwcv6/U+smDnCaJCM9Mb AKcGQa1mwl8KTSSXYxfSWTqKag3yFKWCSyyN3FCIP6EiTl4ALrkbIS1J+iN4FmKG jjMs5/zN6UplFXE2Eb/7rafotWzJ8lJIIAYnMOx6uLUmgPg70Hlih6R01kka -----END CERTIFICATE-----Generated at Sat May 2 21:04:40 2026 by rpki-client