$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154266.roa File: AS154266.roa (raw, json) Hash identifier: S3EMFzmtaE1ghCSlP9VKQA1A36/8q5lRKt36zJHPaf8= Subject key identifier: E1:8E:A0:64:69:4A:8E:99:1F:4A:0F:89:C8:98:1E:D4:69:A8:81:2B Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 08CB791154C87F446063DFDA71DC9AA5595984D4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154266.roa Signing time: Sat 02 May 2026 09:25:10 +0000 ROA not before: Sat 02 May 2026 09:20:10 +0000 ROA not after: Sat 01 May 2027 09:25:10 +0000 asID: 154266 IP address blocks: 165.99.100.0/23 maxlen: 23 165.99.100.0/24 maxlen: 24 165.99.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:79:11:54:c8:7f:44:60:63:df:da:71:dc:9a:a5:59:59:84:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:10 2026 GMT Not After : May 1 09:25:10 2027 GMT Subject: CN=E18EA064694A8E991F4A0F89C8981ED469A8812B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:c9:b1:dc:84:19:15:c8:30:ca:08:5b:53: 2c:62:4a:41:cd:41:8c:10:77:9c:5e:e7:ff:5d:44: 65:a4:6a:a0:3f:f2:e3:88:86:1b:19:59:af:32:3c: eb:21:56:58:45:b1:3d:39:14:eb:84:51:fe:2d:92: b3:9b:c1:a0:da:fd:d6:0a:6c:c5:6f:ca:9f:ea:2a: b6:86:30:90:a6:9b:bd:5e:3b:cf:85:94:58:fa:f9: 2e:44:0d:e5:90:e5:80:86:36:30:c3:2e:0b:5b:7e: 64:27:9d:4a:4e:ec:23:77:b8:6a:7a:ed:5e:bb:c6: 2f:f5:c4:44:18:d3:02:e7:2b:1e:ea:43:de:b4:be: 8f:e9:1c:e9:72:f3:bc:e7:2a:8d:ce:d3:4d:fe:f2: 68:34:99:f4:34:58:e7:49:66:bb:cf:97:75:6b:ca: cf:c1:3b:27:72:5e:40:96:7a:2c:9e:0f:07:ed:6c: 59:4a:57:b2:5f:5e:9f:32:1a:0a:5d:45:8b:70:1c: 3c:20:44:a1:c5:37:aa:b6:c0:d5:ef:c6:8f:de:09: 5c:cd:69:a3:56:9b:c5:b1:f4:48:eb:27:d7:a9:ed: 29:ee:1f:9d:51:52:95:bd:fd:a2:32:17:7f:18:f1: cf:1f:48:ab:e2:82:68:1f:f5:a9:38:fb:f9:8a:5a: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8E:A0:64:69:4A:8E:99:1F:4A:0F:89:C8:98:1E:D4:69:A8:81:2B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154266.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.100.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:07:a6:3c:62:93:49:10:18:db:cf:b2:12:29:6a:d0:9d:a7: 08:3b:ce:d6:e1:45:8f:94:95:59:75:a8:08:83:4d:4e:72:2e: bf:2e:77:c5:23:10:d9:c0:f1:bb:54:2b:14:3a:00:20:39:92: 9d:a0:e0:2d:a1:35:5e:ef:75:a9:03:f3:da:6a:2e:82:8d:04: a5:60:72:ad:26:6e:e0:2b:ad:75:c2:35:e8:2b:54:4f:a1:10: c1:cb:51:82:22:8d:c8:3b:28:13:30:be:49:61:7a:ab:04:e9: 61:f4:0d:f3:ee:08:b0:ca:8c:bc:e9:aa:3f:1a:c8:93:14:f0: 22:e9:4b:8f:13:79:80:da:93:4b:b2:55:e8:d6:73:4a:ae:c6: 3a:9d:c5:ea:9f:0b:fd:e2:73:a3:31:83:d9:89:c9:9f:32:6e: e3:30:d6:03:e8:9d:28:a7:6a:5c:ad:96:9b:7e:d5:87:41:2d: dd:3d:71:f9:10:76:39:52:48:54:7d:36:36:6c:27:69:e0:72: cb:b2:92:5e:e5:a1:4d:0a:0c:d5:76:1a:29:fd:13:6a:7f:f6: fa:ae:94:5d:eb:4f:2b:bf:71:b2:b0:ef:7e:43:c2:83:f6:00: 83:9a:58:7b:64:33:42:b0:5c:ce:fb:a7:db:90:27:af:64:6c: f3:9d:65:35 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCMt5EVTIf0RgY9/acdyapVlZhNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxMFoX DTI3MDUwMTA5MjUxMFowMzExMC8GA1UEAxMoRTE4RUEwNjQ2OTRBOEU5OTFGNEEw Rjg5Qzg5ODFFRDQ2OUE4ODEyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrNybHchBkVyDDKCFtTLGJKQc1BjBB3nF7n/11EZaRqoD/y44iGGxlZrzI8 6yFWWEWxPTkU64RR/i2Ss5vBoNr91gpsxW/Kn+oqtoYwkKabvV47z4WUWPr5LkQN 5ZDlgIY2MMMuC1t+ZCedSk7sI3e4anrtXrvGL/XERBjTAucrHupD3rS+j+kc6XLz vOcqjc7TTf7yaDSZ9DRY50lmu8+XdWvKz8E7J3JeQJZ6LJ4PB+1sWUpXsl9enzIa Cl1Fi3AcPCBEocU3qrbA1e/Gj94JXM1po1abxbH0SOsn16ntKe4fnVFSlb39ojIX fxjxzx9Iq+KCaB/1qTj7+Ypaez8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBThjqBk aUqOmR9KD4nImB7UaaiBKzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MjY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBpWNkMA0GCSqGSIb3DQEBCwUAA4IBAQAbB6Y8YpNJEBjbz7ISKWrQnacI O87W4UWPlJVZdagIg01Oci6/LnfFIxDZwPG7VCsUOgAgOZKdoOAtoTVe73WpA/Pa ai6CjQSlYHKtJm7gK611wjXoK1RPoRDBy1GCIo3IOygTML5JYXqrBOlh9A3z7giw yoy86ao/GsiTFPAi6UuPE3mA2pNLslXo1nNKrsY6ncXqnwv94nOjMYPZicmfMm7j MNYD6J0op2pcrZabftWHQS3dPXH5EHY5UkhUfTY2bCdp4HLLspJe5aFNCgzVdhop /RNqf/b6rpRd608rv3GysO9+Q8KD9gCDmlh7ZDNCsFzO+6fbkCevZGzznWU1 -----END CERTIFICATE-----Generated at Sat May 2 21:05:07 2026 by rpki-client