$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154314.roa File: AS154314.roa (raw, json) Hash identifier: iKEsf+VG0PjSVPtJnSeJ/Cl3LUh3S7Lh/yU4gAf6rqE= Subject key identifier: C4:24:0C:C4:2E:B2:97:27:D0:4B:64:A1:79:C8:55:7A:28:36:E7:D7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 23F05FD109637C6CEF8C5434405B6C7DA21F3F22 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154314.roa Signing time: Sat 02 May 2026 09:23:04 +0000 ROA not before: Sat 02 May 2026 09:18:04 +0000 ROA not after: Sat 01 May 2027 09:23:04 +0000 asID: 154314 IP address blocks: 138.252.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f0:5f:d1:09:63:7c:6c:ef:8c:54:34:40:5b:6c:7d:a2:1f:3f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:04 2026 GMT Not After : May 1 09:23:04 2027 GMT Subject: CN=C4240CC42EB29727D04B64A179C8557A2836E7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:75:e6:f1:7b:73:a9:26:43:75:3f:ee:f7: 36:a9:65:50:19:30:67:ae:be:a1:69:a6:81:a8:33: 1f:3a:d2:69:d2:09:12:bb:99:b6:10:7d:e3:f9:f6: f5:46:54:91:87:4b:85:ac:70:2d:2b:04:c0:10:f4: 8d:b4:f6:09:47:9a:f3:b5:77:77:1a:cf:cf:bd:13: ba:67:84:66:e3:bd:32:a4:5f:3e:3d:33:35:78:b4: aa:87:bd:e2:81:00:f5:7c:83:66:81:ef:fd:de:ca: f0:a4:34:16:4d:37:e2:33:1c:91:52:1f:75:79:c6: b5:8e:4d:b3:6e:25:19:af:b8:8d:35:d7:ae:01:df: 9d:3f:af:7d:9f:fa:d5:a1:5d:0f:53:6c:e5:b7:d0: 53:73:7b:fb:32:a9:04:bf:c0:6c:53:59:b0:37:99: fa:a7:47:d5:8b:d3:7c:98:ef:1e:60:1a:e6:53:58: fa:d4:96:02:ce:21:54:64:86:ae:bb:89:22:d7:6a: 82:71:92:ff:cb:e5:e3:9a:79:60:db:0f:6c:ef:9e: ef:07:78:99:bb:13:13:6a:75:b3:82:35:19:38:50: 68:fd:6e:f9:0e:b2:89:62:9a:42:30:50:f9:4e:ef: 14:ca:26:a5:ce:c3:38:06:f8:a2:84:a7:18:77:45: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:24:0C:C4:2E:B2:97:27:D0:4B:64:A1:79:C8:55:7A:28:36:E7:D7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154314.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.46.0/24 Signature Algorithm: sha256WithRSAEncryption 93:0b:7d:5e:8f:e1:e4:50:97:9a:46:79:f0:91:eb:f7:75:50: 7b:d4:43:97:a6:42:3b:89:05:1d:c2:ad:97:e8:aa:bc:8a:2d: 51:a6:e0:00:5b:03:ff:5d:dd:9d:3b:c8:d5:8e:94:6b:39:2f: ca:fe:56:3c:59:3f:76:1d:4e:14:dc:03:11:be:13:ad:c8:e4: b9:db:01:dd:34:dc:a5:7f:8c:48:05:80:fd:d6:2f:99:19:49: d3:43:1d:51:ac:cc:e4:3e:6b:68:6f:96:3d:13:e8:e7:5e:28: a4:65:01:ca:2c:51:a1:16:02:f2:10:5a:32:60:12:b7:1c:15: f3:21:48:5d:46:ee:ee:98:63:f5:02:bd:bb:5f:88:92:f9:ba: 43:96:32:ed:9a:09:2a:01:75:6f:cb:28:28:9a:76:d0:2a:67: 6f:0d:8e:08:2c:c1:97:f1:24:00:a9:14:7a:02:e4:ab:f2:74: 54:8d:2a:3e:14:a5:d0:16:f8:8a:f4:fb:b2:cb:f4:de:4e:b9: 2b:5a:3f:b3:4c:4d:26:4f:bf:47:db:f9:9f:ad:44:d3:72:e2: 0b:b4:17:b4:c3:41:3e:f2:e7:e4:11:47:f3:28:52:5c:bd:4a: 27:f6:de:73:10:ae:b2:69:e6:93:5a:02:a4:dd:c7:d2:83:e6: 19:5c:a5:b2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUI/Bf0QljfGzvjFQ0QFtsfaIfPyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwNFoX DTI3MDUwMTA5MjMwNFowMzExMC8GA1UEAxMoQzQyNDBDQzQyRUIyOTcyN0QwNEI2 NEExNzlDODU1N0EyODM2RTdENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOH3debxe3OpJkN1P+73NqllUBkwZ66+oWmmgagzHzrSadIJEruZthB94/n2 9UZUkYdLhaxwLSsEwBD0jbT2CUea87V3dxrPz70TumeEZuO9MqRfPj0zNXi0qoe9 4oEA9XyDZoHv/d7K8KQ0Fk034jMckVIfdXnGtY5Ns24lGa+4jTXXrgHfnT+vfZ/6 1aFdD1Ns5bfQU3N7+zKpBL/AbFNZsDeZ+qdH1YvTfJjvHmAa5lNY+tSWAs4hVGSG rruJItdqgnGS/8vl45p5YNsPbO+e7wd4mbsTE2p1s4I1GThQaP1u+Q6yiWKaQjBQ +U7vFMompc7DOAb4ooSnGHdFUB8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTEJAzE LrKXJ9BLZKF5yFV6KDbn1zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivwuMA0GCSqGSIb3DQEBCwUAA4IBAQCTC31ej+HkUJeaRnnwkev3dVB7 1EOXpkI7iQUdwq2X6Kq8ii1RpuAAWwP/Xd2dO8jVjpRrOS/K/lY8WT92HU4U3AMR vhOtyOS52wHdNNylf4xIBYD91i+ZGUnTQx1RrMzkPmtob5Y9E+jnXiikZQHKLFGh FgLyEFoyYBK3HBXzIUhdRu7umGP1Ar27X4iS+bpDljLtmgkqAXVvyygomnbQKmdv DY4ILMGX8SQAqRR6AuSr8nRUjSo+FKXQFviK9Puyy/TeTrkrWj+zTE0mT79H2/mf rUTTcuILtBe0w0E+8ufkEUfzKFJcvUon9t5zEK6yaeaTWgKk3cfSg+YZXKWy -----END CERTIFICATE-----Generated at Sat May 2 21:05:00 2026 by rpki-client