$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154337.roa File: AS154337.roa (raw, json) Hash identifier: Cqi60thrnUn2aL0PnUUJ0VvszBOZSMQCrDaY6BFAr40= Subject key identifier: 86:15:9B:AF:A9:F0:C1:7A:D1:A8:D6:F9:10:0C:7A:8C:B8:32:88:C6 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 67BBBAD74A69E35B053FAA6D0AB5231D179F5E6C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154337.roa Signing time: Sat 02 May 2026 09:23:03 +0000 ROA not before: Sat 02 May 2026 09:18:03 +0000 ROA not after: Sat 01 May 2027 09:23:03 +0000 asID: 154337 IP address blocks: 138.252.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bb:ba:d7:4a:69:e3:5b:05:3f:aa:6d:0a:b5:23:1d:17:9f:5e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:03 2026 GMT Not After : May 1 09:23:03 2027 GMT Subject: CN=86159BAFA9F0C17AD1A8D6F9100C7A8CB83288C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:59:22:a3:82:9b:ef:f1:36:d0:8a:9e:4d: 43:cb:6d:55:da:aa:28:27:c4:72:66:33:94:1b:21: 57:5d:85:a7:87:df:44:98:a7:23:53:0a:3e:af:08: 30:43:67:4a:02:fe:f7:1a:75:9f:fc:d7:6c:82:4a: 8f:8e:83:8b:76:98:fa:8c:73:ee:ce:92:cc:70:83: f8:4a:27:58:7e:ec:87:2f:fe:e5:58:a1:11:90:48: 7e:f4:3b:c9:10:b9:f0:68:81:d9:1b:2d:10:d6:f1: 55:a3:f3:c1:d9:77:a5:e0:d0:de:1a:68:bf:79:b5: 2a:f7:38:7e:68:6c:64:60:1f:90:b6:92:df:fa:e2: b6:e8:5c:69:8b:69:32:71:5e:d1:16:04:fb:39:c7: f3:cf:0a:a9:5f:fa:c7:58:57:a1:80:59:f5:76:71: 43:d4:af:48:55:7c:13:0b:ac:2d:fc:41:f8:50:0f: 72:02:0f:2c:62:d0:13:6a:f2:0c:5d:71:8c:62:e4: e1:b4:37:de:02:fc:57:41:4b:33:1a:07:24:91:7b: e9:b9:a4:af:63:f2:3e:35:ad:61:05:0b:1d:1c:9e: 54:c5:72:ec:b0:86:7b:bd:51:9f:86:ca:d8:67:86: 60:fe:b8:e6:08:19:dc:d2:25:6d:9b:db:b4:aa:16: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:9B:AF:A9:F0:C1:7A:D1:A8:D6:F9:10:0C:7A:8C:B8:32:88:C6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.91.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d5:bc:1c:e0:27:7d:2c:fd:6b:65:85:5c:2c:6f:7f:2f:44: 5c:2d:00:d1:48:c2:21:c6:e6:86:68:49:60:14:2a:1e:63:c6: 51:0d:e5:2c:20:76:4e:fa:79:7c:f4:70:93:b3:5a:bc:52:1d: 17:e5:fc:3c:af:5a:af:59:1a:3a:01:68:2c:dd:61:63:28:fc: 6b:a9:17:02:a2:15:4d:22:54:4a:2a:9e:30:26:f1:6a:a0:f4: a6:83:81:e2:11:18:3f:75:ec:cd:e5:e3:83:5f:f5:15:ae:85: 23:4f:e7:e5:f8:d5:fd:19:e6:81:6e:d0:f7:28:e9:9d:0f:7f: 08:ca:0f:63:64:0b:f6:a9:e5:49:1c:bf:d0:72:79:83:b8:fd: 87:3c:01:e9:30:2f:52:c4:67:a8:26:39:7f:34:26:c8:5b:01: b1:df:0f:57:0e:99:7d:d0:6e:4c:23:53:a7:90:33:d6:34:2d: d5:d0:4d:26:0b:2d:6b:77:ac:bb:79:0d:29:12:62:f1:ed:c8: 43:a6:80:18:06:8d:04:3d:7f:39:04:99:38:1e:11:48:94:fb: cc:9f:80:46:52:ef:4a:11:c9:6d:f8:5a:66:46:c7:91:7b:95: a2:24:65:76:e1:b9:61:76:ac:0e:19:04:35:55:31:6b:f6:57: fe:39:f6:b7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZ7u610pp41sFP6ptCrUjHRefXmwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwM1oX DTI3MDUwMTA5MjMwM1owMzExMC8GA1UEAxMoODYxNTlCQUZBOUYwQzE3QUQxQThE NkY5MTAwQzdBOENCODMyODhDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJiWSKjgpvv8TbQip5NQ8ttVdqqKCfEcmYzlBshV12Fp4ffRJinI1MKPq8I MENnSgL+9xp1n/zXbIJKj46Di3aY+oxz7s6SzHCD+EonWH7shy/+5VihEZBIfvQ7 yRC58GiB2RstENbxVaPzwdl3peDQ3hpov3m1Kvc4fmhsZGAfkLaS3/rituhcaYtp MnFe0RYE+znH888KqV/6x1hXoYBZ9XZxQ9SvSFV8EwusLfxB+FAPcgIPLGLQE2ry DF1xjGLk4bQ33gL8V0FLMxoHJJF76bmkr2PyPjWtYQULHRyeVMVy7LCGe71Rn4bK 2GeGYP645ggZ3NIlbZvbtKoWfgkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSGFZuv qfDBetGo1vkQDHqMuDKIxjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivxbMA0GCSqGSIb3DQEBCwUAA4IBAQAU1bwc4Cd9LP1rZYVcLG9/L0Rc LQDRSMIhxuaGaElgFCoeY8ZRDeUsIHZO+nl89HCTs1q8Uh0X5fw8r1qvWRo6AWgs 3WFjKPxrqRcCohVNIlRKKp4wJvFqoPSmg4HiERg/dezN5eODX/UVroUjT+fl+NX9 GeaBbtD3KOmdD38Iyg9jZAv2qeVJHL/QcnmDuP2HPAHpMC9SxGeoJjl/NCbIWwGx 3w9XDpl90G5MI1OnkDPWNC3V0E0mCy1rd6y7eQ0pEmLx7chDpoAYBo0EPX85BJk4 HhFIlPvMn4BGUu9KEclt+FpmRseRe5WiJGV24blhdqwOGQQ1VTFr9lf+Ofa3 -----END CERTIFICATE-----Generated at Sat May 2 21:04:36 2026 by rpki-client