$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154349.roa File: AS154349.roa (raw, json) Hash identifier: F9lAk3mENrJvFpH3GweZnT3gcx/bXokBtrcLNQIjfH8= Subject key identifier: 6A:7E:8B:E2:23:67:4C:44:50:B7:07:29:8A:56:FD:35:10:78:77:12 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 151F8480B9507ED916C9AEFA8FC3E6347FFF37BB Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154349.roa Signing time: Tue 18 Aug 2026 06:25:27 +0000 ROA not before: Tue 18 Aug 2026 06:20:27 +0000 ROA not after: Tue 17 Aug 2027 06:25:27 +0000 asID: 154349 IP address blocks: 138.252.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1f:84:80:b9:50:7e:d9:16:c9:ae:fa:8f:c3:e6:34:7f:ff:37:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 18 06:20:27 2026 GMT Not After : Aug 17 06:25:27 2027 GMT Subject: CN=6A7E8BE223674C4450B707298A56FD3510787712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:e3:9d:29:de:ba:68:93:0b:87:33:14:68: 43:5f:bf:b4:d4:29:bb:66:ba:eb:f9:ab:e0:81:5b: d6:98:d7:f9:3a:86:d2:10:1b:03:8c:1a:85:52:90: 9f:7d:b4:44:11:74:8f:b3:df:25:88:03:7f:e0:7f: fd:de:7c:0d:77:12:be:04:82:f1:93:c8:44:b8:1d: 9f:bf:e5:43:d7:c8:a8:b9:0c:d7:2a:ed:f1:33:97: 64:9e:a4:41:62:fa:90:eb:17:f3:a8:bc:2e:5c:8b: b0:52:3a:36:bc:b5:92:4f:32:fc:e4:cb:78:03:15: bc:32:00:46:fc:1e:c9:2e:3c:28:2f:59:86:c0:93: 65:f8:e3:d1:42:0d:ee:12:03:b9:5b:6e:af:99:5c: 41:98:ca:24:78:6b:a4:84:20:14:e8:3d:bf:d6:79: 78:d6:1c:ad:e0:ce:f1:f7:09:9c:b2:cc:24:82:b4: 95:4f:09:cb:5c:a8:cc:28:af:e0:a6:2e:25:a1:c3: 96:56:7d:e9:a3:a8:c2:82:e6:b0:b4:af:9b:d1:ef: 40:6f:ae:3c:6e:03:bb:3c:da:46:56:04:5c:ed:07: b3:11:19:a9:47:5f:c0:11:5c:55:de:c1:77:77:e1: 85:46:d4:e1:ec:2d:bd:fe:82:af:ee:28:3d:bf:48: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:8B:E2:23:67:4C:44:50:B7:07:29:8A:56:FD:35:10:78:77:12 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154349.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.136.0/23 Signature Algorithm: sha256WithRSAEncryption 00:15:24:e0:c2:a9:3b:39:cf:65:da:a1:1e:24:5e:80:24:56: 23:bd:97:c8:87:65:ea:4a:dc:5b:c9:3a:95:00:26:18:9e:be: 9c:51:a9:d5:76:a8:c2:2c:4b:1e:08:17:e6:60:af:de:b5:98: 97:e4:8f:42:2e:3a:6b:d3:d2:62:20:e1:16:02:75:54:10:90: 8e:82:e8:19:d3:02:a7:e8:21:79:61:6f:e9:fd:4e:b0:5f:72: 8a:3d:c7:3a:c8:ea:17:d9:aa:78:06:82:e0:1d:b3:aa:03:9b: da:b3:61:30:e0:3f:ee:16:12:c4:67:1e:36:9f:0a:b5:8c:33: 97:8b:bb:0d:2e:47:8f:67:63:a3:1c:6f:ab:88:d7:56:bc:2b: 48:fc:34:72:fa:a4:b1:ad:1b:bd:dd:08:a4:71:82:d5:0e:8c: 2f:5c:fa:ab:a2:16:4f:15:bb:9d:f4:bb:8f:62:6c:1f:69:b4: 78:3c:fb:d0:95:87:91:b5:a6:1d:a5:d2:49:6e:89:65:1c:33: b2:53:8a:f0:80:54:dd:58:1b:0d:cb:96:0d:ac:98:af:ff:06: 63:ab:b8:38:59:54:fa:f4:37:59:88:e3:4d:d9:87:c3:f1:cd: e0:d2:11:ce:68:6b:c1:68:61:89:31:31:4f:af:8d:43:77:e1: 62:87:ef:eb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFR+EgLlQftkWya76j8PmNH//N7swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxODA2MjAyN1oX DTI3MDgxNzA2MjUyN1owMzExMC8GA1UEAxMoNkE3RThCRTIyMzY3NEM0NDUwQjcw NzI5OEE1NkZEMzUxMDc4NzcxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHM450p3rpokwuHMxRoQ1+/tNQpu2a66/mr4IFb1pjX+TqG0hAbA4wahVKQ n320RBF0j7PfJYgDf+B//d58DXcSvgSC8ZPIRLgdn7/lQ9fIqLkM1yrt8TOXZJ6k QWL6kOsX86i8LlyLsFI6Nry1kk8y/OTLeAMVvDIARvweyS48KC9ZhsCTZfjj0UIN 7hIDuVtur5lcQZjKJHhrpIQgFOg9v9Z5eNYcreDO8fcJnLLMJIK0lU8Jy1yozCiv 4KYuJaHDllZ96aOowoLmsLSvm9HvQG+uPG4DuzzaRlYEXO0HsxEZqUdfwBFcVd7B d3fhhUbU4ewtvf6Cr+4oPb9IpSkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRqfovi I2dMRFC3BymKVv01EHh3EjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzQ5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBivyIMA0GCSqGSIb3DQEBCwUAA4IBAQAAFSTgwqk7Oc9l2qEeJF6AJFYj vZfIh2XqStxbyTqVACYYnr6cUanVdqjCLEseCBfmYK/etZiX5I9CLjpr09JiIOEW AnVUEJCOgugZ0wKn6CF5YW/p/U6wX3KKPcc6yOoX2ap4BoLgHbOqA5vas2Ew4D/u FhLEZx42nwq1jDOXi7sNLkePZ2OjHG+riNdWvCtI/DRy+qSxrRu93QikcYLVDowv XPqrohZPFbud9LuPYmwfabR4PPvQlYeRtaYdpdJJbollHDOyU4rwgFTdWBsNy5YN rJiv/wZjq7g4WVT69DdZiONN2YfD8c3g0hHOaGvBaGGJMTFPr41Dd+Fih+/r -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:47 2026 by rpki-client