$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154369.roa File: AS154369.roa (raw, json) Hash identifier: bsIoBHw1yZ7u0J6JSvfl3Eg2V6EoZiJrtV5ymvZ0vmM= Subject key identifier: C3:3B:D1:A6:23:51:0E:57:D4:BA:1C:7F:C8:63:31:FC:20:8E:D0:30 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7028E7094A88D7C1672CB1F3192267CEABCF2F90 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154369.roa Signing time: Sat 02 May 2026 09:22:45 +0000 ROA not before: Sat 02 May 2026 09:17:45 +0000 ROA not after: Sat 01 May 2027 09:22:45 +0000 asID: 154369 IP address blocks: 138.252.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:28:e7:09:4a:88:d7:c1:67:2c:b1:f3:19:22:67:ce:ab:cf:2f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:45 2026 GMT Not After : May 1 09:22:45 2027 GMT Subject: CN=C33BD1A623510E57D4BA1C7FC86331FC208ED030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:72:3e:86:9b:a6:0d:07:fc:d0:4c:6d:61: 12:d1:2a:16:a1:1c:83:1c:70:5b:c8:66:4d:7e:e5: 54:eb:45:b9:2c:58:91:0e:41:d3:e0:77:6f:00:f0: 54:f3:06:6b:26:ef:f0:b7:a1:ce:3a:d2:11:ae:61: 9b:f6:1e:10:f7:9c:74:7c:b2:bb:3f:52:54:cc:1f: b3:15:1b:63:90:6f:0b:98:e4:47:3e:6d:63:a6:a7: de:11:5d:ce:24:df:63:d0:1d:d6:47:17:25:b7:d0: ff:a2:74:c9:49:8d:1c:0e:8b:54:66:3e:cd:67:fd: aa:0a:75:e2:04:4c:37:af:71:fa:c1:f3:c9:f1:af: e8:b0:39:90:d7:05:40:ee:17:1f:c8:b4:8d:04:ee: 8a:28:2d:90:ed:a9:c1:ca:48:73:94:5f:77:4b:d1: ea:5f:28:a2:0a:26:32:5d:ce:70:1c:21:13:77:9f: 40:99:3c:dd:1e:e4:03:84:aa:5f:35:15:ee:29:df: 03:0d:4a:f5:13:e6:3d:8f:06:e1:48:e9:62:ca:89: 9c:ca:a3:3d:1a:9f:8b:ce:da:eb:2e:48:2c:28:0a: e6:fc:fd:4c:22:13:19:eb:1d:09:30:04:24:2b:b8: b2:ff:da:ae:77:53:a3:cf:e5:1a:7c:76:eb:cd:d0: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:D1:A6:23:51:0E:57:D4:BA:1C:7F:C8:63:31:FC:20:8E:D0:30 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.193.0/24 Signature Algorithm: sha256WithRSAEncryption af:09:e6:74:aa:41:63:15:31:d9:c2:4f:04:ba:24:3e:71:d8: d9:4c:00:12:ce:be:19:a6:da:18:5d:53:d7:a2:c8:28:bd:bb: a1:40:60:8a:98:99:d5:a6:94:1b:9f:d3:d3:c7:09:46:21:11: 3d:43:ab:aa:72:03:98:d0:7f:a1:e6:af:cc:54:5e:2c:df:3a: e3:9b:5f:1b:78:ad:3a:8e:fd:a1:d4:8f:b4:57:21:0c:cb:6e: 78:8c:91:ed:e2:bb:62:3f:0c:ac:c3:95:1d:6e:b1:90:b4:97: c3:42:39:45:f9:da:42:41:23:60:d2:73:91:67:4c:12:df:98: 91:df:37:e9:36:04:f2:7a:ec:d4:01:15:41:35:f3:df:9b:81: b8:d5:0b:ba:47:2e:d8:cb:85:36:a7:08:9a:ff:16:4e:8c:9b: f9:3b:bd:51:b9:bd:75:7b:ea:be:ca:d0:20:91:7f:7b:b0:a0: 28:ad:03:92:92:ad:9f:c5:71:dd:ac:e8:f9:fb:55:57:dc:b3: 5a:a3:6e:55:bc:a4:f6:70:79:6b:ac:bc:42:3d:9a:48:28:dc: 6c:f2:7d:e9:ca:cd:ed:91:2f:92:0c:30:42:b0:6f:ed:9a:1b: dc:91:ef:99:b0:cb:5d:ed:bc:76:f0:6d:18:2e:1f:64:1a:33: 7d:65:d5:21 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcCjnCUqI18FnLLHzGSJnzqvPL5AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0NVoX DTI3MDUwMTA5MjI0NVowMzExMC8GA1UEAxMoQzMzQkQxQTYyMzUxMEU1N0Q0QkEx QzdGQzg2MzMxRkMyMDhFRDAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONXcj6Gm6YNB/zQTG1hEtEqFqEcgxxwW8hmTX7lVOtFuSxYkQ5B0+B3bwDw VPMGaybv8LehzjrSEa5hm/YeEPecdHyyuz9SVMwfsxUbY5BvC5jkRz5tY6an3hFd ziTfY9Ad1kcXJbfQ/6J0yUmNHA6LVGY+zWf9qgp14gRMN69x+sHzyfGv6LA5kNcF QO4XH8i0jQTuiigtkO2pwcpIc5Rfd0vR6l8oogomMl3OcBwhE3efQJk83R7kA4Sq XzUV7infAw1K9RPmPY8G4UjpYsqJnMqjPRqfi87a6y5ILCgK5vz9TCITGesdCTAE JCu4sv/arndTo8/lGnx2683Q+LMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTDO9Gm I1EOV9S6HH/IYzH8II7QMDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivzBMA0GCSqGSIb3DQEBCwUAA4IBAQCvCeZ0qkFjFTHZwk8EuiQ+cdjZ TAASzr4ZptoYXVPXosgovbuhQGCKmJnVppQbn9PTxwlGIRE9Q6uqcgOY0H+h5q/M VF4s3zrjm18beK06jv2h1I+0VyEMy254jJHt4rtiPwysw5UdbrGQtJfDQjlF+dpC QSNg0nORZ0wS35iR3zfpNgTyeuzUARVBNfPfm4G41Qu6Ry7Yy4U2pwia/xZOjJv5 O71Rub11e+q+ytAgkX97sKAorQOSkq2fxXHdrOj5+1VX3LNao25VvKT2cHlrrLxC PZpIKNxs8n3pys3tkS+SDDBCsG/tmhvcke+ZsMtd7bx28G0YLh9kGjN9ZdUh -----END CERTIFICATE-----Generated at Sat May 2 21:05:07 2026 by rpki-client