$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154372.roa File: AS154372.roa (raw, json) Hash identifier: kntZQOWh5OmI67lJ92TOZqwv7k02YCBXw/mZtZiSX1A= Subject key identifier: 24:C7:C6:05:CA:0F:B3:2A:4E:04:B3:CE:3E:A4:1D:D2:FF:D1:91:29 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 614A47CD37FB44A14CE049CF4D5ED3EFF66832A6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154372.roa Signing time: Sat 02 May 2026 09:23:10 +0000 ROA not before: Sat 02 May 2026 09:18:10 +0000 ROA not after: Sat 01 May 2027 09:23:10 +0000 asID: 154372 IP address blocks: 138.252.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4a:47:cd:37:fb:44:a1:4c:e0:49:cf:4d:5e:d3:ef:f6:68:32:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:10 2026 GMT Not After : May 1 09:23:10 2027 GMT Subject: CN=24C7C605CA0FB32A4E04B3CE3EA41DD2FFD19129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:b9:d9:ac:9b:e2:1b:72:30:6d:c9:15:f3: 2e:75:df:e5:cb:b8:61:3d:ac:e9:91:de:5c:bb:16: 85:b8:9c:b9:3a:6d:d1:cb:9a:b6:e9:a8:7f:94:78: 40:b8:50:a4:5e:26:a1:23:98:0c:2c:2c:19:5d:53: 76:71:4d:b4:ad:5a:a1:84:f3:0e:37:48:ff:bb:b5: f9:f3:7d:d1:2d:be:46:d9:34:a9:e9:e9:db:79:78: a9:9f:73:f4:ab:84:70:9e:5d:a8:ae:3f:ae:cf:05: 93:99:66:92:c5:8c:4a:cf:3a:c8:10:24:e3:53:54: 73:a6:76:4b:41:1f:d7:bc:0d:b7:6d:c0:24:26:6c: 90:76:06:c5:ae:7d:be:6c:83:7f:90:8d:3f:de:67: c1:78:20:73:df:53:04:64:cd:ab:72:52:e1:59:c6: ae:86:0e:85:fe:48:1a:d6:de:bc:fb:88:ef:23:00: 1f:f7:fa:2e:36:62:a2:21:31:26:b6:51:01:ca:06: b9:e3:ea:96:41:22:96:bf:8c:ef:07:5b:3e:b1:3f: 90:e0:70:ba:64:6d:d8:d9:dd:cc:ed:7d:94:69:81: aa:40:a5:ec:01:b0:b9:bb:54:f3:cf:f6:32:52:80: 0c:d6:2a:31:6f:5e:b3:f0:07:19:46:d6:a9:fe:50: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C7:C6:05:CA:0F:B3:2A:4E:04:B3:CE:3E:A4:1D:D2:FF:D1:91:29 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.158.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:ae:24:a9:20:d7:8e:b8:00:c3:b4:38:47:96:1d:49:47:09: 99:ee:8e:b0:cc:25:e9:db:29:0f:44:b2:56:37:91:9a:f6:25: d8:cf:20:3d:be:ea:20:df:02:6d:89:8f:ba:01:53:b8:53:1d: 11:6a:b9:45:3a:60:69:d5:0d:43:fd:a3:f8:ef:2e:b8:d8:a2: 3f:77:48:72:68:42:7d:70:81:01:d5:d8:2e:80:87:21:75:9f: 26:cc:bc:30:5a:98:7d:b6:20:2b:ac:e0:92:89:cb:f2:e3:10: 58:4c:bb:93:da:1e:c0:9c:ad:47:9b:58:7d:15:52:48:2f:c6: 5f:a4:58:d4:26:63:8a:bf:de:65:31:72:77:53:33:7a:65:ff: bd:18:34:62:b3:e4:10:81:7f:24:4d:60:8e:56:71:6e:37:eb: 1e:c8:7a:10:f4:f0:1c:7a:5b:aa:db:23:13:c6:21:20:ab:d0: 29:83:05:76:46:d9:c2:70:dd:1e:5d:55:61:8c:a0:26:aa:35: fc:ad:51:8a:11:dd:13:0f:08:6e:2a:2d:cc:fe:a5:88:b4:da: d9:37:0f:bf:14:93:a2:3a:a6:67:c9:8c:75:7e:c4:4a:27:12: 86:5f:08:f2:1d:69:cf:5f:ec:6f:a6:b8:f3:d2:0b:32:09:e6: ae:2d:84:14 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYUpHzTf7RKFM4EnPTV7T7/ZoMqYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxMFoX DTI3MDUwMTA5MjMxMFowMzExMC8GA1UEAxMoMjRDN0M2MDVDQTBGQjMyQTRFMDRC M0NFM0VBNDFERDJGRkQxOTEyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv/udmsm+IbcjBtyRXzLnXf5cu4YT2s6ZHeXLsWhbicuTpt0cuatumof5R4 QLhQpF4moSOYDCwsGV1TdnFNtK1aoYTzDjdI/7u1+fN90S2+Rtk0qenp23l4qZ9z 9KuEcJ5dqK4/rs8Fk5lmksWMSs86yBAk41NUc6Z2S0Ef17wNt23AJCZskHYGxa59 vmyDf5CNP95nwXggc99TBGTNq3JS4VnGroYOhf5IGtbevPuI7yMAH/f6LjZioiEx JrZRAcoGuePqlkEilr+M7wdbPrE/kOBwumRt2NndzO19lGmBqkCl7AGwubtU88/2 MlKADNYqMW9es/AHGUbWqf5Qj0MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQkx8YF yg+zKk4Es84+pB3S/9GRKTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBivyeMA0GCSqGSIb3DQEBCwUAA4IBAQAvriSpINeOuADDtDhHlh1JRwmZ 7o6wzCXp2ykPRLJWN5Ga9iXYzyA9vuog3wJtiY+6AVO4Ux0RarlFOmBp1Q1D/aP4 7y642KI/d0hyaEJ9cIEB1dgugIchdZ8mzLwwWph9tiArrOCSicvy4xBYTLuT2h7A nK1Hm1h9FVJIL8ZfpFjUJmOKv95lMXJ3UzN6Zf+9GDRis+QQgX8kTWCOVnFuN+se yHoQ9PAceluq2yMTxiEgq9ApgwV2RtnCcN0eXVVhjKAmqjX8rVGKEd0TDwhuKi3M /qWItNrZNw+/FJOiOqZnyYx1fsRKJxKGXwjyHWnPX+xvprjz0gsyCeauLYQU -----END CERTIFICATE-----Generated at Sat May 2 21:04:35 2026 by rpki-client