$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154393.roa File: AS154393.roa (raw, json) Hash identifier: K565RRtF9Q+uq7rkXfxIL7ZamJ+iHINoMZln81UUrsc= Subject key identifier: E0:4B:0F:4A:7A:81:94:86:E2:0E:67:65:BE:AA:8D:66:F6:0D:67:30 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 393FF816517BD679F1D4B40D49F59D0B360887CE Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154393.roa Signing time: Sat 02 May 2026 09:23:26 +0000 ROA not before: Sat 02 May 2026 09:18:26 +0000 ROA not after: Sat 01 May 2027 09:23:26 +0000 asID: 154393 IP address blocks: 138.252.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:f8:16:51:7b:d6:79:f1:d4:b4:0d:49:f5:9d:0b:36:08:87:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:26 2026 GMT Not After : May 1 09:23:26 2027 GMT Subject: CN=E04B0F4A7A819486E20E6765BEAA8D66F60D6730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:10:e1:52:b1:01:44:4d:f6:a5:99:92:70: 06:6c:5e:28:95:2e:08:a4:f1:f0:e2:ae:51:98:d4: 25:bd:5e:4e:16:4d:f0:ed:dc:6d:ef:0c:f4:f3:4e: e9:b9:bd:01:a8:72:d1:0b:68:03:ec:ea:ed:2c:6e: d1:7c:1a:a8:47:8f:18:e0:f7:ed:41:e7:9e:94:09: b1:60:f0:2b:79:9a:d9:0a:35:13:42:b3:80:62:89: 81:2d:6f:fc:72:d6:fa:3f:fc:df:03:5c:30:3a:0e: b0:db:6b:64:c9:61:b5:d8:ab:e8:e6:a5:e9:7e:22: 0c:d0:ea:45:38:66:15:7d:c7:e8:2e:4a:85:6f:47: 2e:e5:68:54:a7:b5:ee:70:83:b1:f6:8c:58:f9:4e: 8e:e7:e1:38:7d:7d:c4:e6:e8:62:11:4c:91:53:de: 6e:42:97:3d:c7:d0:48:cc:3f:30:6d:15:fe:73:dc: e6:be:14:f3:a8:a0:1e:14:60:02:8b:fa:7f:7c:fa: 01:ba:c3:4a:79:1e:5a:b6:95:50:27:fd:9b:e7:62: 63:f3:f4:4b:8e:ef:1e:b0:32:75:eb:a3:d4:50:f4: 22:54:06:4a:33:63:0e:6c:cb:02:89:67:a7:ee:7f: e3:24:e5:4f:72:53:2a:fc:28:f2:42:1e:a9:a7:d4: 9c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4B:0F:4A:7A:81:94:86:E2:0E:67:65:BE:AA:8D:66:F6:0D:67:30 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.252.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:db:ca:66:47:2c:44:23:0f:c5:3f:4c:da:3f:23:69:0f:ba: a2:9b:c1:54:9b:20:b0:98:f8:6f:87:30:15:2b:da:bc:5d:79: 25:cf:bc:6f:e6:36:be:a4:67:c1:4f:8c:29:5a:c5:13:38:26: ba:4e:ed:fa:27:94:53:4f:be:b1:17:c5:ce:df:eb:2a:81:1c: 0b:79:3e:fa:22:e9:38:95:2f:9f:11:7a:d9:a3:02:57:d2:4e: 01:23:96:b6:33:d8:43:e3:1a:c2:75:2b:20:d5:f7:7f:fd:c2: 6a:3b:1d:49:0f:16:41:5b:9a:ed:5e:d4:e4:85:26:77:e7:9a: f9:63:92:43:85:45:ba:2b:3f:5d:42:67:be:59:f8:bb:ad:85: e3:a5:e4:cd:c5:4d:57:bb:26:55:01:18:d3:37:8d:20:19:d9: 4c:03:e3:69:30:21:fb:88:0b:c6:2f:cd:0a:0b:94:0b:bf:51: 24:3a:83:4f:f7:9b:f0:76:2d:cf:7d:8f:ad:13:93:11:36:68: 20:2a:e4:b3:4e:ed:da:6f:66:4d:45:c0:e7:3a:bd:05:94:e9: c4:09:d4:aa:9a:9e:ac:1c:5a:29:70:34:fa:42:a4:bc:62:9d: b0:40:28:53:a0:ba:89:fb:41:97:09:a6:68:d3:63:40:e6:f8: 30:c6:44:b4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOT/4FlF71nnx1LQNSfWdCzYIh84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgyNloX DTI3MDUwMTA5MjMyNlowMzExMC8GA1UEAxMoRTA0QjBGNEE3QTgxOTQ4NkUyMEU2 NzY1QkVBQThENjZGNjBENjczMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmLEOFSsQFETfalmZJwBmxeKJUuCKTx8OKuUZjUJb1eThZN8O3cbe8M9PNO 6bm9Aahy0QtoA+zq7Sxu0XwaqEePGOD37UHnnpQJsWDwK3ma2Qo1E0KzgGKJgS1v /HLW+j/83wNcMDoOsNtrZMlhtdir6Oal6X4iDNDqRThmFX3H6C5KhW9HLuVoVKe1 7nCDsfaMWPlOjufhOH19xOboYhFMkVPebkKXPcfQSMw/MG0V/nPc5r4U86igHhRg Aov6f3z6AbrDSnkeWraVUCf9m+diY/P0S47vHrAydeuj1FD0IlQGSjNjDmzLAoln p+5/4yTlT3JTKvwo8kIeqafUnG0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTgSw9K eoGUhuIOZ2W+qo1m9g1nMDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzkzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivz8MA0GCSqGSIb3DQEBCwUAA4IBAQBN28pmRyxEIw/FP0zaPyNpD7qi m8FUmyCwmPhvhzAVK9q8XXklz7xv5ja+pGfBT4wpWsUTOCa6Tu36J5RTT76xF8XO 3+sqgRwLeT76Iuk4lS+fEXrZowJX0k4BI5a2M9hD4xrCdSsg1fd//cJqOx1JDxZB W5rtXtTkhSZ355r5Y5JDhUW6Kz9dQme+Wfi7rYXjpeTNxU1XuyZVARjTN40gGdlM A+NpMCH7iAvGL80KC5QLv1EkOoNP95vwdi3PfY+tE5MRNmggKuSzTu3ab2ZNRcDn Or0FlOnECdSqmp6sHFopcDT6QqS8Yp2wQChToLqJ+0GXCaZo02NA5vgwxkS0 -----END CERTIFICATE-----Generated at Sat May 2 21:05:07 2026 by rpki-client