$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154401.roa File: AS154401.roa (raw, json) Hash identifier: EE46yeBXIO1nKC2uTfCKCZph+U0xjau4PgnrmL1W+mU= Subject key identifier: DE:CD:1A:DB:23:F7:C0:B4:4D:FA:67:F0:5B:00:40:27:E3:55:0C:40 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4A1113674B776BF22450A2885FFC492051B3BD26 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154401.roa Signing time: Sat 02 May 2026 09:23:06 +0000 ROA not before: Sat 02 May 2026 09:18:06 +0000 ROA not after: Sat 01 May 2027 09:23:06 +0000 asID: 154401 IP address blocks: 144.79.34.0/23 maxlen: 24 144.79.34.0/24 maxlen: 24 144.79.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:11:13:67:4b:77:6b:f2:24:50:a2:88:5f:fc:49:20:51:b3:bd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:06 2026 GMT Not After : May 1 09:23:06 2027 GMT Subject: CN=DECD1ADB23F7C0B44DFA67F05B004027E3550C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:9b:b7:dd:14:fa:a4:5a:13:4d:13:f0:da: 41:7b:af:91:82:cf:05:c4:b0:c8:c5:1c:37:97:cd: f9:48:4b:0a:fc:db:be:6f:dc:70:d5:67:19:41:10: 0c:32:a4:93:fd:a2:c2:2f:e1:51:4b:11:52:77:67: 6b:d4:56:6d:9c:90:79:b7:fc:c0:00:b7:18:d4:60: e4:ec:9e:85:66:b0:1f:e6:71:34:d2:d5:60:fb:13: 6e:e6:48:4b:c5:5d:41:b3:8d:35:2d:06:a9:d7:1f: 84:5b:65:3f:77:c5:d0:e7:18:f4:9e:33:63:96:67: 4f:77:95:96:23:01:63:75:a2:85:67:59:aa:e5:4a: 65:9d:70:3c:c5:df:b4:53:fa:32:80:3e:25:8f:39: 7c:21:7b:21:7f:85:b4:a7:77:33:0f:95:66:46:85: 66:dc:00:b6:8a:5b:0c:38:64:dc:22:7f:ae:5e:bb: aa:d9:82:89:fb:aa:df:14:0b:41:1f:58:95:42:04: e2:e2:96:f7:d1:09:5f:70:3d:2f:6b:9c:94:bc:ec: 13:1e:a2:3b:f5:99:00:59:98:6d:1f:36:d9:03:60: a1:44:6b:49:18:5a:dd:2d:35:cc:6e:5c:20:4d:72: 9c:9f:4e:f5:e0:ca:50:41:52:8f:05:53:5e:d5:56: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CD:1A:DB:23:F7:C0:B4:4D:FA:67:F0:5B:00:40:27:E3:55:0C:40 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.34.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:a4:8e:70:f0:47:02:0d:a2:2f:23:69:84:7b:a6:f7:62:0f: ce:f8:bf:cd:a3:1c:17:84:a5:c5:19:ea:27:2d:f0:32:79:4f: c7:4b:82:56:4b:36:9e:02:9f:97:7d:e9:72:5f:cb:87:50:f9: 10:d0:73:2e:82:f2:9e:4b:38:0c:bb:0b:bf:57:b4:b9:16:c4: 48:f7:ac:b4:76:1b:29:54:e6:ab:fc:61:1d:91:d3:4f:d9:47: da:90:c0:f8:7b:2d:52:6f:4b:07:4b:5b:02:a4:ef:81:ba:81: a6:96:95:26:4f:17:66:a2:c8:49:4f:d6:df:8a:2b:00:5d:90: ed:8f:d3:28:e9:f4:03:47:dc:6b:58:f0:dd:78:3f:87:e6:7b: a9:7b:fc:4d:31:0a:68:f5:de:be:d5:43:9e:02:0a:00:c7:b8: 26:f0:d7:d6:6c:20:52:e2:c8:d9:97:9f:b5:2f:e8:98:7f:68: 09:f0:ad:c9:d9:cf:ee:06:54:4d:f4:78:12:ac:14:7d:c0:58: b0:35:7a:cd:94:f1:ab:e9:18:fc:60:83:47:ea:4f:06:cd:c9: 75:00:c1:67:80:d7:1f:5b:eb:c7:46:e3:c3:b9:4f:7c:78:6e: c5:55:47:5b:5c:ac:76:6a:12:be:3e:16:7a:15:bf:11:a9:ae: 4a:e2:17:c4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUShETZ0t3a/IkUKKIX/xJIFGzvSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwNloX DTI3MDUwMTA5MjMwNlowMzExMC8GA1UEAxMoREVDRDFBREIyM0Y3QzBCNDRERkE2 N0YwNUIwMDQwMjdFMzU1MEM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtcm7fdFPqkWhNNE/DaQXuvkYLPBcSwyMUcN5fN+UhLCvzbvm/ccNVnGUEQ DDKkk/2iwi/hUUsRUndna9RWbZyQebf8wAC3GNRg5OyehWawH+ZxNNLVYPsTbuZI S8VdQbONNS0GqdcfhFtlP3fF0OcY9J4zY5ZnT3eVliMBY3WihWdZquVKZZ1wPMXf tFP6MoA+JY85fCF7IX+FtKd3Mw+VZkaFZtwAtopbDDhk3CJ/rl67qtmCifuq3xQL QR9YlUIE4uKW99EJX3A9L2uclLzsEx6iO/WZAFmYbR822QNgoURrSRha3S01zG5c IE1ynJ9O9eDKUEFSjwVTXtVW+6MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTezRrb I/fAtE36Z/BbAEAn41UMQDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBkE8iMA0GCSqGSIb3DQEBCwUAA4IBAQCbpI5w8EcCDaIvI2mEe6b3Yg/O +L/NoxwXhKXFGeonLfAyeU/HS4JWSzaeAp+XfelyX8uHUPkQ0HMugvKeSzgMuwu/ V7S5FsRI96y0dhspVOar/GEdkdNP2UfakMD4ey1Sb0sHS1sCpO+BuoGmlpUmTxdm oshJT9bfiisAXZDtj9Mo6fQDR9xrWPDdeD+H5nupe/xNMQpo9d6+1UOeAgoAx7gm 8NfWbCBS4sjZl5+1L+iYf2gJ8K3J2c/uBlRN9HgSrBR9wFiwNXrNlPGr6Rj8YINH 6k8Gzcl1AMFngNcfW+vHRuPDuU98eG7FVUdbXKx2ahK+PhZ6Fb8Rqa5K4hfE -----END CERTIFICATE-----Generated at Sat May 2 21:03:34 2026 by rpki-client