$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154413.roa File: AS154413.roa (raw, json) Hash identifier: hjxy8dmWQFf8kTv7J89KJj0pJTGMVkXrSPlU/yTRUOU= Subject key identifier: EB:6A:24:59:C9:F7:89:74:63:4C:53:DE:4D:8F:9B:18:75:19:E8:B7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 040CA3B021E5F275C1FD49C8269D3E90CA6A95E3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154413.roa Signing time: Sat 02 May 2026 09:23:19 +0000 ROA not before: Sat 02 May 2026 09:18:19 +0000 ROA not after: Sat 01 May 2027 09:23:19 +0000 asID: 154413 IP address blocks: 144.79.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0c:a3:b0:21:e5:f2:75:c1:fd:49:c8:26:9d:3e:90:ca:6a:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:19 2026 GMT Not After : May 1 09:23:19 2027 GMT Subject: CN=EB6A2459C9F78974634C53DE4D8F9B187519E8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:69:cb:79:d9:ae:05:d5:7e:70:c9:0c:ce: a8:98:8f:a7:fe:99:45:81:ac:7f:66:75:f3:11:29: a7:d4:b1:c0:b3:10:c2:31:4d:af:88:46:73:da:39: d7:21:e9:9e:b0:df:bc:ba:09:29:66:eb:ea:a6:ac: e0:58:23:0b:ba:68:2b:38:67:bd:56:35:dc:24:ad: 7d:c0:49:3b:8e:35:3f:c4:78:cd:41:8c:dc:8b:df: 1f:71:ae:7e:d9:8e:60:2f:17:15:a6:56:c8:eb:df: 88:90:f4:b0:9d:4d:4d:08:a3:39:40:3d:e2:3f:63: f1:cc:e3:68:9a:3e:66:29:c8:ec:90:05:ad:25:0c: c0:ba:20:05:7a:cd:20:a0:7a:47:4f:cb:60:42:b6: e9:33:3d:16:ff:e5:e4:98:81:ed:a5:27:95:bf:91: 68:d6:ed:37:78:ed:82:0d:30:09:ba:fb:8b:05:5d: e7:ef:f0:8f:10:7a:95:ab:01:fe:3c:a5:c6:d9:08: 93:05:83:e4:f5:65:df:c7:0a:f1:0e:65:39:c2:13: 57:03:cf:a6:4f:e4:75:6d:b4:50:9c:9c:be:8d:96: 4a:29:f5:13:a4:cc:62:25:4b:99:b5:f0:6a:24:5e: a3:54:00:c6:0b:22:98:7e:b5:10:d0:b0:48:09:17: 92:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6A:24:59:C9:F7:89:74:63:4C:53:DE:4D:8F:9B:18:75:19:E8:B7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.74.0/23 Signature Algorithm: sha256WithRSAEncryption 09:98:3f:bf:43:28:60:14:2d:79:36:fa:2a:ff:eb:16:e7:ca: 71:e5:be:00:f1:f2:8e:9b:24:52:62:e9:56:42:b0:e1:46:9a: 4d:45:a6:c2:52:cd:59:6d:0a:9b:08:1b:39:42:16:f7:d9:8c: cf:27:05:04:47:1a:84:de:f1:a5:a2:e2:96:bd:00:90:62:0e: df:e1:e7:33:9a:fb:5f:4e:27:7c:28:a7:9a:b7:f0:50:b6:12: 19:c8:59:4d:db:c3:a6:58:74:b7:c2:cb:de:d6:44:7a:3b:0c: db:4c:52:66:5f:5e:d2:52:b4:11:37:cc:4f:79:a5:aa:d0:2d: 95:4b:53:76:3a:80:35:cc:e3:f6:d5:88:0c:59:1f:0f:a7:0b: c5:36:25:cb:8e:b0:07:07:e5:d3:b8:1b:d1:ee:05:af:60:a5: c8:8e:3a:af:ed:af:96:a8:84:3f:2c:56:77:b4:6b:91:3e:5b: 00:54:9b:6a:c9:fa:20:19:78:3c:b3:c5:37:72:f6:aa:65:e6: 78:37:3b:86:8c:5f:58:6e:2d:99:51:77:54:c4:54:61:63:70: 1f:9b:f3:6e:ba:47:0e:d5:ed:32:df:06:88:5c:16:b5:09:57: 20:5f:2d:ef:0b:38:10:42:53:3b:f5:42:b3:e0:c3:dc:ad:93: b9:24:17:a3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBAyjsCHl8nXB/UnIJp0+kMpqleMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxOVoX DTI3MDUwMTA5MjMxOVowMzExMC8GA1UEAxMoRUI2QTI0NTlDOUY3ODk3NDYzNEM1 M0RFNEQ4RjlCMTg3NTE5RThCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbKact52a4F1X5wyQzOqJiPp/6ZRYGsf2Z18xEpp9SxwLMQwjFNr4hGc9o5 1yHpnrDfvLoJKWbr6qas4FgjC7poKzhnvVY13CStfcBJO441P8R4zUGM3IvfH3Gu ftmOYC8XFaZWyOvfiJD0sJ1NTQijOUA94j9j8czjaJo+ZinI7JAFrSUMwLogBXrN IKB6R0/LYEK26TM9Fv/l5JiB7aUnlb+RaNbtN3jtgg0wCbr7iwVd5+/wjxB6lasB /jylxtkIkwWD5PVl38cK8Q5lOcITVwPPpk/kdW20UJycvo2WSin1E6TMYiVLmbXw aiReo1QAxgsimH61ENCwSAkXkiECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTraiRZ yfeJdGNMU95Nj5sYdRnotzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBkE9KMA0GCSqGSIb3DQEBCwUAA4IBAQAJmD+/QyhgFC15Nvoq/+sW58px 5b4A8fKOmyRSYulWQrDhRppNRabCUs1ZbQqbCBs5Qhb32YzPJwUERxqE3vGlouKW vQCQYg7f4eczmvtfTid8KKeat/BQthIZyFlN28OmWHS3wsve1kR6OwzbTFJmX17S UrQRN8xPeaWq0C2VS1N2OoA1zOP21YgMWR8PpwvFNiXLjrAHB+XTuBvR7gWvYKXI jjqv7a+WqIQ/LFZ3tGuRPlsAVJtqyfogGXg8s8U3cvaqZeZ4NzuGjF9Ybi2ZUXdU xFRhY3Afm/NuukcO1e0y3waIXBa1CVcgXy3vCzgQQlM79UKz4MPcrZO5JBej -----END CERTIFICATE-----Generated at Sat May 2 21:03:48 2026 by rpki-client