$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154415.roa File: AS154415.roa (raw, json) Hash identifier: x9/jHjoAN2eVBYen4FBSZtGNTAILxam6auLyxaihAm8= Subject key identifier: A8:7B:9B:E7:72:CA:B3:D7:DA:83:71:6C:F4:DB:C2:2F:65:43:AD:47 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3437877559B7CC1497191D81D91B833AC4BF58E4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154415.roa Signing time: Sat 02 May 2026 09:22:58 +0000 ROA not before: Sat 02 May 2026 09:17:58 +0000 ROA not after: Sat 01 May 2027 09:22:58 +0000 asID: 154415 IP address blocks: 144.79.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:37:87:75:59:b7:cc:14:97:19:1d:81:d9:1b:83:3a:c4:bf:58:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:58 2026 GMT Not After : May 1 09:22:58 2027 GMT Subject: CN=A87B9BE772CAB3D7DA83716CF4DBC22F6543AD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:a7:96:60:7a:ea:25:07:3d:5a:0d:41:a5: b3:92:3c:ae:dd:b0:83:bd:f1:c1:c2:a4:86:48:26: eb:0b:60:f0:5b:9d:cd:28:71:36:e4:1c:02:64:b6: d4:75:1f:23:d2:36:1e:02:0a:b3:23:4a:15:3c:d5: fd:4e:a9:ef:1f:00:43:7c:55:ac:1d:25:8c:62:d0: ad:1f:77:55:04:79:d1:ae:e9:6b:c2:79:73:b8:45: 6c:b2:b0:03:7d:e3:ab:1e:e6:6b:8a:43:95:0b:db: c9:44:5f:2f:fa:82:3f:98:9b:c2:33:10:7d:1a:76: b9:1d:f9:f9:4b:62:bb:c0:d6:46:e3:ac:42:91:c9: c3:7b:74:a1:90:e5:ae:6a:0f:97:41:e1:07:73:a6: 3d:47:2b:d8:47:01:c0:74:d9:16:6d:b2:5d:4a:65: 9d:42:70:95:59:3b:10:db:af:35:6b:d4:e1:61:f9: 84:4d:80:2a:4e:3b:e2:2c:86:01:52:4e:2a:f6:92: ec:f4:9e:85:a9:a6:51:81:9e:a5:14:65:b5:f9:f0: 9f:2d:bd:68:f0:ea:85:6a:2d:3a:44:35:40:3f:09: dd:f9:b9:c0:7f:97:b1:fb:6f:9e:09:d2:d7:ef:af: 25:60:3f:ac:4f:dd:75:64:c8:3d:e5:01:0e:34:b7: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7B:9B:E7:72:CA:B3:D7:DA:83:71:6C:F4:DB:C2:2F:65:43:AD:47 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.52.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:1d:24:d9:df:14:dd:30:aa:de:ad:81:6a:7a:63:de:23:ca: d7:93:24:ef:98:02:f9:ff:88:90:23:b4:86:32:9f:40:24:f9: ec:3b:1a:a7:e0:4c:ed:3f:84:b1:0a:78:33:6f:22:ee:ce:26: 10:70:70:16:00:fb:d4:47:48:83:0d:9f:7f:35:78:6e:65:bb: a2:4f:86:91:2b:e6:87:22:67:e8:ef:17:06:04:ee:15:20:36: 49:34:e6:bf:c6:34:1f:9e:7e:95:0f:d2:42:1c:76:d6:43:c9: 89:7f:5f:ba:98:94:22:53:88:88:d1:54:f7:96:43:f3:21:47: 17:39:fd:26:79:61:d7:2d:6b:b3:1e:a1:09:89:b9:fc:c6:96: e1:6c:92:f8:3f:c9:9a:b5:9b:1e:6f:40:00:b4:dc:7b:4c:b5: 87:9d:3a:6b:f3:a2:ae:ff:28:8e:95:ef:e9:27:4f:11:06:a0: aa:99:96:11:db:f6:a0:4b:98:f3:36:54:fb:c9:95:12:64:f9: 70:73:09:fe:48:e9:93:e7:7e:33:28:a3:af:9b:c1:0f:40:94: 41:5d:de:76:5c:49:c7:df:45:2d:f4:14:a8:fb:68:4d:fa:3e: 2c:d7:68:45:0c:78:56:7b:0e:dd:c4:b5:b9:63:3f:66:01:f3: 89:30:44:70 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNDeHdVm3zBSXGR2B2RuDOsS/WOQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1OFoX DTI3MDUwMTA5MjI1OFowMzExMC8GA1UEAxMoQTg3QjlCRTc3MkNBQjNEN0RBODM3 MTZDRjREQkMyMkY2NTQzQUQ0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhMp5ZgeuolBz1aDUGls5I8rt2wg73xwcKkhkgm6wtg8FudzShxNuQcAmS2 1HUfI9I2HgIKsyNKFTzV/U6p7x8AQ3xVrB0ljGLQrR93VQR50a7pa8J5c7hFbLKw A33jqx7ma4pDlQvbyURfL/qCP5ibwjMQfRp2uR35+Utiu8DWRuOsQpHJw3t0oZDl rmoPl0HhB3OmPUcr2EcBwHTZFm2yXUplnUJwlVk7ENuvNWvU4WH5hE2AKk474iyG AVJOKvaS7PSehammUYGepRRltfnwny29aPDqhWotOkQ1QD8J3fm5wH+XsftvngnS 1++vJWA/rE/ddWTIPeUBDjS3p+cCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSoe5vn csqz19qDcWz028IvZUOtRzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBkE80MA0GCSqGSIb3DQEBCwUAA4IBAQBKHSTZ3xTdMKrerYFqemPeI8rX kyTvmAL5/4iQI7SGMp9AJPnsOxqn4EztP4SxCngzbyLuziYQcHAWAPvUR0iDDZ9/ NXhuZbuiT4aRK+aHImfo7xcGBO4VIDZJNOa/xjQfnn6VD9JCHHbWQ8mJf1+6mJQi U4iI0VT3lkPzIUcXOf0meWHXLWuzHqEJibn8xpbhbJL4P8matZseb0AAtNx7TLWH nTpr86Ku/yiOle/pJ08RBqCqmZYR2/agS5jzNlT7yZUSZPlwcwn+SOmT534zKKOv m8EPQJRBXd52XEnH30Ut9BSo+2hN+j4s12hFDHhWew7dxLW5Yz9mAfOJMERw -----END CERTIFICATE-----Generated at Sat May 2 21:03:50 2026 by rpki-client