$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154430.roa File: AS154430.roa (raw, json) Hash identifier: TajTkzSGISFHK4dIKz7sfxnqW9Q6/BrTDMqSXNBI0KI= Subject key identifier: 08:12:08:2A:A3:B7:4F:B1:C8:14:E8:79:69:F3:C1:6E:A7:DF:33:4D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 56D4A24A7634BC5972AAB5782AD9ACC71CB8244B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154430.roa Signing time: Sat 02 May 2026 09:23:20 +0000 ROA not before: Sat 02 May 2026 09:18:20 +0000 ROA not after: Sat 01 May 2027 09:23:20 +0000 asID: 154430 IP address blocks: 144.79.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d4:a2:4a:76:34:bc:59:72:aa:b5:78:2a:d9:ac:c7:1c:b8:24:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:20 2026 GMT Not After : May 1 09:23:20 2027 GMT Subject: CN=0812082AA3B74FB1C814E87969F3C16EA7DF334D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:07:b2:10:bd:7d:8e:a4:cc:37:7a:cc:5e: 19:6d:32:98:61:41:31:a1:a2:b3:ad:e4:d2:ef:c0: bd:e3:6e:3d:56:a0:99:52:b3:cf:44:bb:58:9e:5f: 9e:6b:11:fc:94:76:33:5f:40:e2:12:54:9d:31:70: cd:ca:e7:0b:02:b0:c3:14:4c:c7:7e:bc:39:81:64: de:e1:03:92:58:5d:39:c5:84:e9:11:88:59:94:67: 35:2f:43:34:df:64:03:bc:a1:eb:df:47:61:9f:6f: cb:00:fd:2e:67:4f:d1:50:ab:38:2e:c7:f6:74:15: 87:4b:81:0c:bd:7b:de:95:42:43:15:46:06:c6:7c: 10:c6:de:98:c1:4c:6b:e9:0a:1b:36:a7:77:bf:21: f5:d4:3f:67:8e:28:19:00:1c:d4:73:b6:a6:3a:62: 1d:fa:89:e4:33:c5:bf:b2:11:04:fc:36:ba:81:cb: 64:69:17:a9:78:93:ee:64:20:2b:5f:88:0f:60:75: e7:d7:84:ce:4f:7e:7d:49:a3:c6:7a:83:f5:82:15: f2:fc:cf:ba:51:06:9b:43:18:bd:75:cc:85:1f:4c: 78:ce:d0:cc:ac:64:ee:58:f8:c8:f7:8f:d7:09:99: 10:b0:51:27:56:54:35:0d:1a:14:f0:66:de:f3:77: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:08:2A:A3:B7:4F:B1:C8:14:E8:79:69:F3:C1:6E:A7:DF:33:4D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:57:25:2d:48:79:37:83:ea:dc:fa:f8:6b:f4:ca:02:b4:40: 2d:5d:3d:79:0f:30:ef:38:08:46:19:08:f7:0b:7f:ca:4b:07: c2:ba:67:61:c4:0a:71:5c:41:cf:66:46:cf:a7:93:fa:cc:1a: 6c:d2:ad:78:47:78:a1:70:da:55:e9:71:2b:5b:11:dd:df:05: 1f:c4:da:83:01:d2:20:d0:ef:b1:71:50:ad:3e:69:63:6a:43: 26:57:63:8e:77:ce:9e:dc:67:44:bd:d5:da:b0:03:de:28:23: 8f:47:d5:42:5a:51:a1:8c:74:51:be:ae:5f:9a:22:69:f2:55: e1:10:48:b3:64:a9:c6:74:fd:22:5a:50:ce:09:88:25:20:c3: 9f:34:d0:d4:69:23:9f:57:3f:23:f5:89:87:ac:bb:e9:a5:97: 9b:d4:c9:15:08:bc:d5:c7:36:d2:19:77:77:3f:48:53:29:3d: 6d:c4:84:96:ec:8f:ba:14:ca:a2:8a:f4:80:c0:c7:6f:88:bd: 1c:21:e2:52:72:ad:d7:2e:5d:62:cc:7f:f2:5e:82:7a:10:81: ef:70:39:b9:a1:71:10:56:18:ba:e0:bb:99:02:03:6a:48:aa: 8d:bc:b8:b6:e9:57:6a:e4:4c:e7:fd:b0:7a:79:c0:09:d8:03: 1a:a8:a1:95 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVtSiSnY0vFlyqrV4Ktmsxxy4JEswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgyMFoX DTI3MDUwMTA5MjMyMFowMzExMC8GA1UEAxMoMDgxMjA4MkFBM0I3NEZCMUM4MTRF ODc5NjlGM0MxNkVBN0RGMzM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJL8B7IQvX2OpMw3esxeGW0ymGFBMaGis63k0u/AveNuPVagmVKzz0S7WJ5f nmsR/JR2M19A4hJUnTFwzcrnCwKwwxRMx368OYFk3uEDklhdOcWE6RGIWZRnNS9D NN9kA7yh699HYZ9vywD9LmdP0VCrOC7H9nQVh0uBDL173pVCQxVGBsZ8EMbemMFM a+kKGzand78h9dQ/Z44oGQAc1HO2pjpiHfqJ5DPFv7IRBPw2uoHLZGkXqXiT7mQg K1+ID2B159eEzk9+fUmjxnqD9YIV8vzPulEGm0MYvXXMhR9MeM7QzKxk7lj4yPeP 1wmZELBRJ1ZUNQ0aFPBm3vN3AnsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQIEggq o7dPscgU6Hlp88Fup98zTTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBkE8YMA0GCSqGSIb3DQEBCwUAA4IBAQBaVyUtSHk3g+rc+vhr9MoCtEAt XT15DzDvOAhGGQj3C3/KSwfCumdhxApxXEHPZkbPp5P6zBps0q14R3ihcNpV6XEr WxHd3wUfxNqDAdIg0O+xcVCtPmljakMmV2OOd86e3GdEvdXasAPeKCOPR9VCWlGh jHRRvq5fmiJp8lXhEEizZKnGdP0iWlDOCYglIMOfNNDUaSOfVz8j9YmHrLvppZeb 1MkVCLzVxzbSGXd3P0hTKT1txISW7I+6FMqiivSAwMdviL0cIeJScq3XLl1izH/y XoJ6EIHvcDm5oXEQVhi64LuZAgNqSKqNvLi26Vdq5Ezn/bB6ecAJ2AMaqKGV -----END CERTIFICATE-----Generated at Sat May 2 21:03:45 2026 by rpki-client