$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154440.roa File: AS154440.roa (raw, json) Hash identifier: TCnyHvgJdj1Rr2EJWel9o/V82pvqLEz2bB7G2o5E5QI= Subject key identifier: 84:29:C7:9D:7B:A5:E8:FA:1C:5F:27:38:49:68:E5:40:34:EC:5A:74 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1C0A5FD9440FD8A6D28EAAAFB6F141CD66A25EB4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154440.roa Signing time: Sat 02 May 2026 09:23:25 +0000 ROA not before: Sat 02 May 2026 09:18:25 +0000 ROA not after: Sat 01 May 2027 09:23:25 +0000 asID: 154440 IP address blocks: 144.79.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0a:5f:d9:44:0f:d8:a6:d2:8e:aa:af:b6:f1:41:cd:66:a2:5e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:25 2026 GMT Not After : May 1 09:23:25 2027 GMT Subject: CN=8429C79D7BA5E8FA1C5F27384968E54034EC5A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:53:48:c3:ab:ce:9d:4a:8a:62:7d:20:8a: 3c:0f:3a:95:75:db:e7:34:ce:aa:1d:84:9f:03:3e: 8a:11:d7:a8:d6:a6:fd:28:0b:59:04:98:e2:e4:b1: 1a:fc:14:cf:4a:11:22:2f:6f:b8:a2:d0:0f:8c:16: 3d:6e:2c:fb:f6:c2:26:b0:e7:ed:fd:dc:15:66:29: a3:96:7f:a7:cb:61:34:9b:32:07:c6:9d:a9:d1:94: 52:f3:11:21:ad:ec:cf:ee:33:ab:7a:1d:21:d3:67: a4:30:f3:91:c1:d2:10:a4:e4:88:d0:84:0a:2d:4d: 50:3b:38:71:ef:86:a8:a1:d9:71:d1:e2:c2:7c:88: f7:43:52:88:5d:e4:73:75:10:ea:51:3b:75:f7:8c: a4:e7:60:d4:a2:3b:86:36:b7:94:ad:c2:08:43:59: a0:64:74:5a:31:da:b8:31:26:9a:60:5f:2f:00:02: 89:7a:70:2f:ad:9e:48:d6:c6:9a:1a:fb:38:30:16: cb:46:90:d9:b0:0f:3b:b4:ba:40:3d:7e:39:37:56: 56:b2:be:3d:ac:22:d5:e0:cf:fd:8d:74:48:cb:d2: f1:8e:97:78:21:79:27:63:30:47:83:96:69:7e:4a: 98:d2:77:9c:e9:b6:5f:1c:45:c6:d5:04:73:dd:1b: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:29:C7:9D:7B:A5:E8:FA:1C:5F:27:38:49:68:E5:40:34:EC:5A:74 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154440.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.64.0/24 Signature Algorithm: sha256WithRSAEncryption 54:f8:5b:b6:5d:87:03:80:bc:01:d8:13:3c:05:04:55:9c:e0: a0:16:88:4c:d9:a6:d4:da:58:27:dc:19:f1:99:d6:0a:4d:13: f6:6c:0d:ee:30:c5:86:82:0c:41:32:4f:26:6a:fb:8b:11:20: 75:a8:76:44:6b:69:d0:c8:11:d0:da:75:f7:44:01:2e:c2:b0: c0:71:22:2b:5e:fa:2e:45:25:16:88:91:4d:00:d3:56:53:99: e9:8d:e7:db:3f:ec:4a:b4:a1:20:17:a2:69:af:cf:5a:d5:ca: 89:e7:36:00:05:28:53:bc:90:98:3f:31:a2:6a:ea:14:c9:c8: b2:57:55:ea:1d:96:ea:aa:3e:f9:8b:5d:83:f4:49:4b:2d:ae: 29:97:89:86:25:6f:2d:bd:99:73:ae:4b:78:b3:9d:da:9a:e7: 44:17:78:ff:7a:8a:41:00:31:6e:82:15:45:c3:5f:1f:43:77: 70:32:b6:8a:46:cc:8a:51:a3:7a:39:a7:a3:7b:cd:a7:44:4b: b0:05:69:fb:4f:78:c3:3a:36:64:f0:3d:23:6b:33:7e:0f:98: 0f:29:5b:22:18:53:c7:6d:c8:80:d1:be:5b:6d:45:64:93:ba: e5:f8:b5:cf:78:ff:73:6e:d6:a5:ac:64:9a:70:44:54:15:aa: de:34:d5:02 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHApf2UQP2KbSjqqvtvFBzWaiXrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgyNVoX DTI3MDUwMTA5MjMyNVowMzExMC8GA1UEAxMoODQyOUM3OUQ3QkE1RThGQTFDNUYy NzM4NDk2OEU1NDAzNEVDNUE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+EU0jDq86dSopifSCKPA86lXXb5zTOqh2EnwM+ihHXqNam/SgLWQSY4uSx GvwUz0oRIi9vuKLQD4wWPW4s+/bCJrDn7f3cFWYpo5Z/p8thNJsyB8adqdGUUvMR Ia3sz+4zq3odIdNnpDDzkcHSEKTkiNCECi1NUDs4ce+GqKHZcdHiwnyI90NSiF3k c3UQ6lE7dfeMpOdg1KI7hja3lK3CCENZoGR0WjHauDEmmmBfLwACiXpwL62eSNbG mhr7ODAWy0aQ2bAPO7S6QD1+OTdWVrK+Pawi1eDP/Y10SMvS8Y6XeCF5J2MwR4OW aX5KmNJ3nOm2XxxFxtUEc90b6x0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSEKced e6Xo+hxfJzhJaOVANOxadDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE9AMA0GCSqGSIb3DQEBCwUAA4IBAQBU+Fu2XYcDgLwB2BM8BQRVnOCg FohM2abU2lgn3BnxmdYKTRP2bA3uMMWGggxBMk8mavuLESB1qHZEa2nQyBHQ2nX3 RAEuwrDAcSIrXvouRSUWiJFNANNWU5npjefbP+xKtKEgF6Jpr89a1cqJ5zYABShT vJCYPzGiauoUyciyV1XqHZbqqj75i12D9ElLLa4pl4mGJW8tvZlzrkt4s53amudE F3j/eopBADFughVFw18fQ3dwMraKRsyKUaN6Oaeje82nREuwBWn7T3jDOjZk8D0j azN+D5gPKVsiGFPHbciA0b5bbUVkk7rl+LXPeP9zbtalrGSacERUFareNNUC -----END CERTIFICATE-----Generated at Sat May 2 21:03:32 2026 by rpki-client