$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154442.roa File: AS154442.roa (raw, json) Hash identifier: 59BntsL13dJKxTejpyRfSAFN6kbYVwKHbi4tBxkydf4= Subject key identifier: E4:AB:A1:EA:A5:CC:81:5C:24:43:B4:32:C3:5C:C4:61:A2:C2:D0:2D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5B9C1DCCE5D3AC675D7022023487508B289107DF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154442.roa Signing time: Sat 02 May 2026 09:23:10 +0000 ROA not before: Sat 02 May 2026 09:18:10 +0000 ROA not after: Sat 01 May 2027 09:23:10 +0000 asID: 154442 IP address blocks: 144.79.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9c:1d:cc:e5:d3:ac:67:5d:70:22:02:34:87:50:8b:28:91:07:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:10 2026 GMT Not After : May 1 09:23:10 2027 GMT Subject: CN=E4ABA1EAA5CC815C2443B432C35CC461A2C2D02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:fb:c8:b9:27:ec:07:46:74:4d:80:f3:ff: 62:99:f9:d3:c9:8f:9c:7f:27:87:78:68:0e:06:74: 73:23:fe:55:32:06:75:83:d4:79:d5:cd:4c:cc:70: 27:5f:f6:d6:05:ac:bd:1f:0d:8c:8e:e1:d9:66:99: 74:92:c2:c0:e7:ac:6b:0f:f2:29:17:23:ad:41:e3: 2d:00:89:e7:eb:d1:69:bb:c2:70:46:1e:fc:ae:8b: 3b:7c:96:03:9d:51:5f:05:85:9d:56:b6:ba:ef:42: 0c:3c:bc:c5:96:9b:7b:93:11:fa:36:d5:47:09:3f: 29:b3:9c:f3:45:79:0b:72:e4:40:69:fb:2d:dd:c3: e5:75:14:3d:8b:0c:ff:ee:76:5e:e5:bf:95:bb:63: f8:39:ca:57:26:b9:87:4f:0a:04:bf:e9:e8:1c:35: 73:82:7f:0c:81:0b:ae:2b:88:5d:a3:6d:d2:49:7c: d8:8a:37:fb:a6:1f:64:92:b9:89:18:22:76:50:3b: 52:14:d2:a2:32:87:c2:fa:cb:01:9f:e7:65:a6:46: ad:a3:e6:ab:2d:f2:e8:c3:24:b9:ac:b5:45:65:43: 41:d1:24:ce:62:14:ec:9f:f2:56:be:93:91:1c:43: 8a:3f:3b:14:87:94:0c:36:4e:56:92:72:54:8e:b7: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AB:A1:EA:A5:CC:81:5C:24:43:B4:32:C3:5C:C4:61:A2:C2:D0:2D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154442.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.89.0/24 Signature Algorithm: sha256WithRSAEncryption 36:b1:4c:c2:df:dd:1a:1d:16:7b:0c:4b:63:68:96:f6:ce:92: 26:0a:ea:8b:3a:2c:7c:d4:18:4b:ba:69:ef:d4:b2:63:12:85: dd:2f:85:02:96:ef:70:6f:b6:9f:67:ad:30:32:8d:33:f8:64: e9:1e:74:f3:70:7a:ec:ef:14:82:ad:42:5d:fa:1d:9c:da:d5: 21:96:da:71:d9:dd:39:fb:a3:2c:4e:13:1f:bd:72:64:34:8f: dd:2b:0e:f7:89:0b:36:c0:0d:c4:b8:0c:5f:b0:d0:3f:a0:c2: 6a:de:5c:59:7c:4d:ef:c7:65:ef:50:fe:c7:ba:49:7b:a9:7f: 50:08:63:05:d7:ca:ad:16:82:dd:32:ab:5e:54:dd:5f:ed:77: fc:e6:6d:06:51:09:b1:2c:8d:4d:36:ec:cf:2d:7d:13:83:f3: 3f:83:7a:69:e4:9e:b3:97:fe:8e:94:86:34:ed:48:5d:b1:bf: 96:28:81:0b:14:eb:29:aa:c1:44:2a:77:3f:45:9b:d8:7d:c8: 4c:aa:98:89:06:52:05:4f:ad:4b:30:2a:32:a4:dc:60:87:f5: fa:ee:86:71:cf:fe:9f:fc:07:0e:20:5b:78:5c:0a:85:71:46: 3e:bc:14:3d:8d:a9:db:9a:f4:08:02:92:ff:ef:a4:80:54:47: 51:f0:e4:91 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUW5wdzOXTrGddcCICNIdQiyiRB98wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxMFoX DTI3MDUwMTA5MjMxMFowMzExMC8GA1UEAxMoRTRBQkExRUFBNUNDODE1QzI0NDNC NDMyQzM1Q0M0NjFBMkMyRDAyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmY+8i5J+wHRnRNgPP/Ypn508mPnH8nh3hoDgZ0cyP+VTIGdYPUedXNTMxw J1/21gWsvR8NjI7h2WaZdJLCwOesaw/yKRcjrUHjLQCJ5+vRabvCcEYe/K6LO3yW A51RXwWFnVa2uu9CDDy8xZabe5MR+jbVRwk/KbOc80V5C3LkQGn7Ld3D5XUUPYsM /+52XuW/lbtj+DnKVya5h08KBL/p6Bw1c4J/DIELriuIXaNt0kl82Io3+6YfZJK5 iRgidlA7UhTSojKHwvrLAZ/nZaZGraPmqy3y6MMkuay1RWVDQdEkzmIU7J/yVr6T kRxDij87FIeUDDZOVpJyVI639zECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTkq6Hq pcyBXCRDtDLDXMRhosLQLTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE9ZMA0GCSqGSIb3DQEBCwUAA4IBAQA2sUzC390aHRZ7DEtjaJb2zpIm CuqLOix81BhLumnv1LJjEoXdL4UClu9wb7afZ60wMo0z+GTpHnTzcHrs7xSCrUJd +h2c2tUhltpx2d05+6MsThMfvXJkNI/dKw73iQs2wA3EuAxfsNA/oMJq3lxZfE3v x2XvUP7Hukl7qX9QCGMF18qtFoLdMqteVN1f7Xf85m0GUQmxLI1NNuzPLX0Tg/M/ g3pp5J6zl/6OlIY07Uhdsb+WKIELFOspqsFEKnc/RZvYfchMqpiJBlIFT61LMCoy pNxgh/X67oZxz/6f/AcOIFt4XAqFcUY+vBQ9janbmvQIApL/76SAVEdR8OSR -----END CERTIFICATE-----Generated at Sat May 2 21:04:34 2026 by rpki-client