$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154452.roa File: AS154452.roa (raw, json) Hash identifier: RG32kRkrnwTlXDhhdFPr3l6NbsBE9R2mP04eyi+NdgQ= Subject key identifier: 86:13:FF:45:51:64:97:E2:D3:31:37:1B:3A:14:F3:F4:56:2D:76:E9 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 71CC4775414A844F809C9E819614448D27F07C51 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154452.roa Signing time: Sat 02 May 2026 09:22:57 +0000 ROA not before: Sat 02 May 2026 09:17:57 +0000 ROA not after: Sat 01 May 2027 09:22:57 +0000 asID: 154452 IP address blocks: 144.79.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:47:75:41:4a:84:4f:80:9c:9e:81:96:14:44:8d:27:f0:7c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:57 2026 GMT Not After : May 1 09:22:57 2027 GMT Subject: CN=8613FF45516497E2D331371B3A14F3F4562D76E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:20:c9:76:b4:b7:57:50:e1:70:2b:c6:6a:a1: 94:aa:47:24:86:7d:c0:a2:76:c0:05:ea:ad:55:1d: 80:c9:53:35:3b:d9:2b:8f:aa:cc:bd:79:ea:20:a9: 0f:2e:44:ac:02:d1:72:78:50:00:bc:02:69:44:02: 34:62:9f:91:d8:9b:52:34:04:a7:6b:0f:9a:94:f5: ee:99:18:fd:37:22:b8:f5:08:02:f0:d5:47:74:45: 30:4d:18:85:1b:30:b8:50:db:94:c6:f8:a7:1c:09: 7c:be:b5:0b:64:52:01:82:c0:c5:8b:51:ce:65:f6: a4:4b:6a:da:d4:87:c6:43:fb:df:d8:0a:70:e9:67: 3d:d2:e6:47:04:cb:28:e0:4e:e6:10:e3:27:cd:9d: bc:b6:fa:38:71:36:00:76:33:71:04:1a:c9:56:50: 36:71:8e:44:3d:03:ee:56:87:f7:c4:c6:8f:90:ea: 95:9f:fd:2c:c4:eb:8b:f1:be:b7:df:9d:c5:b3:b2: 58:42:46:bf:5e:28:e7:00:c1:49:58:be:68:73:c8: 90:8d:ef:6a:cb:12:fa:06:f2:e2:2f:28:7d:55:22: 8d:84:bc:85:06:f8:14:ca:48:a7:89:b5:ca:16:c4: b4:84:e8:5a:5f:40:27:96:92:3a:06:cc:42:f8:55: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:FF:45:51:64:97:E2:D3:31:37:1B:3A:14:F3:F4:56:2D:76:E9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.122.0/24 Signature Algorithm: sha256WithRSAEncryption 81:bb:b9:62:ff:97:4f:76:4f:fa:55:65:b6:8b:92:d8:31:04: a6:c1:2a:81:1b:bc:9d:f4:68:fe:21:42:32:be:99:62:c7:d9: 7f:41:6e:6b:47:58:00:a1:73:b1:8b:e4:aa:ee:9a:2d:18:72: 1b:1b:38:aa:08:2c:60:5d:b8:82:c6:d7:a8:fc:63:f1:05:29: 88:84:bf:e3:7d:60:3a:64:c1:4c:5b:b9:93:db:2b:d4:17:a8: 16:03:be:6b:02:d6:6d:43:a3:07:15:4f:e7:58:cb:f4:5e:80: e0:4d:0d:01:1c:3c:6e:15:c2:ce:65:fe:82:bd:47:eb:da:ac: 33:53:33:9d:b5:74:2c:c1:fd:9e:25:e8:f3:00:14:9f:fb:f8: 65:54:2d:85:2e:1d:f5:f5:ee:b5:79:03:cd:72:c5:7d:dc:36: b8:fb:07:75:b9:6d:e5:5f:1c:b1:f5:15:65:2d:d7:22:b5:12: 6b:b8:40:0a:b2:a9:c5:15:7f:d5:24:4e:83:1b:17:c4:b9:dd: 5e:0f:15:d1:ce:05:99:61:9f:ae:37:98:38:2e:f3:62:d5:9b: 62:3e:0a:47:6d:1d:e3:8c:da:94:04:71:9f:10:b1:1a:ae:36: 6e:6e:27:72:19:60:9b:82:f3:a3:83:2f:af:82:d8:f7:54:17: 52:02:4b:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUccxHdUFKhE+AnJ6BlhREjSfwfFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1N1oX DTI3MDUwMTA5MjI1N1owMzExMC8GA1UEAxMoODYxM0ZGNDU1MTY0OTdFMkQzMzEz NzFCM0ExNEYzRjQ1NjJENzZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkgyXa0t1dQ4XArxmqhlKpHJIZ9wKJ2wAXqrVUdgMlTNTvZK4+qzL156iCp Dy5ErALRcnhQALwCaUQCNGKfkdibUjQEp2sPmpT17pkY/TciuPUIAvDVR3RFME0Y hRswuFDblMb4pxwJfL61C2RSAYLAxYtRzmX2pEtq2tSHxkP739gKcOlnPdLmRwTL KOBO5hDjJ82dvLb6OHE2AHYzcQQayVZQNnGORD0D7laH98TGj5DqlZ/9LMTri/G+ t9+dxbOyWEJGv14o5wDBSVi+aHPIkI3vassS+gby4i8ofVUijYS8hQb4FMpIp4m1 yhbEtIToWl9AJ5aSOgbMQvhV3FsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSGE/9F UWSX4tMxNxs6FPP0Vi126TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE96MA0GCSqGSIb3DQEBCwUAA4IBAQCBu7li/5dPdk/6VWW2i5LYMQSm wSqBG7yd9Gj+IUIyvplix9l/QW5rR1gAoXOxi+Sq7potGHIbGziqCCxgXbiCxteo /GPxBSmIhL/jfWA6ZMFMW7mT2yvUF6gWA75rAtZtQ6MHFU/nWMv0XoDgTQ0BHDxu FcLOZf6CvUfr2qwzUzOdtXQswf2eJejzABSf+/hlVC2FLh319e61eQPNcsV93Da4 +wd1uW3lXxyx9RVlLdcitRJruEAKsqnFFX/VJE6DGxfEud1eDxXRzgWZYZ+uN5g4 LvNi1ZtiPgpHbR3jjNqUBHGfELEarjZubidyGWCbgvOjgy+vgtj3VBdSAkuK -----END CERTIFICATE-----Generated at Sat May 2 21:05:08 2026 by rpki-client