$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154454.roa File: AS154454.roa (raw, json) Hash identifier: yMXugc+pXk+QfAa9uad82iapvpsFVAki05S0W4r6h+s= Subject key identifier: E9:0E:6A:98:4E:4D:7A:7C:E8:9B:1A:9E:AF:5E:63:83:2D:81:F4:43 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3A2F315718CB63B82F6DFBE9E1FBA70B3CB719D4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154454.roa Signing time: Sat 02 May 2026 09:23:15 +0000 ROA not before: Sat 02 May 2026 09:18:15 +0000 ROA not after: Sat 01 May 2027 09:23:15 +0000 asID: 154454 IP address blocks: 144.79.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2f:31:57:18:cb:63:b8:2f:6d:fb:e9:e1:fb:a7:0b:3c:b7:19:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:15 2026 GMT Not After : May 1 09:23:15 2027 GMT Subject: CN=E90E6A984E4D7A7CE89B1A9EAF5E63832D81F443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:ea:fe:10:7b:a0:a9:db:81:ae:44:c5:50: 05:e0:bc:42:66:80:98:bc:40:85:41:e2:46:f2:67: 27:0f:7c:d9:6d:9d:9e:35:dd:30:53:86:ad:08:08: 10:5f:67:d5:c1:64:ab:53:44:fe:15:ff:e3:25:27: d8:fa:f5:e2:5c:c4:f9:29:1b:68:74:e8:bd:95:ed: d9:0c:ab:73:9a:0e:e3:18:f7:23:f2:5c:d5:1a:15: 06:b0:b5:7d:2b:81:2c:2d:b7:24:ce:c3:3e:18:ee: 54:e1:e9:4b:88:3b:52:d7:4d:54:e0:8e:85:8d:ea: 0d:ee:93:be:df:e1:5a:c0:88:a4:f4:1d:df:c8:76: ac:21:0d:17:a0:3c:f1:83:43:c7:46:1f:c8:42:7d: 13:5e:bd:11:15:d8:3c:b2:f2:9a:ee:57:58:6c:34: 12:38:a7:92:8d:a8:9d:ae:25:74:c4:77:cd:69:5b: 0a:d4:5a:90:8b:ca:c1:67:8e:4b:d9:40:49:5f:fc: 4b:8d:e4:d1:b9:78:7d:e6:a5:72:47:5c:85:aa:57: 16:58:7e:f2:12:21:0e:ab:aa:ba:4f:d6:dd:ff:42: 64:92:bd:5d:48:d3:4e:2e:02:12:66:ba:39:12:da: 72:f4:79:3e:51:20:fe:da:71:17:1b:ea:9b:4b:97: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0E:6A:98:4E:4D:7A:7C:E8:9B:1A:9E:AF:5E:63:83:2D:81:F4:43 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.128.0/24 Signature Algorithm: sha256WithRSAEncryption 41:0b:8b:9b:42:36:dd:04:ef:0f:c2:14:b2:fa:ab:b7:0e:6c: 3e:93:69:64:a9:58:82:17:c7:57:46:be:f8:0e:10:e7:a6:35: dc:fe:9a:36:a7:4c:45:6c:9f:ad:3d:35:ff:86:9a:c3:8c:8a: 19:9e:45:db:66:df:25:e0:81:f8:c9:e5:13:76:2c:02:2c:01: e7:0e:b6:81:2a:36:0a:be:ce:55:92:36:bb:4a:72:c4:eb:67: 9a:62:45:cc:6e:17:dc:33:7e:2e:99:bf:30:b9:c4:d4:c9:f3: 28:25:31:ca:dd:ac:96:40:23:10:10:3c:58:c4:46:e1:2f:28: 7c:e8:77:b3:46:f9:35:63:6a:06:1e:e5:0f:aa:fc:e0:b7:23: d1:31:70:53:d9:0b:ce:a1:44:33:28:5d:ea:66:99:5e:d0:7b: c4:68:90:7a:18:29:60:0a:bc:24:4d:50:9d:93:7a:59:d7:ef: d7:98:60:cf:7b:72:e6:81:82:6d:a2:2e:ab:8f:33:4b:d4:37: fa:6f:7d:64:5a:82:0f:46:63:0f:cd:85:aa:bd:c1:7d:7a:db: 4d:3c:b9:c9:33:a0:b4:08:76:b7:47:23:94:0a:c9:d4:0d:8e: 94:90:20:a9:ad:19:6c:8e:02:f8:c2:e5:5c:62:e0:3a:21:85: 26:7c:fe:12 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOi8xVxjLY7gvbfvp4funCzy3GdQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxNVoX DTI3MDUwMTA5MjMxNVowMzExMC8GA1UEAxMoRTkwRTZBOTg0RTREN0E3Q0U4OUIx QTlFQUY1RTYzODMyRDgxRjQ0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG06v4Qe6Cp24GuRMVQBeC8QmaAmLxAhUHiRvJnJw982W2dnjXdMFOGrQgI EF9n1cFkq1NE/hX/4yUn2Pr14lzE+SkbaHTovZXt2Qyrc5oO4xj3I/Jc1RoVBrC1 fSuBLC23JM7DPhjuVOHpS4g7UtdNVOCOhY3qDe6Tvt/hWsCIpPQd38h2rCENF6A8 8YNDx0YfyEJ9E169ERXYPLLymu5XWGw0Ejinko2ona4ldMR3zWlbCtRakIvKwWeO S9lASV/8S43k0bl4fealckdchapXFlh+8hIhDququk/W3f9CZJK9XUjTTi4CEma6 ORLacvR5PlEg/tpxFxvqm0uXj3sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTpDmqY Tk16fOibGp6vXmODLYH0QzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE+AMA0GCSqGSIb3DQEBCwUAA4IBAQBBC4ubQjbdBO8PwhSy+qu3Dmw+ k2lkqViCF8dXRr74DhDnpjXc/po2p0xFbJ+tPTX/hprDjIoZnkXbZt8l4IH4yeUT diwCLAHnDraBKjYKvs5Vkja7SnLE62eaYkXMbhfcM34umb8wucTUyfMoJTHK3ayW QCMQEDxYxEbhLyh86HezRvk1Y2oGHuUPqvzgtyPRMXBT2QvOoUQzKF3qZple0HvE aJB6GClgCrwkTVCdk3pZ1+/XmGDPe3LmgYJtoi6rjzNL1Df6b31kWoIPRmMPzYWq vcF9ettNPLnJM6C0CHa3RyOUCsnUDY6UkCCprRlsjgL4wuVcYuA6IYUmfP4S -----END CERTIFICATE-----Generated at Sat May 2 21:05:16 2026 by rpki-client