$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154483.roa File: AS154483.roa (raw, json) Hash identifier: Dn9Wp0EiHZ2GHY0ek2Mk3ucdlbCOy+FJSxtduK/wTpE= Subject key identifier: C2:CF:5A:80:09:6C:07:E6:86:43:51:2A:41:4E:BE:A4:42:07:C9:C2 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7BB9AEC1CA07F8BEBB4A25FB8953C00B2DE3241D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154483.roa Signing time: Sat 02 May 2026 09:23:09 +0000 ROA not before: Sat 02 May 2026 09:18:09 +0000 ROA not after: Sat 01 May 2027 09:23:09 +0000 asID: 154483 IP address blocks: 192.245.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b9:ae:c1:ca:07:f8:be:bb:4a:25:fb:89:53:c0:0b:2d:e3:24:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:09 2026 GMT Not After : May 1 09:23:09 2027 GMT Subject: CN=C2CF5A80096C07E68643512A414EBEA44207C9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:76:ae:ae:23:46:25:04:0d:06:06:fe:98:ed: 8a:8a:aa:c9:11:55:2b:6b:f1:c1:99:05:32:13:47: d1:02:32:80:aa:18:53:4b:99:08:fa:2e:15:86:59: 5d:db:df:3f:e9:c2:80:1f:54:bb:f9:eb:50:c3:23: ba:cd:83:a7:e7:21:b2:f1:a8:72:4e:9d:a0:e7:f7: 1a:3d:dc:07:65:78:c8:24:1f:75:88:17:22:c7:68: 3f:24:ae:ba:cd:80:8a:dc:e6:cb:e8:f3:56:5b:a8: fa:db:23:e6:56:02:30:a0:0b:ae:12:1a:15:91:14: 3a:5a:fd:11:46:a8:f9:de:9f:4a:b3:8e:1e:48:b8: a1:20:ff:2b:23:e4:07:f7:24:5d:48:95:9d:3d:8c: 29:e5:06:93:05:41:c6:39:0c:70:78:55:be:ab:e5: 9c:d2:ee:de:2e:7c:36:9e:d2:e3:0f:1b:24:83:03: 80:e9:f1:ac:f0:d6:da:5f:a7:2c:a9:f3:b1:13:d8: ff:80:60:ba:2a:85:c2:33:7a:fd:5f:f7:48:8c:7d: 24:26:15:6e:ee:32:31:03:d8:59:7c:c7:fe:e7:24: 9f:a0:fb:d7:a1:1d:ef:43:f7:7f:56:ee:0e:11:d6: c7:a0:22:84:16:a0:90:2f:11:db:74:32:b9:06:b8: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:5A:80:09:6C:07:E6:86:43:51:2A:41:4E:BE:A4:42:07:C9:C2 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154483.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.245.11.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6b:27:1b:1d:5f:0b:8b:22:7f:16:7f:9a:6e:c3:44:99:86: 4f:41:83:dc:d4:19:3a:e1:7b:05:20:97:b7:d8:6c:53:4b:95: 6a:5d:b3:67:e4:fe:58:4e:42:d7:d3:79:75:d4:db:fc:c1:67: 37:97:2f:60:1d:53:4c:d0:f4:ac:03:30:ab:00:75:c7:79:76: 87:98:25:3b:14:c7:e5:8f:c2:16:9a:c5:8a:4a:af:70:58:a7: a5:3a:cc:98:76:0a:54:87:fb:4c:71:c8:3c:85:59:69:e8:36: 8c:c8:d1:2c:0d:9a:43:ac:f1:7b:0f:49:1e:9a:67:f5:3b:a8: 93:b1:c9:cf:87:57:ad:a7:1f:4e:2c:6a:c7:99:a6:b7:b2:1a: 39:c5:98:08:10:d7:13:e0:af:c6:66:f5:ed:41:2e:6f:4b:e1: a9:87:34:3f:d0:1d:54:11:c1:2d:6a:50:bc:71:85:98:8f:34: 17:ca:bb:33:9e:b1:ac:dc:b9:40:52:af:c6:7f:0f:bf:66:35: 6a:bf:e0:b6:fa:a9:87:97:d7:8f:36:1a:13:15:53:5a:44:63: 19:39:ec:0b:1f:da:8b:02:8e:c6:82:db:21:43:5c:48:7d:49: e6:b6:88:6c:f1:7d:f0:7a:a6:eb:e4:94:e8:2c:3a:fd:f5:0e: 5e:53:57:37 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUe7muwcoH+L67SiX7iVPACy3jJB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwOVoX DTI3MDUwMTA5MjMwOVowMzExMC8GA1UEAxMoQzJDRjVBODAwOTZDMDdFNjg2NDM1 MTJBNDE0RUJFQTQ0MjA3QzlDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJJ2rq4jRiUEDQYG/pjtioqqyRFVK2vxwZkFMhNH0QIygKoYU0uZCPouFYZZ XdvfP+nCgB9Uu/nrUMMjus2Dp+chsvGock6doOf3Gj3cB2V4yCQfdYgXIsdoPySu us2Aitzmy+jzVluo+tsj5lYCMKALrhIaFZEUOlr9EUao+d6fSrOOHki4oSD/KyPk B/ckXUiVnT2MKeUGkwVBxjkMcHhVvqvlnNLu3i58Np7S4w8bJIMDgOnxrPDW2l+n LKnzsRPY/4BguiqFwjN6/V/3SIx9JCYVbu4yMQPYWXzH/uckn6D716Ed70P3f1bu DhHWx6AihBagkC8R23QyuQa4wnMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTCz1qA CWwH5oZDUSpBTr6kQgfJwjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NDgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwPULMA0GCSqGSIb3DQEBCwUAA4IBAQChaycbHV8LiyJ/Fn+absNEmYZP QYPc1Bk64XsFIJe32GxTS5VqXbNn5P5YTkLX03l11Nv8wWc3ly9gHVNM0PSsAzCr AHXHeXaHmCU7FMflj8IWmsWKSq9wWKelOsyYdgpUh/tMccg8hVlp6DaMyNEsDZpD rPF7D0kemmf1O6iTscnPh1etpx9OLGrHmaa3sho5xZgIENcT4K/GZvXtQS5vS+Gp hzQ/0B1UEcEtalC8cYWYjzQXyrsznrGs3LlAUq/Gfw+/ZjVqv+C2+qmHl9ePNhoT FVNaRGMZOewLH9qLAo7GgtshQ1xIfUnmtohs8X3weqbr5JToLDr99Q5eU1c3 -----END CERTIFICATE-----Generated at Sat May 2 21:03:35 2026 by rpki-client