$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154639.roa File: AS154639.roa (raw, json) Hash identifier: ho7oXndL+ZkLdpJ4K1UezYhxgsJPFpOCZ45pVsZgx3k= Subject key identifier: 71:43:E8:4D:71:CC:76:67:DD:06:19:07:13:C8:17:CE:78:66:44:63 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6EA3E00C4FAE1EF0FA2365536FC7EC3DBBCF7C05 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154639.roa Signing time: Wed 26 Aug 2026 09:12:12 +0000 ROA not before: Wed 26 Aug 2026 09:07:12 +0000 ROA not after: Wed 25 Aug 2027 09:12:12 +0000 asID: 154639 IP address blocks: 162.4.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a3:e0:0c:4f:ae:1e:f0:fa:23:65:53:6f:c7:ec:3d:bb:cf:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 26 09:07:12 2026 GMT Not After : Aug 25 09:12:12 2027 GMT Subject: CN=7143E84D71CC7667DD06190713C817CE78664463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:d4:b3:7b:4c:24:40:a6:8c:75:7e:8d:9b: f4:11:1e:5a:9c:e1:c9:f1:6e:20:39:07:3e:c4:52: 2f:51:6c:0d:78:46:77:15:31:3c:e4:d6:3a:d3:22: c0:ba:7d:a2:39:c7:d4:ea:20:a5:3f:7e:8e:6b:a3: 3e:6c:d2:13:4a:d5:85:da:02:0d:16:41:7c:09:e2: c9:b9:dd:d0:f2:38:73:8a:50:87:15:24:6c:cb:39: ed:54:05:56:f9:97:fc:f1:a6:95:70:d9:0e:25:e8: 4f:79:c4:0e:0c:ad:8e:6b:26:53:3a:50:e9:5c:e0: 19:49:a8:d0:57:be:56:69:0f:12:98:fe:77:9f:6f: 7a:e5:52:61:36:96:d8:e1:12:b5:ae:ad:4e:85:2a: ee:31:fc:ad:d5:34:4f:aa:7e:7c:53:d3:5f:3d:30: bf:a3:5d:ed:94:89:07:4f:55:f7:21:f2:c3:b3:3c: c7:82:3e:0e:be:97:08:0e:33:c7:93:cf:e5:2b:1a: 74:dc:3b:95:94:93:80:8e:a2:d4:98:96:7b:09:34: 65:0c:91:37:5d:28:79:e6:4a:88:a2:f1:84:e9:04: d8:54:d0:0f:25:82:5d:66:e6:4c:3e:62:aa:17:4b: f7:a3:2a:e3:2c:a2:97:94:86:ed:86:e7:62:3d:3c: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:E8:4D:71:CC:76:67:DD:06:19:07:13:C8:17:CE:78:66:44:63 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.47.0/24 Signature Algorithm: sha256WithRSAEncryption 73:7f:cf:7f:60:f5:49:9d:49:5c:55:67:53:1f:d8:00:2a:c4: ee:d5:60:ff:69:74:2f:71:f5:67:0e:a5:60:fb:e0:7d:a4:8a: 04:2f:92:2a:d5:d4:7f:9e:54:9a:0a:03:39:19:15:fb:69:f5: 2f:5f:25:6b:be:dd:5f:6b:50:4a:47:b4:99:2e:c4:fe:9b:ef: db:5c:02:69:e2:5f:53:86:91:9e:46:fa:18:35:8c:28:e2:31: 9b:bd:4a:e9:b7:27:56:da:9e:6c:cb:8f:21:cf:3f:88:38:de: 01:ac:36:f9:75:0b:a7:19:e9:c4:33:1d:10:8d:7b:84:57:39: 1a:af:91:c1:25:63:0a:b3:2c:09:e1:73:5e:ca:1d:6b:52:b9: 54:90:5b:7b:98:e8:ec:96:c8:04:55:36:aa:21:c4:5b:73:89: 8e:1a:bf:cb:5b:32:b6:0b:00:6f:64:38:aa:8d:d0:e5:83:99: fe:c0:ea:4c:11:4c:e9:ed:81:f7:06:22:1b:b5:9d:af:48:98: 9d:56:c7:2b:ec:8c:ba:95:5e:b8:be:a9:df:a5:0c:d4:3c:26: 71:f3:2a:67:1d:82:41:42:2d:1d:c7:5c:64:c2:b4:f3:f2:6a: b4:29:aa:d2:60:17:b2:78:15:2b:2e:b3:5b:8f:77:cd:b9:a8: c5:0b:be:d3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbqPgDE+uHvD6I2VTb8fsPbvPfAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgyNjA5MDcxMloX DTI3MDgyNTA5MTIxMlowMzExMC8GA1UEAxMoNzE0M0U4NEQ3MUNDNzY2N0REMDYx OTA3MTNDODE3Q0U3ODY2NDQ2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPN1LN7TCRApox1fo2b9BEeWpzhyfFuIDkHPsRSL1FsDXhGdxUxPOTWOtMi wLp9ojnH1OogpT9+jmujPmzSE0rVhdoCDRZBfAniybnd0PI4c4pQhxUkbMs57VQF VvmX/PGmlXDZDiXoT3nEDgytjmsmUzpQ6VzgGUmo0Fe+VmkPEpj+d59veuVSYTaW 2OESta6tToUq7jH8rdU0T6p+fFPTXz0wv6Nd7ZSJB09V9yHyw7M8x4I+Dr6XCA4z x5PP5SsadNw7lZSTgI6i1JiWewk0ZQyRN10oeeZKiKLxhOkE2FTQDyWCXWbmTD5i qhdL96Mq4yyil5SG7YbnYj08AT0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRxQ+hN ccx2Z90GGQcTyBfOeGZEYzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogQvMA0GCSqGSIb3DQEBCwUAA4IBAQBzf89/YPVJnUlcVWdTH9gAKsTu 1WD/aXQvcfVnDqVg++B9pIoEL5Iq1dR/nlSaCgM5GRX7afUvXyVrvt1fa1BKR7SZ LsT+m+/bXAJp4l9ThpGeRvoYNYwo4jGbvUrptydW2p5sy48hzz+ION4BrDb5dQun GenEMx0QjXuEVzkar5HBJWMKsywJ4XNeyh1rUrlUkFt7mOjslsgEVTaqIcRbc4mO Gr/LWzK2CwBvZDiqjdDlg5n+wOpMEUzp7YH3BiIbtZ2vSJidVscr7Iy6lV64vqnf pQzUPCZx8ypnHYJBQi0dx1xkwrTz8mq0KarSYBeyeBUrLrNbj3fNuajFC77T -----END CERTIFICATE-----Generated at Thu Sep 17 08:16:19 2026 by rpki-client