$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154734.roa File: AS154734.roa (raw, json) Hash identifier: ir4c/reWpUumPHkWvH46/jDPSWeFxUpAfRZvixeQeog= Subject key identifier: 4C:8C:2E:57:2B:43:67:E3:5E:AB:E7:E4:BA:34:98:4A:52:57:D6:9F Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2B816F68B41C26B8585073140E43242C491D8E2B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154734.roa Signing time: Mon 28 Sep 2026 02:53:57 +0000 ROA not before: Mon 28 Sep 2026 02:48:57 +0000 ROA not after: Mon 27 Sep 2027 02:53:57 +0000 asID: 154734 IP address blocks: 160.236.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:6f:68:b4:1c:26:b8:58:50:73:14:0e:43:24:2c:49:1d:8e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 28 02:48:57 2026 GMT Not After : Sep 27 02:53:57 2027 GMT Subject: CN=4C8C2E572B4367E35EABE7E4BA34984A5257D69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:95:8a:15:a9:4b:66:cc:cd:a3:42:a0:f3: 5e:37:ac:53:0a:07:11:58:42:b0:5a:8f:d3:c6:c7: 58:1a:ed:18:68:86:3e:39:66:47:84:3a:ea:d6:dc: 25:8c:93:f4:1a:22:81:a2:42:64:21:fd:fc:9e:3a: 06:df:9a:60:3f:5f:ae:2a:fb:b8:63:b2:1f:6a:b4: 43:8e:3a:5b:eb:87:54:ca:00:25:6c:be:8a:0e:f4: 50:f5:52:a7:2a:eb:1f:cc:26:cd:59:18:2e:33:b7: 79:8f:2c:f7:85:42:42:aa:d6:94:bf:60:79:d2:3a: d4:82:18:84:53:2a:16:8b:9a:9c:cc:88:86:69:c2: 0c:e4:aa:84:7a:0c:27:6e:7e:aa:0f:d5:6d:fb:23: 5a:19:fb:c1:cb:ea:28:2e:f1:60:56:f6:8d:4b:fa: c6:1a:b5:c3:f0:65:25:ff:ad:fc:69:b5:de:6c:ee: cc:89:94:85:1a:83:17:0a:a7:bb:d6:96:9b:24:3a: 20:2b:ed:06:94:a7:cd:6f:2a:6d:45:1d:6e:38:7a: 88:d6:6a:55:4e:81:4c:e0:fe:b5:9e:b9:74:a7:e8: 3e:e0:66:3f:d8:60:4f:c9:3e:8e:0e:64:91:cf:0e: 4f:c6:d1:3b:a0:1a:72:f3:57:70:f3:fd:33:0a:83: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:2E:57:2B:43:67:E3:5E:AB:E7:E4:BA:34:98:4A:52:57:D6:9F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.37.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a0:d0:89:dc:41:3a:9f:52:51:f8:73:95:81:bf:66:47:a8: 8c:7e:92:c6:38:0b:48:5c:40:6f:69:18:f9:f9:ef:ef:f4:83: ed:a2:0d:00:b4:00:40:78:ab:29:86:1e:76:ed:57:2e:37:7a: 15:ae:97:07:68:10:53:05:f0:95:d6:90:56:a7:b6:21:e3:93: 84:af:4c:b1:83:bd:a2:92:7c:7c:f6:b6:8d:33:4e:2d:35:ca: 20:3e:3d:75:e3:5c:5f:2d:13:61:87:80:d3:52:3a:7f:48:42: cc:3f:b0:4c:3d:a2:cd:8e:23:07:6f:c6:ce:35:b2:5f:90:61: c1:47:ad:a8:1a:5e:cf:05:1a:33:ac:80:31:4f:4d:9b:d2:ed: f7:45:64:b5:fa:c4:ee:cb:f5:d4:35:16:d5:ca:d9:39:a0:d0: 97:7a:9e:d0:ea:3c:54:a3:5a:af:87:1d:b3:7e:db:76:b8:30: f0:f1:c8:88:74:6e:08:73:d3:75:f7:a6:c9:a8:01:49:e1:8e: 92:20:c1:6b:e9:7b:2b:bb:a3:7b:5e:22:e2:0d:8d:80:d3:7b: e6:4e:6b:60:fd:04:13:df:90:62:f4:77:23:ee:06:55:50:5a: 9d:60:00:52:e7:5f:b2:e9:73:3b:30:0c:21:2d:dd:32:91:ff: b2:fc:83:31 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUK4FvaLQcJrhYUHMUDkMkLEkdjiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyODAyNDg1N1oX DTI3MDkyNzAyNTM1N1owMzExMC8GA1UEAxMoNEM4QzJFNTcyQjQzNjdFMzVFQUJF N0U0QkEzNDk4NEE1MjU3RDY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0clYoVqUtmzM2jQqDzXjesUwoHEVhCsFqP08bHWBrtGGiGPjlmR4Q66tbc JYyT9BoigaJCZCH9/J46Bt+aYD9frir7uGOyH2q0Q446W+uHVMoAJWy+ig70UPVS pyrrH8wmzVkYLjO3eY8s94VCQqrWlL9gedI61IIYhFMqFouanMyIhmnCDOSqhHoM J25+qg/VbfsjWhn7wcvqKC7xYFb2jUv6xhq1w/BlJf+t/Gm13mzuzImUhRqDFwqn u9aWmyQ6ICvtBpSnzW8qbUUdbjh6iNZqVU6BTOD+tZ65dKfoPuBmP9hgT8k+jg5k kc8OT8bRO6AacvNXcPP9MwqDHycCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRMjC5X K0Nn416r5+S6NJhKUlfWnzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwlMA0GCSqGSIb3DQEBCwUAA4IBAQCfoNCJ3EE6n1JR+HOVgb9mR6iM fpLGOAtIXEBvaRj5+e/v9IPtog0AtABAeKsphh527VcuN3oVrpcHaBBTBfCV1pBW p7Yh45OEr0yxg72iknx89raNM04tNcogPj1141xfLRNhh4DTUjp/SELMP7BMPaLN jiMHb8bONbJfkGHBR62oGl7PBRozrIAxT02b0u33RWS1+sTuy/XUNRbVytk5oNCX ep7Q6jxUo1qvhx2zftt2uDDw8ciIdG4Ic9N196bJqAFJ4Y6SIMFr6Xsru6N7XiLi DY2A03vmTmtg/QQT35Bi9Hcj7gZVUFqdYABS51+y6XM7MAwhLd0ykf+y/IMx -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:49 2026 by rpki-client