
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154747.roa
File: AS154747.roa (raw, json)
Hash identifier: +YriQ9lBPMlWR8pPWpwmw/rc0Rh1ePTWq5Z3Q1A8eK4=
Subject key identifier: 19:CF:36:BA:4C:A6:5B:FF:3B:D9:21:80:9E:C4:64:67:7B:89:BA:95
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 3810B8B628691882258A01E54B6BB8445AAA034E
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154747.roa
Signing time: Tue 06 Oct 2026 02:58:05 +0000
ROA not before: Tue 06 Oct 2026 02:53:05 +0000
ROA not after: Tue 05 Oct 2027 02:58:05 +0000
asID: 154747
IP address blocks: 144.79.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:b8:b6:28:69:18:82:25:8a:01:e5:4b:6b:b8:44:5a:aa:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Oct 6 02:53:05 2026 GMT
Not After : Oct 5 02:58:05 2027 GMT
Subject: CN=19CF36BA4CA65BFF3BD921809EC464677B89BA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:00:3a:17:ac:03:aa:d1:2a:3e:c6:ce:d7:
00:02:49:7f:f6:99:88:9c:62:35:10:7a:8d:7f:77:
76:76:3a:cc:00:d3:2f:ff:dd:94:5c:08:97:fe:33:
1c:d5:30:89:dc:80:f2:8a:1c:8b:ba:a2:e9:e3:eb:
2e:bd:e3:84:e3:25:e2:df:d7:9f:1d:4f:50:94:98:
b7:7d:1a:40:4c:a9:33:1f:6e:8e:0f:0b:06:36:7e:
35:d7:92:c0:aa:59:ef:7a:23:3b:73:b4:30:b6:3d:
83:b6:3f:71:7f:fb:46:ec:02:cf:95:00:70:a5:9a:
a2:ba:10:14:d3:c2:82:f5:7f:3d:c2:d5:88:f8:0b:
ef:88:15:e6:5f:cd:99:f1:01:61:05:dc:bd:7f:5d:
93:9f:a2:b0:94:7e:98:de:7c:81:f9:7f:f6:b5:e3:
13:94:3c:43:e2:a6:89:4a:a9:a4:25:c1:d0:9f:55:
ca:4f:c1:fb:a0:36:fa:51:72:7c:e9:dc:6f:5c:44:
ab:52:01:c0:75:93:d8:9e:87:53:a6:6f:d6:ff:19:
76:6a:56:49:64:4a:33:ff:e8:72:3f:8b:03:ab:ac:
77:44:68:8a:97:cf:ae:6e:bf:9f:83:4b:14:a5:05:
d3:24:69:3b:8c:bb:f5:d3:e5:df:5e:dd:18:ab:00:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:36:BA:4C:A6:5B:FF:3B:D9:21:80:9E:C4:64:67:7B:89:BA:95
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154747.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.180.0/23
Signature Algorithm: sha256WithRSAEncryption
04:b6:a5:10:cc:1c:7d:08:29:05:d8:82:43:ca:50:fb:45:c2:
e9:e2:5a:78:62:98:1d:25:65:2a:89:37:c7:f2:e4:94:02:67:
07:60:15:2f:01:00:56:e5:74:b8:ac:e0:b1:d0:2c:7b:83:1a:
33:89:e0:e3:22:58:1e:2c:fc:4d:37:e4:bd:7d:c8:ff:f3:11:
0b:ca:1c:af:af:03:6b:ac:2c:79:92:6c:5a:9d:e3:93:a4:a3:
c8:43:53:e6:ba:96:de:b5:73:bd:6c:c5:7a:02:a7:df:d9:7d:
81:84:2c:7e:9c:9e:f7:3f:6e:dc:c1:f0:9d:86:06:b2:02:a1:
03:ed:a7:8c:38:6a:4c:d1:64:f9:02:0e:04:82:42:e5:07:9d:
4b:c8:86:c4:d2:c0:6a:60:6e:77:41:de:17:f6:08:63:c4:f7:
74:14:7d:5c:b1:32:89:05:3b:77:3c:8d:e9:c8:05:d7:37:0d:
8c:35:2b:5a:be:36:7d:77:44:cd:ad:2e:18:3f:72:07:2a:7f:
e6:4f:b2:38:0d:6d:a3:60:d0:a1:45:d6:b9:fc:ee:db:91:c1:
0a:0f:d7:7c:f4:b9:95:9d:a4:f8:61:82:3d:76:cd:ff:88:41:
10:bd:5d:a7:55:a8:be:13:ee:3c:3f:38:bd:5d:d4:b0:0e:cb:
65:6c:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:00:10 2026 by rpki-client