$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154765.roa File: AS154765.roa (raw, json) Hash identifier: fbpgkW0/zovCXG9BuarUqfqPVicJG7FsyzrD4mtxe1g= Subject key identifier: FD:23:9F:A4:ED:F4:53:55:B2:77:0D:C5:C7:B8:C7:09:94:69:9D:68 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5B1E119FF3457C3E240BD223E7BA267D68E05182 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154765.roa Signing time: Fri 31 Jul 2026 04:26:08 +0000 ROA not before: Fri 31 Jul 2026 04:21:08 +0000 ROA not after: Fri 30 Jul 2027 04:26:08 +0000 asID: 154765 IP address blocks: 160.236.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1e:11:9f:f3:45:7c:3e:24:0b:d2:23:e7:ba:26:7d:68:e0:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 31 04:21:08 2026 GMT Not After : Jul 30 04:26:08 2027 GMT Subject: CN=FD239FA4EDF45355B2770DC5C7B8C70994699D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:c7:cf:7b:44:34:4e:7a:93:4e:2e:cd:03: a0:01:a2:a2:d0:b2:96:03:79:c1:75:88:1a:f1:2c: f0:0d:66:bf:42:fd:a6:ec:e7:75:ae:9a:57:43:bf: 84:ba:53:c8:f6:6f:f2:86:e1:1c:a4:c6:a1:f4:4b: 2b:6f:5c:f5:57:9b:f3:40:b3:6d:4d:b8:3f:a9:8a: 26:a9:f7:de:0b:52:36:35:43:1c:dc:66:b6:dc:d8: 3e:90:a5:ba:01:a2:23:d4:97:d3:b6:2b:2e:fa:74: 69:88:86:90:f6:f8:db:f7:4f:2a:a1:21:5a:89:30: 25:b4:26:5e:c8:05:b9:32:33:8a:f9:8f:e3:2c:5a: 0b:dd:81:5d:2a:3a:2d:94:50:11:96:65:59:1b:51: 55:e0:b2:bf:58:92:fe:ac:2d:4b:5d:f4:7b:a5:38: 7f:d7:76:f2:66:69:09:a7:b6:25:2a:88:7f:f6:09: 29:d1:8a:dd:24:69:2c:59:5a:cc:db:9b:8a:27:52: bd:81:dd:64:b2:14:c5:38:8b:5c:f3:f2:36:d3:c5: 93:f2:e3:79:f7:5f:f0:31:0e:3d:ce:51:bd:fa:bf: 0b:de:88:ac:c2:96:0a:7b:5d:c8:46:1e:d4:b8:3a: a6:34:2b:ed:4c:27:20:f6:16:a5:d7:a5:83:4d:90: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:9F:A4:ED:F4:53:55:B2:77:0D:C5:C7:B8:C7:09:94:69:9D:68 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154765.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.159.0/24 Signature Algorithm: sha256WithRSAEncryption 74:22:a1:1b:72:dc:57:ee:e9:02:be:33:3a:c8:88:82:22:31: 43:87:6e:bb:69:ef:f1:ec:2e:88:76:fe:7b:df:3b:c5:db:09: eb:f4:18:1c:ab:ce:7a:c2:8f:02:ea:54:86:30:a1:0b:fd:d7: 0d:9e:51:0d:95:a4:06:ba:b8:e4:52:da:6c:66:e4:89:95:70: 95:30:d7:02:fd:54:e3:fa:36:41:48:45:bb:86:ec:7b:6c:32: f4:fb:fc:b8:51:a6:33:55:60:9f:44:86:57:72:4e:b0:25:f4: d0:27:65:6c:c4:53:8c:9d:27:21:df:d2:cf:c8:e8:d8:ed:a2: 37:e2:77:25:d7:55:25:72:f0:c9:35:00:8a:9e:6d:30:08:fa: 97:bc:b8:96:10:2e:4a:a1:8b:32:49:16:76:6d:a6:9d:93:2c: 07:e7:84:66:fc:f2:c3:84:66:30:f3:9d:b3:af:dd:db:0f:49: 9d:04:c4:99:17:87:ad:10:0d:19:eb:23:35:80:b5:be:20:47: 8e:1c:6d:38:f8:06:19:26:e2:74:e0:74:57:c2:2c:c8:37:55: 4d:ca:92:17:17:d4:92:8a:ab:45:e6:43:69:7b:77:1f:80:c2: 59:c7:41:14:c2:a5:ca:e4:87:8c:ca:15:8c:32:14:7e:59:02: 95:71:c0:45 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWx4Rn/NFfD4kC9Ij57omfWjgUYIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMTA0MjEwOFoX DTI3MDczMDA0MjYwOFowMzExMC8GA1UEAxMoRkQyMzlGQTRFREY0NTM1NUIyNzcw REM1QzdCOEM3MDk5NDY5OUQ2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1wx897RDROepNOLs0DoAGiotCylgN5wXWIGvEs8A1mv0L9puznda6aV0O/ hLpTyPZv8obhHKTGofRLK29c9Veb80CzbU24P6mKJqn33gtSNjVDHNxmttzYPpCl ugGiI9SX07YrLvp0aYiGkPb42/dPKqEhWokwJbQmXsgFuTIzivmP4yxaC92BXSo6 LZRQEZZlWRtRVeCyv1iS/qwtS130e6U4f9d28mZpCae2JSqIf/YJKdGK3SRpLFla zNubiidSvYHdZLIUxTiLXPPyNtPFk/Ljefdf8DEOPc5Rvfq/C96IrMKWCntdyEYe 1Lg6pjQr7UwnIPYWpdelg02QZFECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT9I5+k 7fRTVbJ3DcXHuMcJlGmdaDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyfMA0GCSqGSIb3DQEBCwUAA4IBAQB0IqEbctxX7ukCvjM6yIiCIjFD h267ae/x7C6Idv573zvF2wnr9Bgcq856wo8C6lSGMKEL/dcNnlENlaQGurjkUtps ZuSJlXCVMNcC/VTj+jZBSEW7hux7bDL0+/y4UaYzVWCfRIZXck6wJfTQJ2VsxFOM nSch39LPyOjY7aI34ncl11UlcvDJNQCKnm0wCPqXvLiWEC5KoYsySRZ2baadkywH 54Rm/PLDhGYw852zr93bD0mdBMSZF4etEA0Z6yM1gLW+IEeOHG04+AYZJuJ04HRX wizIN1VNypIXF9SSiqtF5kNpe3cfgMJZx0EUwqXK5IeMyhWMMhR+WQKVccBF -----END CERTIFICATE-----Generated at Sun Aug 2 16:55:19 2026 by rpki-client