$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154770.roa File: AS154770.roa (raw, json) Hash identifier: RD+WOa5LjQ3g6GZORwV/N8Rt6UfXg1KZs7QxP2Kk3fI= Subject key identifier: DC:FA:65:49:8B:11:E0:62:64:3E:2D:AA:50:19:DE:FA:67:38:FB:9B Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4E9599224CA56ACB29F2314F3B3ECF5C68A0B9B2 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154770.roa Signing time: Thu 30 Jul 2026 08:07:09 +0000 ROA not before: Thu 30 Jul 2026 08:02:09 +0000 ROA not after: Thu 29 Jul 2027 08:07:09 +0000 asID: 154770 IP address blocks: 160.236.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:95:99:22:4c:a5:6a:cb:29:f2:31:4f:3b:3e:cf:5c:68:a0:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 08:02:09 2026 GMT Not After : Jul 29 08:07:09 2027 GMT Subject: CN=DCFA65498B11E062643E2DAA5019DEFA6738FB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:11:ec:8a:de:3a:3d:12:8b:4a:f7:a8:58: a6:7c:04:48:a7:78:8a:17:1a:ac:a7:d0:93:42:95: e2:f6:47:65:7d:91:ee:9f:9d:de:3d:8a:8d:4f:04: 11:b1:00:a9:1c:d8:43:7a:23:d0:1e:08:a0:08:8b: ba:df:fb:dc:52:c4:e5:e7:5c:28:c3:31:6b:cb:3d: 29:1a:80:b1:24:9c:6d:f9:c5:0d:84:31:56:89:95: a9:64:8a:fb:32:a7:8a:35:b5:e1:33:b2:cf:07:6c: 7f:e8:8e:ba:b4:6b:84:e1:42:71:83:fe:96:d4:b8: 24:2f:1a:7d:33:4b:a2:16:7f:ed:a0:67:ee:cb:59: 24:e6:e8:44:6b:65:f1:5b:d9:87:37:da:6a:09:26: 30:c0:30:f2:14:d7:be:d3:78:5b:5a:62:8f:71:d6: 24:04:db:9d:df:95:10:35:09:70:de:16:95:58:f1: 82:9b:d7:51:3b:0c:da:52:5a:86:94:e1:04:77:64: ed:15:96:6a:c8:dc:cb:83:94:4c:87:05:96:93:40: e0:a4:b9:6e:da:f1:2b:ea:f3:fa:6c:09:4c:05:9a: 01:10:7d:5a:01:84:c5:03:4d:91:2e:bf:4a:de:5f: 43:3b:d3:25:cd:8c:5a:b9:ef:c1:fa:bc:17:90:fd: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FA:65:49:8B:11:E0:62:64:3E:2D:AA:50:19:DE:FA:67:38:FB:9B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154770.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.168.0/23 Signature Algorithm: sha256WithRSAEncryption 89:23:ca:60:bc:76:04:2d:19:bf:1d:42:43:41:42:72:6d:f0: 75:26:6d:a6:19:d0:e9:78:aa:2d:64:da:75:6f:25:d2:e7:d7: 75:1d:d0:24:fa:5f:3e:5f:4c:dd:9c:13:22:98:69:04:82:ae: a3:e7:c7:93:3e:43:27:bc:29:4a:2b:1b:dc:57:da:69:1e:70: 20:aa:b4:ac:78:67:e4:7d:cc:3c:ac:c2:86:41:29:86:ac:bd: 34:d6:62:47:f8:d7:06:d9:91:cb:25:bb:3f:3e:76:c0:dd:4a: fa:c4:d6:21:93:70:1c:65:e6:ea:13:97:6d:94:82:bf:97:8c: b8:85:c1:ba:8f:7b:7e:e5:fe:fb:c0:9a:c4:ec:57:35:1f:de: 5c:20:10:d2:6a:dc:fc:44:f1:35:a4:f3:db:47:a8:a0:59:10: de:58:06:6d:38:83:48:20:c4:8e:07:e7:81:5d:b1:6a:53:0b: 89:1e:ef:fa:47:43:8d:01:ab:93:bb:05:70:15:f4:bc:34:94: fc:b1:d9:bc:35:3b:d3:b8:73:50:39:a2:90:1e:ea:56:17:0a: 28:43:d7:b6:94:70:2e:93:6a:ba:52:bf:db:3b:9d:10:f3:3d: 1f:a9:22:9b:73:5f:a3:5c:71:a2:3d:37:cf:5e:91:43:0f:22: 2a:21:51:74 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTpWZIkylassp8jFPOz7PXGigubIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDA4MDIwOVoX DTI3MDcyOTA4MDcwOVowMzExMC8GA1UEAxMoRENGQTY1NDk4QjExRTA2MjY0M0Uy REFBNTAxOURFRkE2NzM4RkI5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOqEeyK3jo9EotK96hYpnwESKd4ihcarKfQk0KV4vZHZX2R7p+d3j2KjU8E EbEAqRzYQ3oj0B4IoAiLut/73FLE5edcKMMxa8s9KRqAsSScbfnFDYQxVomVqWSK +zKnijW14TOyzwdsf+iOurRrhOFCcYP+ltS4JC8afTNLohZ/7aBn7stZJOboRGtl 8VvZhzfaagkmMMAw8hTXvtN4W1pij3HWJATbnd+VEDUJcN4WlVjxgpvXUTsM2lJa hpThBHdk7RWWasjcy4OUTIcFlpNA4KS5btrxK+rz+mwJTAWaARB9WgGExQNNkS6/ St5fQzvTJc2MWrnvwfq8F5D9UbsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTc+mVJ ixHgYmQ+LapQGd76Zzj7mzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOyoMA0GCSqGSIb3DQEBCwUAA4IBAQCJI8pgvHYELRm/HUJDQUJybfB1 Jm2mGdDpeKotZNp1byXS59d1HdAk+l8+X0zdnBMimGkEgq6j58eTPkMnvClKKxvc V9ppHnAgqrSseGfkfcw8rMKGQSmGrL001mJH+NcG2ZHLJbs/PnbA3Ur6xNYhk3Ac ZebqE5dtlIK/l4y4hcG6j3t+5f77wJrE7Fc1H95cIBDSatz8RPE1pPPbR6igWRDe WAZtOINIIMSOB+eBXbFqUwuJHu/6R0ONAauTuwVwFfS8NJT8sdm8NTvTuHNQOaKQ HupWFwooQ9e2lHAuk2q6Ur/bO50Q8z0fqSKbc1+jXHGiPTfPXpFDDyIqIVF0 -----END CERTIFICATE-----Generated at Sun Aug 2 16:56:05 2026 by rpki-client