$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154771.roa File: AS154771.roa (raw, json) Hash identifier: pTcOIOU2U9Aot861aK7AW0vAaevLegZN3Vbms0sA/ro= Subject key identifier: C6:18:80:6F:42:02:FF:26:79:1A:98:EB:87:CF:A8:B9:8E:BC:E5:37 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 02F71F767537705EEF1518D1CC9B5B6673593903 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154771.roa Signing time: Thu 30 Jul 2026 07:40:01 +0000 ROA not before: Thu 30 Jul 2026 07:35:01 +0000 ROA not after: Thu 29 Jul 2027 07:40:01 +0000 asID: 154771 IP address blocks: 160.236.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f7:1f:76:75:37:70:5e:ef:15:18:d1:cc:9b:5b:66:73:59:39:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 07:35:01 2026 GMT Not After : Jul 29 07:40:01 2027 GMT Subject: CN=C618806F4202FF26791A98EB87CFA8B98EBCE537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:5f:37:9a:fd:f4:e0:5f:dc:36:1b:e0:49: 26:4c:f2:bc:31:81:fe:eb:8c:09:74:09:c9:f4:4b: 0a:fc:e9:83:e8:a8:27:6c:10:e3:44:df:98:e9:2f: ae:43:31:e1:d4:96:6c:5f:b2:56:ed:92:1a:0c:ef: 96:5f:e6:af:d8:c8:e8:58:ce:2a:72:a0:07:89:a1: 43:88:51:e3:f3:a1:5b:a2:3e:7f:98:68:27:32:42: 39:a4:d4:1b:10:73:cf:6c:15:9a:f1:c6:97:5b:f6: ac:b4:00:5b:ec:b3:e5:22:ab:31:04:d1:84:63:26: 6e:b1:1b:05:89:c8:a1:d0:82:db:47:17:19:f6:8f: 0b:c4:b0:1f:8c:bf:ad:df:80:16:fe:c9:c8:4f:57: 42:1d:51:83:df:5d:d0:08:b8:7d:75:15:c7:39:90: 34:77:7a:f1:f3:f2:f9:c4:d6:3b:b1:a5:49:ba:24: f8:b2:b5:c0:b3:65:ab:98:51:af:cf:d7:82:3d:56: bc:df:a3:68:fd:64:e6:15:7e:06:a6:5d:a5:a2:2a: dc:f0:53:ea:38:e4:ad:1a:f7:e7:1e:10:30:74:6a: d4:c0:1e:bf:cc:7e:71:16:4b:3f:85:e8:10:d4:cf: 75:40:0d:82:8d:a6:85:0c:ee:d8:ff:59:91:9a:62: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:18:80:6F:42:02:FF:26:79:1A:98:EB:87:CF:A8:B9:8E:BC:E5:37 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.165.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ac:25:0b:5a:f0:9d:4c:ae:ef:c1:e2:01:c5:1b:3c:30:5e: b3:cf:b2:3d:e0:90:c5:57:ed:1e:6a:fa:36:06:9d:43:a5:35: 1d:87:2e:a9:5d:d8:23:43:93:ac:55:7c:df:54:57:2a:60:fd: f6:68:a4:d7:fa:35:91:f6:6b:ce:ea:c4:9d:26:af:6f:c0:d1: 85:95:85:23:60:10:ec:7d:bb:62:b7:17:db:d0:32:f4:fd:72: c7:99:d6:4e:74:6d:7d:14:e8:11:88:7c:aa:64:1a:e7:e1:37: 16:40:02:64:3c:03:b3:f6:b6:ad:4a:7a:d2:56:c0:9d:2f:ae: 11:f8:33:bd:0d:01:06:85:65:a0:3e:e8:b0:d8:6d:92:f4:38: 23:63:fa:f0:08:db:5e:ff:e7:93:04:a8:7a:45:e6:d8:de:06: b9:4a:19:a9:86:5d:4a:2e:3d:9a:05:b1:3a:63:72:c7:61:48: 87:50:1d:57:32:45:ae:f6:57:9e:03:3f:88:53:4a:4e:ea:ba: 90:7f:8a:8e:f4:44:cc:9e:8a:13:82:4b:8f:77:39:90:4b:59: da:d8:77:38:e8:23:e1:2e:18:0c:d9:59:77:f3:fc:6a:0e:9c: ef:71:ea:30:80:99:29:c6:fe:67:b5:2b:14:dd:8e:0b:93:f2: 9e:72:2a:66 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUAvcfdnU3cF7vFRjRzJtbZnNZOQMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDA3MzUwMVoX DTI3MDcyOTA3NDAwMVowMzExMC8GA1UEAxMoQzYxODgwNkY0MjAyRkYyNjc5MUE5 OEVCODdDRkE4Qjk4RUJDRTUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkBXzea/fTgX9w2G+BJJkzyvDGB/uuMCXQJyfRLCvzpg+ioJ2wQ40TfmOkv rkMx4dSWbF+yVu2SGgzvll/mr9jI6FjOKnKgB4mhQ4hR4/OhW6I+f5hoJzJCOaTU GxBzz2wVmvHGl1v2rLQAW+yz5SKrMQTRhGMmbrEbBYnIodCC20cXGfaPC8SwH4y/ rd+AFv7JyE9XQh1Rg99d0Ai4fXUVxzmQNHd68fPy+cTWO7GlSbok+LK1wLNlq5hR r8/Xgj1WvN+jaP1k5hV+BqZdpaIq3PBT6jjkrRr35x4QMHRq1MAev8x+cRZLP4Xo ENTPdUANgo2mhQzu2P9ZkZpiHikCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTGGIBv QgL/JnkamOuHz6i5jrzlNzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzcxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOylMA0GCSqGSIb3DQEBCwUAA4IBAQBprCULWvCdTK7vweIBxRs8MF6z z7I94JDFV+0eavo2Bp1DpTUdhy6pXdgjQ5OsVXzfVFcqYP32aKTX+jWR9mvO6sSd Jq9vwNGFlYUjYBDsfbtitxfb0DL0/XLHmdZOdG19FOgRiHyqZBrn4TcWQAJkPAOz 9ratSnrSVsCdL64R+DO9DQEGhWWgPuiw2G2S9DgjY/rwCNte/+eTBKh6RebY3ga5 Shmphl1KLj2aBbE6Y3LHYUiHUB1XMkWu9leeAz+IU0pO6rqQf4qO9ETMnooTgkuP dzmQS1na2Hc46CPhLhgM2Vl38/xqDpzvceowgJkpxv5ntSsU3Y4Lk/Kecipm -----END CERTIFICATE-----Generated at Sun Aug 2 16:57:28 2026 by rpki-client