$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154772.roa File: AS154772.roa (raw, json) Hash identifier: nxu1uVIsRNUjRKRv/9ccAjb/6gO8zn6bKhvoNGCmBkM= Subject key identifier: AA:FD:7F:0B:43:CB:DD:10:FF:0C:63:D2:B0:FA:43:EA:2F:1F:06:DE Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 327B1BF4FE35C2824679F878C879E8C4305C72F3 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154772.roa Signing time: Thu 30 Jul 2026 01:23:06 +0000 ROA not before: Thu 30 Jul 2026 01:18:06 +0000 ROA not after: Thu 29 Jul 2027 01:23:06 +0000 asID: 154772 IP address blocks: 160.236.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7b:1b:f4:fe:35:c2:82:46:79:f8:78:c8:79:e8:c4:30:5c:72:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 01:18:06 2026 GMT Not After : Jul 29 01:23:06 2027 GMT Subject: CN=AAFD7F0B43CBDD10FF0C63D2B0FA43EA2F1F06DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:73:b4:32:3d:75:d0:c9:1d:9c:ea:5b:69: 2f:7e:e1:7b:c5:c0:cc:98:13:ec:10:fb:72:f1:7f: f0:ba:a2:e3:b9:b3:eb:cc:7a:b7:49:80:f6:69:d5: 55:46:62:55:6c:79:fd:58:9c:aa:a6:28:d5:e2:42: 4a:14:39:36:30:c5:7c:c5:41:34:47:c9:02:60:26: 34:42:12:99:c5:f1:59:e7:df:35:9c:14:f8:a0:9c: e7:0c:05:e4:3a:aa:d7:0d:1f:7e:c8:0c:a5:5c:40: a1:9b:fe:11:6c:d5:a6:ee:f5:af:f4:25:2d:a0:d1: 58:7d:67:d8:ec:60:b3:3c:41:94:52:43:f1:d3:78: 2f:4a:11:d5:2c:63:bc:cb:ff:86:27:09:08:fa:cb: 1c:1c:8c:86:6f:da:b4:e4:59:b3:84:d1:e7:d1:7e: 16:4f:f3:96:aa:80:58:49:60:68:4e:bb:6f:ef:08: 50:db:e1:e7:9f:a2:0b:d2:f8:59:b6:df:67:b2:f6: a4:28:5a:44:bb:41:32:25:c3:ab:de:84:26:2c:da: 0e:aa:e7:0f:ff:52:c0:4c:29:b8:b6:bd:68:c4:66: 34:9f:e7:05:c8:b9:56:17:2b:29:53:6f:47:18:15: e1:1c:40:e3:fe:f9:ba:ab:a5:db:f0:9d:dd:d7:ed: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FD:7F:0B:43:CB:DD:10:FF:0C:63:D2:B0:FA:43:EA:2F:1F:06:DE X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154772.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.170.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:0f:59:9b:c0:6e:75:6e:b6:7a:cc:a5:9b:ae:e2:4c:60:cd: c8:76:6a:ed:2f:8c:75:ca:8b:13:1a:8a:17:c1:ec:9e:fa:91: 7f:ce:56:b5:8e:12:38:b4:a1:03:6b:1f:f2:c1:87:62:4b:23: 18:e7:32:32:cc:eb:d0:67:4b:bf:3a:46:47:02:ac:b1:88:c4: 65:ab:4e:2f:40:19:00:a3:1c:8e:29:46:69:6a:96:bc:79:9b: 0d:bc:bd:79:41:10:f6:53:80:a8:ef:5f:1f:ab:26:e6:a7:b6: 0c:4c:5a:2d:42:13:62:e7:ea:be:8a:6f:d7:b6:2f:99:6c:f2: ce:c1:02:0b:dc:26:1a:b7:a1:34:77:3c:3d:ed:74:b5:c5:06: 4a:8d:31:b9:68:e6:eb:34:ba:09:0e:e5:bf:7b:eb:9b:07:44: 0f:86:5a:00:d9:cb:74:28:5d:fd:88:53:57:5e:9b:15:83:ab: 36:3d:2d:21:2e:f0:39:84:81:15:46:af:4e:94:c5:83:10:e3: d3:e0:cb:39:4b:6e:b4:48:8e:a3:59:d4:ec:e9:65:49:04:df: 74:05:6d:ac:98:15:b8:b7:10:5a:cb:88:ce:91:f0:74:ab:b2: c8:e9:f4:8e:ca:2e:7d:8d:5d:ab:b2:d5:9e:12:e2:da:e4:95: 03:4d:66:4f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMnsb9P41woJGefh4yHnoxDBccvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDAxMTgwNloX DTI3MDcyOTAxMjMwNlowMzExMC8GA1UEAxMoQUFGRDdGMEI0M0NCREQxMEZGMEM2 M0QyQjBGQTQzRUEyRjFGMDZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALl9c7QyPXXQyR2c6ltpL37he8XAzJgT7BD7cvF/8Lqi47mz68x6t0mA9mnV VUZiVWx5/VicqqYo1eJCShQ5NjDFfMVBNEfJAmAmNEISmcXxWeffNZwU+KCc5wwF 5Dqq1w0ffsgMpVxAoZv+EWzVpu71r/QlLaDRWH1n2OxgszxBlFJD8dN4L0oR1Sxj vMv/hicJCPrLHByMhm/atORZs4TR59F+Fk/zlqqAWElgaE67b+8IUNvh55+iC9L4 WbbfZ7L2pChaRLtBMiXDq96EJizaDqrnD/9SwEwpuLa9aMRmNJ/nBci5VhcrKVNv RxgV4RxA4/75uqul2/Cd3dftdZkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSq/X8L Q8vdEP8MY9Kw+kPqLx8G3jAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzcyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyqMA0GCSqGSIb3DQEBCwUAA4IBAQA9D1mbwG51brZ6zKWbruJMYM3I dmrtL4x1yosTGooXweye+pF/zla1jhI4tKEDax/ywYdiSyMY5zIyzOvQZ0u/OkZH AqyxiMRlq04vQBkAoxyOKUZpapa8eZsNvL15QRD2U4Co718fqybmp7YMTFotQhNi 5+q+im/Xti+ZbPLOwQIL3CYat6E0dzw97XS1xQZKjTG5aObrNLoJDuW/e+ubB0QP hloA2ct0KF39iFNXXpsVg6s2PS0hLvA5hIEVRq9OlMWDEOPT4Ms5S260SI6jWdTs 6WVJBN90BW2smBW4txBay4jOkfB0q7LI6fSOyi59jV2rstWeEuLa5JUDTWZP -----END CERTIFICATE-----Generated at Sun Aug 2 16:55:07 2026 by rpki-client