$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154773.roa File: AS154773.roa (raw, json) Hash identifier: Ds7P4jgUcLLS1sei9F0rmCxIfDEa0a55DO89Vq8VY/8= Subject key identifier: CB:3B:E3:C6:45:7E:6E:5A:FB:E2:D6:0E:AC:3C:7D:1A:9A:1F:67:32 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 54E07A3CE17FE9F7266D1D6E382B1CC871B3A1B1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154773.roa Signing time: Thu 30 Jul 2026 07:40:55 +0000 ROA not before: Thu 30 Jul 2026 07:35:55 +0000 ROA not after: Thu 29 Jul 2027 07:40:55 +0000 asID: 154773 IP address blocks: 160.236.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e0:7a:3c:e1:7f:e9:f7:26:6d:1d:6e:38:2b:1c:c8:71:b3:a1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 07:35:55 2026 GMT Not After : Jul 29 07:40:55 2027 GMT Subject: CN=CB3BE3C6457E6E5AFBE2D60EAC3C7D1A9A1F6732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:f6:ba:f8:31:8f:a6:94:9f:97:8f:87:8e: 49:f0:bb:ec:6b:58:35:10:d7:48:7b:24:32:7a:12: 0f:28:fe:4a:ff:41:79:9a:0f:53:c5:42:f9:7b:16: 8e:13:f7:41:a6:c0:bb:b0:b1:4a:bc:95:66:81:cc: 03:5e:1e:c8:18:33:d0:14:d9:4e:36:73:8a:30:c7: e5:d1:e7:b0:4f:e4:5e:cb:21:0d:da:9f:fa:83:72: ab:31:7a:7c:f9:63:40:06:e8:c4:31:6a:99:9e:e4: 93:ac:55:5a:ca:9d:71:a8:12:60:dc:9a:af:39:9c: 92:39:32:2e:30:11:23:70:10:13:d0:9f:b5:04:6f: 7c:18:e2:29:2d:73:82:e6:96:0b:a2:5c:9d:dc:f9: 6a:e0:b7:bc:44:4b:45:63:61:14:1d:5b:b7:a9:3b: 56:99:3e:b2:93:4a:52:cf:3c:39:96:5d:c1:72:a5: a0:d8:4d:d4:2f:e5:4f:c0:87:02:ec:28:81:16:89: c1:01:f3:ae:2a:d9:d3:c8:cb:50:27:e6:87:44:41: f8:52:aa:49:4a:bc:97:34:90:b5:85:e5:fd:1d:f3: c6:bc:02:d1:01:b3:8a:8a:d6:e5:96:ef:8a:7f:c4: 95:63:51:cd:01:17:31:26:5c:4f:52:f4:5f:3d:5f: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3B:E3:C6:45:7E:6E:5A:FB:E2:D6:0E:AC:3C:7D:1A:9A:1F:67:32 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154773.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.171.0/24 Signature Algorithm: sha256WithRSAEncryption 53:ee:9f:77:0d:b0:1e:2b:b3:b5:b2:b1:1f:35:75:c0:43:e8: d9:11:cd:10:9e:e6:cd:bc:f2:41:24:14:d1:c9:97:14:49:7e: 9c:b6:b6:7f:0e:c9:4c:7d:b8:65:57:28:e4:dd:a7:0a:8f:83: a5:16:85:a6:d2:34:65:59:65:8a:3a:c4:6c:c8:f6:bc:09:c8: 0a:a0:ce:5a:cb:b5:7f:c3:0c:02:cb:8f:80:91:a6:ed:7e:d4: 3a:d6:1b:85:ec:5b:5a:25:28:5c:27:9a:cb:05:36:04:f1:6a: c8:11:6d:a0:0c:3c:5f:b9:cc:e2:47:21:90:50:e6:a3:80:0a: 6a:15:7c:cd:28:a3:61:ab:2a:b2:41:12:11:9a:12:a7:b8:de: e6:77:36:83:2b:fe:93:4b:f5:f9:09:b1:21:18:b4:ec:59:43: 41:ab:47:05:30:70:0a:ed:de:3e:a5:ae:5e:f9:b7:4c:ca:c5: f8:82:a3:d3:29:b1:7f:b0:da:36:26:17:7b:bc:f2:32:3b:b0: c2:c4:c9:c6:16:c1:b7:d4:e9:a8:3c:29:28:5d:77:d9:41:23: 75:44:e8:97:04:84:2d:b1:63:a7:21:82:9e:d1:57:33:2d:5e: 14:32:16:fa:0a:53:c4:6d:8c:cc:80:dc:ff:23:ae:0d:66:10: b8:e5:c1:98 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVOB6POF/6fcmbR1uOCscyHGzobEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDA3MzU1NVoX DTI3MDcyOTA3NDA1NVowMzExMC8GA1UEAxMoQ0IzQkUzQzY0NTdFNkU1QUZCRTJE NjBFQUMzQzdEMUE5QTFGNjczMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKR59rr4MY+mlJ+Xj4eOSfC77GtYNRDXSHskMnoSDyj+Sv9BeZoPU8VC+XsW jhP3QabAu7CxSryVZoHMA14eyBgz0BTZTjZzijDH5dHnsE/kXsshDdqf+oNyqzF6 fPljQAboxDFqmZ7kk6xVWsqdcagSYNyarzmckjkyLjARI3AQE9CftQRvfBjiKS1z guaWC6Jcndz5auC3vERLRWNhFB1bt6k7Vpk+spNKUs88OZZdwXKloNhN1C/lT8CH AuwogRaJwQHzrirZ08jLUCfmh0RB+FKqSUq8lzSQtYXl/R3zxrwC0QGziorW5Zbv in/ElWNRzQEXMSZcT1L0Xz1f7LsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTLO+PG RX5uWvvi1g6sPH0amh9nMjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyrMA0GCSqGSIb3DQEBCwUAA4IBAQBT7p93DbAeK7O1srEfNXXAQ+jZ Ec0QnubNvPJBJBTRyZcUSX6ctrZ/DslMfbhlVyjk3acKj4OlFoWm0jRlWWWKOsRs yPa8CcgKoM5ay7V/wwwCy4+AkabtftQ61huF7FtaJShcJ5rLBTYE8WrIEW2gDDxf ucziRyGQUOajgApqFXzNKKNhqyqyQRIRmhKnuN7mdzaDK/6TS/X5CbEhGLTsWUNB q0cFMHAK7d4+pa5e+bdMysX4gqPTKbF/sNo2Jhd7vPIyO7DCxMnGFsG31OmoPCko XXfZQSN1ROiXBIQtsWOnIYKe0VczLV4UMhb6ClPEbYzMgNz/I64NZhC45cGY -----END CERTIFICATE-----Generated at Sun Aug 2 16:57:28 2026 by rpki-client