$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154778.roa File: AS154778.roa (raw, json) Hash identifier: kwuJKmEfAMM+XuGpmx1s50WbDFbxOsi/YLD/yfbUp9Q= Subject key identifier: 7B:E6:D1:B8:A3:CB:41:84:C7:9A:9C:1A:87:37:0C:EF:D3:5E:0E:65 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 721DCB38B5A9893139DCD91DFCE94755FA8D449D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154778.roa Signing time: Thu 30 Jul 2026 09:23:04 +0000 ROA not before: Thu 30 Jul 2026 09:18:04 +0000 ROA not after: Thu 29 Jul 2027 09:23:04 +0000 asID: 154778 IP address blocks: 160.236.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1d:cb:38:b5:a9:89:31:39:dc:d9:1d:fc:e9:47:55:fa:8d:44:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 30 09:18:04 2026 GMT Not After : Jul 29 09:23:04 2027 GMT Subject: CN=7BE6D1B8A3CB4184C79A9C1A87370CEFD35E0E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:45:47:4a:a5:84:79:1e:77:89:0e:69:23: cf:09:ff:f8:b0:ea:96:a4:9e:b7:ad:04:83:4d:9a: ce:4b:07:c0:e4:ea:8d:26:ea:e8:c9:18:14:16:1b: 06:7f:6f:da:c5:0c:a5:95:68:68:ed:ec:9b:5d:26: f5:64:93:f3:95:e1:f6:e4:a9:a8:21:ca:56:bb:fd: 9b:8d:de:83:54:a7:9f:a2:3f:c7:21:6e:ea:64:22: ef:1f:be:ea:36:25:92:2c:0c:2d:58:50:6d:f5:7d: 63:d5:90:ec:cb:1e:63:06:36:55:56:45:95:7a:2d: 50:0d:99:6e:e7:f4:b2:d8:57:2d:19:60:63:d5:4d: ea:93:3f:94:b0:84:11:b4:6b:c1:18:81:cc:af:0b: 66:b1:47:85:ea:7e:2f:09:7c:e2:9b:b1:7c:da:d1: c6:65:08:cd:11:d7:93:e8:9f:06:32:f6:12:2f:26: 23:02:29:11:4d:cf:fd:72:58:fd:f1:af:b3:d8:76: 91:9e:6e:a6:a7:c4:63:a7:3a:5a:2e:10:40:d5:2c: 0e:17:0a:09:63:9d:07:a3:4f:d3:ed:3d:21:74:1b: 70:e2:0f:22:78:2f:e3:8e:5b:71:99:3c:8d:f7:8e: d9:08:d9:d5:f1:11:9c:20:83:9a:10:e7:88:05:54: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:D1:B8:A3:CB:41:84:C7:9A:9C:1A:87:37:0C:EF:D3:5E:0E:65 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.174.0/23 Signature Algorithm: sha256WithRSAEncryption 87:49:a0:1e:1c:1c:22:46:57:fd:e7:53:6e:62:c2:f7:ca:c0: ea:62:3a:1f:e1:e1:8e:c8:39:e2:f3:f9:6d:cf:60:2c:e9:2a: a9:28:6d:43:52:c2:6f:19:90:ba:72:5c:40:57:30:90:2f:3e: d8:75:cc:d6:b4:62:59:19:db:93:f8:b9:e0:21:f3:4f:ad:b2: d5:b3:c1:3a:07:00:91:e7:e7:5e:1d:8e:fd:d0:6e:88:d5:47: 48:18:59:f9:68:00:c3:7f:0f:28:c9:e0:11:a6:90:dd:e5:f3: 89:4b:46:15:5b:f7:ed:14:ec:31:3b:b4:97:cc:66:a1:a2:e9: 8f:1f:31:e4:3c:16:ac:73:ad:ab:f1:3b:91:f2:cb:e7:1f:e0: 73:5b:2d:0f:89:38:48:ba:97:e3:2e:66:7d:17:25:c3:cd:c8: c9:e5:35:84:43:30:c4:57:2c:e5:00:9b:9b:e9:30:01:66:5b: bd:f5:3a:d1:54:c6:75:38:91:63:30:9a:e6:92:17:69:9c:e6: b0:89:77:28:59:0d:45:a4:f7:70:3e:cf:11:1b:4e:87:be:ec: 02:d9:56:2e:ff:77:14:99:10:d6:2d:89:9f:66:67:89:27:43: d5:2e:56:17:21:1d:88:e6:65:dc:eb:6d:52:33:de:00:c9:d1: 25:ae:eb:7b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUch3LOLWpiTE53Nkd/OlHVfqNRJ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMDA5MTgwNFoX DTI3MDcyOTA5MjMwNFowMzExMC8GA1UEAxMoN0JFNkQxQjhBM0NCNDE4NEM3OUE5 QzFBODczNzBDRUZEMzVFMEU2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5ORUdKpYR5HneJDmkjzwn/+LDqlqSet60Eg02azksHwOTqjSbq6MkYFBYb Bn9v2sUMpZVoaO3sm10m9WST85Xh9uSpqCHKVrv9m43eg1Snn6I/xyFu6mQi7x++ 6jYlkiwMLVhQbfV9Y9WQ7MseYwY2VVZFlXotUA2Zbuf0sthXLRlgY9VN6pM/lLCE EbRrwRiBzK8LZrFHhep+Lwl84puxfNrRxmUIzRHXk+ifBjL2Ei8mIwIpEU3P/XJY /fGvs9h2kZ5upqfEY6c6Wi4QQNUsDhcKCWOdB6NP0+09IXQbcOIPIngv445bcZk8 jfeO2QjZ1fERnCCDmhDniAVU0UUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR75tG4 o8tBhMeanBqHNwzv014OZTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOyuMA0GCSqGSIb3DQEBCwUAA4IBAQCHSaAeHBwiRlf951NuYsL3ysDq Yjof4eGOyDni8/ltz2As6SqpKG1DUsJvGZC6clxAVzCQLz7YdczWtGJZGduT+Lng IfNPrbLVs8E6BwCR5+deHY790G6I1UdIGFn5aADDfw8oyeARppDd5fOJS0YVW/ft FOwxO7SXzGahoumPHzHkPBasc62r8TuR8svnH+BzWy0PiThIupfjLmZ9FyXDzcjJ 5TWEQzDEVyzlAJub6TABZlu99TrRVMZ1OJFjMJrmkhdpnOawiXcoWQ1FpPdwPs8R G06HvuwC2VYu/3cUmRDWLYmfZmeJJ0PVLlYXIR2I5mXc621SM94AydElrut7 -----END CERTIFICATE-----Generated at Sun Aug 2 16:56:54 2026 by rpki-client