$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154788.roa File: AS154788.roa (raw, json) Hash identifier: vibktfLn5qheo1x+pzaS3Rnq2/EuzTYsJ1FoykoejOo= Subject key identifier: 86:DD:97:8E:4F:FD:D6:6A:E5:30:AE:07:BA:ED:0E:29:E6:7F:F5:13 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 151C5B997ACCEF5D45B08EB314CF73499B6248AD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154788.roa Signing time: Fri 31 Jul 2026 04:04:12 +0000 ROA not before: Fri 31 Jul 2026 03:59:12 +0000 ROA not after: Fri 30 Jul 2027 04:04:12 +0000 asID: 154788 IP address blocks: 160.236.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1c:5b:99:7a:cc:ef:5d:45:b0:8e:b3:14:cf:73:49:9b:62:48:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 31 03:59:12 2026 GMT Not After : Jul 30 04:04:12 2027 GMT Subject: CN=86DD978E4FFDD66AE530AE07BAED0E29E67FF513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:fe:a7:2a:bf:7c:cd:1f:83:49:0c:61:03: 17:cc:c4:38:3e:ca:a1:ce:5c:8b:2c:d6:da:56:56: d1:ac:7f:16:29:ab:dd:83:99:35:aa:88:cc:fa:a2: 3e:4e:4f:9c:ae:1e:c5:5d:7a:ce:55:cc:28:8d:2f: 81:67:2f:50:74:af:f6:e0:51:f0:52:05:36:7e:e6: 02:bd:e0:e2:3a:4f:4a:e8:b0:64:e3:0b:21:55:8d: 58:58:80:e9:8e:70:19:6a:c1:de:f9:99:29:6a:86: 80:5b:ea:7f:f2:57:e9:93:28:ff:95:8c:eb:92:60: d9:e7:58:2d:80:ff:b2:e0:20:77:f0:3b:99:cc:f4: ab:da:b8:48:2c:6d:b8:8b:bb:f2:93:29:87:3b:3e: 2c:38:00:a7:e1:c9:fa:ac:05:b4:c5:c5:ba:b4:eb: b1:32:bf:e0:bf:3f:8c:f6:b4:89:8b:4b:18:4d:64: 33:40:47:dd:d6:96:c2:ec:bc:38:fb:ab:d2:e0:3d: 87:c2:6a:2b:e5:1b:bb:b2:36:60:2a:da:cc:77:73: 3e:12:8b:02:0e:a3:e0:44:9e:4b:d1:33:c2:99:90: 01:ec:9d:9a:4a:74:24:98:f3:61:bf:64:af:c8:af: ef:c5:10:ff:97:ea:8d:ee:45:b1:2c:de:b2:10:05: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:97:8E:4F:FD:D6:6A:E5:30:AE:07:BA:ED:0E:29:E6:7F:F5:13 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154788.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.176.0/24 Signature Algorithm: sha256WithRSAEncryption 02:52:c5:1a:5f:50:d2:db:f8:39:31:41:20:dc:9e:fd:0d:17: 05:e3:07:32:2e:3b:a9:24:00:b6:ff:b2:9b:41:6f:ff:95:56: 6a:72:3d:f4:f2:42:6c:ec:2f:50:89:31:05:9b:1c:28:92:b2: 6d:2c:f4:44:e7:bf:1b:51:36:07:06:75:ea:2e:e8:82:e0:d0: e9:3f:bc:27:ae:ef:ad:c2:73:f5:da:16:71:ca:78:ee:35:18: 5c:d5:01:7e:92:b4:d2:c8:db:ae:ee:be:f0:94:a5:d7:ea:27: 14:11:4b:35:cf:76:58:71:fd:73:d9:54:15:c4:99:fd:17:38: 33:53:f6:cf:35:8d:b7:74:04:6e:74:2f:29:38:77:10:22:41: bb:9d:0f:7a:86:bd:28:71:8c:ba:69:a0:23:c1:33:52:71:9b: 7a:f5:1f:08:15:97:e2:f1:ab:b9:ff:f7:75:01:e0:e3:8c:7e: 48:c4:60:d3:e5:85:b4:4f:ef:6c:cc:ab:32:c4:fb:6e:b7:44: c1:36:e2:4f:72:28:de:24:b6:7c:d1:d5:e8:82:f3:e9:8a:9d: 49:7d:c7:2b:86:22:a6:fd:95:d9:c5:e3:78:32:82:e0:90:0f: 93:d5:f9:37:3f:e7:eb:dd:97:39:6a:b9:64:bd:10:7e:8f:9b: 68:3f:c1:ed -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFRxbmXrM711FsI6zFM9zSZtiSK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMTAzNTkxMloX DTI3MDczMDA0MDQxMlowMzExMC8GA1UEAxMoODZERDk3OEU0RkZERDY2QUU1MzBB RTA3QkFFRDBFMjlFNjdGRjUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvV/qcqv3zNH4NJDGEDF8zEOD7Koc5ciyzW2lZW0ax/Fimr3YOZNaqIzPqi Pk5PnK4exV16zlXMKI0vgWcvUHSv9uBR8FIFNn7mAr3g4jpPSuiwZOMLIVWNWFiA 6Y5wGWrB3vmZKWqGgFvqf/JX6ZMo/5WM65Jg2edYLYD/suAgd/A7mcz0q9q4SCxt uIu78pMphzs+LDgAp+HJ+qwFtMXFurTrsTK/4L8/jPa0iYtLGE1kM0BH3daWwuy8 OPur0uA9h8JqK+Ubu7I2YCrazHdzPhKLAg6j4ESeS9EzwpmQAeydmkp0JJjzYb9k r8iv78UQ/5fqje5FsSzeshAFYPcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSG3ZeO T/3WauUwrge67Q4p5n/1EzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOywMA0GCSqGSIb3DQEBCwUAA4IBAQACUsUaX1DS2/g5MUEg3J79DRcF 4wcyLjupJAC2/7KbQW//lVZqcj308kJs7C9QiTEFmxwokrJtLPRE578bUTYHBnXq LuiC4NDpP7wnru+twnP12hZxynjuNRhc1QF+krTSyNuu7r7wlKXX6icUEUs1z3ZY cf1z2VQVxJn9FzgzU/bPNY23dARudC8pOHcQIkG7nQ96hr0ocYy6aaAjwTNScZt6 9R8IFZfi8au5//d1AeDjjH5IxGDT5YW0T+9szKsyxPtut0TBNuJPcijeJLZ80dXo gvPpip1JfccrhiKm/ZXZxeN4MoLgkA+T1fk3P+fr3Zc5arlkvRB+j5toP8Ht -----END CERTIFICATE-----Generated at Sun Aug 2 16:57:07 2026 by rpki-client