$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154789.roa File: AS154789.roa (raw, json) Hash identifier: Vfq5hct5UC0LeE3q7wrXriswECLZ5TYzP571SY3VZaU= Subject key identifier: 35:C0:B8:41:93:77:18:97:87:B4:7B:63:39:EF:A3:10:70:AC:1E:10 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3DCA21E436979EC4E69FD97D082CAFB61EE2D0E0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154789.roa Signing time: Mon 03 Aug 2026 04:54:57 +0000 ROA not before: Mon 03 Aug 2026 04:49:57 +0000 ROA not after: Mon 02 Aug 2027 04:54:57 +0000 asID: 154789 IP address blocks: 160.236.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:21:e4:36:97:9e:c4:e6:9f:d9:7d:08:2c:af:b6:1e:e2:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 3 04:49:57 2026 GMT Not After : Aug 2 04:54:57 2027 GMT Subject: CN=35C0B8419377189787B47B6339EFA31070AC1E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:af:4c:84:d6:b5:c6:73:01:48:c0:bf:f6: c9:0d:cc:8b:77:d8:f9:a8:8f:de:8b:af:6c:fa:92: 19:bd:a7:fe:38:67:fa:26:95:7c:72:3c:c9:1f:9b: 86:22:05:54:6f:a7:91:86:74:69:ec:fd:6f:a1:84: 21:c7:0c:ed:4b:24:a0:5c:65:1e:af:ef:ab:84:64: 7b:d3:3a:75:15:ec:90:5c:20:eb:ae:57:02:bb:47: 80:aa:6b:56:20:3c:a2:b1:f1:61:9b:0a:47:c1:3d: ae:af:18:33:37:68:d5:bf:56:57:6c:21:f6:04:a1: 38:c9:ba:04:63:cd:5e:df:59:14:1c:71:97:82:b2: 86:50:64:fe:3c:a7:c9:f4:27:b8:23:26:ce:da:90: 3c:eb:5b:0c:77:9c:19:aa:93:f4:e0:69:59:9f:e3: 8f:20:a2:b7:70:53:37:08:a8:b3:92:80:f6:35:7f: 03:6d:2c:7d:c6:84:93:68:06:29:30:c6:c0:24:f6: 41:f4:0d:96:a2:c1:aa:24:34:2f:a7:2d:1e:46:8c: 18:25:96:f0:38:f7:69:2e:47:28:09:d5:17:9c:db: df:03:e2:0e:59:f7:5c:f9:de:59:48:cd:bf:00:4d: a9:ed:f8:46:7f:c0:f7:1e:e4:b0:d4:74:63:6f:07: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:B8:41:93:77:18:97:87:B4:7B:63:39:EF:A3:10:70:AC:1E:10 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154789.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.198.0/23 Signature Algorithm: sha256WithRSAEncryption 60:b7:cd:44:1e:c8:ed:a7:e1:78:46:b4:d1:cb:85:bb:12:ab: c8:05:88:2a:6f:a4:68:fe:2f:8b:a1:3c:09:03:f3:3c:19:83: a0:6a:52:21:f7:2f:42:d1:2f:40:fb:52:32:2e:1f:bd:75:f3: 56:81:bd:7f:0b:0d:c7:6a:56:51:87:3f:56:6b:9b:0c:93:ac: 96:fe:6b:b0:55:09:d1:5b:ff:43:61:70:6b:93:f9:bf:1f:cd: d2:ee:1a:6b:5d:a1:ca:88:29:44:a0:88:ac:60:c9:0a:cf:a9: 61:34:c8:56:3b:53:40:2f:6e:93:b5:d3:d4:91:fe:14:7f:df: a9:7e:db:95:70:aa:fb:c0:5d:f6:11:2e:97:67:0a:c6:6f:eb: 9e:8f:2c:43:96:53:6e:ee:06:e2:b1:10:47:cf:17:1b:1d:46: a8:2e:f8:94:fa:61:a9:c1:33:59:a5:76:f5:fa:e9:15:b6:e5: 4e:1f:04:6a:34:46:6d:ce:fb:2d:09:fc:ee:07:f2:d8:fd:98: 2b:5c:e8:12:bc:6c:45:70:80:f4:69:e4:b8:aa:a3:bc:a4:77: 49:a3:a2:fc:7e:7f:f1:52:68:93:48:6e:06:b9:a7:80:63:a9: e0:a4:92:0c:59:cc:38:b7:f0:d0:4f:29:9d:8b:f2:b4:69:26: 5a:29:f7:44 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPcoh5DaXnsTmn9l9CCyvth7i0OAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwMzA0NDk1N1oX DTI3MDgwMjA0NTQ1N1owMzExMC8GA1UEAxMoMzVDMEI4NDE5Mzc3MTg5Nzg3QjQ3 QjYzMzlFRkEzMTA3MEFDMUUxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9br0yE1rXGcwFIwL/2yQ3Mi3fY+aiP3ouvbPqSGb2n/jhn+iaVfHI8yR+b hiIFVG+nkYZ0aez9b6GEIccM7UskoFxlHq/vq4Rke9M6dRXskFwg665XArtHgKpr ViA8orHxYZsKR8E9rq8YMzdo1b9WV2wh9gShOMm6BGPNXt9ZFBxxl4KyhlBk/jyn yfQnuCMmztqQPOtbDHecGaqT9OBpWZ/jjyCit3BTNwios5KA9jV/A20sfcaEk2gG KTDGwCT2QfQNlqLBqiQ0L6ctHkaMGCWW8Dj3aS5HKAnVF5zb3wPiDln3XPneWUjN vwBNqe34Rn/A9x7ksNR0Y28HMk0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ1wLhB k3cYl4e0e2M576MQcKweEDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOzGMA0GCSqGSIb3DQEBCwUAA4IBAQBgt81EHsjtp+F4RrTRy4W7EqvI BYgqb6Ro/i+LoTwJA/M8GYOgalIh9y9C0S9A+1IyLh+9dfNWgb1/Cw3HalZRhz9W a5sMk6yW/muwVQnRW/9DYXBrk/m/H83S7hprXaHKiClEoIisYMkKz6lhNMhWO1NA L26TtdPUkf4Uf9+pftuVcKr7wF32ES6XZwrGb+uejyxDllNu7gbisRBHzxcbHUao LviU+mGpwTNZpXb1+ukVtuVOHwRqNEZtzvstCfzuB/LY/ZgrXOgSvGxFcID0aeS4 qqO8pHdJo6L8fn/xUmiTSG4GuaeAY6ngpJIMWcw4t/DQTymdi/K0aSZaKfdE -----END CERTIFICATE-----Generated at Thu Sep 17 06:28:19 2026 by rpki-client