$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154790.roa File: AS154790.roa (raw, json) Hash identifier: o8eg1bFJLzwyN6q6juragia4KuZg4anE5b3nDsepb7A= Subject key identifier: 10:6C:E7:58:78:7B:E2:1B:BC:83:B0:D3:77:1E:15:24:69:5C:0B:FF Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0E5335406BAB9D3489DD985DC6600D7DE4C1983B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154790.roa Signing time: Wed 09 Sep 2026 04:34:54 +0000 ROA not before: Wed 09 Sep 2026 04:29:54 +0000 ROA not after: Wed 08 Sep 2027 04:34:54 +0000 asID: 154790 IP address blocks: 160.236.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:53:35:40:6b:ab:9d:34:89:dd:98:5d:c6:60:0d:7d:e4:c1:98:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 9 04:29:54 2026 GMT Not After : Sep 8 04:34:54 2027 GMT Subject: CN=106CE758787BE21BBC83B0D3771E1524695C0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:8f:ef:a2:ab:bc:23:65:38:dc:86:cc:f2: bb:0a:2f:15:3c:09:98:03:e0:96:f8:da:98:6c:3a: 80:b0:ea:7b:44:c9:43:4d:95:9a:fc:00:16:00:b4: 8a:ec:42:ba:a5:31:98:41:6b:cd:15:a5:4e:eb:6e: 3e:39:bb:2d:58:90:05:17:b9:6b:48:27:b9:15:49: 73:ce:4f:c2:69:84:eb:71:89:37:aa:c8:12:6b:27: 04:0e:3e:6c:6f:1c:3e:ea:aa:c3:f4:cc:9e:76:f9: ca:d6:2e:d0:ae:eb:a1:d0:52:48:fb:93:31:01:b5: bf:99:4e:e9:f0:ee:99:4e:09:db:ee:f7:de:e6:71: 1e:17:a2:7a:c7:de:b8:ab:27:64:6d:e6:12:23:1a: a8:a2:d5:68:20:f4:dd:98:46:e1:8a:5f:60:6e:f4: 53:11:fc:9d:9a:4b:0e:f7:dc:96:aa:1d:52:90:a8: d3:e1:eb:1f:ca:2c:99:3d:89:b0:d7:e1:dc:c4:1e: 42:aa:17:0b:b4:eb:a5:bc:f6:be:c2:3e:1c:5b:d6: e5:88:22:c7:72:3c:90:0d:f8:42:4f:af:5c:d1:15: 08:3c:6b:ec:e2:4a:cd:5e:58:68:d7:2e:84:69:84: ac:c8:b7:53:bc:d9:c6:ec:53:e9:c8:bd:29:48:49: 98:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:E7:58:78:7B:E2:1B:BC:83:B0:D3:77:1E:15:24:69:5C:0B:FF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.200.0/23 Signature Algorithm: sha256WithRSAEncryption 42:3a:7f:55:8c:29:42:c1:03:c7:37:5c:4a:29:01:6b:29:f3: 52:27:c0:2d:8e:9b:33:19:90:fe:38:76:a9:f1:79:43:06:1f: 6c:7c:ce:2e:68:12:8e:31:e5:44:26:64:40:b6:19:87:36:c7: c3:06:60:c0:53:07:24:4d:35:2e:1c:a7:c8:15:a0:50:24:bd: ac:f0:ac:21:a2:15:e8:f5:f5:3d:ab:8a:4d:bb:28:b4:42:64: 7c:9b:ef:4d:b5:79:55:92:fe:e6:5b:6e:dd:65:94:d1:d1:23: ef:ae:da:5d:32:65:10:58:84:b3:f5:17:66:2d:6f:c0:ba:e9: 78:d9:13:15:0f:8b:69:92:f3:fa:12:04:16:5f:64:27:e4:07: 93:f9:ed:bd:43:1c:9f:33:dc:6a:f9:15:ec:40:2e:de:f8:c7: 00:de:37:e5:5d:f5:66:16:be:21:bc:2c:aa:eb:89:70:f3:4d: de:b1:00:9d:09:9e:44:7b:6d:f8:a9:b6:e9:27:3e:23:50:c3: 92:11:fe:c0:dc:45:7a:e7:e7:69:ad:34:6b:f4:a4:fa:66:c9: b1:dc:1e:75:3f:01:23:60:76:8d:e5:f4:88:91:6c:c9:e8:0f: 06:05:aa:93:8a:36:f4:82:5a:44:e4:05:cb:c7:49:ad:89:2a: 8c:1a:f0:04 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDlM1QGurnTSJ3ZhdxmANfeTBmDswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkwOTA0Mjk1NFoX DTI3MDkwODA0MzQ1NFowMzExMC8GA1UEAxMoMTA2Q0U3NTg3ODdCRTIxQkJDODNC MEQzNzcxRTE1MjQ2OTVDMEJGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANg9j++iq7wjZTjchszyuwovFTwJmAPglvjamGw6gLDqe0TJQ02VmvwAFgC0 iuxCuqUxmEFrzRWlTutuPjm7LViQBRe5a0gnuRVJc85PwmmE63GJN6rIEmsnBA4+ bG8cPuqqw/TMnnb5ytYu0K7rodBSSPuTMQG1v5lO6fDumU4J2+733uZxHheiesfe uKsnZG3mEiMaqKLVaCD03ZhG4YpfYG70UxH8nZpLDvfclqodUpCo0+HrH8osmT2J sNfh3MQeQqoXC7Trpbz2vsI+HFvW5Ygix3I8kA34Qk+vXNEVCDxr7OJKzV5YaNcu hGmErMi3U7zZxuxT6ci9KUhJmOMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQQbOdY eHviG7yDsNN3HhUkaVwL/zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOzIMA0GCSqGSIb3DQEBCwUAA4IBAQBCOn9VjClCwQPHN1xKKQFrKfNS J8AtjpszGZD+OHap8XlDBh9sfM4uaBKOMeVEJmRAthmHNsfDBmDAUwckTTUuHKfI FaBQJL2s8KwhohXo9fU9q4pNuyi0QmR8m+9NtXlVkv7mW27dZZTR0SPvrtpdMmUQ WISz9RdmLW/Auul42RMVD4tpkvP6EgQWX2Qn5AeT+e29QxyfM9xq+RXsQC7e+McA 3jflXfVmFr4hvCyq64lw803esQCdCZ5Ee234qbbpJz4jUMOSEf7A3EV65+dprTRr 9KT6Zsmx3B51PwEjYHaN5fSIkWzJ6A8GBaqTijb0glpE5AXLx0mtiSqMGvAE -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:27 2026 by rpki-client