$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154793.roa File: AS154793.roa (raw, json) Hash identifier: yMgHcQaqUH5DDiSSbG8huTpWIl+Psh0UBBx1DCpLzpA= Subject key identifier: 0C:18:87:CB:01:8F:B2:42:10:98:DC:91:0D:3E:A8:D6:5C:14:B2:C6 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7348F138F9D6CA9EB072AE71E7BE8F9FF2DB35A0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154793.roa Signing time: Tue 04 Aug 2026 09:48:40 +0000 ROA not before: Tue 04 Aug 2026 09:43:40 +0000 ROA not after: Tue 03 Aug 2027 09:48:40 +0000 asID: 154793 IP address blocks: 160.236.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:48:f1:38:f9:d6:ca:9e:b0:72:ae:71:e7:be:8f:9f:f2:db:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 4 09:43:40 2026 GMT Not After : Aug 3 09:48:40 2027 GMT Subject: CN=0C1887CB018FB2421098DC910D3EA8D65C14B2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:25:d2:a0:80:a6:f0:2c:ed:78:ab:0b:2d: fa:81:b3:df:96:75:8a:7b:61:c5:07:e1:41:bd:64: 66:23:e9:b0:f0:4b:c0:89:8d:88:b0:a3:5d:87:6c: ae:50:9e:4a:97:2f:45:0c:ab:8a:4b:7e:e5:63:ec: fc:b6:69:79:8e:df:9c:4d:07:3a:21:57:3a:0b:eb: c7:a7:2a:87:d5:44:fc:d6:51:d1:a1:ff:cb:57:67: 6a:fb:e1:18:13:ad:c0:69:1e:c3:a1:c7:fb:2a:c7: 6f:c5:a7:a9:75:09:b4:28:db:f6:8d:4a:d4:e1:88: 61:b3:e0:e4:fd:7b:5c:aa:44:de:47:97:97:1a:64: 4a:bd:a4:27:53:e8:3f:94:31:8e:6c:9e:d9:f7:a6: 00:01:45:1a:00:90:d3:c9:1f:28:40:06:10:47:ad: da:09:f7:ea:c1:42:52:14:2b:ac:ca:bc:e3:90:73: bb:30:f4:2c:98:b9:93:e0:9b:ae:ed:51:4e:4f:e9: bd:ae:34:95:4b:cc:99:df:ad:fd:78:0e:89:b5:95: 08:57:ff:1c:1f:4d:38:5e:c1:cb:90:89:3f:5f:c5: 07:40:66:33:93:e2:21:c0:ca:eb:18:ce:ea:63:9c: 41:19:07:5d:7f:5d:aa:fd:0a:34:30:84:e8:35:9c: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:87:CB:01:8F:B2:42:10:98:DC:91:0D:3E:A8:D6:5C:14:B2:C6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154793.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.203.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d3:97:78:b2:71:b7:60:26:59:00:18:5c:3a:0e:a3:4b:fb: 51:fd:7e:d4:31:3e:ea:9d:16:80:bd:98:33:f8:6b:96:18:02: 96:68:6b:27:fa:96:5a:dc:35:63:88:72:4e:52:7b:16:77:46: 2a:f9:27:f1:16:84:07:7f:af:a9:b9:fd:12:1f:5c:d3:cb:28: 4c:1c:1e:28:38:a0:0c:22:63:4e:a7:29:4a:2f:b8:63:fe:19: 30:fd:f9:f8:af:fb:0e:b2:1f:5d:0f:14:dc:a5:33:23:af:c5: 35:40:52:83:d9:ee:fd:2d:67:dd:6b:f1:d3:11:39:75:77:06: ef:c5:a4:7f:32:f8:a6:06:5d:0d:bc:46:9a:97:84:a8:16:bf: 3a:b5:04:4a:54:f5:c8:51:9e:65:6f:2c:5e:31:bd:e4:ef:0a: 29:b0:8d:b9:0d:de:d8:b0:53:4a:5a:5a:7e:b6:fe:59:f3:c6: 53:1f:f2:b5:43:44:e0:3e:f4:50:96:33:4a:db:4d:98:f1:ee: 9c:cd:d2:a6:0c:f7:be:67:98:84:3a:8f:7f:7c:fb:62:f6:e6: da:ce:76:a9:bd:4d:c2:4a:fc:db:d9:0f:c2:4f:2a:04:d2:5d: b6:bd:fb:fe:44:51:d1:a0:dd:73:11:f3:e1:a1:34:8b:7f:28: b0:1b:e6:07 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUc0jxOPnWyp6wcq5x576Pn/LbNaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNDA5NDM0MFoX DTI3MDgwMzA5NDg0MFowMzExMC8GA1UEAxMoMEMxODg3Q0IwMThGQjI0MjEwOThE QzkxMEQzRUE4RDY1QzE0QjJDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANeJJdKggKbwLO14qwst+oGz35Z1inthxQfhQb1kZiPpsPBLwImNiLCjXYds rlCeSpcvRQyrikt+5WPs/LZpeY7fnE0HOiFXOgvrx6cqh9VE/NZR0aH/y1dnavvh GBOtwGkew6HH+yrHb8WnqXUJtCjb9o1K1OGIYbPg5P17XKpE3keXlxpkSr2kJ1Po P5Qxjmye2femAAFFGgCQ08kfKEAGEEet2gn36sFCUhQrrMq845BzuzD0LJi5k+Cb ru1RTk/pva40lUvMmd+t/XgOibWVCFf/HB9NOF7By5CJP1/FB0BmM5PiIcDK6xjO 6mOcQRkHXX9dqv0KNDCE6DWcdvkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQMGIfL AY+yQhCY3JENPqjWXBSyxjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzkzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzLMA0GCSqGSIb3DQEBCwUAA4IBAQBp05d4snG3YCZZABhcOg6jS/tR /X7UMT7qnRaAvZgz+GuWGAKWaGsn+pZa3DVjiHJOUnsWd0Yq+SfxFoQHf6+puf0S H1zTyyhMHB4oOKAMImNOpylKL7hj/hkw/fn4r/sOsh9dDxTcpTMjr8U1QFKD2e79 LWfda/HTETl1dwbvxaR/MvimBl0NvEaal4SoFr86tQRKVPXIUZ5lbyxeMb3k7wop sI25Dd7YsFNKWlp+tv5Z88ZTH/K1Q0TgPvRQljNK202Y8e6czdKmDPe+Z5iEOo9/ fPti9ubaznapvU3CSvzb2Q/CTyoE0l22vfv+RFHRoN1zEfPhoTSLfyiwG+YH -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:29 2026 by rpki-client