$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154794.roa File: AS154794.roa (raw, json) Hash identifier: dZs3XbKkdHZRL0XFCINxaDJegdQxEUmQZS33GN2ZhnQ= Subject key identifier: 23:08:03:81:97:33:5A:51:3C:46:8E:9B:23:C5:AC:A3:13:F7:62:11 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 11DD9C625155A2843263CC22FD15CE8BFFB3CCAB Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154794.roa Signing time: Thu 06 Aug 2026 01:26:14 +0000 ROA not before: Thu 06 Aug 2026 01:21:14 +0000 ROA not after: Thu 05 Aug 2027 01:26:14 +0000 asID: 154794 IP address blocks: 160.236.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dd:9c:62:51:55:a2:84:32:63:cc:22:fd:15:ce:8b:ff:b3:cc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 6 01:21:14 2026 GMT Not After : Aug 5 01:26:14 2027 GMT Subject: CN=2308038197335A513C468E9B23C5ACA313F76211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:03:cb:90:56:5b:98:41:f2:66:15:6f:fb: 4f:58:a2:95:62:b8:66:b8:a3:3f:26:c6:ca:03:6d: 54:bd:bb:d5:c7:c5:b9:83:3e:0e:e2:fc:6a:36:8a: 97:33:6e:18:7c:ee:b9:ed:e8:f0:24:14:0c:51:85: de:7d:37:c9:eb:80:b6:78:31:06:b2:7e:8d:f3:8f: e4:a3:72:44:c3:07:82:e1:a0:28:84:56:58:d2:47: ad:71:1e:7c:89:b4:e2:29:d7:f9:b3:23:ad:27:ee: 45:22:e9:d1:1a:d2:b4:8e:49:74:20:18:20:8b:b9: 8d:18:4a:06:b1:4c:1c:89:7c:1c:8b:9e:65:c1:9b: d0:1f:81:83:67:69:28:65:c2:8b:c8:91:3c:35:14: 8e:3e:65:e2:3f:58:5b:a5:59:9d:4c:15:d9:18:80: 2f:ab:60:28:87:59:a4:0b:8c:d1:f7:37:10:c0:a8: 80:3f:7c:3a:f0:88:01:dc:09:f2:a7:8d:7d:f5:10: e3:9e:4a:6b:55:6a:09:b0:b2:11:6b:dd:f3:8b:ed: ca:d8:dd:85:94:72:3d:c4:54:70:03:5c:e0:f0:59: f4:a3:a7:25:0f:ab:27:17:99:e9:66:ed:dc:5d:25: 4b:00:55:e7:73:0d:ac:0e:0d:31:9e:2f:c0:64:5f: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:08:03:81:97:33:5A:51:3C:46:8E:9B:23:C5:AC:A3:13:F7:62:11 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154794.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.204.0/23 Signature Algorithm: sha256WithRSAEncryption af:cd:a1:8e:2f:19:dd:39:df:27:58:c5:9e:4b:a0:cc:23:63: fe:ed:fc:29:12:f0:6a:f9:ca:a6:44:7c:b1:ff:b6:01:cb:96: 8e:78:64:a3:ea:c2:44:fa:56:b0:c9:d1:6f:02:5e:63:e5:1d: 30:a5:26:db:8b:10:81:08:c2:b5:d1:76:8f:da:f6:f8:22:02: 63:5c:85:0e:c1:44:d8:0f:54:db:25:66:fc:f4:fe:98:ac:57: f7:b9:85:3f:3d:ec:89:54:15:08:24:e6:c1:6e:53:ad:98:02: da:8c:6d:48:f5:d8:47:89:ba:cc:c6:ff:e0:54:89:50:44:a8: b3:d1:32:11:12:9e:2f:c4:58:c9:e8:55:5d:2d:b4:bf:ec:d4: b1:ed:31:2f:a1:e3:fe:a4:06:8e:73:93:dc:40:2d:56:9e:04: 47:50:a2:f2:de:a3:76:f6:7b:ca:be:56:cc:00:0e:0b:5b:59: 69:ea:58:36:90:71:4c:d9:b1:65:21:c3:a8:01:0c:b1:e6:79: 38:14:37:08:a5:9b:b9:41:1c:2c:b7:91:86:14:7e:c3:f0:3f: 1b:3e:bf:4b:a7:40:54:26:2e:90:3c:95:40:85:81:c1:19:b4: 86:89:e9:62:92:fd:71:6c:4f:6b:18:ba:48:df:f0:84:4b:36: 76:af:a1:12 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEd2cYlFVooQyY8wi/RXOi/+zzKswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNjAxMjExNFoX DTI3MDgwNTAxMjYxNFowMzExMC8GA1UEAxMoMjMwODAzODE5NzMzNUE1MTNDNDY4 RTlCMjNDNUFDQTMxM0Y3NjIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCeA8uQVluYQfJmFW/7T1iilWK4ZrijPybGygNtVL271cfFuYM+DuL8ajaK lzNuGHzuue3o8CQUDFGF3n03yeuAtngxBrJ+jfOP5KNyRMMHguGgKIRWWNJHrXEe fIm04inX+bMjrSfuRSLp0RrStI5JdCAYIIu5jRhKBrFMHIl8HIueZcGb0B+Bg2dp KGXCi8iRPDUUjj5l4j9YW6VZnUwV2RiAL6tgKIdZpAuM0fc3EMCogD98OvCIAdwJ 8qeNffUQ455Ka1VqCbCyEWvd84vtytjdhZRyPcRUcANc4PBZ9KOnJQ+rJxeZ6Wbt 3F0lSwBV53MNrA4NMZ4vwGRff1kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQjCAOB lzNaUTxGjpsjxayjE/diETAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzk0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOzMMA0GCSqGSIb3DQEBCwUAA4IBAQCvzaGOLxndOd8nWMWeS6DMI2P+ 7fwpEvBq+cqmRHyx/7YBy5aOeGSj6sJE+lawydFvAl5j5R0wpSbbixCBCMK10XaP 2vb4IgJjXIUOwUTYD1TbJWb89P6YrFf3uYU/PeyJVBUIJObBblOtmALajG1I9dhH ibrMxv/gVIlQRKiz0TIREp4vxFjJ6FVdLbS/7NSx7TEvoeP+pAaOc5PcQC1WngRH UKLy3qN29nvKvlbMAA4LW1lp6lg2kHFM2bFlIcOoAQyx5nk4FDcIpZu5QRwst5GG FH7D8D8bPr9Lp0BUJi6QPJVAhYHBGbSGielikv1xbE9rGLpI3/CESzZ2r6ES -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:31 2026 by rpki-client