$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154795.roa File: AS154795.roa (raw, json) Hash identifier: Z5A1Cj9c4SWG1UXp1qtXRbkISylNb4N9rYUXYcDbD40= Subject key identifier: F7:DF:B6:18:7B:8F:B1:41:E7:43:59:83:42:AD:73:BD:97:2E:89:0D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7D2FD9EF8C2832929EE3692621C5B1DE7A87836C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154795.roa Signing time: Fri 07 Aug 2026 03:50:58 +0000 ROA not before: Fri 07 Aug 2026 03:45:58 +0000 ROA not after: Fri 06 Aug 2027 03:50:58 +0000 asID: 154795 IP address blocks: 160.236.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2f:d9:ef:8c:28:32:92:9e:e3:69:26:21:c5:b1:de:7a:87:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 7 03:45:58 2026 GMT Not After : Aug 6 03:50:58 2027 GMT Subject: CN=F7DFB6187B8FB141E743598342AD73BD972E890D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:23:60:84:03:87:a6:dd:4d:33:5a:84:c2: 9b:0a:a4:01:0e:00:e1:14:83:79:3d:24:51:81:5a: 9d:e9:c2:ff:17:9f:f9:93:1c:7f:df:f2:fd:62:17: 74:ae:36:25:37:e3:0d:57:5e:3b:5d:7f:90:f2:31: 1e:8d:85:e6:fd:a7:8d:c7:fe:11:b9:8a:06:8d:a1: cd:94:3f:a0:71:e3:c8:87:b9:f6:51:7d:ea:0f:7f: 8a:ca:b9:03:63:9d:6b:ea:75:d8:1f:05:57:69:41: d7:1d:f5:b6:54:9c:c1:df:13:1b:d2:46:fe:74:09: a8:e3:0d:31:fd:9e:44:b8:3e:2d:b5:a1:4f:59:0a: 41:1e:11:a2:3d:60:ed:f6:2d:3b:2a:0c:23:60:0c: 96:bd:ac:5a:e5:73:45:19:ba:82:f0:f4:9f:ba:5a: 87:23:24:75:d0:3b:df:df:78:ef:cf:d6:96:f2:eb: 95:7e:5a:0b:b1:74:77:aa:ea:f6:83:67:03:88:d2: ed:ba:8c:54:49:96:be:57:c9:c1:df:71:f4:63:cd: 55:56:d2:41:95:50:c8:e6:12:dd:d2:3c:1f:02:be: 73:c5:be:42:43:85:40:0e:2c:4d:1f:8d:f2:95:9a: cc:47:cb:e7:0f:41:c3:b4:cb:e5:74:74:12:94:ea: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:B6:18:7B:8F:B1:41:E7:43:59:83:42:AD:73:BD:97:2E:89:0D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154795.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.206.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b2:74:2b:19:b2:72:44:64:b4:9f:46:77:60:f7:86:93:3e: 3d:1e:9d:9e:d5:eb:0b:5d:14:6e:a0:f3:fe:b2:d5:c8:db:93: ce:b6:b7:ff:68:93:ff:56:cc:dc:46:5a:37:b5:e0:ea:af:fd: d5:4b:22:86:92:e5:52:54:7d:fb:05:95:3e:2f:98:15:f3:9e: 40:4d:1c:f7:51:3d:8f:79:a5:84:75:93:16:30:6f:f9:5a:ba: c8:62:0e:df:31:bc:75:ac:a2:07:a6:f9:9e:48:c1:5d:99:e0: de:ca:af:93:fc:44:6d:c1:c8:a3:22:c2:13:d8:c9:c7:6c:eb: 2b:1b:82:e4:87:d3:ce:02:a7:54:61:62:80:47:1a:7e:bc:8c: 0f:86:4a:82:1c:e8:5d:f7:7d:86:c7:6f:f9:9c:fd:da:b9:37: 40:2e:e5:35:56:c6:c0:ef:ed:92:d7:b8:31:61:be:55:c7:db: 81:6b:4c:77:80:9b:9b:a6:45:cd:86:0f:17:77:3d:d1:ec:4c: 75:3c:3c:44:f3:1b:bf:57:0b:15:11:12:ee:29:a5:fb:cd:d3: dd:e0:e1:8b:50:8e:b3:66:34:bb:5b:62:de:d2:d7:68:69:da: b5:cf:fe:c4:ee:00:2c:65:89:ed:6e:f9:53:6e:df:f7:6a:11: 7c:a5:ea:ca -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfS/Z74woMpKe42kmIcWx3nqHg2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNzAzNDU1OFoX DTI3MDgwNjAzNTA1OFowMzExMC8GA1UEAxMoRjdERkI2MTg3QjhGQjE0MUU3NDM1 OTgzNDJBRDczQkQ5NzJFODkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVaI2CEA4em3U0zWoTCmwqkAQ4A4RSDeT0kUYFanenC/xef+ZMcf9/y/WIX dK42JTfjDVdeO11/kPIxHo2F5v2njcf+EbmKBo2hzZQ/oHHjyIe59lF96g9/isq5 A2Oda+p12B8FV2lB1x31tlScwd8TG9JG/nQJqOMNMf2eRLg+LbWhT1kKQR4Roj1g 7fYtOyoMI2AMlr2sWuVzRRm6gvD0n7pahyMkddA7399478/WlvLrlX5aC7F0d6rq 9oNnA4jS7bqMVEmWvlfJwd9x9GPNVVbSQZVQyOYS3dI8HwK+c8W+QkOFQA4sTR+N 8pWazEfL5w9Bw7TL5XR0EpTq/AsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT337YY e4+xQedDWYNCrXO9ly6JDTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzOMA0GCSqGSIb3DQEBCwUAA4IBAQCesnQrGbJyRGS0n0Z3YPeGkz49 Hp2e1esLXRRuoPP+stXI25POtrf/aJP/VszcRlo3teDqr/3VSyKGkuVSVH37BZU+ L5gV855ATRz3UT2PeaWEdZMWMG/5WrrIYg7fMbx1rKIHpvmeSMFdmeDeyq+T/ERt wcijIsIT2MnHbOsrG4Lkh9POAqdUYWKARxp+vIwPhkqCHOhd932Gx2/5nP3auTdA LuU1VsbA7+2S17gxYb5Vx9uBa0x3gJubpkXNhg8Xdz3R7Ex1PDxE8xu/VwsVERLu KaX7zdPd4OGLUI6zZjS7W2Le0tdoadq1z/7E7gAsZYntbvlTbt/3ahF8perK -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:27 2026 by rpki-client