$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154797.roa File: AS154797.roa (raw, json) Hash identifier: wxixQhm+XNWvHbYD+c48NMFrX0wr6pmWDXKoT67JH4w= Subject key identifier: 8D:C3:36:87:96:B8:E0:96:C2:9C:C4:C1:B4:AC:F0:94:CD:24:AB:2C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7234BEB60A2DCDC080EC7D0FAEB1484D9BAABD6F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154797.roa Signing time: Mon 28 Sep 2026 02:46:21 +0000 ROA not before: Mon 28 Sep 2026 02:41:21 +0000 ROA not after: Mon 27 Sep 2027 02:46:21 +0000 asID: 154797 IP address blocks: 160.236.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:be:b6:0a:2d:cd:c0:80:ec:7d:0f:ae:b1:48:4d:9b:aa:bd:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 28 02:41:21 2026 GMT Not After : Sep 27 02:46:21 2027 GMT Subject: CN=8DC3368796B8E096C29CC4C1B4ACF094CD24AB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:60:fe:50:29:38:32:f1:cf:00:3d:13:b0: f8:6c:fb:bd:b2:a6:07:97:3b:d2:1a:d4:47:dd:0e: f0:7f:d0:89:0a:96:b8:df:9d:51:e2:b9:ac:6c:5b: 80:e1:c4:40:ba:43:f0:2f:d0:e2:9e:87:8a:8e:41: 28:33:54:e7:37:35:8e:18:c5:24:aa:fd:71:9a:ab: 68:f8:44:f3:7d:d0:ba:9f:f1:8b:de:a5:b2:ee:be: 06:01:8e:76:3f:ed:79:ff:b3:68:55:32:04:bc:fd: fb:da:ec:a3:1c:ae:dc:cc:f0:69:0d:27:23:08:8c: fe:9e:1e:21:e5:7e:a7:5c:08:7c:a8:4e:a5:ae:74: 2a:ec:34:d3:46:3a:2b:e7:be:4a:f6:93:39:3a:43: 60:a4:53:75:81:e2:7c:dd:aa:d8:8c:29:4c:38:41: 13:a3:f4:82:2e:34:26:b7:cb:f5:65:fe:e9:b0:05: 60:12:5f:af:28:c9:36:c1:b8:b7:04:47:e9:4f:66: 3d:39:f5:cf:aa:0d:f2:ad:90:09:f8:92:4a:4e:ef: e2:53:33:cd:b3:1c:98:59:7a:e8:4e:5f:fd:94:1b: 5e:9e:46:69:c0:d1:84:12:ed:cb:44:0d:47:d6:5b: 15:20:aa:3c:2d:7c:11:af:18:62:4e:ee:96:ff:95: 01:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C3:36:87:96:B8:E0:96:C2:9C:C4:C1:B4:AC:F0:94:CD:24:AB:2C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.207.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a0:76:d2:af:8d:03:bd:9b:42:04:d2:b5:7c:71:77:f5:10: e7:d5:73:8d:42:dc:ff:68:9a:2b:dc:f1:c3:25:4a:a3:05:b6: 81:76:d8:98:63:bc:02:d4:f7:f0:d3:dc:5e:3f:0d:2f:09:89: 83:15:e1:4b:1e:52:21:8b:cd:36:e4:14:0b:e6:05:58:12:7c: 62:47:1f:b5:47:25:74:65:4b:1a:4c:5d:d2:1b:cd:ed:fc:68: 93:87:05:8c:e1:89:bb:8f:1a:02:38:7a:d1:71:75:ae:59:d0: 43:6b:d2:ca:6a:44:93:54:7b:02:3e:0d:04:d4:00:9b:bd:22: 11:d3:91:31:78:b0:74:b3:65:5f:3e:a8:85:9a:97:fd:e5:67: 73:47:66:91:da:4e:3f:25:80:e9:2c:bb:3f:96:26:e8:f4:56: 43:50:8f:ca:1d:06:dc:dd:e8:88:db:a8:b9:eb:ed:47:a0:99: d6:f7:0f:8c:aa:37:a5:88:57:7a:a7:70:97:f4:0a:94:da:e3: 7c:d0:4f:43:66:64:72:0c:a9:c4:f1:5f:3a:2b:eb:b4:f1:e6: c7:42:cb:f3:bc:80:42:9d:ce:9d:bc:2d:d7:73:56:07:33:a4: ec:dd:5a:0e:63:53:09:ba:cc:f2:2e:50:6e:5f:44:96:e9:8d: 3f:19:1f:e1 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcjS+tgotzcCA7H0PrrFITZuqvW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyODAyNDEyMVoX DTI3MDkyNzAyNDYyMVowMzExMC8GA1UEAxMoOERDMzM2ODc5NkI4RTA5NkMyOUND NEMxQjRBQ0YwOTRDRDI0QUIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIiwYP5QKTgy8c8APROw+Gz7vbKmB5c70hrUR90O8H/QiQqWuN+dUeK5rGxb gOHEQLpD8C/Q4p6Hio5BKDNU5zc1jhjFJKr9cZqraPhE833Qup/xi96lsu6+BgGO dj/tef+zaFUyBLz9+9rsoxyu3MzwaQ0nIwiM/p4eIeV+p1wIfKhOpa50Kuw000Y6 K+e+SvaTOTpDYKRTdYHifN2q2IwpTDhBE6P0gi40JrfL9WX+6bAFYBJfryjJNsG4 twRH6U9mPTn1z6oN8q2QCfiSSk7v4lMzzbMcmFl66E5f/ZQbXp5GacDRhBLty0QN R9ZbFSCqPC18Ea8YYk7ulv+VATUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSNwzaH lrjglsKcxMG0rPCUzSSrLDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzPMA0GCSqGSIb3DQEBCwUAA4IBAQBuoHbSr40DvZtCBNK1fHF39RDn 1XONQtz/aJor3PHDJUqjBbaBdtiYY7wC1Pfw09xePw0vCYmDFeFLHlIhi8025BQL 5gVYEnxiRx+1RyV0ZUsaTF3SG83t/GiThwWM4Ym7jxoCOHrRcXWuWdBDa9LKakST VHsCPg0E1ACbvSIR05ExeLB0s2VfPqiFmpf95WdzR2aR2k4/JYDpLLs/libo9FZD UI/KHQbc3eiI26i56+1HoJnW9w+MqjeliFd6p3CX9AqU2uN80E9DZmRyDKnE8V86 K+u08ebHQsvzvIBCnc6dvC3Xc1YHM6Ts3VoOY1MJuszyLlBuX0SW6Y0/GR/h -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:49 2026 by rpki-client