$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154798.roa File: AS154798.roa (raw, json) Hash identifier: HAhXWkO3R3APTV6OPKpxV3PSkPY9maQ27DKT2qgxseo= Subject key identifier: 04:35:3C:8D:5D:3B:BC:63:89:EE:3E:07:B8:5D:9D:DA:EC:7B:D6:38 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3F2C5C353CF7B0AAB3147C21371701F36C4A0D90 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154798.roa Signing time: Wed 05 Aug 2026 04:02:43 +0000 ROA not before: Wed 05 Aug 2026 03:57:43 +0000 ROA not after: Wed 04 Aug 2027 04:02:43 +0000 asID: 154798 IP address blocks: 160.236.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2c:5c:35:3c:f7:b0:aa:b3:14:7c:21:37:17:01:f3:6c:4a:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 5 03:57:43 2026 GMT Not After : Aug 4 04:02:43 2027 GMT Subject: CN=04353C8D5D3BBC6389EE3E07B85D9DDAEC7BD638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:ff:44:da:15:03:aa:c1:92:0a:c6:eb:70: 92:3a:0d:57:e9:d5:d2:ac:1c:ce:23:cd:e0:49:8a: f5:6c:4b:05:db:eb:dc:15:92:c5:3b:f4:18:76:d4: 3b:1b:af:15:9a:db:64:df:24:bc:3c:09:32:f2:aa: c5:42:16:92:7d:d8:ba:ef:94:75:dd:c5:2d:0c:6f: 5c:68:0f:47:6f:56:dd:4f:ec:94:91:24:36:0c:e1: 55:bd:f7:93:73:9c:6c:35:49:0e:6b:96:14:dd:4b: 34:e8:5a:94:82:b0:99:68:c1:42:8c:48:18:94:2d: 14:d6:70:9f:4b:95:b3:3b:c8:e1:cb:35:b3:3e:9e: 1f:e4:ff:81:92:35:7b:8e:d0:18:c2:c6:57:58:2e: b8:f4:0b:95:15:ab:77:3b:d4:6f:85:b5:7d:e7:a4: cd:53:4b:ba:25:3e:23:29:a0:8a:ef:e6:b7:6b:30: 6f:02:17:9e:29:c3:13:4e:c6:60:66:75:75:95:b4: bd:40:0d:e9:26:64:45:be:71:8a:4f:82:23:45:a2: 0b:70:4f:d5:23:45:59:9b:35:08:82:e1:33:f8:e0: 5c:a0:c5:57:40:55:3f:22:63:e0:cb:25:71:d0:21: e4:44:cb:75:0b:85:f7:0c:c7:9a:ee:bb:a9:00:69: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:3C:8D:5D:3B:BC:63:89:EE:3E:07:B8:5D:9D:DA:EC:7B:D6:38 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.216.0/24 Signature Algorithm: sha256WithRSAEncryption 37:e0:0c:36:f2:39:f9:5d:eb:ea:54:b4:d6:7b:9a:86:c4:fe: 84:71:d3:4b:1e:0f:4b:a5:a2:0a:89:ce:7f:e3:a9:62:55:5c: cf:f8:65:14:b3:5d:0f:f7:10:f3:98:55:c3:d1:6f:e2:04:a1: 6c:e8:e1:fc:af:17:46:cc:34:b6:e3:c0:f1:d6:96:76:d0:ae: 47:69:53:34:94:11:ac:9b:c5:d5:89:48:cf:84:b4:2d:9f:21: 6b:e7:55:4f:fc:74:cd:39:53:03:25:52:5a:57:1b:43:6f:25: c9:bb:eb:56:d9:a7:47:96:ae:27:61:f7:d8:99:44:34:40:cc: 02:c3:3e:b1:53:c1:47:12:ec:b4:2f:8d:ad:d0:ec:86:e9:a9: 42:1e:62:56:ea:9e:02:59:b0:54:93:c2:18:35:44:c8:b7:48: 43:02:eb:1d:7e:48:61:66:ca:96:a5:2b:d8:1f:0b:1f:8d:c1: cd:bb:98:77:e5:58:00:43:94:fe:ee:1f:7b:1a:36:7d:9c:6a: 1b:7d:1d:f3:e4:fb:04:88:40:8f:5e:3c:9e:b1:6b:a3:de:1d: 83:74:91:24:6c:43:4c:80:ab:a6:d9:28:20:ce:33:a0:6c:eb: 1e:2b:6a:f5:b9:0b:af:9d:1b:5c:b0:02:23:67:5a:dd:e3:b6: 6a:ab:54:d5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPyxcNTz3sKqzFHwhNxcB82xKDZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNTAzNTc0M1oX DTI3MDgwNDA0MDI0M1owMzExMC8GA1UEAxMoMDQzNTNDOEQ1RDNCQkM2Mzg5RUUz RTA3Qjg1RDlEREFFQzdCRDYzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbW/0TaFQOqwZIKxutwkjoNV+nV0qwcziPN4EmK9WxLBdvr3BWSxTv0GHbU OxuvFZrbZN8kvDwJMvKqxUIWkn3Yuu+Udd3FLQxvXGgPR29W3U/slJEkNgzhVb33 k3OcbDVJDmuWFN1LNOhalIKwmWjBQoxIGJQtFNZwn0uVszvI4cs1sz6eH+T/gZI1 e47QGMLGV1guuPQLlRWrdzvUb4W1feekzVNLuiU+Iymgiu/mt2swbwIXninDE07G YGZ1dZW0vUAN6SZkRb5xik+CI0WiC3BP1SNFWZs1CILhM/jgXKDFV0BVPyJj4Msl cdAh5ETLdQuF9wzHmu67qQBpBHMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQENTyN XTu8Y4nuPge4XZ3a7HvWODAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzk4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzYMA0GCSqGSIb3DQEBCwUAA4IBAQA34Aw28jn5XevqVLTWe5qGxP6E cdNLHg9LpaIKic5/46liVVzP+GUUs10P9xDzmFXD0W/iBKFs6OH8rxdGzDS248Dx 1pZ20K5HaVM0lBGsm8XViUjPhLQtnyFr51VP/HTNOVMDJVJaVxtDbyXJu+tW2adH lq4nYffYmUQ0QMwCwz6xU8FHEuy0L42t0OyG6alCHmJW6p4CWbBUk8IYNUTIt0hD AusdfkhhZsqWpSvYHwsfjcHNu5h35VgAQ5T+7h97GjZ9nGobfR3z5PsEiECPXjye sWuj3h2DdJEkbENMgKum2SggzjOgbOseK2r1uQuvnRtcsAIjZ1rd47Zqq1TV -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:29 2026 by rpki-client