$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154802.roa File: AS154802.roa (raw, json) Hash identifier: GiPgOLNmjsB9SdhThb2VO/A5qDbhrxoB3oTgbMoIhTQ= Subject key identifier: 9B:D9:1D:C4:58:F7:05:BB:87:9C:41:91:BC:07:B0:6F:54:69:BC:EA Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 764F5B54C3B71B0F09E187D6217214BD8B9B4163 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154802.roa Signing time: Fri 14 Aug 2026 08:16:59 +0000 ROA not before: Fri 14 Aug 2026 08:11:59 +0000 ROA not after: Fri 13 Aug 2027 08:16:59 +0000 asID: 154802 IP address blocks: 160.236.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4f:5b:54:c3:b7:1b:0f:09:e1:87:d6:21:72:14:bd:8b:9b:41:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 14 08:11:59 2026 GMT Not After : Aug 13 08:16:59 2027 GMT Subject: CN=9BD91DC458F705BB879C4191BC07B06F5469BCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:da:a2:f4:dc:66:4b:74:3d:14:2f:18:f1:fd: 6f:ba:a9:9d:74:68:b9:97:83:51:ae:23:13:da:4a: bd:59:c4:62:02:0d:1c:3a:2b:ab:da:29:7e:58:43: 7a:f0:21:25:98:23:c1:66:f0:b5:2e:c2:d6:4f:be: e3:e6:14:f9:60:c8:c5:21:3d:d5:28:5b:40:81:07: 29:af:dd:ca:ba:57:86:91:66:60:38:6b:86:c8:9f: 8f:36:05:08:53:2f:28:f4:92:1d:d1:7f:dc:63:e6: cb:df:c1:82:14:39:d5:0e:01:6e:29:49:53:e8:8e: 7d:8b:5e:71:2f:08:c4:dc:81:cf:1a:f4:51:5f:f9: cf:34:b2:a5:b8:39:26:92:a3:48:21:af:a3:20:8f: 02:ac:e2:d5:d9:f2:25:18:f6:be:16:68:9a:5e:0f: c2:8b:56:f8:62:ec:44:5f:2e:99:1e:19:50:d3:58: 5f:b3:83:e9:04:d4:46:d9:98:9c:34:6b:b3:1c:ad: 3a:b6:ca:a5:e1:1d:6b:aa:4b:fe:d2:0d:21:b7:95: 44:ed:d6:25:6b:ed:ea:2a:f9:4b:72:fb:75:f4:e8: 18:15:dd:2c:e4:57:8f:e0:e3:ee:6f:19:31:d0:e7: b1:3f:a0:15:13:25:41:44:f7:bb:d3:45:99:0d:07: 83:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D9:1D:C4:58:F7:05:BB:87:9C:41:91:BC:07:B0:6F:54:69:BC:EA X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.231.0/24 Signature Algorithm: sha256WithRSAEncryption 06:06:1a:b7:ea:86:f4:7d:52:5d:cc:9b:a9:3e:b3:eb:87:53: 16:b1:d4:05:1e:d0:68:f9:c7:e7:66:ab:30:19:35:c0:95:d7: 50:6c:59:b6:d1:e4:cd:63:04:13:fb:01:4c:aa:17:be:63:12: d8:0a:10:36:56:34:25:ed:cb:43:9d:e5:16:eb:8e:1b:b9:3b: 61:93:2c:a5:93:32:79:33:ba:2b:d4:4a:ee:14:63:ad:de:c4: 0b:fc:25:e4:c2:ba:81:ff:25:67:94:7d:e1:42:64:34:13:0b: fc:9a:d6:25:df:e7:61:c4:8b:3f:cc:c9:84:a8:90:e1:06:a6: 1b:85:64:0d:f5:7b:58:0b:c5:0a:1f:6e:06:49:b9:8a:91:85: b7:fc:21:af:d8:0e:5a:8d:8c:4f:4e:16:a8:60:86:1d:10:b8: 93:70:a5:1d:d3:1b:34:37:a0:1e:c5:92:ed:fe:8b:cb:b7:7a: 94:da:f8:24:fc:e3:d3:fc:b2:59:83:46:c5:7f:72:5c:ca:f9: 42:ed:a3:b3:90:54:a1:be:55:0d:9a:00:b5:ed:8f:b3:19:f7: ca:5a:95:18:a5:21:01:4c:96:ac:58:e8:6e:fc:99:c2:b1:c1: 47:43:9e:01:51:ad:2c:1f:db:58:c9:df:59:45:83:38:b8:b3: a5:9a:a5:a8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdk9bVMO3Gw8J4YfWIXIUvYubQWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxNDA4MTE1OVoX DTI3MDgxMzA4MTY1OVowMzExMC8GA1UEAxMoOUJEOTFEQzQ1OEY3MDVCQjg3OUM0 MTkxQkMwN0IwNkY1NDY5QkNFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvaovTcZkt0PRQvGPH9b7qpnXRouZeDUa4jE9pKvVnEYgINHDorq9opflhD evAhJZgjwWbwtS7C1k++4+YU+WDIxSE91ShbQIEHKa/dyrpXhpFmYDhrhsifjzYF CFMvKPSSHdF/3GPmy9/BghQ51Q4BbilJU+iOfYtecS8IxNyBzxr0UV/5zzSypbg5 JpKjSCGvoyCPAqzi1dnyJRj2vhZoml4PwotW+GLsRF8umR4ZUNNYX7OD6QTURtmY nDRrsxytOrbKpeEda6pL/tINIbeVRO3WJWvt6ir5S3L7dfToGBXdLORXj+Dj7m8Z MdDnsT+gFRMlQUT3u9NFmQ0Hg2kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSb2R3E WPcFu4ecQZG8B7BvVGm86jAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0ODAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOznMA0GCSqGSIb3DQEBCwUAA4IBAQAGBhq36ob0fVJdzJupPrPrh1MW sdQFHtBo+cfnZqswGTXAlddQbFm20eTNYwQT+wFMqhe+YxLYChA2VjQl7ctDneUW 644buTthkyylkzJ5M7or1EruFGOt3sQL/CXkwrqB/yVnlH3hQmQ0Ewv8mtYl3+dh xIs/zMmEqJDhBqYbhWQN9XtYC8UKH24GSbmKkYW3/CGv2A5ajYxPThaoYIYdELiT cKUd0xs0N6AexZLt/ovLt3qU2vgk/OPT/LJZg0bFf3JcyvlC7aOzkFShvlUNmgC1 7Y+zGffKWpUYpSEBTJasWOhu/JnCscFHQ54BUa0sH9tYyd9ZRYM4uLOlmqWo -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:27 2026 by rpki-client