$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154804.roa File: AS154804.roa (raw, json) Hash identifier: CQsHRpxFF67FPWQmsMTBDhzT19YjiyHYx8IAOYWJg7g= Subject key identifier: 0C:7F:27:43:91:D3:54:23:18:AC:8C:59:8F:16:A9:44:E2:6B:CD:03 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 06F5812433DDA3B06CB148AC454E490697C80FB1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154804.roa Signing time: Wed 05 Aug 2026 03:56:11 +0000 ROA not before: Wed 05 Aug 2026 03:51:11 +0000 ROA not after: Wed 04 Aug 2027 03:56:11 +0000 asID: 154804 IP address blocks: 160.236.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f5:81:24:33:dd:a3:b0:6c:b1:48:ac:45:4e:49:06:97:c8:0f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 5 03:51:11 2026 GMT Not After : Aug 4 03:56:11 2027 GMT Subject: CN=0C7F274391D3542318AC8C598F16A944E26BCD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:15:70:c3:23:0a:17:89:bf:88:74:e8:e1: 13:01:4c:0d:83:9f:30:a6:fc:95:9d:be:90:da:2a: b9:f6:83:59:68:07:aa:fd:0f:91:51:6b:45:43:2d: ab:05:a3:ff:d8:2b:88:9a:8e:1d:e4:0d:07:5d:78: 97:1b:8f:d6:13:87:37:97:6f:33:44:22:26:5a:81: 8a:1a:cb:a8:0f:6f:c5:50:48:84:d9:08:33:c8:00: 5e:a0:6f:ca:10:f0:ed:fb:e6:20:51:de:41:94:d6: f5:0c:4c:36:bc:48:cf:1d:7c:85:5d:fa:c1:b4:14: 1c:c7:6c:15:62:a5:f5:2d:78:10:0d:41:f1:54:14: e7:cd:9f:03:a4:a9:cf:4d:ad:bc:d7:f3:26:51:fb: 46:db:5e:e1:3a:ed:bd:68:15:8e:4e:1c:de:1b:b7: 32:8f:1c:c1:e7:cc:5d:17:1d:b0:16:58:63:d8:9b: d2:56:02:86:b9:4d:5b:08:f2:c6:1f:61:70:24:53: 2a:16:44:a0:21:d0:e1:fc:6c:8e:4b:b4:40:d2:18: 28:cc:55:3a:fd:d0:71:52:4e:7f:a7:5c:4c:c0:70: 5f:41:1b:7f:54:90:ce:1c:f0:b9:40:53:b4:ce:d9: 89:b9:b2:06:0d:43:10:61:57:f2:e8:e0:da:c8:42: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:27:43:91:D3:54:23:18:AC:8C:59:8F:16:A9:44:E2:6B:CD:03 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.177.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:4d:01:fb:4a:f3:cb:f9:7e:ab:bd:7b:ba:a6:84:f6:e2:f7: 1a:fe:03:22:fc:dc:31:a1:b8:0d:6f:08:51:8e:2c:55:21:31: a0:66:14:cc:41:d8:49:ab:66:f7:f6:e7:b7:ec:08:47:22:5c: 8e:e6:dd:23:35:60:c1:44:2e:d7:00:00:5b:3d:59:18:c0:33: 88:aa:ec:bd:ce:21:f7:02:e3:8d:7e:30:73:76:7e:b1:2e:a2: 2d:66:78:aa:dd:4c:e8:70:68:0d:8e:68:2f:c7:1d:2c:37:fe: 4b:ca:3d:8a:c3:36:9c:1b:25:5f:f0:71:ec:ad:4a:b5:60:f9: 15:7b:e6:fb:d4:23:04:27:0c:f5:e6:62:b2:89:13:9d:b5:90: 39:48:8b:d2:ba:e8:db:ac:e0:22:6a:70:96:66:e1:13:0b:1a: 60:a7:f1:4c:85:c5:1e:c5:8e:71:65:c3:50:ac:0d:ca:b4:c9: a0:c6:4e:d7:67:4b:e2:ee:9f:dd:59:55:95:21:04:c9:30:e8: 04:67:f4:5e:bb:a5:7a:7a:22:5e:1e:99:67:63:9d:1b:8c:68: 74:48:1c:73:58:92:5f:5c:56:03:3e:f8:ec:75:fd:94:6c:14: 65:95:d8:e9:0d:94:63:fc:1e:f9:5c:c4:d0:5f:14:2c:25:89: 67:89:56:29 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBvWBJDPdo7BssUisRU5JBpfID7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNTAzNTExMVoX DTI3MDgwNDAzNTYxMVowMzExMC8GA1UEAxMoMEM3RjI3NDM5MUQzNTQyMzE4QUM4 QzU5OEYxNkE5NDRFMjZCQ0QwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzCFXDDIwoXib+IdOjhEwFMDYOfMKb8lZ2+kNoqufaDWWgHqv0PkVFrRUMt qwWj/9griJqOHeQNB114lxuP1hOHN5dvM0QiJlqBihrLqA9vxVBIhNkIM8gAXqBv yhDw7fvmIFHeQZTW9QxMNrxIzx18hV36wbQUHMdsFWKl9S14EA1B8VQU582fA6Sp z02tvNfzJlH7Rtte4TrtvWgVjk4c3hu3Mo8cwefMXRcdsBZYY9ib0lYChrlNWwjy xh9hcCRTKhZEoCHQ4fxsjku0QNIYKMxVOv3QcVJOf6dcTMBwX0Ebf1SQzhzwuUBT tM7ZibmyBg1DEGFX8ujg2shCaJECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQMfydD kdNUIxisjFmPFqlE4mvNAzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0ODA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyxMA0GCSqGSIb3DQEBCwUAA4IBAQCKTQH7SvPL+X6rvXu6poT24vca /gMi/NwxobgNbwhRjixVITGgZhTMQdhJq2b39ue37AhHIlyO5t0jNWDBRC7XAABb PVkYwDOIquy9ziH3AuONfjBzdn6xLqItZniq3UzocGgNjmgvxx0sN/5Lyj2Kwzac GyVf8HHsrUq1YPkVe+b71CMEJwz15mKyiROdtZA5SIvSuujbrOAianCWZuETCxpg p/FMhcUexY5xZcNQrA3KtMmgxk7XZ0vi7p/dWVWVIQTJMOgEZ/Reu6V6eiJeHpln Y50bjGh0SBxzWJJfXFYDPvjsdf2UbBRlldjpDZRj/B75XMTQXxQsJYlniVYp -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:31 2026 by rpki-client