$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154812.roa File: AS154812.roa (raw, json) Hash identifier: JRWonyEwqRBgbG9GDMzeCM8L6vYzIR6TumMJX9oArWU= Subject key identifier: 05:D3:7D:1A:04:00:CA:73:E2:C6:97:07:96:F0:B5:3D:EB:7D:4C:F8 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 536341F50BB6AA64B21BA0ECEF62D93330EEED7A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154812.roa Signing time: Fri 14 Aug 2026 04:13:52 +0000 ROA not before: Fri 14 Aug 2026 04:08:52 +0000 ROA not after: Fri 13 Aug 2027 04:13:52 +0000 asID: 154812 IP address blocks: 160.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:63:41:f5:0b:b6:aa:64:b2:1b:a0:ec:ef:62:d9:33:30:ee:ed:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 14 04:08:52 2026 GMT Not After : Aug 13 04:13:52 2027 GMT Subject: CN=05D37D1A0400CA73E2C6970796F0B53DEB7D4CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:22:cd:dc:61:cc:52:a3:76:10:f6:10:86: 13:d2:74:67:cb:58:bd:29:92:d9:23:1c:cb:0c:6c: 5c:4a:7b:9b:01:9d:08:32:9a:e6:61:35:4e:07:c4: 73:43:52:63:fe:2b:f6:f1:f2:96:c1:70:13:1e:f5: d1:09:b9:f0:38:aa:d9:98:bb:17:5d:1b:8e:1c:dc: 79:fc:83:b2:4b:fa:6d:db:05:78:5c:10:d5:f0:fc: 72:8b:cd:1f:f6:8c:bb:be:f9:16:0f:77:8f:ac:46: 4e:32:2a:1e:da:32:12:2f:fe:89:b9:be:31:f3:49: 61:29:c6:1c:66:18:d1:27:0b:c6:ad:3b:d0:de:9c: e0:14:6c:d7:b9:2d:7b:81:b0:79:c9:9c:fe:6f:d8: f2:18:51:cc:4b:46:8f:55:b6:9e:cb:e3:98:72:db: 7e:4a:80:19:d0:fd:77:a2:6d:39:96:15:ae:63:a0: a7:5c:07:91:62:1d:6d:ea:43:8b:a4:4e:e8:c0:f5: c7:b1:53:90:3d:3b:94:ff:23:b5:76:dc:ab:08:86: b1:64:80:0c:8e:c3:73:c9:4c:fa:8b:40:0b:24:07: 7b:bf:d6:fe:2d:39:a5:73:db:f5:de:3e:c6:f7:9d: aa:74:73:bd:38:20:7c:46:c7:c9:36:04:2e:fb:af: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D3:7D:1A:04:00:CA:73:E2:C6:97:07:96:F0:B5:3D:EB:7D:4C:F8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154812.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.246.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:0c:1f:1f:7e:ec:c3:bc:1e:c2:29:da:5b:32:06:62:6a:2c: 28:41:3f:6a:7f:01:fd:2e:23:5f:d7:d1:58:81:99:44:ee:81: 71:62:78:7b:5c:d9:e9:45:f2:54:06:72:91:3f:71:78:67:8e: 7f:cf:a3:c5:8b:32:51:3a:21:af:72:d1:a1:c9:d9:a3:7b:cf: 1e:9f:73:36:cf:8e:97:ce:bb:7d:41:1e:48:7b:3d:e4:5b:2d: e7:0c:0c:5f:71:b4:bf:47:4b:b1:e2:99:0c:d1:2e:60:9f:b7: b0:da:51:2c:0d:52:f6:0b:d8:3b:df:01:87:58:6a:86:bd:27: f0:cd:22:4d:22:1f:74:eb:c0:4f:f6:c1:0a:8e:cb:54:66:d3: 94:56:0e:7b:60:02:0c:84:b4:a3:85:86:75:5d:e0:e6:93:ef: bc:2a:6c:1e:fe:d7:2a:4a:08:c8:6b:67:4f:7e:a9:6a:bb:2e: 0f:f1:0f:f9:db:15:de:c7:18:97:21:19:de:ce:f0:12:5f:ac: 5a:72:78:42:fc:e9:f8:30:42:b5:d1:8f:07:4b:06:85:cd:8d: 2e:dc:21:8f:72:43:cb:f4:b7:a6:db:0c:fc:76:03:ac:af:84: 2a:f4:2d:fe:40:ac:89:ed:d5:91:cd:40:36:6a:57:0f:5e:bb: 28:d1:65:dd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUU2NB9Qu2qmSyG6Ds72LZMzDu7XowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxNDA0MDg1MloX DTI3MDgxMzA0MTM1MlowMzExMC8GA1UEAxMoMDVEMzdEMUEwNDAwQ0E3M0UyQzY5 NzA3OTZGMEI1M0RFQjdENENGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIZjIs3cYcxSo3YQ9hCGE9J0Z8tYvSmS2SMcywxsXEp7mwGdCDKa5mE1TgfE c0NSY/4r9vHylsFwEx710Qm58Diq2Zi7F10bjhzcefyDskv6bdsFeFwQ1fD8covN H/aMu775Fg93j6xGTjIqHtoyEi/+ibm+MfNJYSnGHGYY0ScLxq070N6c4BRs17kt e4Gwecmc/m/Y8hhRzEtGj1W2nsvjmHLbfkqAGdD9d6JtOZYVrmOgp1wHkWIdbepD i6RO6MD1x7FTkD07lP8jtXbcqwiGsWSADI7Dc8lM+otACyQHe7/W/i05pXPb9d4+ xvedqnRzvTggfEbHyTYELvuvfwECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQF030a BADKc+LGlweW8LU9631M+DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0ODEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOz2MA0GCSqGSIb3DQEBCwUAA4IBAQAtDB8ffuzDvB7CKdpbMgZiaiwo QT9qfwH9LiNf19FYgZlE7oFxYnh7XNnpRfJUBnKRP3F4Z45/z6PFizJROiGvctGh ydmje88en3M2z46Xzrt9QR5Iez3kWy3nDAxfcbS/R0ux4pkM0S5gn7ew2lEsDVL2 C9g73wGHWGqGvSfwzSJNIh9068BP9sEKjstUZtOUVg57YAIMhLSjhYZ1XeDmk++8 Kmwe/tcqSgjIa2dPfqlquy4P8Q/52xXexxiXIRnezvASX6xacnhC/On4MEK10Y8H SwaFzY0u3CGPckPL9Lem2wz8dgOsr4Qq9C3+QKyJ7dWRzUA2alcPXrso0WXd -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:29 2026 by rpki-client