$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154818.roa File: AS154818.roa (raw, json) Hash identifier: r/Goh5wMOtGCcIme+b9KfTzPnsG5G1XkZUcFZcvD1vA= Subject key identifier: A9:4F:8D:81:93:25:DC:2E:5E:99:2F:F8:16:38:CC:43:B3:91:FE:18 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 54E4740B97F9FD1CB884E427C325677A13265271 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154818.roa Signing time: Wed 12 Aug 2026 04:36:20 +0000 ROA not before: Wed 12 Aug 2026 04:31:20 +0000 ROA not after: Wed 11 Aug 2027 04:36:20 +0000 asID: 154818 IP address blocks: 160.236.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e4:74:0b:97:f9:fd:1c:b8:84:e4:27:c3:25:67:7a:13:26:52:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 12 04:31:20 2026 GMT Not After : Aug 11 04:36:20 2027 GMT Subject: CN=A94F8D819325DC2E5E992FF81638CC43B391FE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:fc:7b:17:4a:65:4d:d9:d5:a0:5f:6a:91: 42:d0:61:a3:73:61:a1:25:15:fe:06:6a:4c:e3:5e: b3:4b:2e:4a:b7:16:fc:5c:af:03:74:b7:fe:26:c5: a9:28:c0:43:49:fd:9c:08:da:8e:f1:36:0d:4f:fa: e0:43:09:e8:14:b4:60:f8:91:95:bb:99:56:e2:ca: 76:92:30:1d:03:61:b9:8b:80:4f:f4:a0:9a:56:4d: b6:fb:89:ff:47:df:bc:b7:58:d7:ef:f9:97:ae:74: a7:db:d2:8f:c0:dd:b1:cd:00:ab:8f:8c:2d:f6:89: d7:a7:04:da:98:74:c7:c1:cd:fd:fd:96:6d:7b:0f: 95:77:93:b6:31:2c:7f:61:6f:89:9e:a5:aa:b7:3b: 96:a4:3a:30:0f:25:e0:26:e1:b4:36:32:57:b4:af: bb:70:a3:82:7f:b4:bb:88:c7:d6:85:a9:4e:6a:28: 3c:ef:ae:b7:01:10:61:a5:55:4d:fd:2c:7a:4b:0a: e0:5e:81:f8:8e:05:d4:fc:2e:f7:01:02:4a:2d:2c: b8:41:3a:ba:5e:43:70:65:25:59:2a:5c:9b:37:7e: 1e:e3:58:cf:e0:9b:e6:ad:3e:48:3a:57:b3:08:5c: ea:91:dc:c2:c2:2b:a6:9a:a0:0a:de:16:34:f5:26: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:8D:81:93:25:DC:2E:5E:99:2F:F8:16:38:CC:43:B3:91:FE:18 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154818.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.253.0/24 Signature Algorithm: sha256WithRSAEncryption a1:75:04:1c:1c:c7:83:68:2b:60:f4:9d:1b:a3:8d:4b:e4:d0: 15:1a:5f:d1:46:d2:83:06:9d:f5:9e:c3:57:91:ee:0e:73:77: b0:51:49:bd:ae:44:ad:5f:b5:e6:a1:f5:d5:15:86:c5:03:c0: cf:d0:ff:33:07:13:47:c6:fa:a4:96:b9:41:fc:13:f1:db:3a: b5:f1:3c:f3:dc:0c:0f:02:7a:2a:2b:9b:16:ee:2a:fa:14:3e: af:c1:cb:07:0d:fe:c0:39:0a:15:e1:a4:69:c1:dc:4b:24:e2: 7c:16:b0:99:2d:57:2c:77:2a:8a:d6:77:d1:45:e8:60:76:05: 9c:87:3f:03:a2:22:5c:5e:87:c1:48:1c:43:47:f4:23:35:75: 65:a5:37:4a:e5:e3:66:bb:51:d1:77:ca:06:fd:f5:ab:9f:a7: ba:92:c5:d7:17:46:7a:e7:52:e7:dd:fc:68:0a:20:d4:bd:06: 0e:ef:58:03:62:bf:46:06:a4:b7:3c:f5:63:22:11:ce:3c:54: db:8b:89:e8:f0:3d:17:52:58:8a:a5:31:ea:bc:79:5a:ca:7c: 32:18:6a:6a:7e:d8:67:95:90:c0:57:7d:17:bb:69:40:d6:a8: b3:7e:fc:97:ae:89:61:9a:96:24:46:91:49:a9:fd:69:e9:5d: ab:e5:a0:4d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVOR0C5f5/Ry4hOQnwyVnehMmUnEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxMjA0MzEyMFoX DTI3MDgxMTA0MzYyMFowMzExMC8GA1UEAxMoQTk0RjhEODE5MzI1REMyRTVFOTky RkY4MTYzOENDNDNCMzkxRkUxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxn/HsXSmVN2dWgX2qRQtBho3NhoSUV/gZqTONes0suSrcW/FyvA3S3/ibF qSjAQ0n9nAjajvE2DU/64EMJ6BS0YPiRlbuZVuLKdpIwHQNhuYuAT/SgmlZNtvuJ /0ffvLdY1+/5l650p9vSj8Ddsc0Aq4+MLfaJ16cE2ph0x8HN/f2WbXsPlXeTtjEs f2FviZ6lqrc7lqQ6MA8l4CbhtDYyV7Svu3Cjgn+0u4jH1oWpTmooPO+utwEQYaVV Tf0seksK4F6B+I4F1Pwu9wECSi0suEE6ul5DcGUlWSpcmzd+HuNYz+Cb5q0+SDpX swhc6pHcwsIrppqgCt4WNPUmo/kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSpT42B kyXcLl6ZL/gWOMxDs5H+GDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0ODE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOz9MA0GCSqGSIb3DQEBCwUAA4IBAQChdQQcHMeDaCtg9J0bo41L5NAV Gl/RRtKDBp31nsNXke4Oc3ewUUm9rkStX7XmofXVFYbFA8DP0P8zBxNHxvqklrlB /BPx2zq18Tzz3AwPAnoqK5sW7ir6FD6vwcsHDf7AOQoV4aRpwdxLJOJ8FrCZLVcs dyqK1nfRRehgdgWchz8DoiJcXofBSBxDR/QjNXVlpTdK5eNmu1HRd8oG/fWrn6e6 ksXXF0Z651Ln3fxoCiDUvQYO71gDYr9GBqS3PPVjIhHOPFTbi4no8D0XUliKpTHq vHlaynwyGGpqfthnlZDAV30Xu2lA1qizfvyXrolhmpYkRpFJqf1p6V2r5aBN -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:30 2026 by rpki-client