$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154842.roa File: AS154842.roa (raw, json) Hash identifier: mOTI+/YgBGzo2vmOX206ifLZwWtbDGvO53cm8SvdFjo= Subject key identifier: 34:D1:62:26:06:DD:F0:57:2C:D7:FD:5C:C6:D6:4B:00:CA:DC:0B:05 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 69F78C96188CC57428A694F3502CE89628525ED2 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154842.roa Signing time: Tue 18 Aug 2026 04:30:58 +0000 ROA not before: Tue 18 Aug 2026 04:25:58 +0000 ROA not after: Tue 17 Aug 2027 04:30:58 +0000 asID: 154842 IP address blocks: 192.92.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f7:8c:96:18:8c:c5:74:28:a6:94:f3:50:2c:e8:96:28:52:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 18 04:25:58 2026 GMT Not After : Aug 17 04:30:58 2027 GMT Subject: CN=34D1622606DDF0572CD7FD5CC6D64B00CADC0B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:50:cd:52:31:d5:11:cb:0e:2f:9b:12:83: 84:82:eb:6d:90:d2:10:ac:14:e6:02:aa:a1:8b:70: e7:9b:97:51:0a:90:02:16:cf:1e:4e:31:55:a3:5f: 69:5b:81:1c:fd:24:6f:99:49:0d:1d:11:32:ae:27: 9a:42:ef:42:5b:d2:82:56:2b:a7:4f:47:e7:5d:46: be:29:cd:9d:85:a9:55:11:65:69:c6:7d:95:e5:bc: d7:f3:3d:0d:76:5e:f5:51:70:fa:cf:17:39:21:12: 93:56:2c:d0:8e:5a:f5:ff:5a:ae:df:99:30:59:ed: 33:2f:51:e4:a8:b3:e0:81:0f:00:a8:be:e9:3d:44: 99:40:78:6b:ae:2b:c7:c6:76:c0:b4:82:0f:14:37: 2b:3d:ae:99:e5:d7:07:93:82:33:9c:ef:05:3f:a1: c9:eb:27:1a:1a:ad:d6:30:76:f5:fa:17:9a:5b:6f: ff:ee:19:e6:33:31:04:95:51:ad:2b:c3:11:c4:b5: 07:28:84:3e:b2:3f:0c:70:b6:b1:62:54:f6:d8:d1: 46:b6:76:7a:49:f7:e7:04:67:4a:8f:9f:39:89:d0: af:6c:8f:9e:16:b5:c0:a3:c0:7e:49:8b:e3:d5:d3: 9e:f6:13:ea:47:16:c7:f9:3e:46:84:93:44:b9:41: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:62:26:06:DD:F0:57:2C:D7:FD:5C:C6:D6:4B:00:CA:DC:0B:05 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.92.15.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a9:2c:bd:2b:77:12:6c:16:ad:9a:1e:de:e9:d8:24:24:08: 5c:61:78:69:8f:14:8a:4c:e7:5e:22:a7:03:52:fb:39:11:9f: c5:9b:e3:7b:cc:51:dd:b0:3b:05:4f:7a:b8:d5:1f:be:f3:4e: e6:ee:32:ef:b3:54:69:c5:fc:85:b6:de:e8:7a:7a:26:0a:8b: 8c:b2:40:cd:6b:a9:44:38:57:01:4c:dd:99:b6:96:69:57:2e: e3:fe:a7:51:9d:8f:45:2a:7e:48:b1:75:ea:90:d1:92:be:49: 8a:3e:aa:ba:fe:d1:97:56:c1:94:d4:61:31:b0:a0:4e:65:a1: 26:30:a3:9d:0f:0e:ef:3d:4a:1f:8a:78:60:f6:cc:38:e2:b1: 32:65:94:f0:84:ef:36:eb:72:7e:e2:e8:83:26:52:e8:ca:1e: 5f:2c:ea:18:9e:16:8c:52:2d:f6:49:a9:1f:74:f6:3c:f2:97: 06:36:e7:7c:ec:96:70:02:f9:3a:88:32:2d:66:25:da:ac:c5: 78:a8:a2:fa:7b:26:89:82:3d:2e:5b:66:a2:93:95:ba:f1:22: d4:eb:cd:38:27:df:a1:40:96:98:60:e1:8d:82:cd:58:46:c7: ef:cf:1c:f4:b2:27:ea:eb:d1:e3:4d:3d:86:59:99:20:38:0a: 07:ff:d3:fb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUafeMlhiMxXQoppTzUCzolihSXtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxODA0MjU1OFoX DTI3MDgxNzA0MzA1OFowMzExMC8GA1UEAxMoMzREMTYyMjYwNkRERjA1NzJDRDdG RDVDQzZENjRCMDBDQURDMEIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJKUM1SMdURyw4vmxKDhILrbZDSEKwU5gKqoYtw55uXUQqQAhbPHk4xVaNf aVuBHP0kb5lJDR0RMq4nmkLvQlvSglYrp09H511GvinNnYWpVRFlacZ9leW81/M9 DXZe9VFw+s8XOSESk1Ys0I5a9f9art+ZMFntMy9R5Kiz4IEPAKi+6T1EmUB4a64r x8Z2wLSCDxQ3Kz2umeXXB5OCM5zvBT+hyesnGhqt1jB29foXmltv/+4Z5jMxBJVR rSvDEcS1ByiEPrI/DHC2sWJU9tjRRrZ2ekn35wRnSo+fOYnQr2yPnha1wKPAfkmL 49XTnvYT6kcWx/k+RoSTRLlBjDUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ00WIm Bt3wVyzX/VzG1ksAytwLBTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0ODQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwFwPMA0GCSqGSIb3DQEBCwUAA4IBAQAaqSy9K3cSbBatmh7e6dgkJAhc YXhpjxSKTOdeIqcDUvs5EZ/Fm+N7zFHdsDsFT3q41R++807m7jLvs1RpxfyFtt7o enomCouMskDNa6lEOFcBTN2ZtpZpVy7j/qdRnY9FKn5IsXXqkNGSvkmKPqq6/tGX VsGU1GExsKBOZaEmMKOdDw7vPUofinhg9sw44rEyZZTwhO8263J+4uiDJlLoyh5f LOoYnhaMUi32SakfdPY88pcGNud87JZwAvk6iDItZiXarMV4qKL6eyaJgj0uW2ai k5W68SLU6804J9+hQJaYYOGNgs1YRsfvzxz0sifq69HjTT2GWZkgOAoH/9P7 -----END CERTIFICATE-----Generated at Thu Sep 17 08:15:51 2026 by rpki-client