$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147154.roa File: AS147154.roa (raw, json) Hash identifier: hJBooZ6e79RnzVGKIWxXpz0YVBXWKDiBvDeMprhzmAg= Subject key identifier: CA:FE:DE:2B:1D:A5:0A:32:42:3F:AD:60:20:08:1A:F9:07:9B:03:7B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53D7E63BDE5BEE1AA8D026796ECED4DC996F16B9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147154.roa Signing time: Sat 02 May 2026 14:21:35 +0000 ROA not before: Sat 02 May 2026 14:16:35 +0000 ROA not after: Sat 01 May 2027 14:21:35 +0000 asID: 147154 IP address blocks: 103.176.227.0/24 maxlen: 24 103.191.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d7:e6:3b:de:5b:ee:1a:a8:d0:26:79:6e:ce:d4:dc:99:6f:16:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 14:16:35 2026 GMT Not After : May 1 14:21:35 2027 GMT Subject: CN=CAFEDE2B1DA50A32423FAD6020081AF9079B037B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:43:09:4e:64:35:4d:36:1f:3d:52:e9:05: 4b:01:4e:42:4d:7c:0c:92:0a:62:c1:77:70:4b:4e: a3:84:a6:d7:a2:bd:ee:1d:8d:cd:8f:d8:80:25:f9: a9:1e:63:2a:4a:66:04:0f:fb:ec:9d:e7:0c:96:a6: 88:7c:5d:0f:b3:ee:fb:c9:cf:95:8b:b4:8a:af:75: d0:e7:b4:c3:74:80:4e:e7:9a:68:ec:bd:f6:00:09: 2f:78:30:5b:b8:09:c8:19:41:b9:e0:71:8c:75:d4: 34:32:d4:d6:79:24:8f:52:3b:68:23:dd:e2:af:2d: 9c:dc:48:3e:b5:ec:7c:85:f5:05:32:50:a4:ba:13: 37:c8:91:ed:3a:a6:c4:c1:36:ec:6b:81:47:4a:d8: 0b:a3:ae:99:e7:5b:1e:00:ec:49:9c:42:72:f2:fa: 30:3f:be:54:bc:dd:e9:66:8b:c6:35:39:4c:58:7d: 91:d5:f5:27:e2:3f:48:63:e0:c0:e0:da:5d:5b:c2: 33:51:42:a2:45:ab:33:39:a4:11:28:32:f2:10:55: e7:bf:88:93:12:47:42:14:bc:a0:61:4a:6e:5a:81: 80:d8:01:28:1b:54:3f:46:ce:63:0d:67:6b:2d:f8: c1:ba:83:6d:22:c8:48:62:29:65:67:66:ec:c9:a5: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:DE:2B:1D:A5:0A:32:42:3F:AD:60:20:08:1A:F9:07:9B:03:7B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147154.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.227.0/24 103.191.109.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ae:47:fd:9d:26:74:89:f0:83:da:0c:87:dc:4d:6f:16:c6: 27:f2:3c:3e:b5:ad:dd:2d:32:2f:91:4e:6e:d2:be:78:26:0c: a8:01:e6:d6:ae:bf:d8:c9:0f:0b:30:21:0b:68:d0:86:4c:ba: 74:cf:cd:ea:88:14:86:9b:4d:3b:d5:15:af:d5:77:f8:5f:61: d3:2e:18:3e:3b:e5:ae:75:ed:7b:fb:b9:1e:35:cb:a3:da:21: bb:ac:c3:ea:54:c5:1c:80:83:64:8b:bf:c4:0e:db:bb:89:ac: 74:c1:c9:29:10:41:b0:a7:d7:0d:46:86:e5:37:1f:ab:6f:a0: 39:2e:c5:a3:49:5e:f5:88:e2:23:1e:c2:a6:54:ca:24:06:e9: c6:d3:0b:3d:2c:1d:43:f1:45:0f:25:fd:ce:95:b0:1c:61:18: 73:03:c1:ac:e6:eb:04:d2:ad:07:c5:01:29:58:a5:cf:0c:99: 39:45:5c:cf:4f:b0:f7:bd:b9:a4:84:43:9f:51:ff:eb:30:99: 72:c9:4a:51:a7:03:d5:b8:49:48:a1:20:47:f3:05:ea:78:81: 4d:25:d4:56:33:3e:a1:c5:ab:a3:03:bb:d5:96:6b:bf:78:37: 6b:a1:ec:f0:3c:fd:27:92:ac:c6:66:fb:74:0f:a2:92:c3:b8: 1e:97:5c:50 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUU9fmO95b7hqo0CZ5bs7U3JlvFrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE0MTYzNVoX DTI3MDUwMTE0MjEzNVowMzExMC8GA1UEAxMoQ0FGRURFMkIxREE1MEEzMjQyM0ZB RDYwMjAwODFBRjkwNzlCMDM3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1OQwlOZDVNNh89UukFSwFOQk18DJIKYsF3cEtOo4Sm16K97h2NzY/YgCX5 qR5jKkpmBA/77J3nDJamiHxdD7Pu+8nPlYu0iq910Oe0w3SATueaaOy99gAJL3gw W7gJyBlBueBxjHXUNDLU1nkkj1I7aCPd4q8tnNxIPrXsfIX1BTJQpLoTN8iR7Tqm xME27GuBR0rYC6OumedbHgDsSZxCcvL6MD++VLzd6WaLxjU5TFh9kdX1J+I/SGPg wODaXVvCM1FCokWrMzmkESgy8hBV57+IkxJHQhS8oGFKblqBgNgBKBtUP0bOYw1n ay34wbqDbSLISGIpZWdm7Mml82cCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTK/t4r HaUKMkI/rWAgCBr5B5sDezAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ7DjAwQAZ79tMA0GCSqGSIb3DQEBCwUAA4IBAQCCrkf9nSZ0ifCD2gyH 3E1vFsYn8jw+ta3dLTIvkU5u0r54JgyoAebWrr/YyQ8LMCELaNCGTLp0z83qiBSG m0071RWv1Xf4X2HTLhg+O+Wude17+7keNcuj2iG7rMPqVMUcgINki7/EDtu7iax0 wckpEEGwp9cNRoblNx+rb6A5LsWjSV71iOIjHsKmVMokBunG0ws9LB1D8UUPJf3O lbAcYRhzA8Gs5usE0q0HxQEpWKXPDJk5RVzPT7D3vbmkhEOfUf/rMJlyyUpRpwPV uElIoSBH8wXqeIFNJdRWMz6hxaujA7vVlmu/eDdroezwPP0nkqzGZvt0D6KSw7ge l1xQ -----END CERTIFICATE-----Generated at Sun May 3 00:39:52 2026 by rpki-client