$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154124.roa File: AS154124.roa (raw, json) Hash identifier: EYjIn+3OlzD8yUsMqDv9ksgGirva/Jiuq7RiZ7yK+qg= Subject key identifier: 8A:9E:EC:C1:AB:77:46:F0:47:3B:C3:35:58:F7:A4:A1:ED:87:AC:F5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 04B2367074713784C7A5318DF1D604859208C9A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154124.roa Signing time: Sat 02 May 2026 09:26:53 +0000 ROA not before: Sat 02 May 2026 09:21:53 +0000 ROA not after: Sat 01 May 2027 09:26:53 +0000 asID: 154124 IP address blocks: 202.1.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b2:36:70:74:71:37:84:c7:a5:31:8d:f1:d6:04:85:92:08:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:53 2026 GMT Not After : May 1 09:26:53 2027 GMT Subject: CN=8A9EECC1AB7746F0473BC33558F7A4A1ED87ACF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:5e:c0:9d:c8:0c:58:20:d5:d5:a7:97:b9: a6:d8:ac:fa:5d:42:e8:5c:2b:3a:48:01:91:0a:5c: 7e:6e:a8:2d:d4:7f:91:5b:7a:07:08:b8:29:31:b3: 5f:98:70:e8:f3:5a:36:82:03:ad:64:a6:42:3f:d5: ff:33:26:09:b1:4e:07:44:89:2c:35:f6:26:ba:a9: 42:96:7d:25:4e:37:66:49:04:2a:21:88:2a:2a:30: 5c:de:cc:a0:30:ac:c0:4b:07:36:db:e0:f7:f0:b4: 05:ca:ce:cc:f1:87:40:ae:25:8d:cb:a9:3c:e1:c8: 57:ce:95:40:a1:53:ca:00:ac:50:c5:37:ad:8c:12: da:78:23:46:96:34:4b:e3:bb:17:79:45:c0:db:d3: 8a:da:8b:5a:10:e7:2e:15:83:ef:26:36:b8:e0:b2: 81:02:48:02:87:7f:59:44:9a:8e:53:e8:2f:a9:bd: 8c:93:97:17:60:36:99:5a:1d:61:fb:b3:15:1f:16: 12:f5:ab:7e:6d:9c:10:21:ef:cb:b7:f5:17:bc:93: 8e:2f:f0:b9:6f:60:4b:bc:67:ab:e9:77:ab:4c:bb: 9e:6e:64:03:e1:79:b1:10:6c:9a:f8:de:65:6d:c3: 83:1c:90:d8:fe:a9:b5:0e:1a:7e:aa:ce:47:08:d1: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:EC:C1:AB:77:46:F0:47:3B:C3:35:58:F7:A4:A1:ED:87:AC:F5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154124.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.1.24.0/23 Signature Algorithm: sha256WithRSAEncryption 14:89:a0:33:3e:cf:0e:4e:d9:8b:32:f1:48:da:b8:ed:8d:4a: 0c:97:f6:43:69:70:65:ed:d9:39:3a:80:5b:3c:f1:0e:fc:22: 1e:52:cc:a8:2d:c4:33:55:ea:b3:ab:48:f3:0f:3a:fd:7b:a1: 58:e0:eb:c5:5d:16:d0:1c:14:83:86:bd:cc:d5:34:7d:5a:e0: 9c:bb:90:a9:d4:3f:88:f3:8d:0f:f6:81:66:a7:48:0a:25:06: fa:ec:47:40:1d:02:43:ac:e4:44:96:8d:f7:4f:e8:04:bd:cc: f2:c5:98:95:1b:d2:db:aa:70:b9:d6:c9:ce:f8:c5:62:50:57: fb:7f:40:cc:ad:e7:8e:fd:6e:47:94:9b:57:cf:bd:bc:38:58: c0:32:8a:73:72:04:78:c9:72:27:61:bb:86:a1:5f:98:31:7d: 5b:26:00:21:24:71:35:7e:a2:cc:cd:46:5b:11:1e:a3:0a:89: ee:65:6e:63:87:63:87:07:4b:8f:61:e2:0f:6a:61:ac:53:6d: a7:39:6a:7e:b4:45:34:aa:8f:37:18:e9:d6:b4:77:de:ee:ed: 88:53:8e:3f:5c:c3:0b:89:32:aa:c6:f9:2e:b6:64:9c:a4:ae: a7:a5:93:e8:fb:3d:8a:6d:21:42:01:e0:bc:3e:d5:c5:45:c4: 33:94:bc:23 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBLI2cHRxN4THpTGN8dYEhZIIyaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE1M1oX DTI3MDUwMTA5MjY1M1owMzExMC8GA1UEAxMoOEE5RUVDQzFBQjc3NDZGMDQ3M0JD MzM1NThGN0E0QTFFRDg3QUNGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALazXsCdyAxYINXVp5e5ptis+l1C6FwrOkgBkQpcfm6oLdR/kVt6Bwi4KTGz X5hw6PNaNoIDrWSmQj/V/zMmCbFOB0SJLDX2JrqpQpZ9JU43ZkkEKiGIKiowXN7M oDCswEsHNtvg9/C0BcrOzPGHQK4ljcupPOHIV86VQKFTygCsUMU3rYwS2ngjRpY0 S+O7F3lFwNvTitqLWhDnLhWD7yY2uOCygQJIAod/WUSajlPoL6m9jJOXF2A2mVod YfuzFR8WEvWrfm2cECHvy7f1F7yTji/wuW9gS7xnq+l3q0y7nm5kA+F5sRBsmvje ZW3DgxyQ2P6ptQ4afqrORwjRPTsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSKnuzB q3dG8Ec7wzVY96Sh7Yes9TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBygEYMA0GCSqGSIb3DQEBCwUAA4IBAQAUiaAzPs8OTtmLMvFI2rjtjUoM l/ZDaXBl7dk5OoBbPPEO/CIeUsyoLcQzVeqzq0jzDzr9e6FY4OvFXRbQHBSDhr3M 1TR9WuCcu5Cp1D+I840P9oFmp0gKJQb67EdAHQJDrORElo33T+gEvczyxZiVG9Lb qnC51snO+MViUFf7f0DMreeO/W5HlJtXz728OFjAMopzcgR4yXInYbuGoV+YMX1b JgAhJHE1fqLMzUZbER6jConuZW5jh2OHB0uPYeIPamGsU22nOWp+tEU0qo83GOnW tHfe7u2IU44/XMMLiTKqxvkutmScpK6npZPo+z2KbSFCAeC8PtXFRcQzlLwj -----END CERTIFICATE-----Generated at Sun May 3 00:40:28 2026 by rpki-client