$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154152.roa File: AS154152.roa (raw, json) Hash identifier: jnAdXWFoKSw6cptZQPTJ2tW75GoId5YhyD3dz6jhBoA= Subject key identifier: AE:2B:2C:51:73:61:B0:1B:4A:EE:BD:7D:BC:FE:B1:19:9F:A4:09:8E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 284A56677F1F69DE6624DD4EE2494E4FA6B8A61A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154152.roa Signing time: Sat 02 May 2026 09:26:44 +0000 ROA not before: Sat 02 May 2026 09:21:44 +0000 ROA not after: Sat 01 May 2027 09:26:44 +0000 asID: 154152 IP address blocks: 122.102.120.0/23 maxlen: 24 2001:df5:f5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4a:56:67:7f:1f:69:de:66:24:dd:4e:e2:49:4e:4f:a6:b8:a6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:44 2026 GMT Not After : May 1 09:26:44 2027 GMT Subject: CN=AE2B2C517361B01B4AEEBD7DBCFEB1199FA4098E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:68:91:43:85:d4:3b:ab:c3:1f:0f:8a:40: 23:14:bf:a7:b2:6d:61:ae:6c:de:96:9c:72:60:19: cb:7f:5c:d0:f4:1d:59:ab:a9:5c:a0:53:53:69:68: 90:a6:3c:29:9e:61:de:e5:cb:07:21:b0:38:9c:ec: 97:99:77:aa:45:f9:52:63:af:11:41:58:72:4d:c5: 7f:88:08:7f:2b:ab:fa:e5:55:b0:7d:6a:0d:a2:79: 8f:5f:a5:77:06:5f:94:c5:32:bf:aa:a8:f2:f6:3a: fc:38:6c:79:a3:46:c7:37:13:82:93:27:0a:90:5e: e3:b6:1e:8d:78:b6:11:93:53:04:dd:77:fc:02:31: e8:e1:ca:de:03:f9:84:c5:00:a1:c6:fc:b2:65:79: 6a:a6:87:98:32:3e:f0:10:2a:dc:d4:3b:6f:92:80: 1c:a0:4b:82:c3:ae:56:c7:bd:05:b8:bb:39:7c:01: e7:e9:39:28:d2:4d:78:3e:44:54:b1:4e:aa:05:70: bb:32:ad:bc:5e:38:ce:f3:82:89:6f:b8:ff:32:89: 38:e8:b3:e9:96:dc:d9:d0:cd:69:b1:63:6c:55:5a: cb:68:9b:65:16:9a:92:95:c5:6c:b7:c0:f5:cd:e0: 07:a4:33:2d:c6:03:56:ed:d8:25:ba:93:38:99:9f: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2B:2C:51:73:61:B0:1B:4A:EE:BD:7D:BC:FE:B1:19:9F:A4:09:8E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.102.120.0/23 IPv6: 2001:df5:f5c0::/48 Signature Algorithm: sha256WithRSAEncryption 34:69:8d:48:97:c6:ee:85:f2:89:98:b9:80:ed:d5:62:64:ab: bd:25:3a:9c:35:7e:0f:b3:d3:73:1b:f4:20:aa:c3:f4:08:28: 41:3b:40:68:0b:56:1f:7d:63:a2:9d:d4:91:5c:50:d4:6c:81: 8c:c8:06:60:a7:cc:58:a7:f5:2e:09:32:b9:02:c2:d9:4d:62: b5:ba:27:a5:1c:90:47:6d:dd:e4:24:1d:70:63:f9:48:82:fd: f9:a1:75:92:70:6d:90:39:b3:26:08:6a:65:a8:80:1b:e0:00: 1f:ed:7f:06:42:7e:61:01:bb:95:4c:ab:de:4c:a2:3f:43:e7: 80:12:3e:c2:f6:61:5f:99:2d:02:04:b8:f0:67:f7:5f:fd:41: 0e:fb:f7:7a:4a:90:9f:82:84:94:b2:8f:79:81:e5:28:ca:32: 82:d2:b0:ba:dc:1d:da:a3:34:5a:78:8d:0c:17:55:7c:ab:d6: e1:d9:ab:a6:df:3c:4b:0e:15:80:4c:69:46:ef:d9:14:c2:d9: 68:45:b5:34:9c:11:0e:d7:95:b7:96:b7:7c:f5:2f:21:9f:b4: 02:aa:f5:44:e7:7d:73:73:23:c6:30:f7:e7:e4:8d:ce:13:7a: 25:ed:76:85:d1:23:2f:96:58:fd:36:78:b7:ad:fa:93:8a:88: 89:96:4e:4d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKEpWZ38fad5mJN1O4klOT6a4phowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0NFoX DTI3MDUwMTA5MjY0NFowMzExMC8GA1UEAxMoQUUyQjJDNTE3MzYxQjAxQjRBRUVC RDdEQkNGRUIxMTk5RkE0MDk4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObtaJFDhdQ7q8MfD4pAIxS/p7JtYa5s3paccmAZy39c0PQdWaupXKBTU2lo kKY8KZ5h3uXLByGwOJzsl5l3qkX5UmOvEUFYck3Ff4gIfyur+uVVsH1qDaJ5j1+l dwZflMUyv6qo8vY6/DhseaNGxzcTgpMnCpBe47YejXi2EZNTBN13/AIx6OHK3gP5 hMUAocb8smV5aqaHmDI+8BAq3NQ7b5KAHKBLgsOuVse9Bbi7OXwB5+k5KNJNeD5E VLFOqgVwuzKtvF44zvOCiW+4/zKJOOiz6Zbc2dDNabFjbFVay2ibZRaakpXFbLfA 9c3gB6QzLcYDVu3YJbqTOJmfC2kCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSuKyxR c2GwG0ruvX28/rEZn6QJjjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBemZ4MA8EAgACMAkDBwAgAQ319cAwDQYJKoZIhvcNAQELBQADggEBADRp jUiXxu6F8omYuYDt1WJkq70lOpw1fg+z03Mb9CCqw/QIKEE7QGgLVh99Y6Kd1JFc UNRsgYzIBmCnzFin9S4JMrkCwtlNYrW6J6UckEdt3eQkHXBj+UiC/fmhdZJwbZA5 syYIamWogBvgAB/tfwZCfmEBu5VMq95Moj9D54ASPsL2YV+ZLQIEuPBn91/9QQ77 93pKkJ+ChJSyj3mB5SjKMoLSsLrcHdqjNFp4jQwXVXyr1uHZq6bfPEsOFYBMaUbv 2RTC2WhFtTScEQ7XlbeWt3z1LyGftAKq9UTnfXNzI8Yw9+fkjc4TeiXtdoXRIy+W WP02eLet+pOKiImWTk0= -----END CERTIFICATE-----Generated at Sun May 3 00:39:42 2026 by rpki-client