$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154196.roa File: AS154196.roa (raw, json) Hash identifier: KgNKO/TdAg0iZuNkLu16j1Q73l14AgVByGjd3jWLaAg= Subject key identifier: D4:16:4A:0B:17:A4:78:24:BA:9E:05:AF:E0:48:8C:B9:B2:0F:8A:D4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 790DB22186509FE0B1DB2096109A61BCC5C70ED8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154196.roa Signing time: Mon 10 Aug 2026 09:48:39 +0000 ROA not before: Mon 10 Aug 2026 09:43:39 +0000 ROA not after: Mon 09 Aug 2027 09:48:39 +0000 asID: 154196 IP address blocks: 203.23.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:b2:21:86:50:9f:e0:b1:db:20:96:10:9a:61:bc:c5:c7:0e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 10 09:43:39 2026 GMT Not After : Aug 9 09:48:39 2027 GMT Subject: CN=D4164A0B17A47824BA9E05AFE0488CB9B20F8AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:7b:ba:ae:de:60:aa:52:66:81:26:c9:f0: 57:77:d8:4e:8d:db:8a:ad:f8:9c:12:90:de:1b:b6: 02:40:98:31:96:d8:21:15:fe:41:35:8e:b2:18:36: e5:2b:b6:eb:72:d1:a9:37:3c:4f:75:18:2b:17:18: 40:9e:0b:9c:3f:4a:96:13:95:2c:6a:6a:17:ad:1e: 34:60:6e:e4:40:d9:44:7a:a3:70:c3:69:27:28:e6: 75:71:d7:cf:9f:8f:b5:79:40:03:15:2c:c5:1f:94: bf:f8:e6:83:b2:e1:2a:de:fa:00:ae:7a:46:55:b3: ad:ba:36:8b:cb:94:a3:35:72:b1:28:42:80:18:49: 2e:0c:2b:e7:c2:71:3a:fb:52:ab:a4:c5:df:3b:f2: f9:b7:64:ff:50:05:c2:1f:6b:3e:36:77:2c:98:d8: 7d:cf:1a:a5:4d:5f:e4:b7:26:24:4b:71:8d:c2:7d: e9:fc:01:ed:08:0f:87:df:51:42:72:34:79:c4:42: 3e:7b:84:ec:9f:35:30:81:9c:15:0c:e7:6a:4e:2d: 0c:00:47:d5:a2:70:a5:9d:93:95:b2:f6:e8:ff:c2: 6d:b8:a4:4c:9c:1e:4b:38:db:b3:fe:5c:1b:9f:80: c3:82:d4:81:c5:12:2e:50:b5:b6:5e:11:bd:09:cc: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:16:4A:0B:17:A4:78:24:BA:9E:05:AF:E0:48:8C:B9:B2:0F:8A:D4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.23.52.0/24 Signature Algorithm: sha256WithRSAEncryption 21:b9:84:c2:fd:e6:7a:b7:c6:d8:7a:26:2d:07:7d:0e:67:c4: 93:d1:55:19:75:a9:ab:51:4e:2f:e6:f1:4f:61:3d:87:3a:5b: b2:34:63:e8:6c:d6:d9:0b:6a:ed:72:f4:d6:4f:7f:b2:0a:b0: a7:b0:15:b9:99:7c:68:d2:ac:ed:7d:ef:c7:8a:15:f1:9b:ed: ce:11:58:7d:fc:bb:59:77:4d:2e:91:b1:38:83:96:1f:d2:81: 55:28:f4:23:47:77:59:a4:1b:de:58:27:d8:57:a6:0b:5d:a1: fa:32:5d:1d:95:35:b0:aa:a9:92:c5:4b:37:33:a8:ba:45:29: e3:df:b5:4d:9b:33:f8:a3:07:31:0e:1e:e1:fe:33:d5:ea:7d: 59:3d:28:9e:e1:30:8a:01:fb:7c:5d:e9:e1:0d:ab:d0:a5:d5: 06:68:8d:10:64:38:d6:a7:c9:28:2a:58:b4:0c:32:33:3c:32: e7:ac:e8:46:36:c7:19:87:eb:a3:77:f9:8f:ce:49:b7:4c:94: b6:7c:dc:27:85:67:f0:0f:ee:8b:83:e6:46:3d:3b:42:22:ab: ee:df:d4:95:8b:78:a7:54:68:b7:fe:fe:c7:01:7f:e4:19:a4: 3a:ac:12:46:d4:e9:a4:d9:89:9d:9c:d6:48:0f:63:f4:81:52: fd:57:e5:06 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeQ2yIYZQn+Cx2yCWEJphvMXHDtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxMDA5NDMzOVoX DTI3MDgwOTA5NDgzOVowMzExMC8GA1UEAxMoRDQxNjRBMEIxN0E0NzgyNEJBOUUw NUFGRTA0ODhDQjlCMjBGOEFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUye7qu3mCqUmaBJsnwV3fYTo3biq34nBKQ3hu2AkCYMZbYIRX+QTWOshg2 5Su263LRqTc8T3UYKxcYQJ4LnD9KlhOVLGpqF60eNGBu5EDZRHqjcMNpJyjmdXHX z5+PtXlAAxUsxR+Uv/jmg7LhKt76AK56RlWzrbo2i8uUozVysShCgBhJLgwr58Jx OvtSq6TF3zvy+bdk/1AFwh9rPjZ3LJjYfc8apU1f5LcmJEtxjcJ96fwB7QgPh99R QnI0ecRCPnuE7J81MIGcFQznak4tDABH1aJwpZ2TlbL26P/CbbikTJweSzjbs/5c G5+Aw4LUgcUSLlC1tl4RvQnMWAMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTUFkoL F6R4JLqeBa/gSIy5sg+K1DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MTk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyxc0MA0GCSqGSIb3DQEBCwUAA4IBAQAhuYTC/eZ6t8bYeiYtB30OZ8ST 0VUZdamrUU4v5vFPYT2HOluyNGPobNbZC2rtcvTWT3+yCrCnsBW5mXxo0qztfe/H ihXxm+3OEVh9/LtZd00ukbE4g5Yf0oFVKPQjR3dZpBveWCfYV6YLXaH6Ml0dlTWw qqmSxUs3M6i6RSnj37VNmzP4owcxDh7h/jPV6n1ZPSie4TCKAft8XenhDavQpdUG aI0QZDjWp8koKli0DDIzPDLnrOhGNscZh+ujd/mPzkm3TJS2fNwnhWfwD+6Lg+ZG PTtCIqvu39SVi3inVGi3/v7HAX/kGaQ6rBJG1Omk2YmdnNZID2P0gVL9V+UG -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:50 2026 by rpki-client