$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154218.roa File: AS154218.roa (raw, json) Hash identifier: 5p4YjlgLI0cw/yKvNaGtlDD6zVaHfS/X9DZjMKTsOaA= Subject key identifier: 02:F6:02:1D:90:AA:B7:C2:56:65:98:D8:3A:F8:B8:72:28:7C:44:A1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4C36512BCCF528C1142760DC715617F4A3EF595D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154218.roa Signing time: Sat 02 May 2026 21:30:40 +0000 ROA not before: Sat 02 May 2026 21:25:40 +0000 ROA not after: Sat 01 May 2027 21:30:40 +0000 asID: 154218 IP address blocks: 203.30.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:36:51:2b:cc:f5:28:c1:14:27:60:dc:71:56:17:f4:a3:ef:59:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:25:40 2026 GMT Not After : May 1 21:30:40 2027 GMT Subject: CN=02F6021D90AAB7C2566598D83AF8B872287C44A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:5f:86:7a:68:33:c3:8f:c8:79:4f:1d:77: 23:04:22:b1:a1:23:50:2a:22:33:ef:31:c0:86:81: dc:8e:d1:f9:cd:74:b5:dd:3b:10:da:0b:7b:e5:8f: 4e:9e:07:32:fd:1a:24:f1:d8:cf:9b:74:3f:a8:d2: cf:c5:d0:19:0d:eb:13:9f:50:ca:46:e4:c9:aa:76: 5e:f9:e6:33:4d:7e:bb:ea:56:a8:0a:be:8c:5e:9b: 33:da:fb:d1:b9:c8:23:b2:89:81:e0:c4:19:c3:2c: fc:06:2d:33:04:60:ee:f0:90:5a:8c:86:2a:8f:67: 66:d2:5a:ba:7a:30:b4:99:02:54:1e:2f:5f:56:ba: c7:aa:78:1d:60:dd:af:08:99:79:26:df:c2:52:f9: db:27:d8:f1:26:34:8d:7a:3d:6d:86:eb:a2:e8:72: bf:82:9a:67:4d:7d:7e:84:b6:bc:33:28:aa:0c:da: 1a:c1:bf:4b:ea:5a:a7:41:11:c4:56:91:3d:9b:5e: 7d:86:cf:5a:f5:62:4e:12:c3:6d:e2:61:fd:8f:82: 66:03:84:bf:5c:ca:dc:fb:9b:07:f9:eb:fe:f2:bd: 11:a7:eb:d5:a8:c6:05:9f:0f:8c:ce:b7:5d:a1:30: 2f:b9:ed:ea:5d:7a:99:d3:a0:7b:02:b2:44:73:5f: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:02:1D:90:AA:B7:C2:56:65:98:D8:3A:F8:B8:72:28:7C:44:A1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154218.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.30.221.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:84:94:51:63:9d:74:e8:48:c5:63:66:c4:34:29:ae:4a:f9: 58:d6:e8:5e:c4:07:c1:ce:b1:8a:bf:0b:80:df:5e:6c:76:c1: 1f:dd:cc:e8:05:4c:d1:8b:68:40:e9:f7:4e:8f:49:04:40:03: aa:4b:54:ac:10:d8:bf:d6:5d:a6:57:83:0d:d1:2a:09:0d:42: 05:a7:18:0c:f5:ee:71:d1:97:14:80:0f:d5:87:2f:91:dd:57: 8b:21:13:51:4d:b3:d0:e8:66:82:fe:cf:b6:d5:4c:f7:4b:e5: a3:cf:fe:8f:88:3f:e2:c6:8f:af:bc:3d:e8:3f:6c:22:2b:2e: d7:46:20:07:82:71:f0:fc:96:99:b6:72:db:55:70:d4:93:21: 37:36:15:a6:14:ee:17:2f:c8:19:02:ee:c2:d1:ae:d4:3c:61: 41:2d:86:59:97:bc:36:ac:e3:5e:cd:d6:d2:3d:c7:43:9b:45: f3:86:4b:83:d1:1a:76:7d:ab:ed:dc:c0:a8:0e:63:74:2f:eb: a7:54:e9:7e:53:80:83:9c:a6:fc:f0:2d:6d:af:c4:8a:95:c2: dd:5c:3a:9f:ec:1e:0b:99:41:6c:a3:e3:0b:c1:21:05:1c:c3: 56:f6:4d:a9:1c:c5:e3:67:8e:e6:9f:b4:93:61:8c:02:4d:7f: ef:90:da:b9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTDZRK8z1KMEUJ2DccVYX9KPvWV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjU0MFoX DTI3MDUwMTIxMzA0MFowMzExMC8GA1UEAxMoMDJGNjAyMUQ5MEFBQjdDMjU2NjU5 OEQ4M0FGOEI4NzIyODdDNDRBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3NX4Z6aDPDj8h5Tx13IwQisaEjUCoiM+8xwIaB3I7R+c10td07ENoLe+WP Tp4HMv0aJPHYz5t0P6jSz8XQGQ3rE59Qykbkyap2XvnmM01+u+pWqAq+jF6bM9r7 0bnII7KJgeDEGcMs/AYtMwRg7vCQWoyGKo9nZtJaunowtJkCVB4vX1a6x6p4HWDd rwiZeSbfwlL52yfY8SY0jXo9bYbrouhyv4KaZ019foS2vDMoqgzaGsG/S+pap0ER xFaRPZtefYbPWvViThLDbeJh/Y+CZgOEv1zK3PubB/nr/vK9Eafr1ajGBZ8PjM63 XaEwL7nt6l16mdOgewKyRHNfcYcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQC9gId kKq3wlZlmNg6+LhyKHxEoTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyx7dMA0GCSqGSIb3DQEBCwUAA4IBAQCOhJRRY5106EjFY2bENCmuSvlY 1uhexAfBzrGKvwuA315sdsEf3czoBUzRi2hA6fdOj0kEQAOqS1SsENi/1l2mV4MN 0SoJDUIFpxgM9e5x0ZcUgA/Vhy+R3VeLIRNRTbPQ6GaC/s+21Uz3S+Wjz/6PiD/i xo+vvD3oP2wiKy7XRiAHgnHw/JaZtnLbVXDUkyE3NhWmFO4XL8gZAu7C0a7UPGFB LYZZl7w2rONezdbSPcdDm0XzhkuD0Rp2favt3MCoDmN0L+unVOl+U4CDnKb88C1t r8SKlcLdXDqf7B4LmUFso+MLwSEFHMNW9k2pHMXjZ47mn7STYYwCTX/vkNq5 -----END CERTIFICATE-----Generated at Sun May 3 00:40:21 2026 by rpki-client