$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154637.roa File: AS154637.roa (raw, json) Hash identifier: 3NPishI2SYA0QatHep44VlnpaXp20woOz69xKkYorgw= Subject key identifier: 49:0C:8C:17:F3:A5:83:4C:E7:EC:50:6D:0E:3B:F6:4C:A1:A0:67:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20E428E89A0E95B835E41A10C19F8C5F00FEEE5A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154637.roa Signing time: Sat 02 May 2026 08:37:10 +0000 ROA not before: Sat 02 May 2026 08:32:10 +0000 ROA not after: Sat 01 May 2027 08:37:10 +0000 asID: 154637 IP address blocks: 103.146.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e4:28:e8:9a:0e:95:b8:35:e4:1a:10:c1:9f:8c:5f:00:fe:ee:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:10 2026 GMT Not After : May 1 08:37:10 2027 GMT Subject: CN=490C8C17F3A5834CE7EC506D0E3BF64CA1A067AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:6c:6e:63:25:b9:5a:07:68:f2:30:c7:2a: 8d:40:3d:9d:f9:07:0e:14:10:17:c5:9f:35:6e:62: a7:05:2d:1e:fd:71:c2:54:47:8d:8a:d1:18:92:1e: 41:59:57:b0:3c:13:f7:b8:0f:90:1e:23:e3:de:63: c5:f1:39:6d:e6:1c:5b:81:0b:bc:21:8c:15:4d:d1: 2b:2e:5f:c9:97:4a:46:bd:1f:02:9b:2f:2c:d2:de: bf:01:38:8a:0d:57:ca:41:cd:12:21:5c:94:f8:3e: 0d:55:b6:9c:7e:51:3e:b8:cc:42:a1:e6:3c:a9:ac: 1f:a1:c3:1f:70:d5:3e:3b:c0:94:51:40:8c:fe:c9: dd:e5:a7:b7:44:ab:71:89:ce:da:5d:bd:ad:f9:ca: 4d:b6:8f:fa:9a:65:ba:60:7f:29:a0:7b:f0:d2:99: fc:c2:ab:b8:35:1a:a9:ad:fe:99:d6:b7:74:39:99: c6:90:f0:92:8e:ce:ce:8c:70:af:18:5c:25:50:b0: 50:7f:e9:91:9f:58:9f:8d:fd:ae:3e:29:60:5c:99: 3f:83:67:a5:14:b7:61:bd:3a:fe:6a:13:a7:84:e5: 69:f9:78:77:32:0b:c4:b6:9e:14:7f:56:b7:e0:e0: d6:f6:bd:a9:0a:cd:70:b5:d0:78:af:c2:3a:8f:e3: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:8C:17:F3:A5:83:4C:E7:EC:50:6D:0E:3B:F6:4C:A1:A0:67:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.190.0/23 Signature Algorithm: sha256WithRSAEncryption 98:e7:54:5c:30:e3:f1:82:b7:91:71:4e:14:8e:99:6c:40:1b: ba:2d:30:a5:69:b8:36:df:88:64:bd:1c:06:23:03:af:42:d3: 09:a5:09:32:14:2d:77:0a:c2:ca:90:fc:df:c0:49:51:06:f3: 10:2b:03:71:95:1e:20:fa:20:07:3c:49:24:58:4c:c7:26:72: 16:74:1f:fa:5a:06:dd:8b:34:6d:5c:9b:79:b5:f5:68:8b:b4: 83:78:2e:0f:7d:7a:47:8a:d6:8f:e0:6e:0c:03:ef:7c:7a:0e: 45:a9:78:4f:c6:99:55:9a:7a:47:96:ed:aa:26:2b:fd:c7:f2: f8:fb:94:23:28:20:4e:28:9b:5f:e8:ee:8a:ec:55:e6:d8:f3: 72:27:1c:d3:6c:08:5b:bd:85:46:9b:12:0c:ac:3a:b1:e5:39: 14:52:b6:9d:cd:e1:9d:45:e1:39:42:ef:1a:9d:57:f5:9e:0f: 4e:fa:aa:df:87:83:a2:9f:85:1d:b7:4d:06:10:1c:ed:86:7f: e6:49:b1:4d:fc:90:cb:85:29:c4:0f:ed:01:a5:dc:1f:c1:68: 87:0c:85:c3:63:21:b0:e1:22:b9:5b:86:4c:4c:36:5f:16:6d: 87:72:2e:f9:f6:a3:a8:47:ed:0c:fd:63:0c:62:ba:d2:75:8a: 02:32:3d:56 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIOQo6JoOlbg15BoQwZ+MXwD+7lowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxMFoX DTI3MDUwMTA4MzcxMFowMzExMC8GA1UEAxMoNDkwQzhDMTdGM0E1ODM0Q0U3RUM1 MDZEMEUzQkY2NENBMUEwNjdBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKJbG5jJblaB2jyMMcqjUA9nfkHDhQQF8WfNW5ipwUtHv1xwlRHjYrRGJIe QVlXsDwT97gPkB4j495jxfE5beYcW4ELvCGMFU3RKy5fyZdKRr0fApsvLNLevwE4 ig1XykHNEiFclPg+DVW2nH5RPrjMQqHmPKmsH6HDH3DVPjvAlFFAjP7J3eWnt0Sr cYnO2l29rfnKTbaP+pplumB/KaB78NKZ/MKruDUaqa3+mda3dDmZxpDwko7Ozoxw rxhcJVCwUH/pkZ9Yn439rj4pYFyZP4NnpRS3Yb06/moTp4Tlafl4dzILxLaeFH9W t+Dg1va9qQrNcLXQeK/COo/jJS8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRJDIwX 86WDTOfsUG0OO/ZMoaBnrTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0NjM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5K+MA0GCSqGSIb3DQEBCwUAA4IBAQCY51RcMOPxgreRcU4UjplsQBu6 LTClabg234hkvRwGIwOvQtMJpQkyFC13CsLKkPzfwElRBvMQKwNxlR4g+iAHPEkk WEzHJnIWdB/6WgbdizRtXJt5tfVoi7SDeC4PfXpHitaP4G4MA+98eg5FqXhPxplV mnpHlu2qJiv9x/L4+5QjKCBOKJtf6O6K7FXm2PNyJxzTbAhbvYVGmxIMrDqx5TkU UradzeGdReE5Qu8anVf1ng9O+qrfh4Oin4Udt00GEBzthn/mSbFN/JDLhSnED+0B pdwfwWiHDIXDYyGw4SK5W4ZMTDZfFm2Hci759qOoR+0M/WMMYrrSdYoCMj1W -----END CERTIFICATE-----Generated at Sun May 3 01:40:40 2026 by rpki-client