$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154442.roa File: AS154442.roa (raw, json) Hash identifier: ZB9N319rL0Zf6Spal6FLCSD2VfTOu2yxDdXXojPwiw8= Subject key identifier: 5E:23:C5:61:F9:3D:5D:3D:9A:F3:48:4D:48:D7:11:92:66:C6:A3:9A Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1241E2A5EADB8328F4FF26EB15ACA2A65E950213 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154442.roa Signing time: Wed 11 Mar 2026 02:57:11 +0000 ROA not before: Wed 11 Mar 2026 02:52:11 +0000 ROA not after: Wed 10 Mar 2027 02:57:11 +0000 asID: 154442 IP address blocks: 144.79.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:e2:a5:ea:db:83:28:f4:ff:26:eb:15:ac:a2:a6:5e:95:02:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 11 02:52:11 2026 GMT Not After : Mar 10 02:57:11 2027 GMT Subject: CN=5E23C561F93D5D3D9AF3484D48D7119266C6A39A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9e:8e:c3:96:1a:c6:68:e0:d1:a2:31:a8:83: f5:8d:fc:4b:36:24:b5:43:01:68:4c:49:5d:21:53: 32:c4:55:30:44:83:9a:2e:23:09:7d:c8:88:d3:e0: 50:23:57:b0:e9:f6:86:04:5b:5c:cc:54:53:8a:26: 23:30:fc:d3:8e:dc:d2:8c:80:f8:f0:7e:0a:9e:53: d7:2b:a8:d5:c7:5d:56:83:94:86:d4:a0:f6:6c:48: 56:3c:00:f0:4a:e7:ac:f2:7b:d2:84:5d:1c:1c:ef: dc:32:7f:80:d2:09:0e:e7:66:eb:41:7e:85:29:62: aa:a7:13:fe:9f:cb:40:da:d1:50:46:a7:b6:22:ba: ec:02:f7:c9:88:dc:90:6a:3b:2f:a4:bb:6b:84:d3: 07:d0:a1:85:6f:d3:1c:a9:c6:3f:ad:29:d5:13:27: e5:4d:a7:20:3d:c0:2a:71:1f:99:4f:aa:85:8d:45: 85:34:2a:4b:18:21:cb:a1:05:e1:92:54:b5:01:5e: 31:77:b1:87:b9:e0:00:17:02:35:9a:04:9c:5d:3a: 70:fc:bc:2c:c7:e0:44:f0:01:ef:08:82:94:c8:47: 72:42:26:ef:be:b4:50:47:b4:b8:c6:b1:e4:2d:94: 28:29:a6:d6:39:ca:d8:7d:f5:05:68:ae:d6:b9:22: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:C5:61:F9:3D:5D:3D:9A:F3:48:4D:48:D7:11:92:66:C6:A3:9A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154442.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.89.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:d7:4f:e9:60:97:6b:cc:4b:d1:7e:90:fa:e5:f7:3f:ce:c4: 1e:3e:bb:89:c9:8a:b1:24:ff:a0:82:49:b8:1a:31:b8:b0:6b: 9e:0e:e4:f8:de:b4:26:60:4a:e0:e6:c4:7e:ba:fd:30:72:2d: a9:02:9c:bb:e7:4a:21:ff:ec:6f:ac:bb:af:6a:5b:e5:1e:8f: fa:80:3a:cd:b1:23:49:0a:a1:00:34:d9:64:bd:9d:3a:fa:89: a5:60:a0:fc:b9:06:75:89:19:0e:ea:ed:5f:34:9e:58:41:3b: c2:cd:eb:d0:11:c6:36:be:e9:44:c6:cc:f7:e3:c7:43:40:78: e5:22:a6:0f:28:e3:ed:a3:e0:60:5d:80:67:3d:bd:bb:7a:df: b2:ab:1c:91:27:2c:af:6c:c7:47:55:f9:b7:68:ad:93:c6:a1: 87:7d:0f:a6:de:3d:58:f4:0c:e0:ec:a8:41:e5:d7:6f:21:cb: 73:1e:0d:38:bc:f6:9d:9d:03:3a:9f:4f:cc:8b:fa:a1:0a:ec: 36:3c:cc:81:a4:2f:28:f3:17:1f:e8:69:a7:0d:10:e9:80:bb: ab:60:c8:69:02:bd:a4:d9:67:06:bc:79:3e:57:9b:c9:26:4a: ff:ce:e1:99:95:74:a5:40:fd:2f:e1:39:83:db:1e:50:31:b6: 05:d0:6b:46 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUEkHiperbgyj0/ybrFayipl6VAhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxMTAyNTIxMVoX DTI3MDMxMDAyNTcxMVowMzExMC8GA1UEAxMoNUUyM0M1NjFGOTNENUQzRDlBRjM0 ODRENDhENzExOTI2NkM2QTM5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOeejsOWGsZo4NGiMaiD9Y38SzYktUMBaExJXSFTMsRVMESDmi4jCX3IiNPg UCNXsOn2hgRbXMxUU4omIzD8047c0oyA+PB+Cp5T1yuo1cddVoOUhtSg9mxIVjwA 8ErnrPJ70oRdHBzv3DJ/gNIJDudm60F+hSliqqcT/p/LQNrRUEantiK67AL3yYjc kGo7L6S7a4TTB9ChhW/THKnGP60p1RMn5U2nID3AKnEfmU+qhY1FhTQqSxghy6EF 4ZJUtQFeMXexh7ngABcCNZoEnF06cPy8LMfgRPAB7wiClMhHckIm7760UEe0uMax 5C2UKCmm1jnK2H31BWiu1rkimccCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBReI8Vh +T1dPZrzSE1I1xGSZsajmjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1NDQ0Mi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBPWTANBgkqhkiG9w0BAQsFAAOCAQEADNdP6WCXa8xL0X6Q+uX3 P87EHj67icmKsST/oIJJuBoxuLBrng7k+N60JmBK4ObEfrr9MHItqQKcu+dKIf/s b6y7r2pb5R6P+oA6zbEjSQqhADTZZL2dOvqJpWCg/LkGdYkZDurtXzSeWEE7ws3r 0BHGNr7pRMbM9+PHQ0B45SKmDyjj7aPgYF2AZz29u3rfsqsckScsr2zHR1X5t2it k8ahh30Ppt49WPQM4OyoQeXXbyHLcx4NOLz2nZ0DOp9PzIv6oQrsNjzMgaQvKPMX H+hppw0Q6YC7q2DIaQK9pNlnBrx5PlebySZK/87hmZV0pUD9L+E5g9seUDG2BdBr Rg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:40:50 2026 by rpki-client