$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154202.roa File: AS154202.roa (raw, json) Hash identifier: p++VqmK8TARqOUGJdXDSJ72cgxrzFDxpIBdLf7vmrMM= Subject key identifier: A9:61:10:25:E8:32:8D:48:31:C2:93:68:74:A6:E4:97:FC:81:18:D4 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 669B9146192AC2C0A2EAAF0AC2D44A43262F3822 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154202.roa Signing time: Wed 22 Jul 2026 04:00:15 +0000 ROA not before: Wed 22 Jul 2026 03:55:15 +0000 ROA not after: Wed 21 Jul 2027 04:00:15 +0000 asID: 154202 IP address blocks: 160.236.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9b:91:46:19:2a:c2:c0:a2:ea:af:0a:c2:d4:4a:43:26:2f:38:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 22 03:55:15 2026 GMT Not After : Jul 21 04:00:15 2027 GMT Subject: CN=A9611025E8328D4831C2936874A6E497FC8118D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:6f:5b:48:b1:b5:f7:3a:b8:e7:ae:9b:93: 0b:0c:b1:87:61:39:bb:e4:0a:22:21:b0:e4:c4:5e: 2a:e0:6b:c5:5a:b6:24:87:06:55:09:30:61:6b:6c: 97:21:dc:79:d6:ac:d0:28:f9:3c:90:94:5d:5e:46: 62:71:8b:31:a9:ad:04:80:04:20:28:6b:d0:d5:e0: 40:2c:24:ee:ad:14:c7:40:c4:0a:3c:2d:bd:b2:8d: b4:0b:b6:4f:5c:55:d3:df:1f:6d:4f:94:1b:f0:12: 52:27:e4:c1:ca:f2:0d:da:b0:28:e9:dd:5e:00:43: 68:74:c6:79:81:d4:44:b5:b2:6e:78:5b:4c:59:90: ab:1d:15:7c:5a:e1:2a:fc:c1:96:3a:53:e4:cb:de: 47:a7:2b:2b:4f:8a:80:29:45:60:1a:80:b4:20:51: 51:ec:85:6a:5f:2e:8a:93:d6:b2:77:2e:68:b7:ec: 16:e4:09:b6:b2:10:fb:5c:73:5a:ac:9f:9c:a4:e8: 02:55:d1:f9:31:fd:93:15:7d:91:a8:a4:3d:56:9d: e4:d5:95:38:66:d9:85:fa:ad:d4:ba:de:69:e2:8b: 8b:82:85:1e:20:6f:33:64:4f:07:1b:17:4d:4c:81: d2:08:28:7c:ff:0d:0f:3d:9e:60:d4:c8:b5:71:08: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:61:10:25:E8:32:8D:48:31:C2:93:68:74:A6:E4:97:FC:81:18:D4 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.95.0/24 Signature Algorithm: sha256WithRSAEncryption 79:4b:25:49:d8:31:bd:ba:c6:f6:ee:dd:10:ac:e9:8c:97:b2: f1:2d:6f:19:ea:6b:7c:e1:58:0d:5b:e2:59:42:a4:bd:58:74: d1:85:c9:2a:38:c2:0c:2f:bf:80:79:9a:5a:65:10:53:65:53: a3:5e:85:cd:65:86:b0:59:26:98:4d:a0:86:96:90:fc:d4:4f: dc:2a:86:63:3f:be:15:7c:17:5c:4c:fa:42:c8:4e:d9:4a:73: b7:9d:68:7f:bc:d1:4d:9e:d9:d4:80:54:b5:55:23:7b:72:99: 2a:2d:82:39:bf:8b:5d:32:c4:86:77:87:4e:a3:8e:df:0d:cc: fe:ed:66:e2:a3:73:52:81:f6:0a:be:cf:86:57:83:56:4c:c5: 61:2b:16:4f:2c:92:29:b3:3c:27:96:aa:4b:7b:5c:ef:f5:87: 3b:60:e8:bd:7b:a7:ec:54:0e:d8:3a:9f:bf:37:94:8d:40:b9: 33:78:6b:93:73:ae:b2:7d:7b:25:ef:43:c6:17:9c:83:5a:e0: 6f:b1:f3:e9:cf:de:d5:c3:0a:35:21:78:8f:d5:66:50:10:6a: ee:e6:7e:02:1f:e8:95:dd:a1:a3:da:86:04:51:e0:21:18:76: 89:ba:d1:20:94:8b:a9:13:e1:58:72:98:30:42:f2:ab:73:e3: ef:50:a6:38 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZpuRRhkqwsCi6q8KwtRKQyYvOCIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyMjAzNTUxNVoX DTI3MDcyMTA0MDAxNVowMzExMC8GA1UEAxMoQTk2MTEwMjVFODMyOEQ0ODMxQzI5 MzY4NzRBNkU0OTdGQzgxMThENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYmb1tIsbX3OrjnrpuTCwyxh2E5u+QKIiGw5MReKuBrxVq2JIcGVQkwYWts lyHcedas0Cj5PJCUXV5GYnGLMamtBIAEIChr0NXgQCwk7q0Ux0DECjwtvbKNtAu2 T1xV098fbU+UG/ASUifkwcryDdqwKOndXgBDaHTGeYHURLWybnhbTFmQqx0VfFrh KvzBljpT5MveR6crK0+KgClFYBqAtCBRUeyFal8uipPWsncuaLfsFuQJtrIQ+1xz WqyfnKToAlXR+TH9kxV9kaikPVad5NWVOGbZhfqt1LreaeKLi4KFHiBvM2RPBxsX TUyB0ggofP8NDz2eYNTItXEIEFsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSpYRAl 6DKNSDHCk2h0puSX/IEY1DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MjAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOxfMA0GCSqGSIb3DQEBCwUAA4IBAQB5SyVJ2DG9usb27t0QrOmMl7Lx LW8Z6mt84VgNW+JZQqS9WHTRhckqOMIML7+AeZpaZRBTZVOjXoXNZYawWSaYTaCG lpD81E/cKoZjP74VfBdcTPpCyE7ZSnO3nWh/vNFNntnUgFS1VSN7cpkqLYI5v4td MsSGd4dOo47fDcz+7Wbio3NSgfYKvs+GV4NWTMVhKxZPLJIpszwnlqpLe1zv9Yc7 YOi9e6fsVA7YOp+/N5SNQLkzeGuTc66yfXsl70PGF5yDWuBvsfPpz97Vwwo1IXiP 1WZQEGru5n4CH+iV3aGj2oYEUeAhGHaJutEglIupE+FYcpgwQvKrc+PvUKY4 -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:25 2026 by rpki-client