$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154312.roa File: AS154312.roa (raw, json) Hash identifier: B8EHdXW5+UMtPY0KuSmer99p7dWAvIFUzan7egyHmfA= Subject key identifier: 1F:07:3D:3A:E5:01:4D:39:77:2D:76:17:E7:A2:54:CA:87:C3:61:17 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2FDA3D48253DD419132F0ACB953A04EFBE702FB1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154312.roa Signing time: Mon 20 Jul 2026 07:44:11 +0000 ROA not before: Mon 20 Jul 2026 07:39:11 +0000 ROA not after: Mon 19 Jul 2027 07:44:11 +0000 asID: 154312 IP address blocks: 138.252.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:da:3d:48:25:3d:d4:19:13:2f:0a:cb:95:3a:04:ef:be:70:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 20 07:39:11 2026 GMT Not After : Jul 19 07:44:11 2027 GMT Subject: CN=1F073D3AE5014D39772D7617E7A254CA87C36117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:db:7b:72:d1:77:d7:14:02:ff:27:33:81: 72:44:50:ba:1c:67:7d:67:dd:4b:14:14:9e:b7:0f: 9d:8d:18:47:c4:87:ce:43:c5:cb:d3:d8:bc:41:92: d3:4b:3d:89:fa:17:f4:c3:51:49:e2:ff:86:a0:c2: b9:6e:d2:15:60:00:eb:d3:1e:ec:06:6f:08:38:c8: 93:85:65:01:a5:59:7a:d2:4a:1b:06:b6:97:8f:dc: bf:df:2c:dc:58:73:f8:46:d3:91:b7:cb:73:f7:62: 4d:18:6e:99:50:19:c4:77:70:bb:22:aa:63:e4:9b: 00:66:5a:74:84:09:89:16:ce:c7:a0:a6:fe:01:56: 05:26:d4:20:9a:10:85:c9:1e:8f:03:47:1d:2a:4f: 13:ea:fe:80:9e:e8:fd:81:37:f7:25:54:1c:bb:11: 2e:e6:3d:81:77:4d:fb:6a:7f:79:e4:75:28:10:cd: 4f:38:fd:80:fd:06:f5:18:80:f9:2e:77:ee:c8:f2: ff:da:8b:82:88:db:89:f5:db:93:72:cf:c1:f7:6a: a8:fe:87:aa:7a:20:45:96:50:f7:6f:62:40:34:13: c2:d0:e3:4c:b9:af:fa:12:92:e3:9a:73:15:ba:d4: 43:08:18:69:21:c0:61:8f:5f:c4:b9:9c:96:3c:46: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:07:3D:3A:E5:01:4D:39:77:2D:76:17:E7:A2:54:CA:87:C3:61:17 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154312.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:97:4c:d3:09:46:2a:ab:6c:da:b0:ae:3e:28:54:35:a0:2d: 98:de:ea:fd:2c:a8:2d:25:b8:9b:98:1f:64:14:a4:22:a5:6e: 8d:69:b7:0a:3c:3c:f7:60:42:76:4a:8a:c3:7e:64:d1:9e:c4: 37:6a:30:23:6a:17:b0:1f:56:ac:5d:d0:d2:4e:b8:59:90:73: 9f:9f:f3:87:40:7f:2b:87:c3:ea:ac:7d:34:c7:5a:50:bc:20: 88:4c:f9:2f:b0:3f:88:05:8d:20:3c:7f:65:c7:e9:72:d1:1f: 10:6d:83:0c:8d:60:81:46:63:87:ac:a4:b6:a0:ee:bb:58:81: 99:27:a1:64:7a:1b:65:6f:fe:eb:c5:4a:d7:93:5e:99:94:d2: 68:d2:74:7a:95:dd:a0:64:fc:fd:ec:79:1a:e3:75:56:09:18: e8:22:2c:e1:5d:38:78:9f:31:b2:3d:8c:c9:9c:14:04:4e:c3: 3a:ca:bb:ab:98:5e:7d:e0:e6:21:43:8c:07:27:0d:3e:7e:02: d7:63:60:6d:25:15:9f:d7:d3:77:9b:dd:8b:85:3b:1b:97:ab: 6f:06:ba:bf:01:9a:e6:bb:2f:bf:04:cc:58:14:6d:7b:14:10: ce:0a:0e:e1:b3:b6:30:77:e3:53:36:19:08:c9:57:c4:e3:18: 43:01:54:ac -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUL9o9SCU91BkTLwrLlToE775wL7EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyMDA3MzkxMVoX DTI3MDcxOTA3NDQxMVowMzExMC8GA1UEAxMoMUYwNzNEM0FFNTAxNEQzOTc3MkQ3 NjE3RTdBMjU0Q0E4N0MzNjExNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMW+23ty0XfXFAL/JzOBckRQuhxnfWfdSxQUnrcPnY0YR8SHzkPFy9PYvEGS 00s9ifoX9MNRSeL/hqDCuW7SFWAA69Me7AZvCDjIk4VlAaVZetJKGwa2l4/cv98s 3Fhz+EbTkbfLc/diTRhumVAZxHdwuyKqY+SbAGZadIQJiRbOx6Cm/gFWBSbUIJoQ hckejwNHHSpPE+r+gJ7o/YE39yVUHLsRLuY9gXdN+2p/eeR1KBDNTzj9gP0G9RiA +S537sjy/9qLgojbifXbk3LPwfdqqP6HqnogRZZQ929iQDQTwtDjTLmv+hKS45pz FbrUQwgYaSHAYY9fxLmcljxGdlkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQfBz06 5QFNOXctdhfnolTKh8NhFzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0MzEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAivwrMA0GCSqGSIb3DQEBCwUAA4IBAQCel0zTCUYqq2zasK4+KFQ1oC2Y 3ur9LKgtJbibmB9kFKQipW6NabcKPDz3YEJ2SorDfmTRnsQ3ajAjahewH1asXdDS TrhZkHOfn/OHQH8rh8PqrH00x1pQvCCITPkvsD+IBY0gPH9lx+ly0R8QbYMMjWCB RmOHrKS2oO67WIGZJ6Fkehtlb/7rxUrXk16ZlNJo0nR6ld2gZPz97Hka43VWCRjo IizhXTh4nzGyPYzJnBQETsM6yrurmF594OYhQ4wHJw0+fgLXY2BtJRWf19N3m92L hTsbl6tvBrq/AZrmuy+/BMxYFG17FBDOCg7hs7Ywd+NTNhkIyVfE4xhDAVSs -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:24 2026 by rpki-client