
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154480.roa
File: AS154480.roa (raw, json)
Hash identifier: ydYecnGRs0pFos9hPAQSikX6doK4BzfLH/4BO2voeQw=
Subject key identifier: 9C:5C:02:07:A6:B8:8B:A1:C3:AF:47:AE:0E:9D:B0:26:88:89:23:6E
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 2D4C02DE4BE4B67B1C768C54B6166CA431DCA6D0
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154480.roa
Signing time: Sat 02 May 2026 21:23:06 +0000
ROA not before: Sat 02 May 2026 21:18:06 +0000
ROA not after: Sat 01 May 2027 21:23:06 +0000
asID: 154480
IP address blocks: 198.15.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4c:02:de:4b:e4:b6:7b:1c:76:8c:54:b6:16:6c:a4:31:dc:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: May 2 21:18:06 2026 GMT
Not After : May 1 21:23:06 2027 GMT
Subject: CN=9C5C0207A6B88BA1C3AF47AE0E9DB0268889236E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:a6:db:a1:a0:f5:d6:57:28:a9:1d:a5:6b:
18:31:82:45:3b:06:17:80:eb:1e:37:82:d9:30:83:
d4:65:41:41:3c:c0:c2:89:c0:d5:22:86:9b:99:0f:
13:e1:3f:fb:38:d8:ef:2d:db:c4:0b:ab:b0:92:5b:
ac:30:61:0a:6a:f3:4e:2a:cf:1d:21:82:e6:80:c2:
90:48:80:2d:52:9f:12:56:35:f4:b5:93:31:cd:ab:
0e:72:17:3d:fc:d0:9d:3d:14:4f:12:e8:23:12:23:
40:b7:54:53:49:5d:c9:5a:07:9d:b1:80:aa:0f:2e:
07:69:75:35:5f:db:f6:7f:52:ad:72:00:3b:b9:11:
cc:af:a7:28:14:a2:97:1c:ec:69:96:42:1c:fe:95:
14:51:d4:99:ad:d9:16:ac:0a:db:a9:ea:fb:ad:03:
1b:68:dd:2c:e0:b9:7e:6e:22:eb:6b:a8:6b:85:ba:
95:21:ea:25:4c:df:ad:7a:fb:ab:91:62:a4:a0:bb:
dc:c0:16:16:86:2d:1a:bd:2a:28:38:b9:91:16:5a:
36:00:6c:6c:2a:4b:b4:f6:73:c7:f1:65:7a:c3:18:
bc:af:ca:5a:9f:2b:cf:ca:0f:e9:00:bd:db:4b:97:
8a:39:72:1a:d5:09:f1:d4:d0:9c:cf:57:bc:d9:9c:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:02:07:A6:B8:8B:A1:C3:AF:47:AE:0E:9D:B0:26:88:89:23:6E
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154480.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.15.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:48:75:05:08:5e:68:d2:6d:ab:c8:8d:81:27:e4:e3:bf:f3:
3b:64:8b:cf:25:2f:58:59:cb:26:76:87:b5:12:6a:56:32:1a:
06:0e:57:4d:ef:54:3c:1e:a3:62:68:9e:53:3a:43:99:8c:54:
8a:8b:fc:e5:77:7c:40:64:7c:bf:cf:71:84:9d:33:b3:23:c0:
0b:d5:e2:40:ef:89:f8:22:64:8f:4c:a8:fe:32:f7:86:e9:e0:
32:6f:8a:a5:4e:b1:c6:e8:6c:ac:25:de:4d:4a:cb:2f:b6:7f:
2d:b2:8f:6c:eb:1a:04:cc:4d:d0:b1:23:92:1d:c2:f4:e2:bf:
21:ad:55:e2:51:ab:ae:40:2c:39:47:32:9e:24:66:ef:56:a2:
50:13:9d:42:03:ba:0c:4d:a2:3a:5b:1e:80:c7:52:aa:63:62:
32:46:e4:4a:64:d6:10:d7:34:a7:ac:36:2a:ea:de:80:18:92:
7e:f8:39:27:84:66:df:ba:fe:33:b3:70:b0:1a:20:95:7d:d7:
05:ed:b7:62:92:0e:11:29:de:f8:c7:34:17:43:60:30:ce:32:
6a:01:45:84:62:24:22:e1:27:46:c9:51:be:cb:a9:95:06:95:
07:71:60:af:a4:ec:96:3a:1c:78:fc:d5:9a:07:4f:17:32:fd:
ce:ce:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:04:30 2026 by rpki-client