$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154503.roa File: AS154503.roa (raw, json) Hash identifier: +6zL4LMBunUVhwc2uGUbkVRJ4I4DwXWcwMq+cbVQpGA= Subject key identifier: 59:91:88:A6:D3:C1:DE:0F:A8:DE:DC:EA:8D:10:2B:4F:6D:E8:FC:E7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3B542C747F110C11FEF07A045705772B69B4F15D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154503.roa Signing time: Sat 02 May 2026 21:23:14 +0000 ROA not before: Sat 02 May 2026 21:18:14 +0000 ROA not after: Sat 01 May 2027 21:23:14 +0000 asID: 154503 IP address blocks: 198.15.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:54:2c:74:7f:11:0c:11:fe:f0:7a:04:57:05:77:2b:69:b4:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 21:18:14 2026 GMT Not After : May 1 21:23:14 2027 GMT Subject: CN=599188A6D3C1DE0FA8DEDCEA8D102B4F6DE8FCE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:4e:69:fc:31:b1:51:bd:32:4b:0f:87:03: 13:16:74:8f:28:a2:b7:ad:a5:00:63:e5:89:f7:51: ee:5f:82:01:04:da:ea:29:3d:23:a5:5e:b6:21:97: 23:02:cf:4a:a1:f9:3f:69:76:12:77:22:48:e1:8e: 00:98:30:b7:fb:f9:04:14:f9:8c:c6:09:95:4d:a7: f3:7d:df:62:cd:e1:ae:1c:da:86:eb:db:b3:2f:d0: 05:5b:40:33:71:b3:fa:9b:0d:48:e7:99:08:10:61: df:12:ad:18:fb:fb:43:96:1a:4c:0d:6c:de:fb:cd: 0b:66:05:91:7a:e1:04:2c:52:1c:4b:f1:22:ce:b8: cb:6e:24:8f:4e:88:f7:e1:ed:14:ff:f7:41:f6:f5: 99:2c:26:c1:b8:a7:78:1e:ab:bb:de:0a:72:de:04: d0:49:58:20:a6:48:d0:2c:67:02:f1:30:ba:42:78: 7c:ff:d6:b4:d9:84:b6:b9:f3:81:c2:9c:85:40:2c: 44:61:cc:57:76:29:25:07:ef:d7:35:75:26:07:d3: 49:dd:e4:be:ae:c2:b4:ee:ef:09:9b:3b:27:81:15: ce:0b:c8:e9:7f:9a:0e:41:b1:f9:3f:3a:90:a1:e8: 9f:78:d2:39:f3:65:5b:4f:37:e6:62:3d:6b:7b:49: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:88:A6:D3:C1:DE:0F:A8:DE:DC:EA:8D:10:2B:4F:6D:E8:FC:E7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154503.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.30.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:46:4f:81:7c:94:68:59:4f:09:6e:c2:29:f0:d7:26:ad:ff: de:10:f7:30:65:c1:aa:a8:ef:0d:13:67:7c:e9:57:22:1c:61: 73:b1:8a:50:26:61:59:d8:70:63:90:99:be:db:24:de:33:a0: 30:93:8f:8d:63:f0:66:3d:5d:7f:31:fa:ce:ef:fa:d4:c2:08: 8c:da:5c:c3:7e:71:ff:27:70:5e:57:9d:6e:03:5c:45:45:d5: a4:f5:21:75:eb:3c:71:ab:13:89:13:f2:68:9b:c0:d1:a2:df: e4:66:59:d0:62:2f:ed:15:e4:c5:2b:9b:a8:84:ec:66:f3:56: ed:15:e9:8b:f1:54:1e:36:36:2b:ae:07:b0:1b:05:db:0a:4c: 77:3e:2a:7e:f2:8b:9e:4b:1d:77:6e:a5:1c:37:69:fc:f4:f9: 0a:61:08:1d:d7:ae:a2:75:35:35:9d:c2:d9:bf:7f:a0:6c:57: c2:15:09:ab:04:00:72:e1:8f:b6:48:d7:cf:00:a3:db:02:a6: 49:ad:5d:09:86:80:02:a7:23:d3:0f:5c:4b:18:d0:da:48:c8: 79:4c:dc:0b:00:21:56:bf:8f:dd:05:a5:32:01:6a:94:0b:e1: b5:22:f4:b9:c2:39:2f:06:b7:db:33:3a:3f:3a:d4:00:0c:99: a3:53:9e:0c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUO1QsdH8RDBH+8HoEVwV3K2m08V0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjIxMTgxNFoX DTI3MDUwMTIxMjMxNFowMzExMC8GA1UEAxMoNTk5MTg4QTZEM0MxREUwRkE4REVE Q0VBOEQxMDJCNEY2REU4RkNFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANE4Tmn8MbFRvTJLD4cDExZ0jyiit62lAGPlifdR7l+CAQTa6ik9I6VetiGX IwLPSqH5P2l2EnciSOGOAJgwt/v5BBT5jMYJlU2n833fYs3hrhzahuvbsy/QBVtA M3Gz+psNSOeZCBBh3xKtGPv7Q5YaTA1s3vvNC2YFkXrhBCxSHEvxIs64y24kj06I 9+HtFP/3Qfb1mSwmwbineB6ru94Kct4E0ElYIKZI0CxnAvEwukJ4fP/WtNmEtrnz gcKchUAsRGHMV3YpJQfv1zV1JgfTSd3kvq7CtO7vCZs7J4EVzgvI6X+aDkGx+T86 kKHon3jSOfNlW0835mI9a3tJcw8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRZkYim 08HeD6je3OqNECtPbej85zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NTAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAxg8eMA0GCSqGSIb3DQEBCwUAA4IBAQAdRk+BfJRoWU8JbsIp8Ncmrf/e EPcwZcGqqO8NE2d86VciHGFzsYpQJmFZ2HBjkJm+2yTeM6Awk4+NY/BmPV1/MfrO 7/rUwgiM2lzDfnH/J3BeV51uA1xFRdWk9SF16zxxqxOJE/Jom8DRot/kZlnQYi/t FeTFK5uohOxm81btFemL8VQeNjYrrgewGwXbCkx3Pip+8oueSx13bqUcN2n89PkK YQgd166idTU1ncLZv3+gbFfCFQmrBABy4Y+2SNfPAKPbAqZJrV0JhoACpyPTD1xL GNDaSMh5TNwLACFWv4/dBaUyAWqUC+G1IvS5wjkvBrfbMzo/OtQADJmjU54M -----END CERTIFICATE-----Generated at Tue May 12 22:43:40 2026 by rpki-client