$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154660.roa File: AS154660.roa (raw, json) Hash identifier: nbyfXGs/CYWR42Gm570stP8yVdg6o2hLaeCNAd5nQvc= Subject key identifier: EE:78:83:F1:CD:88:47:32:A8:75:A5:0F:8C:22:70:CE:84:05:24:98 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2146F1C9E6F724A7E6AB872498674509225D05A6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154660.roa Signing time: Mon 20 Jul 2026 02:31:05 +0000 ROA not before: Mon 20 Jul 2026 02:26:05 +0000 ROA not after: Mon 19 Jul 2027 02:31:05 +0000 asID: 154660 IP address blocks: 162.4.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:46:f1:c9:e6:f7:24:a7:e6:ab:87:24:98:67:45:09:22:5d:05:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 20 02:26:05 2026 GMT Not After : Jul 19 02:31:05 2027 GMT Subject: CN=EE7883F1CD884732A875A50F8C2270CE84052498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:ea:58:7a:3d:31:95:12:bb:b9:16:9e:42: 65:f3:8a:e7:6a:63:d5:27:a3:b2:1d:a3:8b:a1:6c: 9d:2c:46:b4:f1:2b:5e:f7:00:c8:df:56:b8:06:28: 20:be:b3:8e:9f:81:2f:41:e8:05:37:f6:47:97:ec: fa:b9:e7:62:f4:b2:44:ac:26:5e:99:6b:f2:9c:8e: c1:e0:9a:8c:e6:4a:3e:b9:95:1e:0d:23:3c:56:27: fc:95:61:62:c3:15:04:a7:3e:83:c3:57:0a:ec:c5: 42:ac:41:4f:96:71:30:b3:52:24:53:5f:92:36:b6: 37:d5:32:29:85:d1:c8:5d:7e:b2:55:a2:66:72:8c: 92:1e:30:c0:ce:2f:3c:21:71:7d:b8:82:01:35:a1: 5d:45:2f:dc:54:a4:32:4f:64:11:f2:98:2b:80:c2: cd:d5:e3:a9:0f:28:f8:00:da:92:a7:2e:65:3c:20: 5c:c1:96:81:5a:33:f8:5f:76:51:b4:a0:f3:ca:14: a0:66:47:dd:1b:3e:39:10:8b:de:10:fb:08:bb:5a: 7d:93:78:56:c9:7d:85:d5:d6:04:2b:87:5c:61:c5: 47:02:b7:b2:33:92:7c:1d:de:2b:3a:d6:27:a5:a5: d9:b3:97:9f:ac:d9:7a:de:77:e2:6a:16:74:90:e3: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:83:F1:CD:88:47:32:A8:75:A5:0F:8C:22:70:CE:84:05:24:98 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154660.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.68.0/23 Signature Algorithm: sha256WithRSAEncryption 48:49:eb:eb:c3:5a:c4:d7:50:36:38:43:b0:65:35:b3:ca:e4: 6a:99:63:9b:69:1c:9e:62:ea:db:e6:66:94:e6:8a:f7:a8:bc: b8:b1:31:ed:ba:19:70:a3:8e:f6:85:06:d6:a1:74:08:57:86: 62:1f:65:73:0f:79:dd:51:c2:d8:87:c2:bb:aa:40:67:d6:1a: ba:8d:62:16:7d:7d:b8:67:f2:1c:a8:ef:71:38:ab:7b:18:c1: 87:6a:ce:d2:55:fa:70:7d:9b:db:8c:a1:d1:82:c1:c5:4a:69: 41:51:9c:da:eb:5d:0e:37:9e:9c:8e:31:fe:a2:29:d6:dd:4a: a1:8a:fb:65:49:5d:f2:41:84:fc:30:98:87:b2:79:92:5d:7d: 82:eb:ee:bb:19:15:96:cc:c3:22:04:5f:1c:60:bd:3d:b4:e5: 4b:82:cf:e6:21:18:a4:12:9a:9d:60:70:23:9b:fa:86:31:7b: b6:2f:ef:e2:f3:f8:b1:ad:35:59:21:42:42:a5:7c:fb:e7:13: 8d:3b:72:2c:01:83:72:ef:d4:e2:ef:f7:5d:e1:1a:82:8c:b6: 32:c8:3e:96:33:7c:be:c7:57:0a:83:f0:f3:ab:d9:53:bb:4f: 15:8a:c9:fb:87:bb:59:b7:8d:76:5d:6e:06:d9:92:f5:c2:90: b4:ad:26:40 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIUbxyeb3JKfmq4ckmGdFCSJdBaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyMDAyMjYwNVoX DTI3MDcxOTAyMzEwNVowMzExMC8GA1UEAxMoRUU3ODgzRjFDRDg4NDczMkE4NzVB NTBGOEMyMjcwQ0U4NDA1MjQ5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxz6lh6PTGVEru5Fp5CZfOK52pj1Sejsh2ji6FsnSxGtPErXvcAyN9WuAYo IL6zjp+BL0HoBTf2R5fs+rnnYvSyRKwmXplr8pyOweCajOZKPrmVHg0jPFYn/JVh YsMVBKc+g8NXCuzFQqxBT5ZxMLNSJFNfkja2N9UyKYXRyF1+slWiZnKMkh4wwM4v PCFxfbiCATWhXUUv3FSkMk9kEfKYK4DCzdXjqQ8o+ADakqcuZTwgXMGWgVoz+F92 UbSg88oUoGZH3Rs+ORCL3hD7CLtafZN4Vsl9hdXWBCuHXGHFRwK3sjOSfB3eKzrW J6Wl2bOXn6zZet534moWdJDjlBMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTueIPx zYhHMqh1pQ+MInDOhAUkmDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjYwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogREMA0GCSqGSIb3DQEBCwUAA4IBAQBISevrw1rE11A2OEOwZTWzyuRq mWObaRyeYurb5maU5or3qLy4sTHtuhlwo472hQbWoXQIV4ZiH2VzD3ndUcLYh8K7 qkBn1hq6jWIWfX24Z/IcqO9xOKt7GMGHas7SVfpwfZvbjKHRgsHFSmlBUZza610O N56cjjH+oinW3UqhivtlSV3yQYT8MJiHsnmSXX2C6+67GRWWzMMiBF8cYL09tOVL gs/mIRikEpqdYHAjm/qGMXu2L+/i8/ixrTVZIUJCpXz75xONO3IsAYNy79Ti7/dd 4RqCjLYyyD6WM3y+x1cKg/Dzq9lTu08Visn7h7tZt412XW4G2ZL1wpC0rSZA -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client