$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154663.roa File: AS154663.roa (raw, json) Hash identifier: cE9ZAKKSYjFxmzfufwuNXOXVvkKOOgQJFLbeAz8pWB4= Subject key identifier: E3:1C:03:4B:53:EB:1B:CC:23:26:B1:86:13:46:29:CA:1E:83:F5:3E Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7C533C072DE6D03BAA17BA8BF26CF03B71B1FCAD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154663.roa Signing time: Fri 08 May 2026 03:21:18 +0000 ROA not before: Fri 08 May 2026 03:16:18 +0000 ROA not after: Fri 07 May 2027 03:21:18 +0000 asID: 154663 IP address blocks: 162.4.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:53:3c:07:2d:e6:d0:3b:aa:17:ba:8b:f2:6c:f0:3b:71:b1:fc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 8 03:16:18 2026 GMT Not After : May 7 03:21:18 2027 GMT Subject: CN=E31C034B53EB1BCC2326B186134629CA1E83F53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:1f:54:b3:9f:c1:e3:50:c0:cf:2f:24:b6: 75:94:1e:a9:76:b2:03:ce:c2:87:48:a8:91:36:05: 25:34:2a:42:e5:ca:23:57:cf:c5:37:71:df:1c:8e: c7:72:f0:4a:b9:6d:70:35:41:19:1a:bf:53:af:0f: 33:2e:c8:7c:0e:e0:73:77:e1:64:83:3c:36:cd:66: b7:66:ed:04:be:3a:af:25:16:f3:a6:04:1f:12:4a: 26:e7:29:d1:b4:55:f0:40:30:90:15:fa:23:6a:ba: dc:47:dd:1a:61:cd:19:1b:ad:ed:01:9c:9c:22:bd: 70:f8:99:3d:c7:35:82:f0:ee:ab:67:50:28:52:cd: ab:04:a2:f3:af:50:9b:e6:64:d8:97:d9:78:c8:c4: cc:92:61:ef:8d:8c:bf:cd:29:12:af:f2:82:7b:4f: c9:ad:22:2d:4b:1d:fb:d2:ab:be:ee:a9:16:c4:41: e0:76:3d:55:21:7f:1c:e1:bf:ff:cf:e1:c4:e0:05: e6:df:fa:9f:69:b0:c9:6f:6c:e9:89:93:1b:04:01: 6f:c6:54:04:ae:54:a7:b0:15:42:35:85:b0:25:20: 31:f6:c9:98:f2:f6:d1:44:72:1c:2f:08:ef:d5:63: 4f:35:fc:7f:dc:be:0b:c1:28:fa:e9:aa:02:b1:ba: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:03:4B:53:EB:1B:CC:23:26:B1:86:13:46:29:CA:1E:83:F5:3E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.44.0/24 Signature Algorithm: sha256WithRSAEncryption 32:22:4c:11:9c:64:ab:0e:56:f2:ca:11:06:7b:6e:49:54:e8: 67:91:90:ae:51:b2:81:78:e1:4d:10:9a:99:94:8f:59:cc:05: 21:fd:41:ac:ad:75:b8:1b:80:3b:2d:25:19:10:1e:70:a6:b7: 01:d0:7d:25:f7:61:30:d7:26:c0:66:5c:26:75:09:9b:a3:b8: a5:e1:7e:58:f6:31:e8:d4:ca:84:48:8d:96:cd:ac:59:f5:32: 86:eb:a0:9b:3f:a2:f7:6b:f5:c2:cb:27:d3:b7:3d:59:b6:6d: 31:5a:5e:f7:f6:23:1b:f9:c9:b9:8b:f3:80:70:30:e0:de:ab: 71:27:d4:21:0b:e0:06:3c:00:a1:ca:bd:09:6b:a7:80:aa:07: 7d:a7:f0:d4:86:3d:29:93:68:6f:bd:ae:ed:0c:e6:61:a2:31: b1:cb:f9:d4:68:8f:3e:f9:b2:f0:b3:13:52:4d:98:b8:54:66: c3:ac:c4:4a:4f:a2:cb:ba:44:b6:ce:a0:28:b8:a4:09:81:ad: 1d:16:80:64:e2:8e:20:89:fb:7b:7b:25:83:40:63:64:19:bc: bb:9a:0e:fb:f6:52:10:9e:86:79:04:21:30:fa:5e:9e:8a:fe: 8f:a2:85:0b:07:31:8f:20:fa:89:d7:90:84:bd:7d:bf:aa:4d: 1e:1e:77:4e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfFM8By3m0DuqF7qL8mzwO3Gx/K0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwODAzMTYxOFoX DTI3MDUwNzAzMjExOFowMzExMC8GA1UEAxMoRTMxQzAzNEI1M0VCMUJDQzIzMjZC MTg2MTM0NjI5Q0ExRTgzRjUzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhMH1Szn8HjUMDPLyS2dZQeqXayA87Ch0iokTYFJTQqQuXKI1fPxTdx3xyO x3LwSrltcDVBGRq/U68PMy7IfA7gc3fhZIM8Ns1mt2btBL46ryUW86YEHxJKJucp 0bRV8EAwkBX6I2q63EfdGmHNGRut7QGcnCK9cPiZPcc1gvDuq2dQKFLNqwSi869Q m+Zk2JfZeMjEzJJh742Mv80pEq/ygntPya0iLUsd+9Krvu6pFsRB4HY9VSF/HOG/ /8/hxOAF5t/6n2mwyW9s6YmTGwQBb8ZUBK5Up7AVQjWFsCUgMfbJmPL20URyHC8I 79VjTzX8f9y+C8Eo+umqArG6jvMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTjHANL U+sbzCMmsYYTRinKHoP1PjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogQsMA0GCSqGSIb3DQEBCwUAA4IBAQAyIkwRnGSrDlbyyhEGe25JVOhn kZCuUbKBeOFNEJqZlI9ZzAUh/UGsrXW4G4A7LSUZEB5wprcB0H0l92Ew1ybAZlwm dQmbo7il4X5Y9jHo1MqESI2WzaxZ9TKG66CbP6L3a/XCyyfTtz1Ztm0xWl739iMb +cm5i/OAcDDg3qtxJ9QhC+AGPAChyr0Ja6eAqgd9p/DUhj0pk2hvva7tDOZhojGx y/nUaI8++bLwsxNSTZi4VGbDrMRKT6LLukS2zqAouKQJga0dFoBk4o4gift7eyWD QGNkGby7mg779lIQnoZ5BCEw+l6eiv6PooULBzGPIPqJ15CEvX2/qk0eHndO -----END CERTIFICATE-----Generated at Tue May 12 22:43:39 2026 by rpki-client