$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154669.roa File: AS154669.roa (raw, json) Hash identifier: amSgvPa5AEMpvTzJwEVrfvnmPgfVYl+aLZj7o3dvmGY= Subject key identifier: 80:19:46:6D:1F:30:ED:E2:14:40:23:E6:36:66:9F:28:9B:F4:CB:CA Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 67F3387FCCC2F05CFFE9D515C1DD6DCBDA439395 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154669.roa Signing time: Tue 12 May 2026 02:28:47 +0000 ROA not before: Tue 12 May 2026 02:23:47 +0000 ROA not after: Tue 11 May 2027 02:28:47 +0000 asID: 154669 IP address blocks: 162.4.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f3:38:7f:cc:c2:f0:5c:ff:e9:d5:15:c1:dd:6d:cb:da:43:93:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 12 02:23:47 2026 GMT Not After : May 11 02:28:47 2027 GMT Subject: CN=8019466D1F30EDE2144023E636669F289BF4CBCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:b6:ad:58:27:a8:aa:2c:1f:0a:0e:47:82: b5:ef:ac:58:10:95:fa:a9:2e:31:5f:0d:dd:97:02: af:5d:52:11:1a:6d:2d:58:4b:8c:56:27:de:0d:3f: 67:e6:7d:12:27:98:83:b1:ea:c7:0b:19:73:fb:af: d7:23:17:07:36:3f:e9:06:48:dd:c1:25:3d:ca:95: 5e:2e:44:98:83:03:82:41:95:7c:7a:cc:97:25:f6: ec:7c:c5:dc:aa:5c:54:7f:2b:c6:42:72:35:68:17: 42:62:8a:ed:ac:55:45:c0:ea:ff:bd:bf:5b:e5:51: 6f:00:25:10:ec:a2:1d:b1:ee:fa:e3:28:af:cf:f9: c9:31:d1:bd:d6:a5:3c:29:ce:89:e1:2b:3c:88:fb: 47:a2:88:89:46:62:57:3d:e5:a1:22:72:c4:01:4f: 9d:eb:d6:53:64:63:16:68:ab:a8:a3:f8:af:82:d8: 04:2f:22:d5:06:32:48:f9:75:2f:55:9f:32:f1:17: a0:5f:c3:76:b9:89:0f:04:75:e0:52:7b:cc:89:de: 0a:7b:4d:20:55:89:eb:29:d6:9c:6a:3c:68:c2:dc: 15:91:06:c3:86:ab:aa:cf:dd:fe:dc:1b:1b:01:90: ec:7a:bd:d6:24:df:82:54:2a:a7:a1:a4:f5:f2:77: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:19:46:6D:1F:30:ED:E2:14:40:23:E6:36:66:9F:28:9B:F4:CB:CA X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154669.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.96.0/24 Signature Algorithm: sha256WithRSAEncryption 97:1e:b3:c0:ad:35:ee:74:3d:00:65:ed:fa:37:b3:da:bf:d6: c0:ea:f3:13:fc:c3:dc:63:4e:8c:8f:98:72:67:8f:f8:2d:a7: bf:be:9a:99:f6:8c:31:b0:39:06:38:d2:c3:9f:3d:98:0b:f0: 21:f6:96:5c:68:c3:2e:4c:a2:85:9a:7f:d5:0c:ce:b0:62:ef: c4:f9:84:a8:eb:5c:d4:87:3d:59:ce:21:17:9b:c0:6a:26:66: 61:97:ed:7f:79:9f:3c:95:8e:a3:2e:ba:5e:a4:d3:c0:57:33: 39:5b:67:fd:63:14:56:e5:b7:40:f4:cd:a2:00:c8:b4:81:c5: e9:26:f0:2c:2d:85:ca:c3:82:23:ae:9f:1a:20:13:6f:c5:b0: b8:35:4d:e8:39:5c:53:f7:60:47:1a:bb:a8:06:5a:bc:07:ae: e9:f5:c6:95:d5:ff:e7:8b:21:09:5e:96:4f:0d:0d:0d:82:3d: f5:fe:0e:3d:be:d9:f1:a4:c8:b3:c9:6d:80:9a:35:e6:9e:7d: 5e:7d:3d:ea:2e:0c:ba:75:3e:80:dd:32:42:d7:0e:e6:b3:b1: ae:53:76:20:73:50:9c:da:0d:0c:b3:74:f6:39:96:93:b9:15: cd:31:0a:43:0b:2e:47:ac:56:04:5a:e1:f2:7c:cb:73:75:e0: ee:cf:ae:27 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZ/M4f8zC8Fz/6dUVwd1ty9pDk5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUxMjAyMjM0N1oX DTI3MDUxMTAyMjg0N1owMzExMC8GA1UEAxMoODAxOTQ2NkQxRjMwRURFMjE0NDAy M0U2MzY2NjlGMjg5QkY0Q0JDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMentq1YJ6iqLB8KDkeCte+sWBCV+qkuMV8N3ZcCr11SERptLVhLjFYn3g0/ Z+Z9EieYg7HqxwsZc/uv1yMXBzY/6QZI3cElPcqVXi5EmIMDgkGVfHrMlyX27HzF 3KpcVH8rxkJyNWgXQmKK7axVRcDq/72/W+VRbwAlEOyiHbHu+uMor8/5yTHRvdal PCnOieErPIj7R6KIiUZiVz3loSJyxAFPnevWU2RjFmirqKP4r4LYBC8i1QYySPl1 L1WfMvEXoF/DdrmJDwR14FJ7zIneCntNIFWJ6ynWnGo8aMLcFZEGw4arqs/d/twb GwGQ7Hq91iTfglQqp6Gk9fJ3ta0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSAGUZt HzDt4hRAI+Y2Zp8om/TLyjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogRgMA0GCSqGSIb3DQEBCwUAA4IBAQCXHrPArTXudD0AZe36N7Pav9bA 6vMT/MPcY06Mj5hyZ4/4Lae/vpqZ9owxsDkGONLDnz2YC/Ah9pZcaMMuTKKFmn/V DM6wYu/E+YSo61zUhz1ZziEXm8BqJmZhl+1/eZ88lY6jLrpepNPAVzM5W2f9YxRW 5bdA9M2iAMi0gcXpJvAsLYXKw4Ijrp8aIBNvxbC4NU3oOVxT92BHGruoBlq8B67p 9caV1f/niyEJXpZPDQ0Ngj31/g49vtnxpMizyW2AmjXmnn1efT3qLgy6dT6A3TJC 1w7ms7GuU3Ygc1Cc2g0Ms3T2OZaTuRXNMQpDCy5HrFYEWuHyfMtzdeDuz64n -----END CERTIFICATE-----Generated at Tue May 12 22:43:07 2026 by rpki-client