$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154704.roa File: AS154704.roa (raw, json) Hash identifier: WIh3JxugkEG5izmJp9KpRsye/RuldCRqIOG5z3E/Oh4= Subject key identifier: 6E:61:19:D8:F1:73:3A:E7:59:52:97:E3:AA:55:04:FE:24:75:E6:81 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 248729E60864437A90605FE042B2D3D4071F871F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154704.roa Signing time: Thu 25 Jun 2026 08:39:15 +0000 ROA not before: Thu 25 Jun 2026 08:34:15 +0000 ROA not after: Thu 24 Jun 2027 08:39:15 +0000 asID: 154704 IP address blocks: 162.4.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:87:29:e6:08:64:43:7a:90:60:5f:e0:42:b2:d3:d4:07:1f:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 25 08:34:15 2026 GMT Not After : Jun 24 08:39:15 2027 GMT Subject: CN=6E6119D8F1733AE7595297E3AA5504FE2475E681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:2e:65:47:58:71:cb:94:3a:b7:56:db:a3: 93:5f:4c:42:af:24:8c:44:52:db:9a:9d:2c:44:9c: 8c:35:8e:8f:72:a6:d4:5d:34:2b:bd:a5:7f:7b:d3: c8:79:5a:46:b4:86:3f:ba:0a:e1:da:fa:79:e7:9f: 37:ef:6d:ef:2b:4a:27:9b:1d:f3:41:db:ce:eb:32: 39:5a:e5:c8:8d:4d:f8:3e:b6:3f:10:02:92:5a:73: b0:73:3a:d1:6c:24:53:f5:9c:a3:07:ad:26:dd:20: bb:59:ce:3d:28:ad:49:e3:aa:93:f1:89:a4:80:06: bd:bd:4b:25:4e:ca:ce:5c:91:85:03:ac:61:ac:d3: ca:07:e7:da:44:10:93:4e:d3:82:fe:56:3a:9a:82: f0:a8:f9:9c:11:f2:ed:27:06:52:18:e3:ce:49:60: 75:f9:17:ef:4f:53:20:cf:3f:fc:d7:27:b6:aa:0e: 0c:84:56:8b:ea:2a:2d:ee:13:5a:46:5a:06:52:05: 44:98:dd:b8:6f:70:a6:c3:a8:79:68:87:c6:d5:8b: 45:5c:22:b7:d8:15:c2:a4:33:af:01:a5:99:7e:a7: d8:25:7c:2f:02:87:67:e0:c8:3f:73:26:a3:38:c9: 84:90:86:3e:b0:9e:19:02:09:19:c7:c0:b8:35:82: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:19:D8:F1:73:3A:E7:59:52:97:E3:AA:55:04:FE:24:75:E6:81 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.218.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4c:8d:9d:9e:f9:f8:bc:32:40:88:76:19:a4:12:de:fb:72: fc:67:e9:2f:b9:58:16:55:c1:86:a8:63:de:61:1b:51:89:4c: 9c:0b:5c:df:6a:68:3d:9a:64:23:72:fb:54:4d:5d:77:ac:9c: ba:2b:fe:b8:50:7e:b9:27:8a:65:34:a4:35:1b:b8:fa:ed:78: 7f:18:79:48:0e:d7:d9:18:86:c7:51:53:0d:b3:ed:f6:13:b5: 7d:a7:2a:72:e3:68:41:b0:02:d4:0e:2f:67:c7:73:c2:7f:98: ba:98:fe:6e:1c:53:0f:67:40:59:20:89:64:c4:d9:7b:fb:d9: 10:d7:b4:55:e9:11:f6:ec:c1:5f:7d:80:93:91:89:cb:29:4d: a8:bf:17:9a:c2:5b:e9:4f:1e:a6:22:0a:fb:02:d1:6f:c9:07: 82:89:02:86:02:5f:54:65:0f:7b:c8:f5:52:55:85:76:35:ef: 2f:37:a5:7b:9a:68:9f:fa:42:cd:26:97:4c:9c:be:06:32:4f: 3a:9d:0f:4e:34:b8:6d:08:c3:a3:6d:52:10:03:7d:7f:fa:61: 00:66:c4:94:03:08:d3:09:e4:c2:68:f7:85:b4:13:ef:1f:52: c7:d0:86:06:ef:07:b2:61:80:b2:14:db:17:99:0d:6f:77:09: 08:70:13:86 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJIcp5ghkQ3qQYF/gQrLT1Acfhx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyNTA4MzQxNVoX DTI3MDYyNDA4MzkxNVowMzExMC8GA1UEAxMoNkU2MTE5RDhGMTczM0FFNzU5NTI5 N0UzQUE1NTA0RkUyNDc1RTY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVFLmVHWHHLlDq3Vtujk19MQq8kjERS25qdLEScjDWOj3Km1F00K72lf3vT yHlaRrSGP7oK4dr6eeefN+9t7ytKJ5sd80HbzusyOVrlyI1N+D62PxACklpzsHM6 0WwkU/WcowetJt0gu1nOPSitSeOqk/GJpIAGvb1LJU7KzlyRhQOsYazTygfn2kQQ k07Tgv5WOpqC8Kj5nBHy7ScGUhjjzklgdfkX709TIM8//NcntqoODIRWi+oqLe4T WkZaBlIFRJjduG9wpsOoeWiHxtWLRVwit9gVwqQzrwGlmX6n2CV8LwKHZ+DIP3Mm ozjJhJCGPrCeGQIJGcfAuDWC1csCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRuYRnY 8XM651lSl+OqVQT+JHXmgTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTaMA0GCSqGSIb3DQEBCwUAA4IBAQANTI2dnvn4vDJAiHYZpBLe+3L8 Z+kvuVgWVcGGqGPeYRtRiUycC1zfamg9mmQjcvtUTV13rJy6K/64UH65J4plNKQ1 G7j67Xh/GHlIDtfZGIbHUVMNs+32E7V9pypy42hBsALUDi9nx3PCf5i6mP5uHFMP Z0BZIIlkxNl7+9kQ17RV6RH27MFffYCTkYnLKU2ovxeawlvpTx6mIgr7AtFvyQeC iQKGAl9UZQ97yPVSVYV2Ne8vN6V7mmif+kLNJpdMnL4GMk86nQ9ONLhtCMOjbVIQ A31/+mEAZsSUAwjTCeTCaPeFtBPvH1LH0IYG7weyYYCyFNsXmQ1vdwkIcBOG -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:26 2026 by rpki-client