$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154719.roa File: AS154719.roa (raw, json) Hash identifier: fPw8kn1uUTzmasnNKMIsN1Fa+xjBr8D1Yrz72HAZqIg= Subject key identifier: 10:E1:4A:38:2C:D5:AF:AA:15:13:A2:A2:E3:41:AC:C6:C8:4B:BE:E6 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6C4F5FE2B48C355C5BF29B08B80366E8C1565DE9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154719.roa Signing time: Tue 23 Jun 2026 02:16:38 +0000 ROA not before: Tue 23 Jun 2026 02:11:38 +0000 ROA not after: Tue 22 Jun 2027 02:16:38 +0000 asID: 154719 IP address blocks: 160.236.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4f:5f:e2:b4:8c:35:5c:5b:f2:9b:08:b8:03:66:e8:c1:56:5d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 23 02:11:38 2026 GMT Not After : Jun 22 02:16:38 2027 GMT Subject: CN=10E14A382CD5AFAA1513A2A2E341ACC6C84BBEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:1d:f0:33:c8:c7:71:2c:8e:5c:a9:21:06: d3:4a:5d:4e:35:76:99:89:fe:38:f8:71:8b:cb:b4: a2:8d:83:19:4f:7b:70:b7:8d:7d:8c:6e:e7:d2:06: d2:8b:fa:3a:91:29:09:8d:a7:06:b4:33:2a:e2:55: a3:1c:b0:de:84:69:1e:77:6a:d0:8d:c1:ba:1d:0a: 8a:a9:6e:81:52:8c:8e:b8:c8:24:f4:9e:35:64:d0: b1:8b:c2:03:6d:7f:35:f7:2a:13:01:b3:a2:6b:f1: e3:84:b1:1a:ae:04:29:97:c3:6d:7b:d5:50:f1:3e: 13:ec:5b:f5:2d:52:a5:0a:32:74:89:87:7e:3c:63: 61:65:d5:bf:32:a8:82:d9:ba:64:84:0f:3e:8a:41: e0:1a:02:66:69:bf:52:98:26:89:15:a0:fa:9b:21: 2f:fd:1e:e0:24:1f:15:d0:14:d1:28:27:4a:d2:fe: 4e:f4:77:87:a1:7a:c1:a0:a3:57:8f:ce:36:35:8f: 12:92:9e:75:e3:d9:2f:77:80:5e:2b:62:a9:ba:52: f3:71:b2:6a:3b:73:c1:78:35:8b:c3:6a:6a:c1:ff: 01:84:c3:82:56:1f:52:0b:4f:7d:b3:50:fb:0e:01: 0b:ae:c2:4a:38:0c:db:12:a8:fd:85:68:50:1a:b0: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:4A:38:2C:D5:AF:AA:15:13:A2:A2:E3:41:AC:C6:C8:4B:BE:E6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154719.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.4.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:45:a5:a6:3f:38:0f:08:ee:81:53:d3:eb:2c:63:58:d2:7e: a0:d2:bf:8d:3e:11:a2:a2:b9:27:2c:36:ae:b5:11:e3:06:c0: 77:c9:a3:70:e3:e4:ba:f3:a3:16:70:5f:e0:03:2b:81:2a:c7: 5b:da:a9:c0:bd:be:a0:53:f5:03:da:18:e3:96:63:13:1e:4f: 3a:50:19:c8:10:af:06:dd:43:87:04:07:e7:d0:bd:af:d9:2f: 5d:8a:8f:3f:f4:61:a2:cd:1e:c4:05:8a:cb:79:b2:70:5f:39: f6:05:fc:0e:c1:d6:02:3c:83:12:3a:84:cf:fe:e3:b9:44:79: f0:6a:64:7e:99:f0:fc:4d:77:f8:84:14:c6:8f:d0:2e:f7:24: 4f:09:a4:4d:9c:44:b3:ac:3f:14:87:37:75:d1:c7:3d:60:64: 47:e7:8d:ee:8b:c7:16:87:96:4d:13:09:31:34:24:71:e0:8b: db:f4:92:c9:9e:9d:be:b7:c9:95:6e:fe:bd:6d:14:69:58:98: ce:e2:00:91:af:ea:47:54:5a:18:1a:b2:f2:ca:b9:fc:84:fb: 54:b7:42:ba:7f:da:8d:f4:ea:ca:0d:9c:c6:c5:44:1f:4c:11: 66:43:f9:09:e9:0b:26:3d:c3:26:e2:2f:88:49:b8:fa:a2:ca: 9b:0f:68:6d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbE9f4rSMNVxb8psIuANm6MFWXekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyMzAyMTEzOFoX DTI3MDYyMjAyMTYzOFowMzExMC8GA1UEAxMoMTBFMTRBMzgyQ0Q1QUZBQTE1MTNB MkEyRTM0MUFDQzZDODRCQkVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKd3HfAzyMdxLI5cqSEG00pdTjV2mYn+OPhxi8u0oo2DGU97cLeNfYxu59IG 0ov6OpEpCY2nBrQzKuJVoxyw3oRpHndq0I3Buh0KiqlugVKMjrjIJPSeNWTQsYvC A21/NfcqEwGzomvx44SxGq4EKZfDbXvVUPE+E+xb9S1SpQoydImHfjxjYWXVvzKo gtm6ZIQPPopB4BoCZmm/UpgmiRWg+pshL/0e4CQfFdAU0SgnStL+TvR3h6F6waCj V4/ONjWPEpKedePZL3eAXitiqbpS83GyajtzwXg1i8NqasH/AYTDglYfUgtPfbNQ +w4BC67CSjgM2xKo/YVoUBqwz2cCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQQ4Uo4 LNWvqhUToqLjQazGyEu+5jAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzE5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOwEMA0GCSqGSIb3DQEBCwUAA4IBAQAeRaWmPzgPCO6BU9PrLGNY0n6g 0r+NPhGiorknLDautRHjBsB3yaNw4+S686MWcF/gAyuBKsdb2qnAvb6gU/UD2hjj lmMTHk86UBnIEK8G3UOHBAfn0L2v2S9dio8/9GGizR7EBYrLebJwXzn2BfwOwdYC PIMSOoTP/uO5RHnwamR+mfD8TXf4hBTGj9Au9yRPCaRNnESzrD8Uhzd10cc9YGRH 543ui8cWh5ZNEwkxNCRx4Ivb9JLJnp2+t8mVbv69bRRpWJjO4gCRr+pHVFoYGrLy yrn8hPtUt0K6f9qN9OrKDZzGxUQfTBFmQ/kJ6QsmPcMm4i+ISbj6osqbD2ht -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:25 2026 by rpki-client