$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154721.roa File: AS154721.roa (raw, json) Hash identifier: FYZ3+LIahJfvL25I+aYeGdcm5KVxmBL0yvTHnr2DWFo= Subject key identifier: 3B:59:BE:BA:72:CA:8D:37:F2:A5:F8:CE:AA:A2:83:9A:49:6E:B6:D0 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 45BD0494FC71A65BF0ADA2DBD3753F42C0F22D1C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154721.roa Signing time: Fri 19 Jun 2026 06:54:51 +0000 ROA not before: Fri 19 Jun 2026 06:49:51 +0000 ROA not after: Fri 18 Jun 2027 06:54:51 +0000 asID: 154721 IP address blocks: 160.236.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bd:04:94:fc:71:a6:5b:f0:ad:a2:db:d3:75:3f:42:c0:f2:2d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 19 06:49:51 2026 GMT Not After : Jun 18 06:54:51 2027 GMT Subject: CN=3B59BEBA72CA8D37F2A5F8CEAAA2839A496EB6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:cf:5c:8a:53:4c:c2:37:9f:87:4d:6b:d1: 83:83:81:da:37:85:91:4f:28:84:be:26:ec:5c:e4: e7:fc:be:0a:a2:fb:39:c7:33:cb:f6:0a:7c:0b:6a: 59:58:b9:84:dc:da:17:f9:19:d2:35:bc:d0:08:52: e5:a7:6b:af:dd:cc:f3:ae:4e:27:ea:de:d9:b8:f6: 25:16:da:80:c5:93:59:64:b7:df:21:fd:70:2e:c3: 0c:73:34:bc:1a:86:43:d7:09:31:56:81:df:f1:61: bc:05:b6:bd:0a:15:db:86:69:9f:be:68:88:67:18: 6b:f0:cc:0a:df:6f:71:ce:b7:61:12:4c:51:bb:5d: 57:aa:74:f8:73:df:84:33:48:54:db:72:2e:1f:93: ca:45:e1:4a:56:31:24:2c:55:29:b9:2d:bf:8e:bb: 9a:4c:0f:f8:52:30:68:bb:14:73:c6:07:38:e3:89: 9f:84:f8:75:d0:bb:33:3f:3a:af:89:49:2f:42:c9: 7c:d8:c7:2f:57:c5:b3:41:5f:c2:c9:80:26:e1:10: 1f:16:8e:ec:a0:c1:f8:19:fe:43:b0:ea:f4:bf:02: d9:bb:9d:36:5c:b2:32:dd:a0:fa:09:94:ed:0c:b7: 00:63:dd:44:1a:39:9a:2b:be:47:df:2e:1c:92:54: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:BE:BA:72:CA:8D:37:F2:A5:F8:CE:AA:A2:83:9A:49:6E:B6:D0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.2.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:8f:31:42:f1:cf:13:52:0a:48:c0:da:44:d9:c2:7c:d3:70: 22:59:d9:1e:75:9d:2c:8f:8c:fd:57:a5:6f:29:a0:3f:a2:03: 7d:f6:57:44:12:ee:97:ce:a1:f4:4c:25:88:94:ba:90:77:54: 3e:d4:ca:1d:42:95:16:ea:5e:2d:2c:48:57:3f:d6:81:ce:01: 6c:17:fe:a8:33:37:11:18:e4:13:31:9d:b8:70:48:0a:b3:64: 96:cd:8a:80:4a:15:9c:af:76:87:eb:bf:08:45:14:2c:00:b4: 12:f7:d4:3b:75:04:0c:b2:19:50:95:5f:3e:c6:38:08:d4:bd: 9e:5d:d6:8c:93:b7:b8:32:61:d0:3c:72:99:c5:c2:6a:74:a5: 56:87:3b:3c:7d:da:12:ff:3f:23:b4:14:c8:45:17:05:91:c2: bb:ac:fd:b1:b0:a4:e4:97:aa:7a:99:11:bc:60:39:bf:58:c2: b2:02:da:67:63:b0:07:cc:cf:aa:9a:6a:76:8c:bc:48:7a:f3: c5:e4:30:aa:44:04:ae:da:68:71:a4:a6:c6:74:14:5f:75:10: ed:51:bd:3b:a6:c5:3d:fe:5f:92:46:2c:c1:9d:ea:05:f7:f9: c4:0d:4d:02:23:c3:e2:53:80:9e:92:35:a5:fe:0c:3a:37:89: 16:fd:7e:bf -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURb0ElPxxplvwraLb03U/QsDyLRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYxOTA2NDk1MVoX DTI3MDYxODA2NTQ1MVowMzExMC8GA1UEAxMoM0I1OUJFQkE3MkNBOEQzN0YyQTVG OENFQUFBMjgzOUE0OTZFQjZEMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMufz1yKU0zCN5+HTWvRg4OB2jeFkU8ohL4m7Fzk5/y+CqL7Occzy/YKfAtq WVi5hNzaF/kZ0jW80AhS5adrr93M865OJ+re2bj2JRbagMWTWWS33yH9cC7DDHM0 vBqGQ9cJMVaB3/FhvAW2vQoV24Zpn75oiGcYa/DMCt9vcc63YRJMUbtdV6p0+HPf hDNIVNtyLh+TykXhSlYxJCxVKbktv467mkwP+FIwaLsUc8YHOOOJn4T4ddC7Mz86 r4lJL0LJfNjHL1fFs0FfwsmAJuEQHxaO7KDB+Bn+Q7Dq9L8C2budNlyyMt2g+gmU 7Qy3AGPdRBo5miu+R98uHJJUxv8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ7Wb66 csqNN/Kl+M6qooOaSW620DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOwCMA0GCSqGSIb3DQEBCwUAA4IBAQB9jzFC8c8TUgpIwNpE2cJ803Ai WdkedZ0sj4z9V6VvKaA/ogN99ldEEu6XzqH0TCWIlLqQd1Q+1ModQpUW6l4tLEhX P9aBzgFsF/6oMzcRGOQTMZ24cEgKs2SWzYqAShWcr3aH678IRRQsALQS99Q7dQQM shlQlV8+xjgI1L2eXdaMk7e4MmHQPHKZxcJqdKVWhzs8fdoS/z8jtBTIRRcFkcK7 rP2xsKTkl6p6mRG8YDm/WMKyAtpnY7AHzM+qmmp2jLxIevPF5DCqRASu2mhxpKbG dBRfdRDtUb07psU9/l+SRizBneoF9/nEDU0CI8PiU4CekjWl/gw6N4kW/X6/ -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:24 2026 by rpki-client