$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154722.roa File: AS154722.roa (raw, json) Hash identifier: hq705iqez+tAAxjtxAPNed9ZIvqdUvdZ4t1GJIzw7Qc= Subject key identifier: 9D:F3:80:4F:06:B6:8D:89:B9:08:BC:77:61:D6:99:76:BF:1A:8E:1C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2C5146FF62852958CA4E4938E6127CF8574823D7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154722.roa Signing time: Wed 01 Jul 2026 03:11:17 +0000 ROA not before: Wed 01 Jul 2026 03:06:17 +0000 ROA not after: Wed 30 Jun 2027 03:11:17 +0000 asID: 154722 IP address blocks: 160.236.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:51:46:ff:62:85:29:58:ca:4e:49:38:e6:12:7c:f8:57:48:23:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 1 03:06:17 2026 GMT Not After : Jun 30 03:11:17 2027 GMT Subject: CN=9DF3804F06B68D89B908BC7761D69976BF1A8E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cd:36:de:32:ea:e9:51:b7:a6:d6:42:80:7c: d8:85:35:9c:56:ee:1e:2d:f9:04:4d:96:c2:6a:9a: b5:09:d5:3b:01:b5:05:1c:5b:6d:a3:4b:f4:33:be: 91:a5:84:51:2a:0f:14:91:90:07:e1:f2:78:0a:35: 71:6e:e6:84:f7:09:46:af:27:ce:84:46:1c:2f:e8: e7:9e:b5:d7:e2:77:66:45:63:4d:55:b2:f5:cd:f6: ed:56:11:fe:92:72:3c:52:23:51:cf:b5:4e:77:b5: f9:69:c0:09:73:97:c0:d2:9b:d4:c7:d1:6d:6b:73: 5d:c3:c9:63:06:25:75:b6:05:45:f4:f4:65:c3:74: 88:8b:a4:b3:32:4c:fe:16:fc:e7:8b:76:70:e1:47: 73:18:03:87:51:d8:0c:fb:c9:a9:9b:4e:b6:bd:0e: 5f:d2:b4:4b:f0:f7:1f:ff:dd:23:56:19:2c:66:9e: c3:18:c8:0e:32:52:12:14:06:43:4c:01:62:93:08: a0:e4:1b:15:81:a3:79:65:74:26:bd:4b:a7:0d:9b: 2e:97:9b:58:9a:1f:7c:47:d8:f5:a2:fd:47:70:b6: 0e:a6:62:d8:b9:37:f6:b7:76:db:fd:18:4e:33:f3: 78:88:6d:19:28:26:85:c8:f6:87:40:f3:9b:ac:6c: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:80:4F:06:B6:8D:89:B9:08:BC:77:61:D6:99:76:BF:1A:8E:1C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154722.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.0.0/24 Signature Algorithm: sha256WithRSAEncryption 83:d0:2e:84:dc:72:9a:cc:a8:f8:e4:56:29:86:b4:b5:be:11: 69:f1:aa:50:17:16:7f:1c:54:e6:bf:7b:57:a2:8d:40:85:e2: b3:d8:03:95:d1:ec:a2:74:d7:72:73:ad:31:ef:2d:5d:a7:d2: fe:c5:6b:3e:31:c3:df:7a:e7:2d:5e:20:87:6c:6e:f5:05:ae: 83:2a:57:55:b7:bb:dd:31:19:aa:6b:e1:04:17:42:49:e3:ce: 61:15:8e:f1:d6:47:47:7b:20:65:1c:79:d6:e9:7b:2f:c6:6b: fb:bc:1c:2d:5a:be:db:44:fe:4c:d9:c7:07:82:c8:8b:45:a9: e7:44:a5:64:c7:ec:9c:75:7d:56:ea:0e:f5:e4:1b:81:dd:6a: 11:0c:17:0e:de:35:4b:45:86:91:19:0a:15:c3:3f:97:e4:82: 43:95:10:09:e0:66:43:27:9c:5e:6b:50:41:ef:3b:ab:bc:94: c1:6c:7f:51:83:73:81:a4:c7:af:fb:fe:3d:76:2f:0b:ed:7c: d9:cc:1e:2e:ce:ed:09:3d:81:19:55:3e:4d:ba:1e:10:17:9c: 0b:41:f5:79:af:6b:da:e3:38:b2:b2:5f:bd:27:7d:32:e2:7e: 32:8b:aa:71:fb:a5:78:e0:02:34:e2:49:63:b9:45:7a:41:fe: 85:61:f9:98 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULFFG/2KFKVjKTkk45hJ8+FdII9cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwMTAzMDYxN1oX DTI3MDYzMDAzMTExN1owMzExMC8GA1UEAxMoOURGMzgwNEYwNkI2OEQ4OUI5MDhC Qzc3NjFENjk5NzZCRjFBOEUxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/NNt4y6ulRt6bWQoB82IU1nFbuHi35BE2WwmqatQnVOwG1BRxbbaNL9DO+ kaWEUSoPFJGQB+HyeAo1cW7mhPcJRq8nzoRGHC/o55611+J3ZkVjTVWy9c327VYR /pJyPFIjUc+1Tne1+WnACXOXwNKb1MfRbWtzXcPJYwYldbYFRfT0ZcN0iIukszJM /hb854t2cOFHcxgDh1HYDPvJqZtOtr0OX9K0S/D3H//dI1YZLGaewxjIDjJSEhQG Q0wBYpMIoOQbFYGjeWV0Jr1Lpw2bLpebWJoffEfY9aL9R3C2DqZi2Lk39rd22/0Y TjPzeIhtGSgmhcj2h0Dzm6xsLoECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSd84BP BraNibkIvHdh1pl2vxqOHDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwAMA0GCSqGSIb3DQEBCwUAA4IBAQCD0C6E3HKazKj45FYphrS1vhFp 8apQFxZ/HFTmv3tXoo1AheKz2AOV0eyidNdyc60x7y1dp9L+xWs+McPfeuctXiCH bG71Ba6DKldVt7vdMRmqa+EEF0JJ485hFY7x1kdHeyBlHHnW6Xsvxmv7vBwtWr7b RP5M2ccHgsiLRannRKVkx+ycdX1W6g715BuB3WoRDBcO3jVLRYaRGQoVwz+X5IJD lRAJ4GZDJ5xea1BB7zurvJTBbH9Rg3OBpMev+/49di8L7XzZzB4uzu0JPYEZVT5N uh4QF5wLQfV5r2va4ziysl+9J30y4n4yi6px+6V44AI04kljuUV6Qf6FYfmY -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:30 2026 by rpki-client