$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154728.roa File: AS154728.roa (raw, json) Hash identifier: 5Kdma2gz3bD8P62yoMXZT3SjO5dGbJlPLNzwRVRVw54= Subject key identifier: BD:A8:13:2C:FD:83:A6:C3:AB:5A:01:11:E0:CE:6B:6D:3E:76:6D:AC Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 573DA64D68BE08BA2C0872279293B05E1C415C99 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154728.roa Signing time: Mon 22 Jun 2026 03:00:25 +0000 ROA not before: Mon 22 Jun 2026 02:55:25 +0000 ROA not after: Mon 21 Jun 2027 03:00:25 +0000 asID: 154728 IP address blocks: 162.4.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3d:a6:4d:68:be:08:ba:2c:08:72:27:92:93:b0:5e:1c:41:5c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 22 02:55:25 2026 GMT Not After : Jun 21 03:00:25 2027 GMT Subject: CN=BDA8132CFD83A6C3AB5A0111E0CE6B6D3E766DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:e8:38:3b:a6:cf:5c:45:90:ce:0f:7b:e0: 09:f2:cc:64:77:4d:9f:a0:87:c3:93:49:05:46:ca: 17:74:3b:ce:44:bb:12:91:0d:90:72:2a:e1:d4:6e: 9e:14:43:76:1a:ed:77:5b:1a:7a:0f:f7:d5:ca:ed: c6:06:20:57:5b:4d:84:3c:a8:74:48:c8:d8:df:21: b5:4e:f3:7a:02:b4:e3:27:6a:bc:45:6f:20:0d:af: 13:a1:38:dd:76:4e:fb:a9:1f:81:bc:f5:59:5e:d8: b3:d8:56:0b:ed:71:82:e8:fa:93:1c:fb:f9:9f:d0: 6a:38:b4:f1:6b:55:25:36:dc:fc:79:39:99:a3:22: b7:81:8f:06:b8:0c:7c:14:7c:b9:17:9e:d1:5b:e5: 0b:fd:36:b3:b2:8a:7a:9b:3a:f2:03:e1:bb:15:39: 6f:be:d9:ad:58:fd:e5:ec:c8:2b:1b:07:c9:ac:11: a4:ba:85:bd:44:28:1f:86:35:0a:28:7c:d5:ab:94: 5c:58:0e:f3:08:98:ae:85:6e:f8:c2:1d:47:55:80: 88:10:12:96:8e:7f:86:cd:22:3a:fc:bf:ad:c8:72: 6f:f5:e4:be:c5:e9:dd:70:d9:38:2a:f8:44:b8:d3: 34:5c:6e:2d:06:e6:85:29:f6:06:f1:38:c3:42:d0: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:13:2C:FD:83:A6:C3:AB:5A:01:11:E0:CE:6B:6D:3E:76:6D:AC X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.166.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:07:96:b6:ac:bc:d8:7d:6b:e2:7a:7f:b6:9c:1e:5a:30:fc: b1:18:6a:38:63:d8:af:e7:54:7e:d7:d1:a9:58:bc:9d:88:1a: 49:18:f4:00:52:5b:c1:e2:ad:57:f5:fa:b1:06:e1:5a:54:e5: 77:a8:49:78:be:b3:fe:6e:18:26:83:d4:e9:42:11:e1:29:33: e6:d0:a8:b3:97:66:53:b9:e2:7f:a4:b5:c6:b6:53:1e:b5:19: a2:c2:78:45:ef:a7:e0:96:da:c2:41:0b:6f:56:a2:60:bd:7c: 6d:63:77:ca:72:c1:ff:81:e9:a0:6b:a7:63:cd:38:a6:ff:e1: 8c:bb:fe:b9:3b:b3:95:99:eb:2d:61:f3:3c:1b:00:c4:f6:8e: 0c:80:95:d1:fa:b5:19:60:d1:26:b2:62:0f:1c:ad:a0:44:1a: ce:66:6b:8f:48:f5:dc:a0:3e:5a:07:98:13:0a:c3:f1:5f:75: da:5a:f1:7f:a2:8a:84:ba:ad:a1:c7:0e:56:2b:e5:54:eb:67: 20:b5:d8:70:5e:a8:73:35:77:fc:b8:d6:72:5f:6e:70:c4:7e: ed:b5:26:6f:14:a4:2e:18:4a:ed:37:cb:ac:e6:0d:d9:aa:11: 90:74:91:be:96:af:a1:3b:9d:18:a0:5f:eb:23:db:88:03:30: 57:db:2e:02 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVz2mTWi+CLosCHInkpOwXhxBXJkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyMjAyNTUyNVoX DTI3MDYyMTAzMDAyNVowMzExMC8GA1UEAxMoQkRBODEzMkNGRDgzQTZDM0FCNUEw MTExRTBDRTZCNkQzRTc2NkRBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQr6Dg7ps9cRZDOD3vgCfLMZHdNn6CHw5NJBUbKF3Q7zkS7EpENkHIq4dRu nhRDdhrtd1saeg/31crtxgYgV1tNhDyodEjI2N8htU7zegK04ydqvEVvIA2vE6E4 3XZO+6kfgbz1WV7Ys9hWC+1xguj6kxz7+Z/Qaji08WtVJTbc/Hk5maMit4GPBrgM fBR8uRee0VvlC/02s7KKeps68gPhuxU5b77ZrVj95ezIKxsHyawRpLqFvUQoH4Y1 Cih81auUXFgO8wiYroVu+MIdR1WAiBASlo5/hs0iOvy/rchyb/XkvsXp3XDZOCr4 RLjTNFxuLQbmhSn2BvE4w0LQwb0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS9qBMs /YOmw6taARHgzmttPnZtrDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogSmMA0GCSqGSIb3DQEBCwUAA4IBAQCLB5a2rLzYfWvien+2nB5aMPyx GGo4Y9iv51R+19GpWLydiBpJGPQAUlvB4q1X9fqxBuFaVOV3qEl4vrP+bhgmg9Tp QhHhKTPm0Kizl2ZTueJ/pLXGtlMetRmiwnhF76fgltrCQQtvVqJgvXxtY3fKcsH/ gemga6djzTim/+GMu/65O7OVmestYfM8GwDE9o4MgJXR+rUZYNEmsmIPHK2gRBrO ZmuPSPXcoD5aB5gTCsPxX3XaWvF/ooqEuq2hxw5WK+VU62cgtdhwXqhzNXf8uNZy X25wxH7ttSZvFKQuGErtN8us5g3ZqhGQdJG+lq+hO50YoF/rI9uIAzBX2y4C -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:30 2026 by rpki-client