$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154733.roa File: AS154733.roa (raw, json) Hash identifier: z+GK3Jmcd5NedML6p9VX2udCCoMEc+HN+ITXeeJvNtQ= Subject key identifier: B7:B7:8C:44:86:00:60:F6:14:C1:0C:19:C1:0D:14:EA:F4:18:37:16 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7321A0E9230C498455459FB7C12730C06847C808 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154733.roa Signing time: Mon 29 Jun 2026 03:01:00 +0000 ROA not before: Mon 29 Jun 2026 02:56:00 +0000 ROA not after: Mon 28 Jun 2027 03:01:00 +0000 asID: 154733 IP address blocks: 160.236.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:21:a0:e9:23:0c:49:84:55:45:9f:b7:c1:27:30:c0:68:47:c8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 29 02:56:00 2026 GMT Not After : Jun 28 03:01:00 2027 GMT Subject: CN=B7B78C44860060F614C10C19C10D14EAF4183716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:31:90:73:97:b6:c9:45:0b:ce:d6:6a:1f: 3b:1c:38:6e:0c:db:0b:41:73:08:da:60:cd:6f:b4: 48:48:ee:70:69:fb:c8:2c:8c:52:2a:48:06:05:0c: 2c:c9:6a:b3:4b:ed:ba:22:d7:86:e2:e0:03:12:da: ad:e1:b1:1c:f6:d0:99:4b:05:a8:04:b7:2f:36:9c: 86:88:94:40:77:6c:b4:37:94:73:18:c5:00:7b:99: 5f:30:f4:3f:d7:ce:a9:f1:b6:8e:c5:10:75:87:56: 93:54:de:36:24:99:e2:69:3d:69:55:10:aa:25:1f: 78:f8:1d:22:48:20:72:76:65:42:a5:8c:5e:69:2c: 94:ed:f2:e3:60:2a:6d:08:4c:28:83:01:0a:b4:bc: 0c:65:5d:e7:59:e0:f8:9f:6c:d1:7c:e8:d2:56:2c: a0:10:34:62:1c:c7:66:da:00:66:19:af:f3:c9:8d: 8a:7c:b0:8a:54:32:29:cc:94:06:01:f7:67:0d:0d: 0f:2f:83:9f:b6:9a:1b:b3:d5:45:35:c5:5a:df:b0: e4:a4:7f:e1:c0:7b:98:42:64:c9:53:ec:00:ff:c0: f1:8a:17:68:d6:ea:d6:b1:24:c9:48:73:fa:99:68: 0c:69:55:94:3d:14:88:50:cb:58:53:c3:2a:ee:fa: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B7:8C:44:86:00:60:F6:14:C1:0C:19:C1:0D:14:EA:F4:18:37:16 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.34.0/23 Signature Algorithm: sha256WithRSAEncryption 90:55:a7:99:c6:04:30:46:29:6d:60:28:9d:97:64:52:26:c1: 7e:4c:46:e3:76:f2:5b:7c:ad:98:b7:b8:e3:4a:f4:aa:2a:0d: a7:84:ef:ea:b6:7f:22:31:05:35:45:22:39:da:f8:ff:fc:63: 26:7b:67:1c:e8:28:54:bf:e9:fe:c3:f4:4f:3e:09:46:47:77: e4:af:aa:8a:56:d2:ee:5d:c2:b6:0c:5f:0e:23:03:02:28:ba: b3:44:67:61:00:f7:1e:5b:14:56:3f:ff:15:74:9e:2a:45:af: d1:1b:8e:73:66:00:e7:35:2a:da:d7:18:56:8f:1d:91:c9:91: 5f:af:68:df:a9:ce:73:70:71:e2:40:2c:dc:2d:14:81:16:5b: 5d:25:ed:17:c8:e8:05:1f:1f:5c:47:28:68:85:d0:ef:04:25: 94:45:d1:bb:c6:72:9d:20:91:80:8a:1b:03:9c:3d:d9:b0:2c: b4:dd:b3:f1:18:3a:5f:92:5a:45:19:3c:a2:4f:0a:a4:18:8b: 50:93:17:55:4d:df:63:d2:ea:99:99:ad:b4:49:87:49:ef:7b: d6:18:aa:b0:07:de:21:95:20:03:4d:d6:b8:a3:bb:1e:4e:68: 6f:a6:e5:8b:3e:eb:d4:d2:5b:b5:2e:e8:b5:01:14:e9:ab:74: fd:e0:79:e7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcyGg6SMMSYRVRZ+3wScwwGhHyAgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyOTAyNTYwMFoX DTI3MDYyODAzMDEwMFowMzExMC8GA1UEAxMoQjdCNzhDNDQ4NjAwNjBGNjE0QzEw QzE5QzEwRDE0RUFGNDE4MzcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwoMZBzl7bJRQvO1mofOxw4bgzbC0FzCNpgzW+0SEjucGn7yCyMUipIBgUM LMlqs0vtuiLXhuLgAxLareGxHPbQmUsFqAS3LzachoiUQHdstDeUcxjFAHuZXzD0 P9fOqfG2jsUQdYdWk1TeNiSZ4mk9aVUQqiUfePgdIkggcnZlQqWMXmkslO3y42Aq bQhMKIMBCrS8DGVd51ng+J9s0Xzo0lYsoBA0YhzHZtoAZhmv88mNinywilQyKcyU BgH3Zw0NDy+Dn7aaG7PVRTXFWt+w5KR/4cB7mEJkyVPsAP/A8YoXaNbq1rEkyUhz +ploDGlVlD0UiFDLWFPDKu76TtcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS3t4xE hgBg9hTBDBnBDRTq9Bg3FjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOwiMA0GCSqGSIb3DQEBCwUAA4IBAQCQVaeZxgQwRiltYCidl2RSJsF+ TEbjdvJbfK2Yt7jjSvSqKg2nhO/qtn8iMQU1RSI52vj//GMme2cc6ChUv+n+w/RP PglGR3fkr6qKVtLuXcK2DF8OIwMCKLqzRGdhAPceWxRWP/8VdJ4qRa/RG45zZgDn NSra1xhWjx2RyZFfr2jfqc5zcHHiQCzcLRSBFltdJe0XyOgFHx9cRyhohdDvBCWU RdG7xnKdIJGAihsDnD3ZsCy03bPxGDpfklpFGTyiTwqkGItQkxdVTd9j0uqZma20 SYdJ73vWGKqwB94hlSADTda4o7seTmhvpuWLPuvU0lu1Lui1ARTpq3T94Hnn -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:30 2026 by rpki-client