$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154736.roa File: AS154736.roa (raw, json) Hash identifier: t0NcGvu6pE+zkSBAWgErp8OtPR7etDXgXqvJvKcQg4U= Subject key identifier: 13:D3:5C:3C:75:50:24:C8:DA:37:85:A9:9D:0F:F3:A3:E8:30:A0:D9 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 17F69E76DD0A073749880FCDC535BC2D1645171C Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154736.roa Signing time: Mon 29 Jun 2026 09:06:12 +0000 ROA not before: Mon 29 Jun 2026 09:01:12 +0000 ROA not after: Mon 28 Jun 2027 09:06:12 +0000 asID: 154736 IP address blocks: 160.236.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f6:9e:76:dd:0a:07:37:49:88:0f:cd:c5:35:bc:2d:16:45:17:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 29 09:01:12 2026 GMT Not After : Jun 28 09:06:12 2027 GMT Subject: CN=13D35C3C755024C8DA3785A99D0FF3A3E830A0D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:e1:e1:f8:3b:e8:5b:34:10:17:ac:23:b5: 4b:fb:39:c5:3a:aa:64:14:22:e1:fe:c8:3f:43:07: 98:f3:2e:ef:9e:0b:8e:63:a0:5c:1e:f5:eb:f2:53: 13:ba:03:35:73:d8:39:d5:0b:7b:cf:1f:fa:92:e1: d6:be:75:02:93:23:47:96:f2:08:f1:02:cb:89:9b: 76:33:3c:c1:18:42:ee:3b:32:f8:b6:c2:e1:98:d7: 5e:23:2a:da:0d:6f:de:48:40:62:b9:a0:bf:10:a5: 43:36:ff:4a:45:44:28:e9:c7:85:eb:42:92:03:cf: 02:09:54:8c:67:7a:52:f4:75:53:9d:b8:48:81:46: 97:6e:2d:24:40:bb:51:52:d1:8d:e1:88:76:62:b7: 82:5d:45:6e:e8:00:cd:8f:a5:2b:cd:0e:ba:70:9d: 96:b2:9a:03:04:1a:2a:d0:d8:45:5a:69:28:21:f1: 37:8a:f5:a3:a8:3b:b3:29:02:62:49:d1:94:47:d9: e4:b1:f6:57:01:11:71:a4:78:c1:94:1b:36:bf:22: 7e:bb:fa:2e:94:30:90:b1:b1:46:dd:da:c5:04:9b: 53:9a:ae:85:07:02:ab:73:8d:57:d5:54:30:a2:a4: a4:31:ce:ce:d1:9f:d1:d8:c4:56:59:46:90:47:9c: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D3:5C:3C:75:50:24:C8:DA:37:85:A9:9D:0F:F3:A3:E8:30:A0:D9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:c9:b4:0e:d4:59:b2:47:de:4f:2b:f7:75:40:3c:9d:f9:39: c0:76:16:b6:bf:98:eb:93:0b:8a:79:18:94:1b:c1:51:50:ee: 07:f2:92:ab:73:2f:bd:6a:ca:ee:fe:51:85:19:d6:c3:8f:51: 87:ae:2d:4f:15:51:2f:9e:cc:cc:0c:99:19:08:5a:9d:66:2c: a6:5f:34:18:cf:39:b7:cb:1c:65:74:bf:4a:f6:72:fb:bd:18: 81:12:1f:eb:2f:a7:56:71:c7:65:27:11:b4:19:1f:ee:17:b1: 9b:e8:f3:5c:2d:5f:4d:dc:18:39:61:d6:4c:ae:bb:00:3e:18: f7:31:00:c4:9d:bc:4c:32:fb:70:1e:e3:fd:5e:6b:16:ef:25: 5e:6d:cd:79:e3:3f:9e:89:e3:9d:07:98:0f:06:7c:cf:ba:1e: fc:f2:95:f3:30:98:39:33:16:dc:ac:1e:e9:8a:9b:42:d3:20: 98:ad:9c:97:e3:4f:d6:81:e6:a7:c9:d9:d4:c7:eb:a6:c5:f4: 4f:a1:7f:7f:22:fe:92:5a:e5:5a:d0:d4:75:8e:07:21:24:d1: 8d:a1:a6:35:28:c8:19:c3:52:4c:aa:2f:01:06:49:dc:14:a2: ca:e4:ca:18:f9:9b:fa:51:e1:d9:fe:67:be:01:ce:82:9b:a9: bf:fa:c5:27 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUF/aedt0KBzdJiA/NxTW8LRZFFxwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyOTA5MDExMloX DTI3MDYyODA5MDYxMlowMzExMC8GA1UEAxMoMTNEMzVDM0M3NTUwMjRDOERBMzc4 NUE5OUQwRkYzQTNFODMwQTBEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVU4eH4O+hbNBAXrCO1S/s5xTqqZBQi4f7IP0MHmPMu754LjmOgXB716/JT E7oDNXPYOdULe88f+pLh1r51ApMjR5byCPECy4mbdjM8wRhC7jsy+LbC4ZjXXiMq 2g1v3khAYrmgvxClQzb/SkVEKOnHhetCkgPPAglUjGd6UvR1U524SIFGl24tJEC7 UVLRjeGIdmK3gl1FbugAzY+lK80OunCdlrKaAwQaKtDYRVppKCHxN4r1o6g7sykC YknRlEfZ5LH2VwERcaR4wZQbNr8ifrv6LpQwkLGxRt3axQSbU5quhQcCq3ONV9VU MKKkpDHOztGf0djEVllGkEecKCkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQT01w8 dVAkyNo3hamdD/Oj6DCg2TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwkMA0GCSqGSIb3DQEBCwUAA4IBAQCPybQO1FmyR95PK/d1QDyd+TnA dha2v5jrkwuKeRiUG8FRUO4H8pKrcy+9asru/lGFGdbDj1GHri1PFVEvnszMDJkZ CFqdZiymXzQYzzm3yxxldL9K9nL7vRiBEh/rL6dWccdlJxG0GR/uF7Gb6PNcLV9N 3Bg5YdZMrrsAPhj3MQDEnbxMMvtwHuP9XmsW7yVebc154z+eieOdB5gPBnzPuh78 8pXzMJg5MxbcrB7piptC0yCYrZyX40/WgeanydnUx+umxfRPoX9/Iv6SWuVa0NR1 jgchJNGNoaY1KMgZw1JMqi8BBkncFKLK5MoY+Zv6UeHZ/me+Ac6Cm6m/+sUn -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client