$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154737.roa File: AS154737.roa (raw, json) Hash identifier: NLWMWl6hIXV5kSsAn0tal+l6sm7lKDKMvb2V9bA3zrQ= Subject key identifier: 22:E6:50:86:D8:5B:1A:58:C9:EC:F2:12:80:CF:E6:11:87:0C:77:1F Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 29915CEE0A6FC0EE406F993C2AF57D162B9E5DD1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154737.roa Signing time: Mon 29 Jun 2026 09:30:03 +0000 ROA not before: Mon 29 Jun 2026 09:25:03 +0000 ROA not after: Mon 28 Jun 2027 09:30:03 +0000 asID: 154737 IP address blocks: 160.236.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:91:5c:ee:0a:6f:c0:ee:40:6f:99:3c:2a:f5:7d:16:2b:9e:5d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 29 09:25:03 2026 GMT Not After : Jun 28 09:30:03 2027 GMT Subject: CN=22E65086D85B1A58C9ECF21280CFE611870C771F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cb:65:e5:04:5a:a2:f7:87:ea:63:7c:bf:42: a4:b8:c4:c7:61:1d:ee:7b:83:5e:38:4c:c3:ae:05: 6d:6b:49:77:d1:3e:1a:18:4c:48:78:17:0d:db:43: 47:d5:9f:a5:2e:4c:b9:e0:7d:c4:1c:06:90:de:18: a0:19:36:e7:76:a7:27:bf:5e:00:0c:0a:2b:8f:fd: ef:38:5b:d0:53:e4:7e:a4:ca:19:57:c0:d4:cd:77: 2b:f4:96:f0:b9:fc:08:57:f1:d3:f1:37:c6:1b:a6: cf:c2:0c:67:45:4b:ef:e9:36:7e:33:b0:a0:c9:3b: a8:bc:53:42:98:df:c7:6f:31:36:4a:dd:55:69:d8: b3:1c:cc:e4:b5:13:62:d8:df:d2:f8:ea:0c:b8:21: 06:d8:ae:f0:db:6c:a7:c8:ce:89:f2:94:c1:b7:ba: 78:8a:1c:4b:a5:7f:c0:85:01:a7:c2:57:1c:39:50: e7:00:31:e4:3d:2b:b8:98:9a:28:6c:2a:1e:6b:6f: 45:ae:73:b0:43:33:26:ba:19:75:3d:6f:77:c4:00: b1:b3:44:65:44:67:d5:81:a8:ea:71:1d:18:3d:d2: 92:30:50:6b:25:3d:ee:83:5c:cb:9f:3f:02:55:e6: a5:ea:9a:cc:69:0d:75:fe:cc:1e:73:73:1a:9b:e6: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E6:50:86:D8:5B:1A:58:C9:EC:F2:12:80:CF:E6:11:87:0C:77:1F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.27.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:92:a0:d8:ee:6d:f0:94:e2:45:44:d7:c0:8e:72:5c:e7:3c: b7:75:a1:00:6f:4d:a5:ce:e5:36:7a:d8:f1:d5:22:b1:3f:f2: 4f:0f:e7:16:3e:b1:1b:ed:82:a4:24:7c:2b:ff:be:38:d2:97: 08:26:23:44:c0:e2:ca:7d:e5:23:fc:4e:5a:3c:8a:70:41:61: a0:ab:1c:c1:e2:80:49:4f:45:2a:1a:0f:ac:63:f3:a5:57:36: c7:1d:9f:a9:01:f5:e2:cf:8e:6e:ce:ea:8a:f7:7a:31:00:5a: f1:fa:15:e9:b1:4f:63:9b:e3:c0:bf:f0:78:79:73:f4:02:9e: 6f:58:3f:2a:86:70:5f:9f:08:ef:9a:4d:a3:63:7f:4d:f6:c8: 77:16:cb:e7:fd:6a:e5:b3:28:73:94:f3:a9:8f:55:c9:e1:21: 82:66:c2:d4:c0:a1:c1:c2:47:7d:98:ef:d4:6c:d7:53:f0:b7: 30:34:86:95:e9:3a:9e:2a:e0:5d:05:07:05:1d:84:d3:20:bf: 19:97:11:42:87:61:a4:30:f8:67:fa:94:24:0b:84:c2:44:a4: cc:8a:61:6e:f5:89:b3:73:d3:4c:e8:0c:e5:75:b4:31:c5:cf: 68:e1:49:db:d2:1f:c4:4c:60:72:65:63:dc:4f:f0:d8:cc:a4: 08:2b:43:fb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKZFc7gpvwO5Ab5k8KvV9FiueXdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyOTA5MjUwM1oX DTI3MDYyODA5MzAwM1owMzExMC8GA1UEAxMoMjJFNjUwODZEODVCMUE1OEM5RUNG MjEyODBDRkU2MTE4NzBDNzcxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPjLZeUEWqL3h+pjfL9CpLjEx2Ed7nuDXjhMw64FbWtJd9E+GhhMSHgXDdtD R9WfpS5MueB9xBwGkN4YoBk253anJ79eAAwKK4/97zhb0FPkfqTKGVfA1M13K/SW 8Ln8CFfx0/E3xhumz8IMZ0VL7+k2fjOwoMk7qLxTQpjfx28xNkrdVWnYsxzM5LUT Ytjf0vjqDLghBtiu8Ntsp8jOifKUwbe6eIocS6V/wIUBp8JXHDlQ5wAx5D0ruJia KGwqHmtvRa5zsEMzJroZdT1vd8QAsbNEZURn1YGo6nEdGD3SkjBQayU97oNcy58/ AlXmpeqazGkNdf7MHnNzGpvmNWECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQi5lCG 2FsaWMns8hKAz+YRhwx3HzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwbMA0GCSqGSIb3DQEBCwUAA4IBAQBakqDY7m3wlOJFRNfAjnJc5zy3 daEAb02lzuU2etjx1SKxP/JPD+cWPrEb7YKkJHwr/7440pcIJiNEwOLKfeUj/E5a PIpwQWGgqxzB4oBJT0UqGg+sY/OlVzbHHZ+pAfXiz45uzuqK93oxAFrx+hXpsU9j m+PAv/B4eXP0Ap5vWD8qhnBfnwjvmk2jY39N9sh3Fsvn/WrlsyhzlPOpj1XJ4SGC ZsLUwKHBwkd9mO/UbNdT8LcwNIaV6TqeKuBdBQcFHYTTIL8ZlxFCh2GkMPhn+pQk C4TCRKTMimFu9Ymzc9NM6AzldbQxxc9o4Unb0h/ETGByZWPcT/DYzKQIK0P7 -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client