$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154738.roa File: AS154738.roa (raw, json) Hash identifier: 5HFzhpGsxgzXfmi7zdwou6BJ6dYXLnI9V1KQ8us0qK0= Subject key identifier: B0:DE:CF:D5:25:02:B4:2B:AD:46:BF:26:25:0B:DE:C2:F0:70:04:D8 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5A0BE6761F2630964970AA1137D3660929B5ECE7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154738.roa Signing time: Tue 14 Jul 2026 05:03:47 +0000 ROA not before: Tue 14 Jul 2026 04:58:47 +0000 ROA not after: Tue 13 Jul 2027 05:03:47 +0000 asID: 154738 IP address blocks: 160.236.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0b:e6:76:1f:26:30:96:49:70:aa:11:37:d3:66:09:29:b5:ec:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 14 04:58:47 2026 GMT Not After : Jul 13 05:03:47 2027 GMT Subject: CN=B0DECFD52502B42BAD46BF26250BDEC2F07004D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:f3:fb:d7:fc:47:ca:5b:a4:41:c2:9e:6e: 4f:3c:1e:42:5e:e0:17:36:c3:c3:e0:ca:8f:48:07: cb:a7:07:a1:38:97:46:91:17:30:0a:67:a3:e5:72: dd:82:75:4f:4e:47:50:aa:05:88:b6:85:8e:e2:98: 69:17:bd:42:fc:63:32:c2:02:31:e5:44:1c:26:1f: 4c:10:ba:ab:3b:d5:6a:d7:1e:5e:56:86:71:ab:f3: ca:98:71:43:e4:73:90:c2:3d:db:92:a9:91:b6:f3: b4:b5:c1:29:93:34:86:2d:ab:8c:e2:93:de:c7:34: b5:37:f5:3d:49:5f:aa:ae:05:af:c1:a4:18:61:00: e5:d0:1c:b3:7e:46:2e:cd:68:9c:23:54:bc:22:66: 0c:05:a1:ec:b3:eb:ce:7d:19:dc:cc:b3:5e:98:2a: 1f:71:b0:54:3a:8c:07:67:9e:83:a5:e6:a1:a6:49: 77:37:66:e4:13:d3:44:78:92:82:f5:74:b0:64:39: e1:56:84:8f:6c:c2:10:87:19:94:f9:5b:7f:f6:10: f4:5d:21:25:8c:aa:f0:20:0a:ab:df:54:a2:6b:7a: e8:2f:fc:11:9e:65:c1:2b:05:11:58:d7:4c:56:6d: 5b:98:0c:f6:7e:d8:88:66:5f:8c:dd:ad:4f:d9:d0: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DE:CF:D5:25:02:B4:2B:AD:46:BF:26:25:0B:DE:C2:F0:70:04:D8 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.44.0/24 Signature Algorithm: sha256WithRSAEncryption 97:d3:b8:38:b0:a3:bc:44:ab:43:6d:0e:62:ef:7a:83:9b:6d: c7:80:99:81:4f:5b:50:b8:e6:df:34:ca:4e:fc:44:53:9c:a0: 50:d3:4b:ea:45:22:2f:8d:d0:71:6b:68:dc:b7:6a:20:ec:23: 9c:1c:f6:14:cd:43:d8:ff:12:57:ac:1f:1e:94:f4:28:6b:ca: cb:71:b7:0c:75:26:a7:75:c8:a9:61:fa:5a:13:fe:40:f6:93: de:f3:d4:8c:29:cc:03:65:e7:42:cf:f7:bf:79:ab:bc:ed:cc: dd:f1:73:0e:5c:eb:bf:35:7d:c4:d2:3e:b7:03:34:5f:97:78: 66:3d:93:35:f0:96:fc:dc:82:f5:43:03:6a:1c:e1:1a:80:5e: 42:e9:d8:38:0f:f6:a5:d0:81:27:43:a7:3f:e8:53:6f:7e:7b: 37:aa:7c:82:af:63:3e:86:5b:b4:36:6d:d2:65:b7:cf:c5:37: 13:99:74:77:3e:70:f1:76:1e:c8:05:5c:99:12:3e:56:bf:8f: 62:a6:60:b4:f3:ba:e6:26:ff:85:74:fc:06:89:e8:6b:d0:ee: 79:40:8e:39:c4:a8:0c:71:1a:71:b0:30:b3:4e:85:63:48:e4: 0e:b7:25:cc:07:a2:52:b4:09:ce:db:e4:74:6e:a9:52:eb:5e: e0:b6:46:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWgvmdh8mMJZJcKoRN9NmCSm17OcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcxNDA0NTg0N1oX DTI3MDcxMzA1MDM0N1owMzExMC8GA1UEAxMoQjBERUNGRDUyNTAyQjQyQkFENDZC RjI2MjUwQkRFQzJGMDcwMDREODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALU28/vX/EfKW6RBwp5uTzweQl7gFzbDw+DKj0gHy6cHoTiXRpEXMApno+Vy 3YJ1T05HUKoFiLaFjuKYaRe9QvxjMsICMeVEHCYfTBC6qzvVatceXlaGcavzyphx Q+RzkMI925KpkbbztLXBKZM0hi2rjOKT3sc0tTf1PUlfqq4Fr8GkGGEA5dAcs35G Ls1onCNUvCJmDAWh7LPrzn0Z3MyzXpgqH3GwVDqMB2eeg6XmoaZJdzdm5BPTRHiS gvV0sGQ54VaEj2zCEIcZlPlbf/YQ9F0hJYyq8CAKq99Uomt66C/8EZ5lwSsFEVjX TFZtW5gM9n7YiGZfjN2tT9nQRdECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSw3s/V JQK0K61GvyYlC97C8HAE2DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwsMA0GCSqGSIb3DQEBCwUAA4IBAQCX07g4sKO8RKtDbQ5i73qDm23H gJmBT1tQuObfNMpO/ERTnKBQ00vqRSIvjdBxa2jct2og7COcHPYUzUPY/xJXrB8e lPQoa8rLcbcMdSandcipYfpaE/5A9pPe89SMKcwDZedCz/e/eau87czd8XMOXOu/ NX3E0j63AzRfl3hmPZM18Jb83IL1QwNqHOEagF5C6dg4D/al0IEnQ6c/6FNvfns3 qnyCr2M+hlu0Nm3SZbfPxTcTmXR3PnDxdh7IBVyZEj5Wv49ipmC087rmJv+FdPwG iehr0O55QI45xKgMcRpxsDCzToVjSOQOtyXMB6JStAnO2+R0bqlS617gtkbw -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:24 2026 by rpki-client