
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154505.roa
File: AS154505.roa (raw, json)
Hash identifier: j4j2NCwqSKLSVo4GKgHnGwL+J00NcBUl2WwQ/hyqBcs=
Subject key identifier: 61:DD:3D:46:DB:E1:27:DC:61:C1:EB:72:40:88:50:01:15:00:AF:D1
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 143C0F9724C8BA44CB5224848A959A606AA72B93
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154505.roa
Signing time: Mon 08 Jun 2026 02:13:52 +0000
ROA not before: Mon 08 Jun 2026 02:08:52 +0000
ROA not after: Mon 07 Jun 2027 02:13:52 +0000
asID: 154505
IP address blocks: 198.15.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3c:0f:97:24:c8:ba:44:cb:52:24:84:8a:95:9a:60:6a:a7:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: Jun 8 02:08:52 2026 GMT
Not After : Jun 7 02:13:52 2027 GMT
Subject: CN=61DD3D46DBE127DC61C1EB72408850011500AFD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:ad:63:83:ac:df:f9:e4:91:66:cc:15:79:
1f:73:4b:71:38:7c:a2:50:8d:34:7e:d7:7c:3b:e3:
27:97:48:75:08:33:71:9a:11:eb:30:74:b7:0a:5c:
ae:8b:fc:e0:65:bb:92:0e:7c:b1:50:29:a9:b1:9d:
43:0a:6b:e7:99:22:61:d6:18:ca:a2:53:a9:eb:3e:
e7:33:4a:a0:4c:5c:b8:20:78:08:af:18:2d:7f:7b:
b0:84:b2:6f:08:b2:13:6a:8a:41:a9:75:ec:4a:a7:
2b:b7:0a:be:dc:d0:d2:41:b1:1f:fc:9f:20:c4:84:
de:de:3d:55:cb:1e:c4:d2:17:26:f0:21:b4:33:41:
20:5d:41:86:c7:af:62:76:ea:13:0f:1d:17:fb:52:
1b:bb:80:6d:0b:1d:58:37:52:81:25:1f:26:ab:76:
6c:8c:6f:9c:ef:54:7b:ef:d3:f5:38:67:73:fa:91:
ea:63:7b:17:8d:72:f5:e2:6d:ff:42:f1:a1:9e:66:
f0:d8:4d:ed:89:09:ca:81:92:4e:f6:ad:b4:8f:69:
10:ac:f5:f4:a0:ca:f0:00:8e:e5:11:20:cc:0f:29:
71:81:d5:32:9e:f0:e9:51:50:07:52:bf:d5:59:3b:
92:ec:e8:8b:89:12:6c:21:b4:a0:52:98:a4:52:1e:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:3D:46:DB:E1:27:DC:61:C1:EB:72:40:88:50:01:15:00:AF:D1
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.15.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:02:74:b8:74:33:5c:63:db:f9:9e:46:98:a2:3e:6f:cd:7a:
9a:86:51:88:fd:2a:42:0f:be:3a:fc:34:ab:4b:ee:39:a2:40:
9b:c2:3e:b3:e3:c9:68:59:a6:1f:06:82:41:f5:64:01:37:70:
54:bc:84:07:b4:05:04:19:bc:16:e1:97:19:fd:99:ab:1d:1b:
c9:fd:5c:4a:8e:7b:19:00:e3:26:d7:07:c8:66:3e:c9:7b:db:
85:24:c3:ea:f1:17:19:1d:0d:f5:40:90:c0:50:d1:c6:bd:24:
7f:07:1e:41:50:a2:a4:ac:68:7d:c8:8e:ca:be:cf:30:bc:f7:
00:7f:63:4a:c0:c4:d6:ea:09:9b:23:c2:18:a3:a7:d0:56:00:
16:30:07:ad:d8:1d:02:2f:b4:31:cc:44:9f:6b:8a:cc:b4:e3:
14:ed:6c:8d:7b:ca:a8:b7:b8:ce:ce:7e:56:88:69:bc:84:93:
22:0a:e5:4d:80:cf:63:a9:e1:b1:32:1a:da:6d:f9:83:a0:90:
8d:b1:b4:4d:75:e5:93:00:05:11:c4:42:c0:f6:ed:3b:6b:fc:
46:67:a6:88:e2:c0:40:55:8f:d5:7b:b2:ed:8d:4d:20:f5:a9:
16:b0:90:c2:73:d8:fb:83:91:ba:0d:c7:49:f9:c9:38:a6:df:
e2:c0:fb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:04:41 2026 by rpki-client