$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154652.roa File: AS154652.roa (raw, json) Hash identifier: bHW3ZFa3RNSp5FAMlr6osU0Tset8sklagzmYYtmbDos= Subject key identifier: FF:D5:AC:C7:30:1D:05:96:34:EE:C4:D6:75:C8:8A:D2:4B:61:EA:9A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6F38CAFADD55E6ECF2EF6904DA7C5433A51B12CC Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154652.roa Signing time: Mon 27 Jul 2026 03:21:40 +0000 ROA not before: Mon 27 Jul 2026 03:16:40 +0000 ROA not after: Mon 26 Jul 2027 03:21:40 +0000 asID: 154652 IP address blocks: 162.4.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:38:ca:fa:dd:55:e6:ec:f2:ef:69:04:da:7c:54:33:a5:1b:12:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 27 03:16:40 2026 GMT Not After : Jul 26 03:21:40 2027 GMT Subject: CN=FFD5ACC7301D059634EEC4D675C88AD24B61EA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:f0:4b:dc:18:f1:e6:02:a6:a7:fd:04:78: dd:56:60:7e:23:2e:ce:06:80:e5:33:51:63:1a:93: cc:f3:c5:9e:45:37:47:3d:95:9d:61:44:88:c7:76: 90:75:91:26:7f:69:34:fa:3b:f3:5a:4a:68:0c:67: f0:53:60:14:ac:ae:12:1c:3d:d3:d1:f4:e3:76:45: 0e:a2:8a:fb:95:0b:a2:49:b2:dc:33:77:4b:a2:86: 7f:b9:1d:6f:80:71:11:0e:c0:f0:13:c6:2a:da:74: a4:76:de:b2:fb:7f:21:b4:0f:4d:02:6f:8b:55:22: 29:78:81:f3:ee:f8:e8:5a:a9:bc:ac:53:a6:57:f8: 13:9f:ff:4a:5b:3b:cb:09:2b:0c:6d:e8:28:6b:af: c7:e7:77:46:8e:ce:db:2f:6b:15:d4:be:aa:e9:cd: a6:d6:c1:05:28:c5:54:e4:16:9b:88:1d:6e:02:fd: 73:5e:91:50:2f:84:5f:41:96:e2:3f:cf:5e:bb:16: fc:22:38:94:2e:f2:12:2b:9d:67:72:60:38:0c:aa: 67:15:a2:64:d3:56:ef:b3:9c:d2:f4:ed:a0:16:6d: 33:3c:8d:f0:fc:48:3e:e1:cf:75:bd:f0:17:af:f0: 0f:4b:81:dc:89:f9:3f:2c:b1:0a:4d:fc:06:9c:c9: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D5:AC:C7:30:1D:05:96:34:EE:C4:D6:75:C8:8A:D2:4B:61:EA:9A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.63.0/24 Signature Algorithm: sha256WithRSAEncryption 43:6f:07:e2:38:0d:bc:de:80:e7:46:ac:d9:7d:b4:45:cd:c7: e7:bf:84:b8:91:3c:9d:71:86:c8:c2:07:bc:78:28:f6:1c:aa: ff:01:5b:a3:68:0a:e7:88:80:9a:ef:dd:cf:7f:c5:84:70:be: ce:a1:15:c4:4a:8d:d2:d0:d9:07:e4:8d:82:4b:15:68:5b:db: 21:8a:0b:21:4b:54:6c:9c:f9:b1:e5:84:76:23:a8:c7:29:d4: 03:c3:8b:6f:72:7e:a3:68:b6:2b:13:3f:aa:86:7e:d9:40:db: 62:48:74:e8:dc:2d:5f:a1:76:a6:20:8b:26:2d:19:96:3f:81: 53:5e:c1:39:f4:ba:f1:49:91:46:d9:96:d2:94:37:f9:36:cd: 27:0b:d2:2a:96:7e:3b:7d:78:a9:2d:ea:b3:44:98:4d:4d:01: d0:e8:2e:82:41:5c:0c:69:6b:e1:dc:d4:cc:45:2f:0b:1c:2d: 99:6a:38:e8:8d:e6:99:6f:ac:58:e1:c0:ac:87:be:20:8f:e7: 42:41:7e:33:9a:2f:ca:01:86:22:2a:1a:3a:7a:09:bf:cb:7c: d3:55:f1:f3:78:7d:8f:bd:44:68:10:25:e5:92:40:e0:ec:d0: c2:85:06:b2:51:bb:ca:c4:c3:4f:8e:f1:44:59:d6:34:4c:cf: c8:05:16:89 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbzjK+t1V5uzy72kE2nxUM6UbEswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyNzAzMTY0MFoX DTI3MDcyNjAzMjE0MFowMzExMC8GA1UEAxMoRkZENUFDQzczMDFEMDU5NjM0RUVD NEQ2NzVDODhBRDI0QjYxRUE5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIvC8EvcGPHmAqan/QR43VZgfiMuzgaA5TNRYxqTzPPFnkU3Rz2VnWFEiMd2 kHWRJn9pNPo781pKaAxn8FNgFKyuEhw909H043ZFDqKK+5ULokmy3DN3S6KGf7kd b4BxEQ7A8BPGKtp0pHbesvt/IbQPTQJvi1UiKXiB8+746FqpvKxTplf4E5//Sls7 ywkrDG3oKGuvx+d3Ro7O2y9rFdS+qunNptbBBSjFVOQWm4gdbgL9c16RUC+EX0GW 4j/PXrsW/CI4lC7yEiudZ3JgOAyqZxWiZNNW77Oc0vTtoBZtMzyN8PxIPuHPdb3w F6/wD0uB3In5PyyxCk38BpzJFrUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT/1azH MB0FljTuxNZ1yIrSS2HqmjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NjUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogQ/MA0GCSqGSIb3DQEBCwUAA4IBAQBDbwfiOA283oDnRqzZfbRFzcfn v4S4kTydcYbIwge8eCj2HKr/AVujaArniICa793Pf8WEcL7OoRXESo3S0NkH5I2C SxVoW9shigshS1RsnPmx5YR2I6jHKdQDw4tvcn6jaLYrEz+qhn7ZQNtiSHTo3C1f oXamIIsmLRmWP4FTXsE59LrxSZFG2ZbSlDf5Ns0nC9Iqln47fXipLeqzRJhNTQHQ 6C6CQVwMaWvh3NTMRS8LHC2ZajjojeaZb6xY4cCsh74gj+dCQX4zmi/KAYYiKho6 egm/y3zTVfHzeH2PvURoECXlkkDg7NDChQayUbvKxMNPjvFEWdY0TM/IBRaJ -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:28 2026 by rpki-client