$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154707.roa File: AS154707.roa (raw, json) Hash identifier: Hjk1DFgI9xz+D+5W8kKdkMLcqkRX+C9FYIOu0IBgzF8= Subject key identifier: 1F:47:4B:7A:1C:4A:AF:D7:10:24:D6:2C:5D:E5:B9:E5:A2:E1:49:FF Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 46ED25FA5D5D9E11C22BA7475C6FCCD3D001A8ED Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154707.roa Signing time: Tue 09 Jun 2026 04:01:37 +0000 ROA not before: Tue 09 Jun 2026 03:56:37 +0000 ROA not after: Tue 08 Jun 2027 04:01:37 +0000 asID: 154707 IP address blocks: 162.4.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ed:25:fa:5d:5d:9e:11:c2:2b:a7:47:5c:6f:cc:d3:d0:01:a8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 9 03:56:37 2026 GMT Not After : Jun 8 04:01:37 2027 GMT Subject: CN=1F474B7A1C4AAFD71024D62C5DE5B9E5A2E149FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:48:95:4f:a6:f6:e1:a1:09:8d:00:aa:96: 48:39:e1:c8:f9:d0:32:cb:5c:7a:e9:a3:87:68:b3: 0b:5a:f3:67:f6:64:fd:fe:53:fe:b5:66:d0:83:2e: 7b:95:09:df:d8:ec:20:d7:13:8c:b3:21:df:80:27: fb:b3:f2:9c:e9:52:87:aa:49:87:52:0e:82:b0:94: 96:df:e3:52:6f:62:7d:34:f4:4b:86:f0:fc:24:34: 16:ae:3d:33:6b:86:80:05:63:64:71:82:e8:3f:6d: da:a5:de:ca:2e:ea:4e:4d:5f:b5:c7:a0:80:74:0f: 70:c0:70:7c:90:9e:2b:e5:6b:97:6a:aa:7a:89:88: 52:cf:3f:c9:f8:7a:d6:04:18:76:45:bf:c0:08:18: 7b:4f:b6:ea:d9:35:3f:89:08:8d:eb:8b:52:d8:bc: dd:40:a1:93:be:35:5e:37:3a:0c:ec:d0:e3:a6:22: f4:be:15:f7:0b:af:3f:51:8e:bf:b0:19:a1:c3:c0: 92:d2:17:6c:87:eb:0c:e4:15:db:d1:cd:ed:01:e1: fa:c3:c0:0b:ee:32:1f:b9:2f:5e:7e:2e:c4:44:0b: e7:31:ce:c2:5b:d5:d4:c9:86:77:8a:04:34:c9:97: b1:2b:6c:c9:7a:b4:74:e7:45:0f:57:c6:42:3f:14: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:4B:7A:1C:4A:AF:D7:10:24:D6:2C:5D:E5:B9:E5:A2:E1:49:FF X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.212.0/23 Signature Algorithm: sha256WithRSAEncryption 29:9c:cf:9c:07:62:62:a4:72:12:e4:e9:4e:ec:f7:02:8d:b0: 5f:1e:12:fe:26:d1:92:2c:cd:68:8b:4f:98:bc:e6:2b:a2:43: c4:f8:d9:6f:db:1b:ac:22:06:64:22:33:4b:a7:76:28:e9:a5: 51:ba:d9:a1:1f:cd:41:64:49:ee:b5:bf:1c:aa:67:bb:d0:47: 68:75:6f:bc:dd:cb:fa:8c:2e:9e:b4:70:55:ca:32:ad:94:8e: fd:89:ff:56:63:a1:c4:0f:88:8c:0f:26:4a:31:26:2a:35:d2: 78:fc:86:08:b9:6a:b9:52:54:97:de:5d:ef:ac:cc:a8:9c:91: 97:b6:89:83:42:89:44:67:d9:b9:7c:3b:e7:2f:0e:14:99:b8: 24:e5:b4:97:a6:d9:92:b5:5e:9b:3c:0d:a0:d3:a9:82:60:b4: 18:97:a9:f6:fa:1f:f5:aa:7c:5b:e5:cf:5a:af:3d:ed:7c:55: ec:24:19:d8:19:e2:86:82:71:84:ac:06:60:a5:c8:1b:3e:c4: 11:c8:af:96:23:46:81:0f:3d:b4:33:32:c3:c9:ee:da:85:00: 14:89:af:19:4e:de:1a:7a:bf:74:9b:80:86:2f:47:e9:0c:67: e8:38:3f:92:27:e0:da:58:b5:1d:5b:0f:18:b0:ac:01:d9:58: 14:e7:c4:0b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURu0l+l1dnhHCK6dHXG/M09ABqO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYwOTAzNTYzN1oX DTI3MDYwODA0MDEzN1owMzExMC8GA1UEAxMoMUY0NzRCN0ExQzRBQUZENzEwMjRE NjJDNURFNUI5RTVBMkUxNDlGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxPSJVPpvbhoQmNAKqWSDnhyPnQMstceumjh2izC1rzZ/Zk/f5T/rVm0IMu e5UJ39jsINcTjLMh34An+7PynOlSh6pJh1IOgrCUlt/jUm9ifTT0S4bw/CQ0Fq49 M2uGgAVjZHGC6D9t2qXeyi7qTk1ftceggHQPcMBwfJCeK+Vrl2qqeomIUs8/yfh6 1gQYdkW/wAgYe0+26tk1P4kIjeuLUti83UChk741Xjc6DOzQ46Yi9L4V9wuvP1GO v7AZocPAktIXbIfrDOQV29HN7QHh+sPAC+4yH7kvXn4uxEQL5zHOwlvV1MmGd4oE NMmXsStsyXq0dOdFD1fGQj8UHvsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQfR0t6 HEqv1xAk1ixd5bnlouFJ/zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogTUMA0GCSqGSIb3DQEBCwUAA4IBAQApnM+cB2JipHIS5OlO7PcCjbBf HhL+JtGSLM1oi0+YvOYrokPE+Nlv2xusIgZkIjNLp3Yo6aVRutmhH81BZEnutb8c qme70EdodW+83cv6jC6etHBVyjKtlI79if9WY6HED4iMDyZKMSYqNdJ4/IYIuWq5 UlSX3l3vrMyonJGXtomDQolEZ9m5fDvnLw4Umbgk5bSXptmStV6bPA2g06mCYLQY l6n2+h/1qnxb5c9arz3tfFXsJBnYGeKGgnGErAZgpcgbPsQRyK+WI0aBDz20MzLD ye7ahQAUia8ZTt4aer90m4CGL0fpDGfoOD+SJ+DaWLUdWw8YsKwB2VgU58QL -----END CERTIFICATE-----Generated at Wed Jun 17 08:25:15 2026 by rpki-client