$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154766.roa File: AS154766.roa (raw, json) Hash identifier: yv+ntHM8QNudgcNt/wKXnuQFO06l0tOfYJ512pFxNeU= Subject key identifier: 68:E2:C4:42:3C:66:0F:1E:AD:F2:24:E2:BF:62:5B:1A:AC:2C:5B:C0 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4D9A9BD0C97CBC0FCE73374AFFD15D21DA6828CE Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154766.roa Signing time: Mon 27 Jul 2026 04:16:36 +0000 ROA not before: Mon 27 Jul 2026 04:11:36 +0000 ROA not after: Mon 26 Jul 2027 04:16:36 +0000 asID: 154766 IP address blocks: 160.236.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9a:9b:d0:c9:7c:bc:0f:ce:73:37:4a:ff:d1:5d:21:da:68:28:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 27 04:11:36 2026 GMT Not After : Jul 26 04:16:36 2027 GMT Subject: CN=68E2C4423C660F1EADF224E2BF625B1AAC2C5BC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:68:e5:47:2d:34:c5:8e:b3:28:35:6e:b8: 2f:3d:9b:59:cc:ea:fc:0d:1e:6c:60:1f:eb:fc:e3: e3:0e:5a:7a:e6:ab:c0:e0:b8:41:6d:1a:69:6a:93: 53:6d:9e:af:7b:88:9f:16:14:f7:34:96:80:ef:90: 3f:62:09:2a:ee:f3:19:54:d3:45:74:bb:96:66:72: 52:5b:c8:60:68:3c:db:1f:70:ea:8a:c2:af:64:d1: 94:4e:58:b2:f7:ac:12:be:45:34:24:f5:ac:53:2c: 9d:70:27:ec:ee:6e:88:69:ba:2c:57:03:7d:58:9f: 0a:13:f7:56:db:4c:bf:b6:fd:8a:2a:f6:47:f9:a0: 83:6a:36:bc:05:85:f4:ad:01:fd:df:16:99:f7:4c: af:ad:93:5a:95:b7:77:80:29:03:6e:dc:d4:60:f6: ee:f2:10:61:0e:4f:3c:a4:23:cb:f7:80:d5:01:3b: c1:e9:e3:57:18:bb:2f:fa:b8:02:7c:4d:ff:b0:d5: 2c:b8:65:be:01:1f:03:53:e7:78:39:32:09:a5:54: f7:d5:d3:3b:31:9f:54:1f:b5:e2:d3:31:12:27:14: ec:b8:54:1c:e2:5b:78:ac:e7:be:13:2b:77:7d:5c: b2:1e:8f:38:e3:a5:8c:25:7e:7a:d0:46:28:d0:51: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:C4:42:3C:66:0F:1E:AD:F2:24:E2:BF:62:5B:1A:AC:2C:5B:C0 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.156.0/24 Signature Algorithm: sha256WithRSAEncryption 10:34:2a:b5:42:5e:0f:46:cc:af:31:e3:a6:df:8f:36:eb:72: a2:f8:46:82:be:df:1f:c3:88:e2:5a:f8:ee:0a:5d:12:15:81: 93:ed:a1:4f:fe:5a:12:46:d8:f1:fb:12:63:d6:85:03:d5:65: 82:ea:c0:54:16:00:92:ac:63:33:dc:33:5e:11:65:3f:e6:26: 25:4b:79:c6:73:d9:ee:31:cd:8f:b7:86:6a:d9:f2:f1:2c:0b: 7b:b4:22:89:1d:22:86:6c:eb:ed:be:e6:4a:cc:45:48:af:ce: 43:78:ce:41:18:de:6f:19:3b:64:24:bd:22:8f:96:ab:4f:b7: f2:f4:ed:83:5c:be:12:bd:e7:45:fe:2f:b0:d9:ab:2c:fa:d8: 21:a1:70:d5:4d:7d:10:ab:e3:da:10:9b:a6:ee:72:f2:f3:46: 56:f3:38:05:b2:e2:f2:d6:7e:96:90:6e:ca:b9:74:f0:c7:48: 8a:49:35:2d:5b:ec:6b:13:5e:94:c9:38:53:f5:f1:a4:69:b3: ba:09:4d:1e:4b:4b:41:26:a5:93:ec:5c:7d:39:3b:f2:c9:0f: 4c:2d:55:a1:0e:b1:b4:6b:97:4e:de:b5:1c:1d:d7:ca:b2:a6: f3:6a:db:3e:f9:66:6b:6e:3f:9d:b0:08:fb:f5:36:e1:74:a6: fe:0f:79:2d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTZqb0Ml8vA/OczdK/9FdIdpoKM4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyNzA0MTEzNloX DTI3MDcyNjA0MTYzNlowMzExMC8GA1UEAxMoNjhFMkM0NDIzQzY2MEYxRUFERjIy NEUyQkY2MjVCMUFBQzJDNUJDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf3aOVHLTTFjrMoNW64Lz2bWczq/A0ebGAf6/zj4w5aeuarwOC4QW0aaWqT U22er3uInxYU9zSWgO+QP2IJKu7zGVTTRXS7lmZyUlvIYGg82x9w6orCr2TRlE5Y svesEr5FNCT1rFMsnXAn7O5uiGm6LFcDfVifChP3VttMv7b9iir2R/mgg2o2vAWF 9K0B/d8WmfdMr62TWpW3d4ApA27c1GD27vIQYQ5PPKQjy/eA1QE7wenjVxi7L/q4 AnxN/7DVLLhlvgEfA1PneDkyCaVU99XTOzGfVB+14tMxEicU7LhUHOJbeKznvhMr d31csh6POOOljCV+etBGKNBRN/MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRo4sRC PGYPHq3yJOK/YlsarCxbwDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0NzY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOycMA0GCSqGSIb3DQEBCwUAA4IBAQAQNCq1Ql4PRsyvMeOm348263Ki +EaCvt8fw4jiWvjuCl0SFYGT7aFP/loSRtjx+xJj1oUD1WWC6sBUFgCSrGMz3DNe EWU/5iYlS3nGc9nuMc2Pt4Zq2fLxLAt7tCKJHSKGbOvtvuZKzEVIr85DeM5BGN5v GTtkJL0ij5arT7fy9O2DXL4SvedF/i+w2ass+tghoXDVTX0Qq+PaEJum7nLy80ZW 8zgFsuLy1n6WkG7KuXTwx0iKSTUtW+xrE16UyThT9fGkabO6CU0eS0tBJqWT7Fx9 OTvyyQ9MLVWhDrG0a5dO3rUcHdfKsqbzats++WZrbj+dsAj79TbhdKb+D3kt -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:26 2026 by rpki-client