$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS154777.roa File: AS154777.roa (raw, json) Hash identifier: FAoKaphDxqZ3DNOofmcz7olOeqQVIKqiDqhI1TAb8no= Subject key identifier: FE:6D:5F:AF:E2:E9:E8:6E:7C:23:F1:BE:A3:22:28:5D:B3:B3:23:74 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7EE27D7125E12074249F0A60630BDE62A2D4ED80 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154777.roa Signing time: Tue 28 Jul 2026 09:16:06 +0000 ROA not before: Tue 28 Jul 2026 09:11:06 +0000 ROA not after: Tue 27 Jul 2027 09:16:06 +0000 asID: 154777 IP address blocks: 160.236.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e2:7d:71:25:e1:20:74:24:9f:0a:60:63:0b:de:62:a2:d4:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 28 09:11:06 2026 GMT Not After : Jul 27 09:16:06 2027 GMT Subject: CN=FE6D5FAFE2E9E86E7C23F1BEA322285DB3B32374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:f9:53:c4:ba:80:2c:25:b1:5c:cf:22:c0: 92:bd:87:66:44:02:6e:b8:0f:77:bc:4a:af:7d:ec: e2:54:cf:e9:ad:5f:30:0e:ea:a4:f8:29:2b:b4:2f: f3:28:4a:c5:a9:64:10:3e:c1:be:09:ef:69:b3:3c: b7:e1:e0:94:99:6d:73:80:eb:02:b2:4f:cc:78:af: 1f:1a:d6:64:39:90:57:95:14:b1:5f:3a:24:55:4c: 82:5c:4a:c1:42:76:85:82:ee:5b:b1:b5:b6:94:93: e2:58:91:39:d1:95:94:00:bb:3f:f9:e1:45:55:a4: 4d:49:40:29:19:11:bf:69:05:c2:9c:78:29:5d:0c: 50:d0:12:ab:07:d3:45:10:79:d1:e5:f3:7d:99:c2: 34:b2:73:18:bb:8e:d2:8f:79:57:62:43:cf:15:bb: 67:20:3c:78:2f:51:45:c2:a9:88:6a:42:84:c1:61: 7f:cb:56:38:40:fa:4a:30:8d:5e:79:21:e5:6e:40: ee:c4:76:36:a0:ea:e2:6e:01:b2:9a:18:03:9a:c1: 3e:4b:62:20:44:ac:12:f1:d2:67:8d:c2:3e:df:65: 31:af:6b:e6:fa:91:b6:46:92:7d:31:93:4f:f4:e4: 14:e4:2b:ed:87:98:15:3c:59:86:a3:13:f1:24:b2: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6D:5F:AF:E2:E9:E8:6E:7C:23:F1:BE:A3:22:28:5D:B3:B3:23:74 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS154777.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.154.0/23 Signature Algorithm: sha256WithRSAEncryption 52:04:86:21:20:78:66:cf:0d:79:e7:a6:f1:d3:5a:cb:8d:34: b4:56:ae:27:70:27:a9:9d:75:c1:05:89:8c:24:7d:a4:d2:db: 27:93:aa:0c:9b:2c:cd:3d:76:60:cf:78:62:01:7a:7a:36:61: 0b:f4:e3:ef:3e:0c:70:63:1c:7d:b1:db:ce:71:a8:be:fc:c6: 04:d0:46:3d:53:13:e0:fb:d1:b9:4e:f2:51:9b:ee:76:64:d1: 46:b4:d1:4c:b5:bc:94:07:92:7a:51:00:b1:97:9a:88:8e:3a: 70:b9:bf:e9:a6:50:c9:19:57:58:27:62:3d:9a:51:18:52:e8: 9a:46:63:c1:8b:79:c0:4e:69:bd:53:48:63:f3:3b:1e:07:98: 27:fc:0a:81:c7:80:0d:e4:bf:14:4e:b3:d0:d6:49:87:6a:46: f2:d2:6c:cc:54:14:29:55:68:dc:84:c5:cd:b1:d6:fa:56:1e: bb:f1:56:2d:ea:8a:70:d9:8b:b4:8d:07:7f:e0:fc:5b:88:e1: 3d:8c:e5:b0:13:df:b9:f4:92:be:85:7b:d8:8f:8d:e8:ee:75: c9:7d:75:19:c0:03:9c:21:f3:46:6f:8f:aa:01:a9:0a:db:51: fb:dc:88:1f:4b:7a:bc:41:b5:2a:a9:0b:a1:58:1f:6d:63:ab: 4b:73:5b:81 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfuJ9cSXhIHQknwpgYwveYqLU7YAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyODA5MTEwNloX DTI3MDcyNzA5MTYwNlowMzExMC8GA1UEAxMoRkU2RDVGQUZFMkU5RTg2RTdDMjNG MUJFQTMyMjI4NURCM0IzMjM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCD+VPEuoAsJbFczyLAkr2HZkQCbrgPd7xKr33s4lTP6a1fMA7qpPgpK7Qv 8yhKxalkED7BvgnvabM8t+HglJltc4DrArJPzHivHxrWZDmQV5UUsV86JFVMglxK wUJ2hYLuW7G1tpST4liROdGVlAC7P/nhRVWkTUlAKRkRv2kFwpx4KV0MUNASqwfT RRB50eXzfZnCNLJzGLuO0o95V2JDzxW7ZyA8eC9RRcKpiGpChMFhf8tWOED6SjCN Xnkh5W5A7sR2NqDq4m4BspoYA5rBPktiIESsEvHSZ43CPt9lMa9r5vqRtkaSfTGT T/TkFOQr7YeYFTxZhqMT8SSykikCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT+bV+v 4unobnwj8b6jIihds7MjdDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTU0Nzc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOyaMA0GCSqGSIb3DQEBCwUAA4IBAQBSBIYhIHhmzw1556bx01rLjTS0 Vq4ncCepnXXBBYmMJH2k0tsnk6oMmyzNPXZgz3hiAXp6NmEL9OPvPgxwYxx9sdvO cai+/MYE0EY9UxPg+9G5TvJRm+52ZNFGtNFMtbyUB5J6UQCxl5qIjjpwub/pplDJ GVdYJ2I9mlEYUuiaRmPBi3nATmm9U0hj8zseB5gn/AqBx4AN5L8UTrPQ1kmHakby 0mzMVBQpVWjchMXNsdb6Vh678VYt6opw2Yu0jQd/4PxbiOE9jOWwE9+59JK+hXvY j43o7nXJfXUZwAOcIfNGb4+qAakK21H73IgfS3q8QbUqqQuhWB9tY6tLc1uB -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:28 2026 by rpki-client