$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa File: AS147152.roa (raw, json) Hash identifier: CNzg/tpWxBB3Oy/NdX3K+zsv1XmPsKT/rxPVE6Hhxq8= Subject key identifier: 7C:6F:09:A9:06:87:0B:1A:45:17:0E:EC:DB:A1:E3:F9:CE:13:7C:B3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 49D30173F9EA86CBDA30422AC325E95DCCF03A9C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa Signing time: Mon 29 Jun 2026 03:56:22 +0000 ROA not before: Mon 29 Jun 2026 03:51:22 +0000 ROA not after: Mon 28 Jun 2027 03:56:22 +0000 asID: 147152 IP address blocks: 103.177.56.0/23 maxlen: 24 2001:df7:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 09:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d3:01:73:f9:ea:86:cb:da:30:42:2a:c3:25:e9:5d:cc:f0:3a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 03:51:22 2026 GMT Not After : Jun 28 03:56:22 2027 GMT Subject: CN=7C6F09A906870B1A45170EECDBA1E3F9CE137CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0d:89:a8:9b:c5:c6:43:7a:c3:d1:66:14:03: 9c:06:b0:9c:06:ce:97:3e:59:92:1a:7c:0c:56:1c: dc:97:f3:58:c6:e6:4e:e8:32:f4:ed:59:4a:60:ca: df:58:13:95:60:93:9f:b8:a7:a3:51:d6:a5:bc:d9: 19:ab:7b:fd:57:82:2f:02:ed:e2:3e:56:43:1b:fe: 2e:26:d2:ff:37:f6:96:7e:c6:84:d1:1f:04:28:ce: bd:10:e7:ad:3a:06:5a:75:37:e5:d7:a8:fc:67:fc: 1c:7d:1c:96:b6:c0:ec:93:1d:33:ae:6b:9a:d2:9f: 7b:71:31:8a:57:fd:63:f1:48:8c:11:2e:0a:24:8e: 5a:6e:78:15:f2:75:21:b3:e6:ff:8e:80:03:33:4e: 9a:d5:aa:50:10:64:45:4b:83:09:91:e3:eb:38:a9: eb:b2:5c:00:77:20:66:26:3c:4b:01:ea:94:38:26: 96:7e:96:da:00:f4:76:50:ab:3a:34:c1:5f:69:e9: 1e:98:55:f0:77:e1:83:92:1f:9d:5c:e6:93:d3:3d: 76:0f:13:63:1f:e1:2c:49:f5:6a:96:e3:20:bc:99: fb:3f:c3:12:78:ff:49:26:c7:2d:87:ff:f1:d1:96: e0:d7:b9:fa:01:c4:58:78:f1:a5:e8:1e:34:5e:c1: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:09:A9:06:87:0B:1A:45:17:0E:EC:DB:A1:E3:F9:CE:13:7C:B3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.56.0/23 IPv6: 2001:df7:23c0::/48 Signature Algorithm: sha256WithRSAEncryption a1:12:88:07:19:97:b1:6c:17:3d:20:5c:2f:f6:57:6f:74:14: d6:c8:e1:06:11:77:07:00:df:7e:0f:73:20:41:ff:6e:1f:ba: 7d:78:c9:63:a8:cf:90:0c:11:12:b7:47:bc:c2:b1:a3:73:9d: 33:c9:b6:de:24:45:65:81:6f:34:01:0f:5a:0f:a3:5e:a8:6e: ed:6b:65:b2:c7:fb:6c:df:9f:14:52:2f:c5:5a:b2:33:11:69: e8:aa:b6:64:d2:51:df:bc:a7:6e:93:98:e0:1f:ea:2c:6c:14: 34:89:37:0e:f9:9f:47:b7:bd:ef:1b:47:ef:92:92:29:2f:a7: 19:d9:ba:94:28:44:53:06:ff:fe:4d:e1:34:94:43:43:f6:d5: 36:ec:93:c8:eb:d7:82:d8:f6:db:16:54:d2:fa:08:ed:cc:f2: 6f:3f:39:4a:80:02:ce:79:24:f8:29:bc:27:d2:6d:d6:6a:2b: 43:53:b6:ab:66:b2:d5:7e:fd:b0:ce:41:9d:b3:b0:a5:fd:fa: 27:db:86:8b:05:23:24:56:f1:af:9d:6f:d4:1b:0e:95:21:65: 55:10:9c:82:02:b1:40:14:49:7a:83:ed:be:7e:97:e9:08:00: 48:ce:d9:a3:10:e3:4a:ad:3a:8f:ad:20:58:c9:22:7b:a2:85: 46:2f:e5:67 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSdMBc/nqhsvaMEIqwyXpXczwOpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTAzNTEyMloX DTI3MDYyODAzNTYyMlowMzExMC8GA1UEAxMoN0M2RjA5QTkwNjg3MEIxQTQ1MTcw RUVDREJBMUUzRjlDRTEzN0NCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJANiaibxcZDesPRZhQDnAawnAbOlz5Zkhp8DFYc3JfzWMbmTugy9O1ZSmDK 31gTlWCTn7ino1HWpbzZGat7/VeCLwLt4j5WQxv+LibS/zf2ln7GhNEfBCjOvRDn rToGWnU35deo/Gf8HH0clrbA7JMdM65rmtKfe3Exilf9Y/FIjBEuCiSOWm54FfJ1 IbPm/46AAzNOmtWqUBBkRUuDCZHj6zip67JcAHcgZiY8SwHqlDgmln6W2gD0dlCr OjTBX2npHphV8Hfhg5IfnVzmk9M9dg8TYx/hLEn1apbjILyZ+z/DEnj/SSbHLYf/ 8dGW4Ne5+gHEWHjxpegeNF7BETcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBR8bwmp BocLGkUXDuzboeP5zhN8szAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ7E4MA8EAgACMAkDBwAgAQ33I8AwDQYJKoZIhvcNAQELBQADggEBAKES iAcZl7FsFz0gXC/2V290FNbI4QYRdwcA334PcyBB/24fun14yWOoz5AMERK3R7zC saNznTPJtt4kRWWBbzQBD1oPo16obu1rZbLH+2zfnxRSL8VasjMRaeiqtmTSUd+8 p26TmOAf6ixsFDSJNw75n0e3ve8bR++SkikvpxnZupQoRFMG//5N4TSUQ0P21Tbs k8jr14LY9tsWVNL6CO3M8m8/OUqAAs55JPgpvCfSbdZqK0NTtqtmstV+/bDOQZ2z sKX9+ifbhosFIyRW8a+db9QbDpUhZVUQnIICsUAUSXqD7b5+l+kIAEjO2aMQ40qt Oo+tIFjJInuihUYv5Wc= -----END CERTIFICATE-----Generated at Mon Jul 20 19:24:44 2026 by rpki-client