$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS147082.roa File: AS147082.roa (raw, json) Hash identifier: R2uY7N/9ZzPGoK+zZs6hB4YytePh8aH3AkF8qZhjgz8= Subject key identifier: CB:99:42:FD:23:19:AA:15:E2:29:5D:57:FD:80:7F:E6:87:90:6B:BE Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3BAAA862D8CBA40409D5AA4461D776A828ADEB28 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS147082.roa Signing time: Sat 02 May 2026 09:23:42 +0000 ROA not before: Sat 02 May 2026 09:18:42 +0000 ROA not after: Sat 01 May 2027 09:23:42 +0000 asID: 147082 IP address blocks: 160.187.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:aa:a8:62:d8:cb:a4:04:09:d5:aa:44:61:d7:76:a8:28:ad:eb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:42 2026 GMT Not After : May 1 09:23:42 2027 GMT Subject: CN=CB9942FD2319AA15E2295D57FD807FE687906BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:23:07:d1:d4:93:fa:f8:17:43:d6:2d:20: b7:64:b3:72:af:6c:b7:fd:da:20:f7:c4:aa:16:cf: c9:5e:c8:95:0c:f1:3c:55:c9:bb:ab:77:d8:f8:d6: 36:ef:78:89:a4:51:b4:5b:17:ec:d1:23:8e:12:cd: b5:8d:64:4a:f2:29:eb:cb:21:17:85:54:f0:b7:24: 88:b5:5a:b7:f5:2b:af:e9:28:e3:85:2d:03:4b:c5: e2:4a:37:23:c2:71:08:a7:d6:14:f6:be:52:ed:c7: 39:dd:20:ee:dd:f6:80:c7:3e:86:82:50:08:ba:e3: 8c:2b:0e:20:28:ca:30:20:8b:b8:1c:11:f1:1c:f7: 1d:21:6b:4a:9d:ca:5c:d2:5e:16:2a:71:b5:a9:49: 09:b7:4b:06:c7:e5:45:00:75:5d:9c:25:26:a2:85: 4d:0e:cf:4b:4f:93:82:97:b9:f4:ae:e9:ea:7d:85: 4a:81:c1:47:df:80:ca:36:fd:bc:f0:7a:02:a4:51: 5a:d9:98:31:80:2c:8d:a5:0e:ac:6b:cc:97:1c:ea: 74:8a:1b:84:10:4c:cf:ef:49:ea:bd:ae:1b:d4:ba: 2a:9f:d0:9b:30:ee:13:b0:d7:0c:6f:8f:6f:be:37: bd:ec:53:8c:bb:b6:6d:15:f2:74:0c:71:d4:65:a9: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:99:42:FD:23:19:AA:15:E2:29:5D:57:FD:80:7F:E6:87:90:6B:BE X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS147082.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:4f:bc:72:cf:06:e0:45:46:02:d4:30:d1:17:4b:27:15:9f: 13:47:90:5c:0b:2a:8d:e7:da:9c:55:66:b1:32:51:2b:b9:71: 4a:c3:5a:5b:0e:2e:64:13:05:d7:71:0b:71:3f:da:e3:26:86: 8e:4d:36:33:f4:74:14:49:e8:f4:54:80:bb:a1:c2:5d:59:16: 48:d5:2f:38:d8:31:c3:c1:90:84:c9:62:75:fe:05:a8:ac:49: ac:06:c5:9a:e8:77:6d:16:b1:1a:b2:d6:a3:1d:13:99:41:32: c8:6c:c2:f6:dc:c9:db:d9:1b:2d:47:e3:b8:b9:68:f8:83:dd: bd:78:18:d5:9a:ca:fb:3d:d5:d8:89:21:c5:f2:e5:ae:73:59: 22:a5:b9:a6:7a:e9:a1:b8:99:83:a3:7c:64:41:0c:ba:18:5d: f9:e7:99:1c:02:ce:46:c8:5f:0c:dd:7c:87:78:c4:70:c1:b0: 61:bb:e9:3d:f7:eb:10:80:f1:a5:85:e4:0b:21:d7:d1:e1:67: aa:67:45:2a:fd:93:e3:3f:e7:ee:5e:12:96:e0:4e:fe:a6:29: a7:b9:45:55:43:c5:cc:90:8f:a2:1c:9e:5a:cc:3e:a1:f0:a7: 5d:c8:dd:20:0b:42:68:bf:c5:b3:df:5f:46:7f:78:ae:90:08: b2:7c:4f:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUO6qoYtjLpAQJ1apEYdd2qCit6ygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg0MloX DTI3MDUwMTA5MjM0MlowMzExMC8GA1UEAxMoQ0I5OTQyRkQyMzE5QUExNUUyMjk1 RDU3RkQ4MDdGRTY4NzkwNkJCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5QIwfR1JP6+BdD1i0gt2Szcq9st/3aIPfEqhbPyV7IlQzxPFXJu6t32PjW Nu94iaRRtFsX7NEjjhLNtY1kSvIp68shF4VU8LckiLVat/Urr+ko44UtA0vF4ko3 I8JxCKfWFPa+Uu3HOd0g7t32gMc+hoJQCLrjjCsOICjKMCCLuBwR8Rz3HSFrSp3K XNJeFipxtalJCbdLBsflRQB1XZwlJqKFTQ7PS0+Tgpe59K7p6n2FSoHBR9+Ayjb9 vPB6AqRRWtmYMYAsjaUOrGvMlxzqdIobhBBMz+9J6r2uG9S6Kp/QmzDuE7DXDG+P b743vexTjLu2bRXydAxx1GWpyTsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTLmUL9 IxmqFeIpXVf9gH/mh5BrvjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQ3MDgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoLvFMA0GCSqGSIb3DQEBCwUAA4IBAQAKT7xyzwbgRUYC1DDRF0snFZ8T R5BcCyqN59qcVWaxMlEruXFKw1pbDi5kEwXXcQtxP9rjJoaOTTYz9HQUSej0VIC7 ocJdWRZI1S842DHDwZCEyWJ1/gWorEmsBsWa6HdtFrEastajHROZQTLIbML23Mnb 2RstR+O4uWj4g929eBjVmsr7PdXYiSHF8uWuc1kipbmmeumhuJmDo3xkQQy6GF35 55kcAs5GyF8M3XyHeMRwwbBhu+k99+sQgPGlheQLIdfR4WeqZ0Uq/ZPjP+fuXhKW 4E7+pimnuUVVQ8XMkI+iHJ5azD6h8KddyN0gC0Jov8Wz319Gf3iukAiyfE/z -----END CERTIFICATE-----Generated at Sat May 2 21:05:16 2026 by rpki-client