$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152083.roa File: AS152083.roa (raw, json) Hash identifier: lw8uZfrX9mfIthPrJaRtmKP9VO85IyJYXaQUe9aDqAQ= Subject key identifier: 90:83:BF:3B:15:D9:EF:BB:E8:5C:3C:53:83:99:07:19:C8:1C:13:36 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2AE1BB1C8370A505223A36C416E0AC5A71B1DC9D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152083.roa Signing time: Mon 24 Aug 2026 02:45:09 +0000 ROA not before: Mon 24 Aug 2026 02:40:09 +0000 ROA not after: Mon 23 Aug 2027 02:45:09 +0000 asID: 152083 IP address blocks: 157.10.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e1:bb:1c:83:70:a5:05:22:3a:36:c4:16:e0:ac:5a:71:b1:dc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 24 02:40:09 2026 GMT Not After : Aug 23 02:45:09 2027 GMT Subject: CN=9083BF3B15D9EFBBE85C3C5383990719C81C1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:3a:fe:82:c7:e0:5f:e9:e1:42:67:b4:ee: a7:87:41:ad:1e:f9:67:06:d2:1a:e0:e5:80:fa:62: e6:7e:56:29:68:62:c7:e2:ba:ff:8e:00:a2:9a:ea: 6c:28:9f:69:4a:2c:c7:4a:6f:c2:e4:b5:0f:a8:ea: 1c:c9:b2:8d:72:f7:9c:0a:04:5a:e5:ee:d5:8e:b5: e5:e9:39:46:de:5d:84:90:90:59:ec:f9:3b:83:9b: 9f:cc:5f:33:87:bb:bd:77:94:35:4a:40:84:7f:0c: 87:2e:8d:2b:87:4b:21:19:43:88:45:71:20:7c:8f: a2:6d:59:a4:98:21:6f:f0:14:23:bc:c8:19:f4:77: dd:4b:50:62:b1:1a:ed:a5:90:f3:51:a7:d1:e7:0c: c6:cf:68:39:c2:db:70:d4:e9:70:df:2e:a1:57:64: 8c:2b:7c:de:c1:f7:9e:f8:97:2d:82:d9:ec:54:b8: 7c:7d:51:30:e6:49:3d:a9:a0:db:0e:d8:de:19:db: 4f:7e:88:09:75:69:73:ab:1a:55:57:19:bf:d9:99: 7d:e4:de:af:c6:5a:1f:f0:46:b9:57:bb:d0:dd:06: ae:1b:b1:44:63:5d:46:76:42:ae:e9:ae:6d:f3:3d: ef:6b:65:44:93:57:18:cd:38:85:24:b5:72:39:0d: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:83:BF:3B:15:D9:EF:BB:E8:5C:3C:53:83:99:07:19:C8:1C:13:36 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152083.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.157.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:de:3c:f4:bc:30:ad:3b:89:59:78:93:0f:d8:d8:cc:5b:11: 5c:30:7e:bd:4e:39:a3:1d:da:f7:b4:9c:ed:35:d1:3a:0d:ea: 66:07:58:6d:02:4a:68:b3:ff:c8:c4:dc:c0:dd:df:10:16:cc: 9d:1b:3e:b2:01:6f:fe:d4:02:08:d5:0e:a4:4b:ff:86:58:2c: de:68:d4:24:7f:0e:b6:4d:3d:b7:9a:ed:12:06:8d:1e:94:7d: 12:2a:b0:23:9b:07:c7:11:d2:e4:e7:82:3d:f0:18:e9:cd:ef: 05:b7:7e:26:20:b8:70:ab:1a:c8:b8:15:e0:27:ea:ab:24:12: 8a:0d:dd:10:d0:df:69:bc:21:29:b1:07:af:5b:fe:fa:d7:e7: f9:34:13:09:72:eb:3b:45:6a:1c:d2:96:31:e1:38:aa:17:f7: 06:f0:0b:c4:34:6c:5c:5f:bb:2a:88:94:a2:06:70:5d:84:0a: ef:ed:b7:fc:e8:1a:82:37:19:48:06:79:33:ae:af:fb:e3:63: ea:c5:59:b1:35:a6:fa:20:33:81:1e:ab:cf:8f:d1:7c:80:f3: a2:97:e6:ce:ba:0a:8a:44:cf:eb:d6:0e:f2:b4:55:fe:0b:a7: 66:ac:b6:64:37:9e:4a:9a:3d:4a:d9:6e:5f:66:ff:57:f7:8f: 72:8c:9a:b4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKuG7HINwpQUiOjbEFuCsWnGx3J0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgyNDAyNDAwOVoX DTI3MDgyMzAyNDUwOVowMzExMC8GA1UEAxMoOTA4M0JGM0IxNUQ5RUZCQkU4NUMz QzUzODM5OTA3MTlDODFDMTMzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpROv6Cx+Bf6eFCZ7Tup4dBrR75ZwbSGuDlgPpi5n5WKWhix+K6/44Aoprq bCifaUosx0pvwuS1D6jqHMmyjXL3nAoEWuXu1Y615ek5Rt5dhJCQWez5O4Obn8xf M4e7vXeUNUpAhH8Mhy6NK4dLIRlDiEVxIHyPom1ZpJghb/AUI7zIGfR33UtQYrEa 7aWQ81Gn0ecMxs9oOcLbcNTpcN8uoVdkjCt83sH3nviXLYLZ7FS4fH1RMOZJPamg 2w7Y3hnbT36ICXVpc6saVVcZv9mZfeTer8ZaH/BGuVe70N0GrhuxRGNdRnZCrumu bfM972tlRJNXGM04hSS1cjkNIg0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSQg787 Fdnvu+hcPFODmQcZyBwTNjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMDgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnQqdMA0GCSqGSIb3DQEBCwUAA4IBAQCN3jz0vDCtO4lZeJMP2NjMWxFc MH69TjmjHdr3tJztNdE6DepmB1htAkpos//IxNzA3d8QFsydGz6yAW/+1AII1Q6k S/+GWCzeaNQkfw62TT23mu0SBo0elH0SKrAjmwfHEdLk54I98Bjpze8Ft34mILhw qxrIuBXgJ+qrJBKKDd0Q0N9pvCEpsQevW/761+f5NBMJcus7RWoc0pYx4TiqF/cG 8AvENGxcX7sqiJSiBnBdhArv7bf86BqCNxlIBnkzrq/742PqxVmxNab6IDOBHqvP j9F8gPOil+bOugqKRM/r1g7ytFX+C6dmrLZkN55Kmj1K2W5fZv9X949yjJq0 -----END CERTIFICATE-----Generated at Thu Sep 17 11:24:39 2026 by rpki-client