$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152344.roa File: AS152344.roa (raw, json) Hash identifier: GiSNAm4IwZewUIxSBUiNFg36LkYZwWHp3YYSTwGSyoU= Subject key identifier: 4B:C6:84:45:3C:51:F4:F3:E8:BC:5A:C5:B3:C7:38:8B:0B:FC:D9:98 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5A1603CC42C368F597B73E7823A75B52D73064F1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152344.roa Signing time: Sat 02 May 2026 09:22:48 +0000 ROA not before: Sat 02 May 2026 09:17:48 +0000 ROA not after: Sat 01 May 2027 09:22:48 +0000 asID: 152344 IP address blocks: 157.10.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:16:03:cc:42:c3:68:f5:97:b7:3e:78:23:a7:5b:52:d7:30:64:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:48 2026 GMT Not After : May 1 09:22:48 2027 GMT Subject: CN=4BC684453C51F4F3E8BC5AC5B3C7388B0BFCD998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:ff:f7:2e:94:ce:04:ae:e0:da:62:df:5a: 8f:b1:24:d1:95:c8:f2:cd:97:b2:6d:a3:66:6c:dc: 8e:f3:be:ba:03:bc:b8:19:e3:71:38:24:84:88:34: 05:46:a7:82:77:69:a8:09:32:39:30:f2:7b:c7:64: e4:0d:17:22:c7:d0:ff:0b:8c:af:3b:d7:3a:4d:6a: a1:1c:8e:d3:d3:f4:1f:68:f8:a5:18:3e:00:d2:81: bb:ac:ab:c5:ab:70:67:6d:45:79:7c:15:1e:71:32: 61:31:6a:ab:4c:5f:0a:16:da:ea:4a:9a:b1:29:0a: 9f:f1:a5:04:26:3f:f9:34:ca:76:a7:9a:e1:7d:43: 56:ab:7c:74:6e:6b:40:6d:00:5d:e0:df:a1:08:57: 33:b9:fc:b2:48:40:5a:44:93:a0:ab:87:c8:0f:d6: 84:7a:7e:89:2a:85:2b:58:b9:ff:31:aa:86:98:80: 19:fc:0e:b5:bc:cc:b8:ec:20:65:94:3a:31:02:2d: be:ef:b3:32:f2:f7:b0:57:90:21:80:bc:b0:d3:a4: 7c:e8:3f:4e:30:c8:22:16:50:2a:2f:7a:df:ef:aa: b4:99:21:b9:82:6d:fd:ca:ab:00:c3:be:b8:85:97: 56:15:9f:43:a0:df:21:ce:c5:f6:71:76:b3:c1:da: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:84:45:3C:51:F4:F3:E8:BC:5A:C5:B3:C7:38:8B:0B:FC:D9:98 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.182.0/23 Signature Algorithm: sha256WithRSAEncryption a9:5e:09:bf:16:c7:c7:b3:f6:94:90:e7:6f:32:b3:0e:ed:b2: 36:5b:5f:3b:74:04:e8:0b:db:69:72:e8:7d:df:57:7a:48:4e: 85:08:41:e3:6a:a0:54:05:7e:82:04:5e:03:26:22:26:d9:c3: c1:47:76:81:96:89:e6:cf:ea:05:0d:74:b0:75:66:e7:e4:cf: 45:65:d2:fe:4c:78:98:16:61:6a:c5:cf:20:be:4d:bb:d9:17: b7:0a:cb:76:f6:fb:22:29:e5:92:b1:af:8d:59:92:4d:a4:19: 68:75:c1:f4:77:e0:b0:36:8a:a7:69:04:4e:14:5e:82:99:ef: 0c:3e:56:dc:65:1f:75:60:7d:3c:e2:a6:55:3e:06:68:a8:b2: b7:b9:6e:97:b2:8e:8e:b8:7e:3d:7c:fb:e4:2d:38:d7:60:d9: b0:a3:bf:73:c1:af:59:b8:b1:df:ec:c7:ef:d5:f2:72:6a:d4: 49:e8:76:81:fe:83:a3:b3:9a:fd:54:2c:32:dc:61:d2:31:34: 16:03:29:1c:9b:aa:b0:f3:3d:a5:48:88:15:9f:2c:96:91:8a: ac:e5:64:62:90:bb:97:80:b4:06:43:9f:a2:b4:26:05:28:d9: a4:47:3a:86:be:37:59:4a:d6:42:cb:1a:47:58:af:09:3e:d8: 4a:1e:3b:ea -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWhYDzELDaPWXtz54I6dbUtcwZPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0OFoX DTI3MDUwMTA5MjI0OFowMzExMC8GA1UEAxMoNEJDNjg0NDUzQzUxRjRGM0U4QkM1 QUM1QjNDNzM4OEIwQkZDRDk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdb//culM4EruDaYt9aj7Ek0ZXI8s2Xsm2jZmzcjvO+ugO8uBnjcTgkhIg0 BUangndpqAkyOTDye8dk5A0XIsfQ/wuMrzvXOk1qoRyO09P0H2j4pRg+ANKBu6yr xatwZ21FeXwVHnEyYTFqq0xfChba6kqasSkKn/GlBCY/+TTKdqea4X1DVqt8dG5r QG0AXeDfoQhXM7n8skhAWkSToKuHyA/WhHp+iSqFK1i5/zGqhpiAGfwOtbzMuOwg ZZQ6MQItvu+zMvL3sFeQIYC8sNOkfOg/TjDIIhZQKi963++qtJkhuYJt/cqrAMO+ uIWXVhWfQ6DfIc7F9nF2s8HaTxsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLxoRF PFH08+i8WsWzxziLC/zZmDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnQq2MA0GCSqGSIb3DQEBCwUAA4IBAQCpXgm/FsfHs/aUkOdvMrMO7bI2 W187dAToC9tpcuh931d6SE6FCEHjaqBUBX6CBF4DJiIm2cPBR3aBlonmz+oFDXSw dWbn5M9FZdL+THiYFmFqxc8gvk272Re3Cst29vsiKeWSsa+NWZJNpBlodcH0d+Cw NoqnaQROFF6Cme8MPlbcZR91YH084qZVPgZoqLK3uW6Xso6OuH49fPvkLTjXYNmw o79zwa9ZuLHf7Mfv1fJyatRJ6HaB/oOjs5r9VCwy3GHSMTQWAykcm6qw8z2lSIgV nyyWkYqs5WRikLuXgLQGQ5+itCYFKNmkRzqGvjdZStZCyxpHWK8JPthKHjvq -----END CERTIFICATE-----Generated at Sat May 2 21:03:48 2026 by rpki-client