$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152357.roa File: AS152357.roa (raw, json) Hash identifier: oL6Fq7FVknHxgTkv4geZmS6e8ZChU/a7FMa2Z1W3thU= Subject key identifier: 02:7C:C4:C7:03:13:11:7B:E3:90:62:41:D9:54:DE:76:DF:82:77:BE Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 581B325523311977EF045D55877D47B342EB2FEA Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152357.roa Signing time: Sat 02 May 2026 09:23:11 +0000 ROA not before: Sat 02 May 2026 09:18:11 +0000 ROA not after: Sat 01 May 2027 09:23:11 +0000 asID: 152357 IP address blocks: 157.15.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1b:32:55:23:31:19:77:ef:04:5d:55:87:7d:47:b3:42:eb:2f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:11 2026 GMT Not After : May 1 09:23:11 2027 GMT Subject: CN=027CC4C70313117BE3906241D954DE76DF8277BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:67:18:89:d6:82:ed:2c:76:26:98:77:31: 88:f8:55:41:f3:f2:66:3d:db:38:aa:9c:11:6d:a5: 7f:84:2d:07:dd:e2:90:13:e5:f1:2d:9b:38:64:12: ce:1f:ce:72:2f:36:57:25:4c:f7:b3:1a:cf:ce:21: 5a:bf:c8:67:6b:72:ba:6e:03:6f:da:4d:71:b8:dc: e2:d3:7a:61:4c:2d:4b:b1:ce:6f:36:48:8c:50:66: 03:cd:a9:90:7f:0f:e7:93:a3:54:17:5a:74:37:ac: 7e:5d:f0:ae:d0:93:9f:41:d3:15:57:eb:d6:f5:53: 5d:56:c6:2c:5e:92:06:b8:13:ae:76:0a:33:92:98: 3a:f6:81:dc:9b:ee:59:af:42:00:c6:18:9f:88:76: 31:f7:2a:bf:14:a8:90:99:e1:53:dc:13:bc:ab:5f: 3b:33:b8:80:42:b7:1e:01:99:46:6f:94:68:8a:26: 81:7b:d1:2e:8f:17:3d:7d:f5:aa:f8:5b:b1:b4:e7: 6a:90:c0:91:95:ba:3c:e9:8e:34:30:9b:ea:19:b3: 62:b8:38:d2:c2:59:5f:d9:03:4d:62:38:29:42:dc: 9e:0a:20:2b:51:63:81:76:96:43:d6:bf:ef:21:d0: b2:89:7e:df:f4:99:83:29:20:a3:de:76:39:16:28: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7C:C4:C7:03:13:11:7B:E3:90:62:41:D9:54:DE:76:DF:82:77:BE X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152357.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:f3:30:ec:0f:22:6b:6b:56:62:31:8c:af:97:ab:bd:5f:c5: af:db:63:ad:0c:f4:15:d9:26:95:8f:87:34:90:af:25:1c:b2: c1:5c:50:48:a2:38:eb:6b:e5:4f:79:8c:5e:82:66:00:43:0c: cd:89:4f:26:88:39:a7:19:e4:06:74:d4:c0:f1:05:d9:7b:08: b4:ac:93:4c:51:54:8a:bb:d3:95:5f:3c:2d:2e:8c:b0:f6:00: fe:de:d4:d0:38:65:ca:e8:be:54:c6:0e:d7:21:15:a8:00:da: 82:e5:5a:12:62:33:c3:d7:ac:72:da:2d:62:5c:6a:3e:b5:cc: 0f:a6:68:3c:d3:4e:d6:c3:cb:4b:59:91:cf:61:10:d6:8a:b0: b0:e9:c6:61:53:72:1f:d6:f6:ee:d0:31:b7:7f:f1:69:a9:ad: ea:f3:9f:79:05:e1:92:39:3d:c6:f7:4c:a8:5b:1a:1e:12:6b: 51:fb:39:c8:e1:15:35:3d:93:3d:ab:02:a0:81:a3:45:18:e1: 64:55:fe:17:e3:8d:7e:65:09:a9:f5:81:84:ae:c9:20:00:de: d6:9e:be:05:1b:d8:cb:30:02:5e:68:41:0f:f8:7a:4f:01:da: 3b:c7:bb:ad:ce:65:4d:63:50:49:b9:72:b5:d5:02:da:aa:d8: 77:f5:c9:d4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWBsyVSMxGXfvBF1Vh31Hs0LrL+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxMVoX DTI3MDUwMTA5MjMxMVowMzExMC8GA1UEAxMoMDI3Q0M0QzcwMzEzMTE3QkUzOTA2 MjQxRDk1NERFNzZERjgyNzdCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI6OZxiJ1oLtLHYmmHcxiPhVQfPyZj3bOKqcEW2lf4QtB93ikBPl8S2bOGQS zh/Oci82VyVM97Maz84hWr/IZ2tyum4Db9pNcbjc4tN6YUwtS7HObzZIjFBmA82p kH8P55OjVBdadDesfl3wrtCTn0HTFVfr1vVTXVbGLF6SBrgTrnYKM5KYOvaB3Jvu Wa9CAMYYn4h2MfcqvxSokJnhU9wTvKtfOzO4gEK3HgGZRm+UaIomgXvRLo8XPX31 qvhbsbTnapDAkZW6POmONDCb6hmzYrg40sJZX9kDTWI4KULcngogK1FjgXaWQ9a/ 7yHQsol+3/SZgykgo952ORYoRBMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQCfMTH AxMRe+OQYkHZVN5234J3vjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnQ8CMA0GCSqGSIb3DQEBCwUAA4IBAQCd8zDsDyJra1ZiMYyvl6u9X8Wv 22OtDPQV2SaVj4c0kK8lHLLBXFBIojjra+VPeYxegmYAQwzNiU8miDmnGeQGdNTA 8QXZewi0rJNMUVSKu9OVXzwtLoyw9gD+3tTQOGXK6L5Uxg7XIRWoANqC5VoSYjPD 16xy2i1iXGo+tcwPpmg8007Ww8tLWZHPYRDWirCw6cZhU3If1vbu0DG3f/Fpqa3q 8595BeGSOT3G90yoWxoeEmtR+znI4RU1PZM9qwKggaNFGOFkVf4X441+ZQmp9YGE rskgAN7Wnr4FG9jLMAJeaEEP+HpPAdo7x7utzmVNY1BJuXK11QLaqth39cnU -----END CERTIFICATE-----Generated at Sat May 2 21:04:40 2026 by rpki-client