$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152364.roa File: AS152364.roa (raw, json) Hash identifier: ct1hmMaHUus1Bxmf2GFbfZ6GT3FpWcEFZs5ZlrNU+tU= Subject key identifier: 0B:A2:A2:12:FB:E5:9B:4F:A5:6B:F2:89:7D:B5:22:61:5A:81:23:40 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1654634D4971B92D6C20C2365FF4900477267FE1 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152364.roa Signing time: Sat 02 May 2026 09:22:43 +0000 ROA not before: Sat 02 May 2026 09:17:43 +0000 ROA not after: Sat 01 May 2027 09:22:43 +0000 asID: 152364 IP address blocks: 157.15.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:54:63:4d:49:71:b9:2d:6c:20:c2:36:5f:f4:90:04:77:26:7f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:43 2026 GMT Not After : May 1 09:22:43 2027 GMT Subject: CN=0BA2A212FBE59B4FA56BF2897DB522615A812340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:65:9b:71:9d:ff:09:07:06:eb:df:da:f9: f5:21:c0:b4:f6:fb:44:75:1b:da:e6:ef:62:6a:dc: 99:4c:ce:81:25:1d:8c:95:a5:77:3b:d8:72:6b:b1: 1c:2a:71:d7:c9:56:b8:93:a4:90:d2:3d:66:29:4d: 27:27:3f:7c:be:c9:cb:b6:3f:48:fa:77:c4:3d:db: e0:57:38:57:cb:e5:dd:ec:38:f2:1d:e1:6c:8b:32: a3:f9:45:3c:3b:ad:74:20:cc:16:e0:a7:e1:a3:3f: 8b:5c:5c:5d:92:88:f2:34:37:fe:7a:c9:a2:f6:6e: e3:d3:b7:76:3f:bf:2c:a5:a1:13:0e:46:0e:1c:c4: 83:1f:50:6a:06:d8:43:24:9d:d1:e7:40:d7:4a:25: 30:38:42:27:75:35:1a:18:19:64:28:27:9e:fa:5a: b8:c3:5e:76:91:60:be:f9:70:4d:70:7e:9a:6d:0f: 21:7d:ac:a2:6f:f2:91:bc:4c:dc:9e:79:e9:b0:8d: 06:13:6b:5d:ba:7d:78:8d:a8:4f:17:f5:04:ce:9d: 30:6b:83:f1:1a:9b:59:3d:28:b0:76:16:2b:97:95: ff:26:70:ef:4c:9a:c0:78:ca:49:9b:cd:ef:67:33: c1:77:48:7c:f0:07:7e:45:b9:09:f8:6c:07:02:0f: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:A2:12:FB:E5:9B:4F:A5:6B:F2:89:7D:B5:22:61:5A:81:23:40 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152364.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.96.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:a6:05:ae:e4:8b:d0:18:53:a9:e5:b4:32:24:ef:af:d2:19: 49:3d:ef:e9:e5:55:16:5a:27:0b:dc:56:78:f6:1c:fe:d0:a9: 59:11:2e:bf:13:7c:cd:f3:f8:5c:91:67:60:47:83:c1:b6:1c: 18:06:3a:c9:9a:ac:5a:0f:0d:f6:13:1d:3e:60:b6:df:08:0d: 3f:df:60:dd:a1:21:00:d2:20:ee:2f:f3:c4:69:b1:fa:64:71: 8f:8b:ec:bf:bd:fc:51:c3:81:43:04:8d:d4:17:5b:8c:49:23: 82:cc:a0:90:28:21:c0:01:1b:85:c0:f5:1a:77:41:af:0c:99: d2:43:e3:f0:ec:37:fc:8c:61:81:54:bc:ed:95:b3:08:91:fc: 2f:23:08:f7:27:da:04:dc:7c:a1:e8:59:69:9f:1a:c6:ae:db: f7:24:57:d2:75:ae:f8:5d:81:07:87:fc:43:fc:1f:4f:0d:24: af:cd:9b:fe:59:7f:27:25:b8:b2:13:b1:b8:c2:f9:f6:88:27: 8d:2b:22:8e:4c:72:e9:66:e2:9a:3c:6b:53:23:ef:0c:47:c6: 08:5d:1e:2b:63:a3:78:40:7a:41:bd:1d:15:88:1a:bf:d8:f0: aa:00:c2:a7:10:0e:47:f4:87:6b:16:36:08:fc:99:9c:52:b1: f7:21:43:d8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFlRjTUlxuS1sIMI2X/SQBHcmf+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0M1oX DTI3MDUwMTA5MjI0M1owMzExMC8GA1UEAxMoMEJBMkEyMTJGQkU1OUI0RkE1NkJG Mjg5N0RCNTIyNjE1QTgxMjM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAML9ZZtxnf8JBwbr39r59SHAtPb7RHUb2ubvYmrcmUzOgSUdjJWldzvYcmux HCpx18lWuJOkkNI9ZilNJyc/fL7Jy7Y/SPp3xD3b4Fc4V8vl3ew48h3hbIsyo/lF PDutdCDMFuCn4aM/i1xcXZKI8jQ3/nrJovZu49O3dj+/LKWhEw5GDhzEgx9QagbY QySd0edA10olMDhCJ3U1GhgZZCgnnvpauMNedpFgvvlwTXB+mm0PIX2som/ykbxM 3J556bCNBhNrXbp9eI2oTxf1BM6dMGuD8RqbWT0osHYWK5eV/yZw70yawHjKSZvN 72czwXdIfPAHfkW5CfhsBwIPhRcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQLoqIS ++WbT6Vr8ol9tSJhWoEjQDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnQ9gMA0GCSqGSIb3DQEBCwUAA4IBAQBKpgWu5IvQGFOp5bQyJO+v0hlJ Pe/p5VUWWicL3FZ49hz+0KlZES6/E3zN8/hckWdgR4PBthwYBjrJmqxaDw32Ex0+ YLbfCA0/32DdoSEA0iDuL/PEabH6ZHGPi+y/vfxRw4FDBI3UF1uMSSOCzKCQKCHA ARuFwPUad0GvDJnSQ+Pw7Df8jGGBVLztlbMIkfwvIwj3J9oE3Hyh6FlpnxrGrtv3 JFfSda74XYEHh/xD/B9PDSSvzZv+WX8nJbiyE7G4wvn2iCeNKyKOTHLpZuKaPGtT I+8MR8YIXR4rY6N4QHpBvR0ViBq/2PCqAMKnEA5H9IdrFjYI/JmcUrH3IUPY -----END CERTIFICATE-----Generated at Sat May 2 21:03:44 2026 by rpki-client