$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152373.roa File: AS152373.roa (raw, json) Hash identifier: dkow9+54gpKNU7FvLWkJdJwCJVfjLjeVjmXlWzQ+5Jk= Subject key identifier: AC:9F:09:B7:86:BF:F1:C1:59:62:39:80:D6:82:F3:27:96:4D:47:FB Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 221945E526D0B8F58B409BA877722023A6BE7076 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152373.roa Signing time: Sat 02 May 2026 09:22:48 +0000 ROA not before: Sat 02 May 2026 09:17:48 +0000 ROA not after: Sat 01 May 2027 09:22:48 +0000 asID: 152373 IP address blocks: 157.15.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:19:45:e5:26:d0:b8:f5:8b:40:9b:a8:77:72:20:23:a6:be:70:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:48 2026 GMT Not After : May 1 09:22:48 2027 GMT Subject: CN=AC9F09B786BFF1C159623980D682F327964D47FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:f0:98:7f:c1:cf:52:23:5d:34:ba:8a:76: ed:93:23:7e:5e:dc:26:29:27:6e:2d:97:27:bb:f4: 1f:5a:a7:d9:8e:23:5f:f9:06:e3:a3:73:10:6c:c1: 14:72:45:3b:ec:fb:0d:ed:34:8f:be:d3:76:ed:e7: c2:a5:27:a6:30:a6:67:f1:b4:81:97:9a:83:4c:3f: 4a:f7:9b:68:f8:e2:af:d6:5c:c7:c0:c0:2c:17:4b: dc:b0:8a:c3:72:c2:a7:55:7b:ed:a9:33:f6:12:6a: ec:70:e4:b8:1c:4a:26:19:4f:eb:e0:6d:bb:0d:f9: b1:ea:46:76:6d:71:78:9b:aa:c8:ac:2b:54:e0:65: 84:28:7f:ac:4f:31:77:4d:57:07:4e:31:ee:78:a7: 59:c9:f0:1d:35:3b:d2:cb:fe:85:57:7e:12:9a:92: 3a:f0:7f:36:c6:48:65:08:9e:bf:a7:7e:42:24:09: de:e6:53:bb:16:8a:21:71:64:55:15:ee:ce:50:ab: 25:03:18:36:7f:da:d3:92:8c:72:ce:bd:16:2e:7c: 1d:9b:24:e1:96:4b:34:84:da:2e:27:12:b4:b3:66: 69:1b:ae:ba:04:3f:ca:b2:a9:f9:c2:85:ea:e6:18: 52:1e:eb:85:65:7c:e9:c6:2b:d6:34:f0:40:ef:be: 2b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:09:B7:86:BF:F1:C1:59:62:39:80:D6:82:F3:27:96:4D:47:FB X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.62.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:0a:42:3c:c2:fc:c3:22:2f:d6:69:5e:53:57:61:75:75:c1: 11:be:63:74:18:34:62:5f:9b:19:a8:3f:78:cc:d9:e5:6c:3b: 5b:55:35:6f:da:6a:7b:6b:1c:b8:1c:26:43:73:67:6f:27:cb: 9d:52:53:0d:3b:42:7a:7d:f4:a0:41:34:60:20:3e:39:97:bc: 20:89:28:78:bc:9d:4e:f4:64:0b:52:77:52:2e:f7:19:a5:8b: 07:ee:b9:0e:36:d7:78:68:0e:2b:0e:82:7b:94:01:35:ce:74: d2:cb:77:d2:41:11:1c:db:23:f8:aa:bf:b0:90:ba:a9:38:7c: 39:ec:64:a2:49:77:7f:03:d5:44:2c:56:f9:10:60:67:6c:2d: fc:d7:4b:68:7c:51:43:3c:cc:0a:94:d3:7a:12:23:bb:ed:48: 20:37:8b:27:18:5a:56:8f:0a:d7:4a:52:90:35:f1:41:9e:80: 00:bd:85:40:10:a5:d5:48:65:f1:7b:e5:7c:00:42:4c:fb:d5: 50:02:67:d8:58:47:8a:d1:96:59:38:dd:2c:2b:0c:65:aa:ae: 6f:65:60:4e:63:71:5f:5d:ca:14:71:e5:44:41:e3:c6:07:a7: 64:bd:ce:eb:19:92:89:cb:85:fd:87:7f:0f:79:e6:f1:35:a4: db:4d:71:ff -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIhlF5SbQuPWLQJuod3IgI6a+cHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0OFoX DTI3MDUwMTA5MjI0OFowMzExMC8GA1UEAxMoQUM5RjA5Qjc4NkJGRjFDMTU5NjIz OTgwRDY4MkYzMjc5NjRENDdGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwA8Jh/wc9SI100uop27ZMjfl7cJiknbi2XJ7v0H1qn2Y4jX/kG46NzEGzB FHJFO+z7De00j77Tdu3nwqUnpjCmZ/G0gZeag0w/SvebaPjir9Zcx8DALBdL3LCK w3LCp1V77akz9hJq7HDkuBxKJhlP6+Btuw35sepGdm1xeJuqyKwrVOBlhCh/rE8x d01XB04x7ninWcnwHTU70sv+hVd+EpqSOvB/NsZIZQiev6d+QiQJ3uZTuxaKIXFk VRXuzlCrJQMYNn/a05KMcs69Fi58HZsk4ZZLNITaLicStLNmaRuuugQ/yrKp+cKF 6uYYUh7rhWV86cYr1jTwQO++K3UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSsnwm3 hr/xwVliOYDWgvMnlk1H+zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnQ8+MA0GCSqGSIb3DQEBCwUAA4IBAQBcCkI8wvzDIi/WaV5TV2F1dcER vmN0GDRiX5sZqD94zNnlbDtbVTVv2mp7axy4HCZDc2dvJ8udUlMNO0J6ffSgQTRg ID45l7wgiSh4vJ1O9GQLUndSLvcZpYsH7rkONtd4aA4rDoJ7lAE1znTSy3fSQREc 2yP4qr+wkLqpOHw57GSiSXd/A9VELFb5EGBnbC3810tofFFDPMwKlNN6EiO77Ugg N4snGFpWjwrXSlKQNfFBnoAAvYVAEKXVSGXxe+V8AEJM+9VQAmfYWEeK0ZZZON0s Kwxlqq5vZWBOY3FfXcoUceVEQePGB6dkvc7rGZKJy4X9h38PeebxNaTbTXH/ -----END CERTIFICATE-----Generated at Sat May 2 21:05:06 2026 by rpki-client