$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152393.roa File: AS152393.roa (raw, json) Hash identifier: IJTeXn4oPW7p74A+92k/Nv2Eo1GpUdmcA3grG/yzJxs= Subject key identifier: AB:7D:20:67:5F:A3:F6:F4:40:6F:BD:2A:72:D1:46:EE:5A:9B:CD:28 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 78895238A01B0C89040DFA95E1A61C72A2AA04 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152393.roa Signing time: Sat 02 May 2026 09:23:07 +0000 ROA not before: Sat 02 May 2026 09:18:07 +0000 ROA not after: Sat 01 May 2027 09:23:07 +0000 asID: 152393 IP address blocks: 157.15.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:89:52:38:a0:1b:0c:89:04:0d:fa:95:e1:a6:1c:72:a2:aa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:07 2026 GMT Not After : May 1 09:23:07 2027 GMT Subject: CN=AB7D20675FA3F6F4406FBD2A72D146EE5A9BCD28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:8a:7c:73:19:ce:d4:9c:c6:38:cb:11:eb: 6c:b0:e5:44:b8:e0:91:44:ff:3f:cc:8e:d3:98:6c: 41:8e:7d:a0:21:94:01:90:7f:82:92:e3:5b:9f:91: c7:25:34:bd:ce:95:1f:65:b6:67:2c:f9:94:02:d6: 0b:3b:cf:37:c3:2b:1f:60:79:ad:0b:24:ec:26:0e: f8:33:9a:99:6a:c4:a6:d9:db:89:3d:1d:7b:9d:2b: b2:59:ca:0b:ed:13:a3:ae:f2:05:c9:26:42:04:fc: 2f:58:f9:0b:90:08:60:c4:45:5d:e6:f9:ea:ab:d1: 69:9d:7f:f7:84:55:1c:cc:5c:7d:14:74:55:11:5e: 5b:bd:5c:82:88:08:83:ab:68:20:99:4e:17:7a:37: 9e:bb:f7:01:44:16:8e:bb:06:3c:69:a1:e2:c2:1c: ca:1c:92:31:ed:05:f0:d0:0f:65:59:cf:9a:75:50: fe:e5:02:a6:c4:5d:6c:b8:5f:8a:e5:10:6b:83:f4: 6d:0c:a8:d1:24:c3:84:d4:6a:6b:9c:18:53:83:d2: d3:30:49:df:4c:6a:82:96:d7:eb:7b:65:a3:59:47: 4b:d7:71:34:9a:f1:ac:43:89:dd:e9:5b:c4:ef:e9: ee:1d:b9:53:53:aa:2b:5d:72:9e:d7:73:29:df:e5: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:20:67:5F:A3:F6:F4:40:6F:BD:2A:72:D1:46:EE:5A:9B:CD:28 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.210.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:95:ce:d9:5d:ec:33:f7:c7:3e:d8:5e:e2:64:03:de:17:49: c1:3d:c9:6e:9d:7b:6d:9a:52:4f:e7:3b:55:bf:c0:be:b7:3f: aa:61:0b:72:42:2b:74:7a:c6:c9:00:5f:c4:f8:01:f3:c5:50: ae:ec:0e:98:cf:eb:b4:30:bd:0f:5d:1c:0a:1f:18:e4:9f:4f: 8e:cb:de:cb:87:01:f8:37:4f:93:c6:4b:61:b1:e2:43:09:02: b6:78:45:34:11:a4:5c:4a:cb:c1:c7:6c:78:73:93:de:ad:af: d4:22:ab:fb:6d:e7:e9:c2:de:de:d0:94:5b:10:f9:72:1b:55: d1:2f:0d:17:57:c6:b6:f0:c5:e3:c6:65:bd:57:11:4e:49:7e: 02:d0:fc:39:9d:55:4b:dc:ee:a1:7d:97:50:bd:8b:1d:9d:fd: f4:fc:f6:46:b7:bd:29:2f:78:fa:45:87:c6:c6:4b:71:f2:3e: d5:1b:0b:96:b0:23:c3:a6:77:5a:a6:68:7f:78:cb:12:89:1f: 4d:20:f1:7e:dd:5e:a9:2b:5b:00:da:28:20:4d:c5:ec:ef:34: 8c:e2:6b:59:6a:f6:d3:e0:8d:2a:27:f6:f3:42:c0:c1:7e:2b: 3d:6d:bc:a7:a6:d3:40:82:42:9d:79:9c:36:87:80:9f:ad:97: 37:95:70:e1 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgITeIlSOKAbDIkEDfqV4aYccqKqBDANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKDdERjQzNDk1MzQ0 NDFBRjExQTY1REREMzU4OEY3NERDNTlDMkQzNjIwHhcNMjYwNTAyMDkxODA3WhcN MjcwNTAxMDkyMzA3WjAzMTEwLwYDVQQDEyhBQjdEMjA2NzVGQTNGNkY0NDA2RkJE MkE3MkQxNDZFRTVBOUJDRDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUyKfHMZztScxjjLEetssOVEuOCRRP8/zI7TmGxBjn2gIZQBkH+CkuNbn5HH JTS9zpUfZbZnLPmUAtYLO883wysfYHmtCyTsJg74M5qZasSm2duJPR17nSuyWcoL 7ROjrvIFySZCBPwvWPkLkAhgxEVd5vnqq9FpnX/3hFUczFx9FHRVEV5bvVyCiAiD q2ggmU4Xejeeu/cBRBaOuwY8aaHiwhzKHJIx7QXw0A9lWc+adVD+5QKmxF1suF+K 5RBrg/RtDKjRJMOE1GprnBhTg9LTMEnfTGqCltfre2WjWUdL13E0mvGsQ4nd6VvE 7+nuHblTU6orXXKe13Mp3+UdjwIDAQABo4IBzDCCAcgwHQYDVR0OBBYEFKt9IGdf o/b0QG+9KnLRRu5am80oMB8GA1UdIwQYMBaAFH30NJU0RBrxGmXd01iPdNxZwtNi MA4GA1UdDwEB/wQEAwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kt cnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMC83REY0MzQ5NTM0NDQxQUYxMUE2 NURERDM1ODhGNzREQzU5QzJEMzYyLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9mZlEwbFRSRUd2RWFaZDNUV0k5MDNG bkMwMkkuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6Ly9y cGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvQVMxNTIzOTMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGdD9IwDQYJKoZIhvcNAQELBQADggEBAJuVztld7DP3xz7YXuJkA94XScE9 yW6de22aUk/nO1W/wL63P6phC3JCK3R6xskAX8T4AfPFUK7sDpjP67QwvQ9dHAof GOSfT47L3suHAfg3T5PGS2Gx4kMJArZ4RTQRpFxKy8HHbHhzk96tr9Qiq/tt5+nC 3t7QlFsQ+XIbVdEvDRdXxrbwxePGZb1XEU5JfgLQ/DmdVUvc7qF9l1C9ix2d/fT8 9ka3vSkvePpFh8bGS3HyPtUbC5awI8Omd1qmaH94yxKJH00g8X7dXqkrWwDaKCBN xezvNIzia1lq9tPgjSon9vNCwMF+Kz1tvKem00CCQp15nDaHgJ+tlzeVcOE= -----END CERTIFICATE-----Generated at Sat May 2 21:04:35 2026 by rpki-client