$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152407.roa File: AS152407.roa (raw, json) Hash identifier: fEBvZzoBL1jl4GVIUHDcrw+PGQDiu5y/i3tvWadSCg4= Subject key identifier: 9C:88:F1:E5:36:6B:8D:69:E4:9B:67:DE:43:D5:E2:28:5F:8E:32:B6 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 68C3374EA61BADC109E652A441E2934E46CFD31A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152407.roa Signing time: Sat 02 May 2026 09:23:11 +0000 ROA not before: Sat 02 May 2026 09:18:11 +0000 ROA not after: Sat 01 May 2027 09:23:11 +0000 asID: 152407 IP address blocks: 157.20.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:37:4e:a6:1b:ad:c1:09:e6:52:a4:41:e2:93:4e:46:cf:d3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:11 2026 GMT Not After : May 1 09:23:11 2027 GMT Subject: CN=9C88F1E5366B8D69E49B67DE43D5E2285F8E32B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:9a:83:de:2d:3d:dd:df:e0:34:9a:c6:a4: 6e:fa:44:55:d3:b4:8a:29:b5:d7:52:eb:72:9b:f0: 2a:51:a3:40:1f:f7:54:5c:ba:74:c7:a2:02:90:01: c8:7f:03:91:e1:d0:55:d9:f2:75:d7:e5:32:37:5d: 4a:85:78:ec:69:a8:a8:00:c8:26:f5:71:8e:1b:ff: 77:5e:8e:66:18:78:71:4c:07:93:d7:1d:3b:cc:fa: 79:af:c1:85:d0:2c:73:9a:5f:33:e6:fb:0b:fe:85: 15:f9:eb:7d:f4:3b:ef:a6:10:4a:d7:d3:58:1b:79: c4:75:aa:3f:4f:34:fe:48:56:03:5f:c5:7e:d8:77: bd:95:23:7f:fe:5a:21:8c:d7:f1:d8:8e:40:17:5a: c4:4e:dd:36:55:1c:0d:52:33:e5:25:1a:81:20:a4: 05:88:0b:87:88:da:50:35:f8:ec:e5:60:43:71:9b: 07:dd:3a:4c:60:4c:0b:59:a1:23:40:4a:09:2d:eb: 41:88:60:26:ec:c3:4d:13:ca:0b:b4:a0:51:46:99: 81:2a:bd:a9:23:0d:cf:ac:fb:05:cb:0e:9e:c4:e5: 67:4e:5c:5f:64:e9:91:93:f5:4c:bb:fd:ac:f2:81: 90:e7:f5:db:ab:09:6e:42:b6:70:e9:86:9c:d7:99: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:F1:E5:36:6B:8D:69:E4:9B:67:DE:43:D5:E2:28:5F:8E:32:B6 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.92.0/23 Signature Algorithm: sha256WithRSAEncryption a0:09:1d:bb:3d:ae:31:55:d3:ea:27:82:1b:2a:8c:bc:95:73: 68:f6:84:ee:5d:e5:80:d8:a6:4a:bc:3a:c2:9d:eb:4c:77:bf: 89:54:d4:3f:40:56:1b:e9:98:41:df:a7:02:7f:ef:fb:a2:76: e3:d6:11:7f:97:52:dd:e6:ee:f8:6c:63:8a:cd:8e:ef:2c:a2: 5c:70:60:49:87:44:b4:89:34:69:38:4c:f7:8c:e4:93:7b:33: e8:e5:41:84:e1:e8:07:a8:5d:89:4b:19:8d:30:37:0d:fa:a2: 53:ca:4e:9a:7e:79:48:3b:31:29:d4:17:9b:f8:ef:ee:57:f4: c6:d8:4a:e6:38:72:5a:04:20:56:4c:07:a5:b3:89:d4:81:78: 0a:6f:5c:72:5f:b1:21:90:2f:b7:0c:58:28:82:da:e6:c1:46: e9:83:ae:ab:78:52:db:77:a3:8a:ff:f5:f7:c4:ab:e7:fb:e4: cc:e9:ee:68:52:1f:5a:8e:3f:53:9b:31:70:40:16:6e:ec:5a: 87:a0:ad:0d:6f:34:92:4c:96:41:16:69:5c:35:15:d1:03:4e: cc:45:ec:1b:3c:1a:e0:68:86:3e:ec:41:12:14:4d:6f:3e:c0: 37:88:d8:21:67:ab:92:09:c2:41:bd:04:71:be:3b:04:6d:71: 51:c0:8e:4f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUaMM3TqYbrcEJ5lKkQeKTTkbP0xowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgxMVoX DTI3MDUwMTA5MjMxMVowMzExMC8GA1UEAxMoOUM4OEYxRTUzNjZCOEQ2OUU0OUI2 N0RFNDNENUUyMjg1RjhFMzJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLmmoPeLT3d3+A0msakbvpEVdO0iim111LrcpvwKlGjQB/3VFy6dMeiApAB yH8DkeHQVdnyddflMjddSoV47GmoqADIJvVxjhv/d16OZhh4cUwHk9cdO8z6ea/B hdAsc5pfM+b7C/6FFfnrffQ776YQStfTWBt5xHWqP080/khWA1/Ffth3vZUjf/5a IYzX8diOQBdaxE7dNlUcDVIz5SUagSCkBYgLh4jaUDX47OVgQ3GbB906TGBMC1mh I0BKCS3rQYhgJuzDTRPKC7SgUUaZgSq9qSMNz6z7BcsOnsTlZ05cX2TpkZP1TLv9 rPKBkOf126sJbkK2cOmGnNeZOSUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSciPHl NmuNaeSbZ95D1eIoX44ytjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNDA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnRRcMA0GCSqGSIb3DQEBCwUAA4IBAQCgCR27Pa4xVdPqJ4IbKoy8lXNo 9oTuXeWA2KZKvDrCnetMd7+JVNQ/QFYb6ZhB36cCf+/7onbj1hF/l1Ld5u74bGOK zY7vLKJccGBJh0S0iTRpOEz3jOSTezPo5UGE4egHqF2JSxmNMDcN+qJTyk6afnlI OzEp1Beb+O/uV/TG2ErmOHJaBCBWTAels4nUgXgKb1xyX7EhkC+3DFgogtrmwUbp g66reFLbd6OK//X3xKvn++TM6e5oUh9ajj9TmzFwQBZu7FqHoK0NbzSSTJZBFmlc NRXRA07MRewbPBrgaIY+7EESFE1vPsA3iNghZ6uSCcJBvQRxvjsEbXFRwI5P -----END CERTIFICATE-----Generated at Sat May 2 21:04:36 2026 by rpki-client