$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152414.roa File: AS152414.roa (raw, json) Hash identifier: WY5Lz8OSo84uOHlwL1EL6qbmwvRg84xVM8jl8GfK7JQ= Subject key identifier: 9D:50:BC:99:93:8F:56:EF:B8:E6:38:80:61:E1:67:B6:A0:51:22:34 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 750E260CA7BE09EC234F438D825DE76182711272 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152414.roa Signing time: Sat 02 May 2026 09:23:43 +0000 ROA not before: Sat 02 May 2026 09:18:43 +0000 ROA not after: Sat 01 May 2027 09:23:43 +0000 asID: 152414 IP address blocks: 157.20.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0e:26:0c:a7:be:09:ec:23:4f:43:8d:82:5d:e7:61:82:71:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:43 2026 GMT Not After : May 1 09:23:43 2027 GMT Subject: CN=9D50BC99938F56EFB8E6388061E167B6A0512234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:2a:86:17:8b:fc:93:10:5a:7d:d6:e9:c1: 0a:a4:e2:7b:8d:b3:bb:d7:a0:e7:68:ac:ae:1a:65: 60:a5:22:35:d0:ac:d9:8a:fb:ba:ba:a5:61:2a:85: fc:3a:69:6b:ff:92:87:0a:ac:21:fb:ef:4e:62:3e: 20:bb:a9:65:4c:cb:21:07:14:80:19:0a:95:8e:7f: 30:4f:13:5d:b7:43:a3:50:e4:75:5c:e7:ce:aa:ae: 09:37:bb:5f:17:a7:f6:5d:be:d6:f8:e9:5a:c1:e5: 7d:d9:76:a9:f4:61:e0:04:6b:53:70:13:8f:55:da: 4a:7b:78:33:50:d6:7d:84:d5:d0:e3:ab:ff:c7:12: 05:eb:37:ba:3e:4f:65:d2:5a:f4:48:54:eb:74:14: 81:61:3e:9e:7d:93:9d:53:f6:49:61:14:bc:a1:ec: cd:fe:81:28:84:ca:5a:ff:3a:96:a4:64:19:4e:dd: 39:f3:8c:4c:7c:ac:8d:89:f6:04:1c:29:01:5d:53: 11:67:e4:dd:01:55:0d:50:aa:a0:d6:78:f8:70:dd: a3:d0:3e:14:50:58:80:1b:81:ef:0d:91:2b:6a:74: d9:8d:8b:46:b5:49:22:ea:30:e6:7c:21:f9:d5:f5: 81:dd:0a:28:25:1a:a4:a2:e0:03:50:be:2a:81:d9: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:50:BC:99:93:8F:56:EF:B8:E6:38:80:61:E1:67:B6:A0:51:22:34 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152414.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.130.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:98:25:98:d5:34:8c:09:ef:21:b8:50:fb:9c:c1:fa:a8:37: 67:30:51:6b:84:4b:00:97:c7:d8:a9:c0:f1:0c:5a:5c:74:eb: f8:ce:e0:e2:9f:dd:f8:cb:4b:e9:fc:02:0c:0f:72:7f:0b:49: 33:4f:7b:d7:6c:99:7a:33:eb:5b:4c:f2:19:94:89:5a:30:37: 51:e9:d7:5a:b2:b8:63:c9:e5:55:9d:91:4a:fe:5d:64:01:24: 8a:e5:0d:38:e4:4b:ed:89:08:be:f6:81:2b:50:e3:6d:f3:ab: 59:27:ea:10:a5:c4:26:35:3a:a2:ce:79:7d:89:99:7e:6e:a8: da:1d:51:2a:df:30:9f:82:f1:5d:bb:02:10:4b:fc:12:1f:d7: d6:be:01:fa:b4:ea:12:fa:28:58:f7:99:34:26:e1:69:67:2f: 47:3b:86:03:3f:8a:d1:77:3d:8b:3d:26:48:5f:af:46:87:fd: 96:54:eb:2c:94:27:91:2e:00:28:bc:03:80:cd:ef:2e:ab:4c: aa:1e:29:64:c3:44:a5:08:e2:49:48:d0:67:ca:c0:6c:6a:65: 71:23:d3:50:c5:8b:9e:2f:87:e5:55:b5:86:99:70:a3:15:e0: 87:db:17:08:ea:7c:f5:48:9a:b4:cb:15:6e:99:5e:a2:17:e6: c6:bd:8d:be -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdQ4mDKe+CewjT0ONgl3nYYJxEnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg0M1oX DTI3MDUwMTA5MjM0M1owMzExMC8GA1UEAxMoOUQ1MEJDOTk5MzhGNTZFRkI4RTYz ODgwNjFFMTY3QjZBMDUxMjIzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI7tKoYXi/yTEFp91unBCqTie42zu9eg52isrhplYKUiNdCs2Yr7urqlYSqF /Dppa/+ShwqsIfvvTmI+ILupZUzLIQcUgBkKlY5/ME8TXbdDo1DkdVznzqquCTe7 Xxen9l2+1vjpWsHlfdl2qfRh4ARrU3ATj1XaSnt4M1DWfYTV0OOr/8cSBes3uj5P ZdJa9EhU63QUgWE+nn2TnVP2SWEUvKHszf6BKITKWv86lqRkGU7dOfOMTHysjYn2 BBwpAV1TEWfk3QFVDVCqoNZ4+HDdo9A+FFBYgBuB7w2RK2p02Y2LRrVJIuow5nwh +dX1gd0KKCUapKLgA1C+KoHZUWMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSdULyZ k49W77jmOIBh4We2oFEiNDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNDE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnRSCMA0GCSqGSIb3DQEBCwUAA4IBAQB6mCWY1TSMCe8huFD7nMH6qDdn MFFrhEsAl8fYqcDxDFpcdOv4zuDin934y0vp/AIMD3J/C0kzT3vXbJl6M+tbTPIZ lIlaMDdR6ddasrhjyeVVnZFK/l1kASSK5Q045EvtiQi+9oErUONt86tZJ+oQpcQm NTqiznl9iZl+bqjaHVEq3zCfgvFduwIQS/wSH9fWvgH6tOoS+ihY95k0JuFpZy9H O4YDP4rRdz2LPSZIX69Gh/2WVOsslCeRLgAovAOAze8uq0yqHilkw0SlCOJJSNBn ysBsamVxI9NQxYueL4flVbWGmXCjFeCH2xcI6nz1SJq0yxVumV6iF+bGvY2+ -----END CERTIFICATE-----Generated at Sat May 2 21:05:00 2026 by rpki-client