$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152430.roa File: AS152430.roa (raw, json) Hash identifier: TkwowS4DbPlBfYw6gt4O57T1QMVX2r+zJfC20THovdg= Subject key identifier: 2E:99:6E:91:F4:7F:69:41:AE:62:CF:5B:41:A7:D1:FE:5B:D2:5D:86 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 27C2E86F1A3C6B9B73102063B163BDB9CC25871F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152430.roa Signing time: Sat 02 May 2026 09:23:42 +0000 ROA not before: Sat 02 May 2026 09:18:42 +0000 ROA not after: Sat 01 May 2027 09:23:42 +0000 asID: 152430 IP address blocks: 157.20.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c2:e8:6f:1a:3c:6b:9b:73:10:20:63:b1:63:bd:b9:cc:25:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:42 2026 GMT Not After : May 1 09:23:42 2027 GMT Subject: CN=2E996E91F47F6941AE62CF5B41A7D1FE5BD25D86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:30:23:70:e2:e7:63:da:4c:47:e5:50:b0: f0:ed:3b:5e:58:05:6f:9e:d6:2a:8f:c0:42:ec:b3: d1:dd:ca:a1:f4:46:8b:0d:4c:3f:cc:58:e3:a8:63: 7a:37:19:e6:35:b3:e8:ff:94:ea:cc:03:19:b4:dd: 03:a0:a3:12:0a:a6:9a:d4:c3:8f:9f:4a:3e:e8:30: 4b:39:32:00:b1:1e:0c:80:5b:a8:fa:45:21:fd:b3: a8:72:85:ac:a0:bb:23:e0:09:85:78:8e:99:bc:2b: f0:8b:0d:ca:bd:46:e3:fb:33:bf:df:be:6b:fc:47: 15:6b:5d:4c:b3:62:35:6e:f7:5a:2c:62:10:fd:14: 4d:0b:25:4e:43:4c:bc:cd:cd:99:c5:f2:77:63:ca: e2:95:91:c5:7a:4b:16:63:ca:2d:54:f2:57:25:55: 8b:61:2a:71:23:36:ee:22:65:d4:3e:ce:fe:f8:7e: e2:33:31:1d:7f:24:bb:a3:c7:4f:74:6e:29:71:93: fb:ff:06:31:70:52:31:dd:90:6e:53:43:e8:e8:18: 7b:0e:36:3e:78:31:39:8c:8b:6a:6c:e7:20:c4:6f: bc:38:bf:f8:14:45:ae:19:f1:07:1b:e7:f5:47:31: 0e:50:f3:81:ab:cb:f3:4f:e4:5a:27:5d:3a:45:7a: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:6E:91:F4:7F:69:41:AE:62:CF:5B:41:A7:D1:FE:5B:D2:5D:86 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.128.0/24 Signature Algorithm: sha256WithRSAEncryption 19:1f:15:1a:84:1a:3c:5f:af:26:a3:87:61:79:4b:1e:ae:49: 34:64:6a:ab:d4:a9:65:f9:bd:33:5f:62:31:af:c8:84:ab:72: 0e:c9:17:d8:43:49:fc:85:2e:f9:aa:39:7b:ab:f2:ff:f2:83: b7:04:5e:1d:dd:dd:f6:f1:6f:57:8d:f5:6c:8c:db:5e:85:88: 80:44:c9:a2:83:83:79:03:1b:59:92:54:42:cd:17:b2:93:56: 6d:81:74:6f:81:4d:dd:bc:39:a4:24:7a:c3:2e:2c:2b:26:bb: 1a:f1:f5:5d:9e:3a:40:5e:83:79:e3:39:eb:3e:c8:10:16:4e: fd:fe:b6:8f:8b:a9:59:ea:2d:d7:ef:3c:89:87:5b:bd:3c:de: 92:4a:0e:a6:aa:36:66:a5:b1:5a:92:da:aa:db:c8:4d:b5:80: 20:0d:8e:8e:16:3e:62:d0:fc:3a:76:d7:fa:04:77:93:a8:8f: 4c:0d:f0:99:c8:76:4a:04:52:ea:c6:25:64:9f:b1:7f:2d:9b: a7:af:4e:2a:c3:25:f9:75:aa:0a:5a:48:86:c0:97:27:94:5c: 32:a8:8f:ad:8d:e5:ca:31:08:fd:72:b0:a8:82:c8:ce:96:07: 55:cf:f4:46:0b:0f:e4:ad:9b:e1:b2:6a:80:aa:68:fd:29:df: 37:7d:b1:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUJ8Lobxo8a5tzECBjsWO9ucwlhx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg0MloX DTI3MDUwMTA5MjM0MlowMzExMC8GA1UEAxMoMkU5OTZFOTFGNDdGNjk0MUFFNjJD RjVCNDFBN0QxRkU1QkQyNUQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmPMCNw4udj2kxH5VCw8O07XlgFb57WKo/AQuyz0d3KofRGiw1MP8xY46hj ejcZ5jWz6P+U6swDGbTdA6CjEgqmmtTDj59KPugwSzkyALEeDIBbqPpFIf2zqHKF rKC7I+AJhXiOmbwr8IsNyr1G4/szv9++a/xHFWtdTLNiNW73WixiEP0UTQslTkNM vM3NmcXyd2PK4pWRxXpLFmPKLVTyVyVVi2EqcSM27iJl1D7O/vh+4jMxHX8ku6PH T3RuKXGT+/8GMXBSMd2QblND6OgYew42PngxOYyLamznIMRvvDi/+BRFrhnxBxvn 9UcxDlDzgavL80/kWiddOkV6rR0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQumW6R 9H9pQa5iz1tBp9H+W9JdhjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnRSAMA0GCSqGSIb3DQEBCwUAA4IBAQAZHxUahBo8X68mo4dheUserkk0 ZGqr1Kll+b0zX2Ixr8iEq3IOyRfYQ0n8hS75qjl7q/L/8oO3BF4d3d328W9XjfVs jNtehYiARMmig4N5AxtZklRCzReyk1ZtgXRvgU3dvDmkJHrDLiwrJrsa8fVdnjpA XoN54znrPsgQFk79/raPi6lZ6i3X7zyJh1u9PN6SSg6mqjZmpbFaktqq28hNtYAg DY6OFj5i0Pw6dtf6BHeTqI9MDfCZyHZKBFLqxiVkn7F/LZunr04qwyX5daoKWkiG wJcnlFwyqI+tjeXKMQj9crCogsjOlgdVz/RGCw/krZvhsmqAqmj9Kd83fbGK -----END CERTIFICATE-----Generated at Sat May 2 21:04:47 2026 by rpki-client