$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152763.roa File: AS152763.roa (raw, json) Hash identifier: INut2PCxy722gNY46BdVwKC6bXDZWSspMnmrgt4DZ6s= Subject key identifier: 4E:F8:48:BC:BC:41:25:32:C2:59:43:55:C5:B9:5E:FB:1D:3B:90:81 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 54111B38CAEEB7ED1D830A80091828C636316419 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152763.roa Signing time: Sat 02 May 2026 09:22:44 +0000 ROA not before: Sat 02 May 2026 09:17:44 +0000 ROA not after: Sat 01 May 2027 09:22:44 +0000 asID: 152763 IP address blocks: 160.19.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:11:1b:38:ca:ee:b7:ed:1d:83:0a:80:09:18:28:c6:36:31:64:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:44 2026 GMT Not After : May 1 09:22:44 2027 GMT Subject: CN=4EF848BCBC412532C2594355C5B95EFB1D3B9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ef:87:79:cf:b7:1f:78:9e:04:85:b6:b9:08: 43:07:81:06:21:c5:fb:fb:98:98:a1:77:41:c7:83: 8f:37:bd:c2:cb:c1:14:93:84:d2:04:a8:24:cc:40: 7d:78:b3:2c:de:a3:b2:07:db:12:82:81:d1:56:7b: 5f:fe:ba:91:fa:6d:43:7c:f1:33:ed:c1:c8:8a:ca: c2:6d:1e:06:6d:38:1f:8a:4d:4b:f7:56:60:cb:e6: c6:66:8e:c0:30:98:81:b0:68:12:c8:e2:a6:43:67: ac:04:55:88:88:9c:1b:46:7a:3a:60:ea:37:8d:09: 3c:86:47:05:81:35:2d:c6:c6:c5:9f:cd:3a:d9:10: d5:a4:7e:f9:6b:5d:44:16:82:8b:ae:66:27:69:1d: c4:92:b1:e2:87:f1:65:e4:f7:1a:ec:99:98:e5:47: d1:87:86:cc:e3:91:57:62:df:59:5b:ee:e7:e8:d0: e9:0a:4d:d7:cd:61:1d:34:8a:97:04:7d:16:bd:14: 91:b6:30:18:16:20:1c:3b:5e:36:d3:b6:cf:4a:fd: bf:16:d6:3b:2f:64:77:bf:dc:14:f1:3e:b6:a7:a6: aa:c7:d9:0c:22:d6:40:61:de:a5:60:00:25:bd:73: b9:0b:70:99:33:1e:0d:30:4f:f2:50:02:25:2c:0c: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:48:BC:BC:41:25:32:C2:59:43:55:C5:B9:5E:FB:1D:3B:90:81 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152763.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.228.0/23 Signature Algorithm: sha256WithRSAEncryption 53:e8:9b:bc:04:f9:f0:ad:98:ac:d8:a7:44:62:eb:21:96:10: c1:5d:2a:dc:15:3a:d0:bf:be:d8:17:e1:39:fe:6c:72:49:7a: 4d:87:1f:62:ac:73:d4:ed:79:5f:ac:7b:65:99:6f:03:7f:98: e5:f9:c5:4f:aa:8e:d9:0a:8a:50:9d:d0:ad:c9:35:7d:f1:19: 76:65:ab:28:28:77:60:bf:99:5e:f7:4f:c9:62:44:73:1b:19: 0f:e7:01:a3:4e:ad:1e:99:9c:44:74:fa:cf:80:24:9a:2a:ae: 85:7b:5b:d1:ac:59:08:c6:6b:af:69:e9:97:53:d7:fd:55:83: 9b:66:46:9c:46:94:b3:8d:ac:bc:15:b4:b4:9d:b7:21:a7:c6: fb:f9:aa:d1:46:3e:24:8d:d1:25:dc:ba:06:38:42:e6:7d:77: fe:7e:82:88:59:0a:40:0c:e1:b3:6c:fc:95:97:b4:fe:f4:74: 35:cc:d4:9e:9a:7f:4a:ee:a9:f8:4b:48:92:6e:53:2e:91:ad: 88:e3:eb:65:62:25:b0:50:6a:9e:8f:61:b4:68:ad:6a:2f:58: cc:79:52:a6:dc:c0:7b:52:18:82:fb:1b:41:a6:10:e9:73:e1: bf:ac:46:47:ef:41:dc:07:65:3b:a7:c1:20:a2:17:03:56:11: da:06:cb:14 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVBEbOMrut+0dgwqACRgoxjYxZBkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0NFoX DTI3MDUwMTA5MjI0NFowMzExMC8GA1UEAxMoNEVGODQ4QkNCQzQxMjUzMkMyNTk0 MzU1QzVCOTVFRkIxRDNCOTA4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOfvh3nPtx94ngSFtrkIQweBBiHF+/uYmKF3QceDjze9wsvBFJOE0gSoJMxA fXizLN6jsgfbEoKB0VZ7X/66kfptQ3zxM+3ByIrKwm0eBm04H4pNS/dWYMvmxmaO wDCYgbBoEsjipkNnrARViIicG0Z6OmDqN40JPIZHBYE1LcbGxZ/NOtkQ1aR++Wtd RBaCi65mJ2kdxJKx4ofxZeT3GuyZmOVH0YeGzOORV2LfWVvu5+jQ6QpN181hHTSK lwR9Fr0UkbYwGBYgHDteNtO2z0r9vxbWOy9kd7/cFPE+tqemqsfZDCLWQGHepWAA Jb1zuQtwmTMeDTBP8lACJSwMfvUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRO+Ei8 vEElMsJZQ1XFuV77HTuQgTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNzYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBPkMA0GCSqGSIb3DQEBCwUAA4IBAQBT6Ju8BPnwrZis2KdEYushlhDB XSrcFTrQv77YF+E5/mxySXpNhx9irHPU7XlfrHtlmW8Df5jl+cVPqo7ZCopQndCt yTV98Rl2ZasoKHdgv5le90/JYkRzGxkP5wGjTq0emZxEdPrPgCSaKq6Fe1vRrFkI xmuvaemXU9f9VYObZkacRpSzjay8FbS0nbchp8b7+arRRj4kjdEl3LoGOELmfXf+ foKIWQpADOGzbPyVl7T+9HQ1zNSemn9K7qn4S0iSblMuka2I4+tlYiWwUGqej2G0 aK1qL1jMeVKm3MB7UhiC+xtBphDpc+G/rEZH70HcB2U7p8EgohcDVhHaBssU -----END CERTIFICATE-----Generated at Sat May 2 21:03:50 2026 by rpki-client