$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152766.roa File: AS152766.roa (raw, json) Hash identifier: wMKqREDl7ZQmoHgwcp5z109zUOrqX6VRFqZWk9UT8DE= Subject key identifier: 86:10:2A:C7:43:DA:F3:6E:E4:99:C0:85:28:5B:1D:63:8D:0F:19:9A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 09107A9E58DDE1E359D827BB8AE0721E0D4137E0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152766.roa Signing time: Sat 02 May 2026 09:23:50 +0000 ROA not before: Sat 02 May 2026 09:18:50 +0000 ROA not after: Sat 01 May 2027 09:23:50 +0000 asID: 152766 IP address blocks: 160.19.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:10:7a:9e:58:dd:e1:e3:59:d8:27:bb:8a:e0:72:1e:0d:41:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:50 2026 GMT Not After : May 1 09:23:50 2027 GMT Subject: CN=86102AC743DAF36EE499C085285B1D638D0F199A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:4f:cf:64:22:68:f7:a0:9e:83:cc:37:b3: 1d:99:c0:11:09:76:f3:2d:0a:89:27:5b:b3:95:eb: 5e:4c:30:a8:45:ac:1d:7b:93:2c:a2:4c:64:53:73: 57:58:37:3e:c3:71:51:01:01:a5:97:5b:d0:9a:ca: 32:f9:09:20:67:f3:84:b4:47:f7:ce:30:0d:36:65: 21:36:9f:51:d4:77:25:d2:c4:2e:03:89:b8:d3:4e: 0f:6a:05:b3:f7:bb:d2:4c:4d:4f:a8:9d:29:3d:a0: 7b:ce:d0:09:10:df:02:d7:2a:f1:a0:c1:3c:50:89: ff:b3:03:d3:ce:14:7c:af:ba:81:c7:79:b9:44:64: 57:d1:e2:07:ae:f5:66:86:a5:ec:84:95:50:1b:80: 76:05:7e:81:dd:4f:d9:d8:6f:4f:b9:02:a9:8a:89: 46:c0:00:62:a9:6e:08:f9:0e:de:47:d1:72:a9:2d: 15:56:d8:3c:0f:f9:dc:82:cc:21:65:ac:a5:f0:97: dd:1b:09:03:0d:95:4c:c4:50:34:86:53:99:80:49: fd:05:25:e9:70:3e:ac:f5:2d:29:e6:17:db:9b:4d: cc:8c:bb:ee:08:41:40:38:c8:bb:17:31:0b:8d:13: 40:34:82:a7:d2:55:bf:84:7f:fb:89:4d:ba:da:11: 92:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:2A:C7:43:DA:F3:6E:E4:99:C0:85:28:5B:1D:63:8D:0F:19:9A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152766.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.184.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:ee:77:05:7d:7c:89:dd:1a:27:c8:e1:25:0c:cc:72:fa:59: f8:10:d0:f0:c4:13:42:b2:cd:ce:40:0d:52:98:71:a5:ad:df: dd:69:4b:96:c1:b3:53:58:3e:05:d7:23:8d:4c:d0:30:72:b3: 6d:09:b4:1f:90:34:90:18:8d:b0:c0:75:9a:b2:b9:28:79:da: 5d:e9:7d:7a:e1:71:ff:5a:c8:21:27:8a:1f:12:1a:5c:eb:be: 60:39:ff:6b:25:59:8b:e7:2f:78:5b:85:7f:0f:0e:d9:9b:1d: a8:a2:19:55:b5:e5:f6:b5:aa:73:f9:f8:d6:99:7c:7e:3e:91: 3e:f6:19:d6:55:d1:40:c8:7b:02:32:2d:ca:be:b8:f9:6d:86: 15:1a:17:2c:a5:40:55:02:3e:a7:e5:da:da:8a:15:5c:61:61: 15:d3:74:6e:74:69:67:a0:5d:f9:67:59:19:6a:88:53:ad:53: 74:28:d2:ec:51:7a:4f:65:8b:7b:0d:cd:c3:01:13:35:3b:b9: e9:0e:a8:81:45:6f:c2:f6:b0:76:5b:6e:0f:24:2e:5f:c6:87: e1:51:62:6d:d6:cb:9b:1c:e6:6c:02:d6:e6:a0:c7:f6:cc:26: b9:c0:c7:78:2a:3e:5d:15:7e:18:a1:a6:2a:e1:60:4b:72:33: ea:2d:a9:3c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCRB6nljd4eNZ2Ce7iuByHg1BN+AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1MFoX DTI3MDUwMTA5MjM1MFowMzExMC8GA1UEAxMoODYxMDJBQzc0M0RBRjM2RUU0OTlD MDg1Mjg1QjFENjM4RDBGMTk5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5HT89kImj3oJ6DzDezHZnAEQl28y0KiSdbs5XrXkwwqEWsHXuTLKJMZFNz V1g3PsNxUQEBpZdb0JrKMvkJIGfzhLRH984wDTZlITafUdR3JdLELgOJuNNOD2oF s/e70kxNT6idKT2ge87QCRDfAtcq8aDBPFCJ/7MD084UfK+6gcd5uURkV9HiB671 Zoal7ISVUBuAdgV+gd1P2dhvT7kCqYqJRsAAYqluCPkO3kfRcqktFVbYPA/53ILM IWWspfCX3RsJAw2VTMRQNIZTmYBJ/QUl6XA+rPUtKeYX25tNzIy77ghBQDjIuxcx C40TQDSCp9JVv4R/+4lNutoRkiUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSGECrH Q9rzbuSZwIUoWx1jjQ8ZmjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNzY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBO4MA0GCSqGSIb3DQEBCwUAA4IBAQAv7ncFfXyJ3RonyOElDMxy+ln4 ENDwxBNCss3OQA1SmHGlrd/daUuWwbNTWD4F1yONTNAwcrNtCbQfkDSQGI2wwHWa srkoedpd6X164XH/WsghJ4ofEhpc675gOf9rJVmL5y94W4V/Dw7Zmx2oohlVteX2 tapz+fjWmXx+PpE+9hnWVdFAyHsCMi3Kvrj5bYYVGhcspUBVAj6n5draihVcYWEV 03RudGlnoF35Z1kZaohTrVN0KNLsUXpPZYt7Dc3DARM1O7npDqiBRW/C9rB2W24P JC5fxofhUWJt1subHOZsAtbmoMf2zCa5wMd4Kj5dFX4YoaYq4WBLcjPqLak8 -----END CERTIFICATE-----Generated at Sat May 2 21:05:01 2026 by rpki-client