$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152824.roa File: AS152824.roa (raw, json) Hash identifier: Jh4SWWI1+5dOY1OZ43HCCAL7V78xbej545/uFjRvg3Q= Subject key identifier: 5F:92:BD:2E:EA:E1:6F:0C:A4:E4:25:76:8E:88:30:36:D8:26:C8:01 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 12843EBB22AE1C3FCE1503E8066C9FFE1703634B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152824.roa Signing time: Sat 02 May 2026 09:23:59 +0000 ROA not before: Sat 02 May 2026 09:18:59 +0000 ROA not after: Sat 01 May 2027 09:23:59 +0000 asID: 152824 IP address blocks: 160.22.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:84:3e:bb:22:ae:1c:3f:ce:15:03:e8:06:6c:9f:fe:17:03:63:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:59 2026 GMT Not After : May 1 09:23:59 2027 GMT Subject: CN=5F92BD2EEAE16F0CA4E425768E883036D826C801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:ef:2f:20:c5:0b:c9:95:33:53:74:85:0f: 92:0f:ac:7c:6e:33:74:0e:f6:83:19:fd:aa:4a:ef: e0:70:7e:bb:7c:e1:ad:f8:03:a3:87:d4:b2:3d:e5: 61:c1:5d:e9:60:70:ca:3c:0a:db:65:30:77:dc:b2: 91:a6:45:75:d9:15:f5:ec:af:7b:95:80:55:6f:18: 77:e5:fc:15:c6:f7:52:67:65:6c:cb:aa:c4:c5:bf: 3a:18:25:7a:d2:6b:78:3a:2c:7f:c8:5e:94:80:96: e0:34:a6:86:e3:f7:d4:ef:91:45:c4:0c:ae:e4:49: 77:d0:c1:a7:7d:3a:53:4a:e4:df:17:20:13:21:58: f1:d0:2a:70:52:d5:a4:bf:06:77:3e:77:04:82:c5: 90:bf:81:17:da:bd:b8:12:89:32:60:75:86:c5:bc: a3:58:b4:15:41:0f:7a:6e:b8:20:77:25:c7:f8:33: fc:b2:d8:e1:fb:af:39:a1:c6:ad:5c:46:7b:51:b3: ad:e9:30:39:d3:13:ab:7c:b9:5e:06:3d:9b:b7:21: 30:50:0c:a9:f7:c2:05:a6:92:9f:35:2b:13:09:9e: 06:80:ab:92:7c:8d:d0:84:ef:0f:6e:58:b1:a6:18: 2f:ad:81:c4:48:2e:a5:57:70:a9:83:a4:43:66:fd: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:BD:2E:EA:E1:6F:0C:A4:E4:25:76:8E:88:30:36:D8:26:C8:01 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.190.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:1a:1b:61:74:e6:64:94:e3:64:47:6f:ed:76:d3:8b:6f:a3: 31:a7:03:e5:98:7a:f1:5c:cb:7a:8a:82:5b:ac:5b:96:32:78: 6a:1c:a6:90:84:77:ea:16:7a:4e:05:da:cb:47:a6:80:e2:67: f8:1e:42:29:7a:a8:4a:a7:03:3a:35:19:aa:28:2e:0a:4b:52: 0e:73:d8:7e:8a:52:56:7c:8a:ee:f2:05:43:c3:cd:6a:b4:0e: bf:ef:5e:c6:41:e5:61:1e:72:c3:9e:87:af:54:3f:a0:ae:39: 25:b8:b5:8c:80:55:f0:4e:ad:13:7b:39:7e:d6:6d:70:74:c2: bf:97:e2:e0:e6:95:04:93:0d:32:03:39:7a:3c:72:99:61:2d: 24:53:dd:e0:15:20:56:71:bc:3c:40:44:58:1b:eb:0e:15:85: c1:96:47:a1:6b:a2:55:cd:d4:fd:e6:e3:9c:70:bc:2d:ad:8e: 64:40:46:2f:12:41:58:50:d6:22:eb:53:75:b6:15:46:93:42: f9:42:90:21:b4:0c:2c:81:63:bc:2d:5e:6f:5e:91:63:60:32: 18:12:a4:fa:dd:57:05:ca:4c:27:01:05:5a:15:9c:6c:bd:9e: c0:99:a5:2a:57:4e:b8:cc:1e:f3:f6:f1:83:6c:07:a2:79:98: 2f:c5:f1:1b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEoQ+uyKuHD/OFQPoBmyf/hcDY0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1OVoX DTI3MDUwMTA5MjM1OVowMzExMC8GA1UEAxMoNUY5MkJEMkVFQUUxNkYwQ0E0RTQy NTc2OEU4ODMwMzZEODI2QzgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4M7y8gxQvJlTNTdIUPkg+sfG4zdA72gxn9qkrv4HB+u3zhrfgDo4fUsj3l YcFd6WBwyjwK22Uwd9yykaZFddkV9eyve5WAVW8Yd+X8Fcb3UmdlbMuqxMW/Ohgl etJreDosf8helICW4DSmhuP31O+RRcQMruRJd9DBp306U0rk3xcgEyFY8dAqcFLV pL8Gdz53BILFkL+BF9q9uBKJMmB1hsW8o1i0FUEPem64IHclx/gz/LLY4fuvOaHG rVxGe1GzrekwOdMTq3y5XgY9m7chMFAMqffCBaaSnzUrEwmeBoCrknyN0ITvD25Y saYYL62BxEgupVdwqYOkQ2b9dlECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRfkr0u 6uFvDKTkJXaOiDA22CbIATAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyODI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBa+MA0GCSqGSIb3DQEBCwUAA4IBAQCMGhthdOZklONkR2/tdtOLb6Mx pwPlmHrxXMt6ioJbrFuWMnhqHKaQhHfqFnpOBdrLR6aA4mf4HkIpeqhKpwM6NRmq KC4KS1IOc9h+ilJWfIru8gVDw81qtA6/717GQeVhHnLDnoevVD+grjkluLWMgFXw Tq0Tezl+1m1wdMK/l+Lg5pUEkw0yAzl6PHKZYS0kU93gFSBWcbw8QERYG+sOFYXB lkeha6JVzdT95uOccLwtrY5kQEYvEkFYUNYi61N1thVGk0L5QpAhtAwsgWO8LV5v XpFjYDIYEqT63VcFykwnAQVaFZxsvZ7AmaUqV064zB7z9vGDbAeieZgvxfEb -----END CERTIFICATE-----Generated at Sat May 2 21:03:50 2026 by rpki-client