$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152827.roa File: AS152827.roa (raw, json) Hash identifier: nG/dVTuhiUNfzXMnaoub3cOjgzr8eweeTUI3Cc/7pmY= Subject key identifier: 19:0A:76:91:D9:CA:BE:25:B1:0F:9F:3F:DF:C8:E5:A9:CC:CA:8B:44 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 662C031DCC3B8888C7094BCFEB0B7B417C93F601 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152827.roa Signing time: Sat 02 May 2026 09:24:02 +0000 ROA not before: Sat 02 May 2026 09:19:02 +0000 ROA not after: Sat 01 May 2027 09:24:02 +0000 asID: 152827 IP address blocks: 160.22.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2c:03:1d:cc:3b:88:88:c7:09:4b:cf:eb:0b:7b:41:7c:93:f6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:02 2026 GMT Not After : May 1 09:24:02 2027 GMT Subject: CN=190A7691D9CABE25B10F9F3FDFC8E5A9CCCA8B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:34:2e:d9:55:f6:34:0d:e3:24:72:2f:26:a5: 63:64:30:bc:aa:68:7c:39:ed:18:60:d7:03:d8:e7: 08:0c:ad:d9:e9:a6:f2:e1:a1:65:0d:ab:5c:0b:cb: 72:fa:5b:c6:f8:c8:62:e0:cd:81:58:49:5e:a8:57: 51:99:38:3a:96:26:e9:d5:f8:88:01:f2:6c:69:54: 1b:7a:fe:ea:de:aa:4e:8b:02:4b:65:a6:fe:49:f3: ec:ef:e4:40:20:5a:45:0d:8e:95:34:ea:47:2b:9b: 2e:4b:8a:6c:4a:48:aa:cb:c0:0d:33:e3:c8:f6:9f: e9:b9:6c:7e:a1:33:f3:2e:03:38:b9:0c:b9:c8:0a: 52:6c:8e:51:a7:ec:d1:84:47:9d:39:cc:bb:33:41: 8e:65:51:d0:11:55:c7:30:4f:a1:3d:89:dd:0d:54: 46:b8:1e:50:57:44:e5:71:71:0d:a9:aa:47:b6:57: 4b:1b:70:b5:32:80:35:36:38:f1:d7:59:c8:5e:60: 8e:9c:7a:85:ce:83:83:5b:e2:cb:7f:1d:55:58:5d: 9b:e7:52:72:45:7c:38:c7:68:3c:dc:a1:fa:60:64: ec:61:39:ae:0b:24:88:54:ff:ba:fb:82:57:80:5e: 93:48:97:2b:bf:20:db:5d:0e:92:cd:9d:0d:69:76: 2b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:76:91:D9:CA:BE:25:B1:0F:9F:3F:DF:C8:E5:A9:CC:CA:8B:44 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152827.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.242.0/23 Signature Algorithm: sha256WithRSAEncryption 07:a3:e9:8f:11:28:ad:85:5e:36:17:5f:76:72:bb:c4:7b:a4: c4:a1:7c:9d:93:7e:87:1d:52:bd:24:2c:65:c7:a2:ea:66:c4: 86:3b:4c:54:9d:01:0b:ed:3d:cc:89:7a:26:08:45:8f:eb:00: 40:6a:cc:75:bc:a4:0d:ff:07:ed:83:4d:16:36:10:6c:9c:d0: b7:0e:ba:b4:77:84:05:ac:1b:56:3b:a7:b9:26:d9:45:52:7e: 18:76:8c:3c:6a:06:e0:4e:07:cd:de:40:a0:24:d8:00:4a:5f: ff:b7:fa:f2:17:c1:c4:04:a0:50:44:84:a5:f6:12:ce:61:6d: 21:6f:52:04:0f:9d:b3:07:63:d4:ec:21:4a:11:6e:68:49:b5: 6f:4b:b4:40:13:29:b2:f9:04:13:2a:05:9e:d6:ea:b3:e6:dc: 1e:f0:97:7e:7b:2d:de:6e:4d:df:d9:af:2d:ef:40:bc:c1:57: 8c:9b:de:1d:0b:0a:e7:93:24:ec:8d:58:3d:48:c8:99:3d:ea: d6:ec:86:9f:a1:95:c6:fb:f2:5e:4a:39:1a:32:8d:a4:39:51: d5:53:11:7f:fa:f1:15:6e:46:af:bc:89:ca:4a:ed:bb:01:cf: 9a:90:6f:26:07:3c:a8:5c:01:ec:ec:57:63:63:f1:35:ed:bb: ef:ea:07:2f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZiwDHcw7iIjHCUvP6wt7QXyT9gEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkwMloX DTI3MDUwMTA5MjQwMlowMzExMC8GA1UEAxMoMTkwQTc2OTFEOUNBQkUyNUIxMEY5 RjNGREZDOEU1QTlDQ0NBOEI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk0LtlV9jQN4yRyLyalY2QwvKpofDntGGDXA9jnCAyt2emm8uGhZQ2rXAvL cvpbxvjIYuDNgVhJXqhXUZk4OpYm6dX4iAHybGlUG3r+6t6qTosCS2Wm/knz7O/k QCBaRQ2OlTTqRyubLkuKbEpIqsvADTPjyPaf6blsfqEz8y4DOLkMucgKUmyOUafs 0YRHnTnMuzNBjmVR0BFVxzBPoT2J3Q1URrgeUFdE5XFxDamqR7ZXSxtwtTKANTY4 8ddZyF5gjpx6hc6Dg1viy38dVVhdm+dSckV8OMdoPNyh+mBk7GE5rgskiFT/uvuC V4Bek0iXK78g210Oks2dDWl2K9sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQZCnaR 2cq+JbEPnz/fyOWpzMqLRDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyODI3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBbyMA0GCSqGSIb3DQEBCwUAA4IBAQAHo+mPESithV42F192crvEe6TE oXydk36HHVK9JCxlx6LqZsSGO0xUnQEL7T3MiXomCEWP6wBAasx1vKQN/wftg00W NhBsnNC3Drq0d4QFrBtWO6e5JtlFUn4Ydow8agbgTgfN3kCgJNgASl//t/ryF8HE BKBQRISl9hLOYW0hb1IED52zB2PU7CFKEW5oSbVvS7RAEymy+QQTKgWe1uqz5twe 8Jd+ey3ebk3f2a8t70C8wVeMm94dCwrnkyTsjVg9SMiZPerW7IafoZXG+/JeSjka Mo2kOVHVUxF/+vEVbkavvInKSu27Ac+akG8mBzyoXAHs7FdjY/E17bvv6gcv -----END CERTIFICATE-----Generated at Sat May 2 21:03:50 2026 by rpki-client