$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152839.roa File: AS152839.roa (raw, json) Hash identifier: H/lHTl+X6YWZms95SOrwJNx2UHwnykhNS2yQjs1SaIs= Subject key identifier: C1:4E:9B:A3:AF:E4:AF:35:CF:81:D3:05:45:2B:99:B5:22:B6:6C:93 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4461209B7104202FD12797772E369F843AFC8162 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152839.roa Signing time: Sat 02 May 2026 09:23:57 +0000 ROA not before: Sat 02 May 2026 09:18:57 +0000 ROA not after: Sat 01 May 2027 09:23:57 +0000 asID: 152839 IP address blocks: 160.22.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:61:20:9b:71:04:20:2f:d1:27:97:77:2e:36:9f:84:3a:fc:81:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:57 2026 GMT Not After : May 1 09:23:57 2027 GMT Subject: CN=C14E9BA3AFE4AF35CF81D305452B99B522B66C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:4b:0d:93:8a:c2:53:f8:95:eb:ee:c9:53: 6b:ce:ff:9a:35:a7:f0:36:50:97:c5:c0:0d:10:fa: c0:62:74:3b:84:61:6a:3c:8e:d9:df:6c:20:6f:40: 3e:9f:8c:9a:92:4a:b8:d8:25:33:4c:2e:80:d7:92: b2:c5:43:81:d5:fd:3f:68:e1:44:0a:ea:ff:0b:ab: 77:85:0a:ff:3d:ca:54:8b:a2:4b:4e:8f:74:26:e8: 90:93:6b:21:52:fd:d4:1e:9f:23:30:a7:e0:2a:70: b8:4b:bf:97:c5:68:d8:11:f6:24:58:83:e0:a3:0b: 69:ff:ae:31:97:f8:a2:91:8d:ed:f9:ae:24:18:3a: d1:cf:54:05:e2:1d:23:55:3d:bf:e0:0a:20:2d:77: 62:67:89:d6:9c:f7:7c:cb:15:14:3f:3d:cd:5f:14: b7:b6:90:c1:e7:f3:ae:e2:82:86:07:41:8f:96:fe: c5:4f:25:7f:fb:bf:76:c7:6a:46:3c:3c:56:80:a5: 45:02:6f:3f:42:14:0f:10:e1:13:68:05:d8:f4:bc: 43:eb:9b:7b:51:46:c4:d4:75:bc:ff:00:f6:25:58: ca:ac:97:fc:54:de:b4:30:4a:f3:c1:7a:a8:aa:02: dd:ad:86:12:b5:ac:66:aa:f2:92:08:09:14:2e:52: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:9B:A3:AF:E4:AF:35:CF:81:D3:05:45:2B:99:B5:22:B6:6C:93 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.240.0/23 Signature Algorithm: sha256WithRSAEncryption aa:49:31:99:b6:79:33:1f:59:97:b5:dd:79:97:95:b1:f1:28: aa:3b:ef:1c:92:5f:b1:34:4f:ee:12:85:85:84:00:99:92:37: 7f:9d:cf:62:10:96:50:cf:0b:e6:1a:db:0f:f7:df:08:92:ee: d6:3d:30:86:9a:4d:52:24:14:e4:d9:34:b5:1c:52:72:43:82: 53:d4:c9:a0:6d:6e:be:41:4c:f5:ac:b8:28:b5:ee:44:d0:65: 15:5c:e8:11:f9:2d:f5:e4:50:d0:39:03:18:3d:c6:a2:38:2e: 3d:68:ab:e3:5a:23:03:d3:30:a7:95:4e:ad:70:54:bc:a4:f4: ff:13:91:40:f0:27:ae:ed:2a:d0:a1:a9:85:a8:05:93:78:e7: 4b:bf:59:12:00:96:9d:85:c2:37:2a:c7:8c:5a:89:a8:1a:29: d4:23:82:83:2f:b3:cf:8f:b8:83:8a:64:7f:48:5f:86:d4:bf: 2d:4f:f5:67:cd:dd:0e:77:cc:48:15:6c:eb:96:92:72:7b:48: 79:f9:9f:52:e2:52:d8:05:c1:2f:ff:bf:18:1a:17:94:24:e5: 19:e1:e7:3a:7a:df:02:7c:d8:45:d5:74:98:44:b5:b8:47:ff: 33:09:90:79:94:4c:66:72:1b:42:3f:05:fc:43:00:a8:16:c6: f2:44:fc:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURGEgm3EEIC/RJ5d3LjafhDr8gWIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1N1oX DTI3MDUwMTA5MjM1N1owMzExMC8GA1UEAxMoQzE0RTlCQTNBRkU0QUYzNUNGODFE MzA1NDUyQjk5QjUyMkI2NkM5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTMSw2TisJT+JXr7slTa87/mjWn8DZQl8XADRD6wGJ0O4RhajyO2d9sIG9A Pp+MmpJKuNglM0wugNeSssVDgdX9P2jhRArq/wurd4UK/z3KVIuiS06PdCbokJNr IVL91B6fIzCn4CpwuEu/l8Vo2BH2JFiD4KMLaf+uMZf4opGN7fmuJBg60c9UBeId I1U9v+AKIC13YmeJ1pz3fMsVFD89zV8Ut7aQwefzruKChgdBj5b+xU8lf/u/dsdq Rjw8VoClRQJvP0IUDxDhE2gF2PS8Q+ube1FGxNR1vP8A9iVYyqyX/FTetDBK88F6 qKoC3a2GErWsZqrykggJFC5SJ9UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBTpuj r+SvNc+B0wVFK5m1IrZskzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyODM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoBbwMA0GCSqGSIb3DQEBCwUAA4IBAQCqSTGZtnkzH1mXtd15l5Wx8Siq O+8ckl+xNE/uEoWFhACZkjd/nc9iEJZQzwvmGtsP998Iku7WPTCGmk1SJBTk2TS1 HFJyQ4JT1MmgbW6+QUz1rLgote5E0GUVXOgR+S315FDQOQMYPcaiOC49aKvjWiMD 0zCnlU6tcFS8pPT/E5FA8Ceu7SrQoamFqAWTeOdLv1kSAJadhcI3KseMWomoGinU I4KDL7PPj7iDimR/SF+G1L8tT/Vnzd0Od8xIFWzrlpJye0h5+Z9S4lLYBcEv/78Y GheUJOUZ4ec6et8CfNhF1XSYRLW4R/8zCZB5lExmchtCPwX8QwCoFsbyRPzw -----END CERTIFICATE-----Generated at Sat May 2 21:06:05 2026 by rpki-client