$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147021.roa File: AS147021.roa (raw, json) Hash identifier: 4mdiECEUSf9KLdh2B8ZLqYCxvCAK2usNedqFPE1T2VM= Subject key identifier: E8:40:7C:B0:D5:3E:CA:77:2E:47:DE:54:84:56:8C:DA:6B:B2:51:D8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1F13C888DEB8D14BB0AA2623579BD9AF6CCC0E7B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147021.roa Signing time: Wed 07 Oct 2026 06:54:58 +0000 ROA not before: Wed 07 Oct 2026 06:49:58 +0000 ROA not after: Wed 06 Oct 2027 06:54:58 +0000 asID: 147021 IP address blocks: 163.52.254.0/24 maxlen: 24 2001:df7:9740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:13:c8:88:de:b8:d1:4b:b0:aa:26:23:57:9b:d9:af:6c:cc:0e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 7 06:49:58 2026 GMT Not After : Oct 6 06:54:58 2027 GMT Subject: CN=E8407CB0D53ECA772E47DE5484568CDA6BB251D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:11:c4:64:04:c5:85:d6:4b:2c:fa:f2:ad:c5: 1b:3c:62:87:2a:7b:16:0d:ca:a7:72:84:0a:2d:7c: c8:6b:14:61:b3:ae:ac:64:d0:be:75:c2:e2:b6:13: a5:1f:2f:b9:44:4c:67:2f:3d:e4:14:dd:1a:9f:d4: 48:4e:f2:dc:ac:3d:97:4d:e2:86:ab:3f:a0:8f:4b: 42:ec:bc:32:90:78:77:57:62:ce:51:9d:db:74:43: cb:d3:11:9c:87:c6:89:fa:dd:0a:0e:e4:93:84:6f: a2:71:3d:9b:f4:f0:a4:06:82:0b:44:a8:cb:6d:c0: 9d:db:91:53:d9:8d:74:6a:09:c7:ee:e5:b6:9c:6d: c7:c4:9e:df:bc:f5:98:39:44:00:be:26:73:d6:7e: 4a:e7:1e:73:13:89:c4:eb:dd:f2:41:52:67:b3:02: d8:32:a8:99:10:3b:dd:15:f2:75:e0:93:5b:b5:f0: d9:94:71:e6:2a:07:99:2a:ec:07:ce:41:f9:5d:fb: f6:c3:d8:ab:3d:0e:36:57:57:e8:aa:b7:fe:2e:47: 2f:bc:dc:27:4e:86:96:bd:ff:b3:8b:d3:b7:b4:0e: 46:4a:24:05:0f:50:80:02:15:99:74:ad:d2:18:41: 08:92:a2:ef:de:fe:32:07:b9:a3:77:9f:b6:e9:95: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:7C:B0:D5:3E:CA:77:2E:47:DE:54:84:56:8C:DA:6B:B2:51:D8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147021.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.254.0/24 IPv6: 2001:df7:9740::/48 Signature Algorithm: sha256WithRSAEncryption 41:e3:3d:ad:6a:51:7e:3b:20:ee:3a:a7:d2:aa:80:23:e4:86: e1:3d:c0:42:c2:0e:3c:f7:7f:39:05:98:fb:9a:74:f1:45:80: 5a:e3:dd:af:fd:8e:cd:0f:2f:1f:8b:87:af:62:58:62:b2:65: 5f:a0:d7:09:ba:68:48:a3:8d:a8:ec:6a:c4:5b:99:98:0d:03: 13:0f:6c:dc:a8:c0:3e:92:54:3a:ab:f8:4b:7d:07:91:1b:0d: ff:4d:1d:f1:a0:ed:29:53:c3:f6:23:b7:3c:85:8f:01:b6:f5: 62:75:67:f3:09:b0:25:cc:ff:b5:2d:59:3f:c0:7b:7f:31:86: 39:4b:27:fb:eb:d5:c3:f2:b2:35:a3:3c:64:bb:8e:06:bd:ec: 78:29:b8:29:e3:8d:b0:81:0f:f8:9d:d9:59:53:3c:d4:49:0b: ca:df:9b:37:bc:d6:2c:76:71:43:34:5d:b6:95:99:44:66:b7: be:10:55:bf:52:f5:c0:12:a6:07:4b:4b:87:4b:47:61:9d:ee: 9a:02:98:3f:88:35:cc:62:7d:f8:ba:82:02:36:32:77:38:51: cd:76:d8:f3:b1:29:ca:62:10:de:ec:90:b7:2f:0a:31:6c:a4: 51:88:9c:30:1e:41:c7:d8:6b:1c:0e:3c:8b:1d:ba:35:e5:ed: dc:aa:5e:97 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHxPIiN640UuwqiYjV5vZr2zMDnswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNzA2NDk1OFoX DTI3MTAwNjA2NTQ1OFowMzExMC8GA1UEAxMoRTg0MDdDQjBENTNFQ0E3NzJFNDdE RTU0ODQ1NjhDREE2QkIyNTFEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQRxGQExYXWSyz68q3FGzxihyp7Fg3Kp3KECi18yGsUYbOurGTQvnXC4rYT pR8vuURMZy895BTdGp/USE7y3Kw9l03ihqs/oI9LQuy8MpB4d1dizlGd23RDy9MR nIfGifrdCg7kk4RvonE9m/TwpAaCC0Soy23AnduRU9mNdGoJx+7ltpxtx8Se37z1 mDlEAL4mc9Z+SucecxOJxOvd8kFSZ7MC2DKomRA73RXydeCTW7Xw2ZRx5ioHmSrs B85B+V379sPYqz0ONldX6Kq3/i5HL7zcJ06Glr3/s4vTt7QORkokBQ9QgAIVmXSt 0hhBCJKi797+Mge5o3eftumVRekCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBToQHyw 1T7Kdy5H3lSEVozaa7JR2DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MDIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozT+MA8EAgACMAkDBwAgAQ33l0AwDQYJKoZIhvcNAQELBQADggEBAEHj Pa1qUX47IO46p9KqgCPkhuE9wELCDjz3fzkFmPuadPFFgFrj3a/9js0PLx+Lh69i WGKyZV+g1wm6aEijjajsasRbmZgNAxMPbNyowD6SVDqr+Et9B5EbDf9NHfGg7SlT w/YjtzyFjwG29WJ1Z/MJsCXM/7UtWT/Ae38xhjlLJ/vr1cPysjWjPGS7jga97Hgp uCnjjbCBD/id2VlTPNRJC8rfmze81ix2cUM0XbaVmURmt74QVb9S9cASpgdLS4dL R2Gd7poCmD+INcxiffi6ggI2Mnc4Uc122POxKcpiEN7skLcvCjFspFGInDAeQcfY axwOPIsdujXl7dyqXpc= -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:01 2026 by rpki-client