$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152003.roa File: AS152003.roa (raw, json) Hash identifier: XPpUEJfAmhRBU67qu8gpRuWkKCXFiiQ+Jp84x6NldUw= Subject key identifier: 4D:84:C9:A7:2C:04:ED:AE:74:11:BB:79:25:5B:7E:C3:6D:AF:2A:78 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3A21C988480B85374A69A1E43DB79A2153E39F61 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152003.roa Signing time: Thu 13 Aug 2026 02:24:48 +0000 ROA not before: Thu 13 Aug 2026 02:19:48 +0000 ROA not after: Thu 12 Aug 2027 02:24:48 +0000 asID: 152003 IP address blocks: 36.50.109.0/24 maxlen: 24 115.84.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:21:c9:88:48:0b:85:37:4a:69:a1:e4:3d:b7:9a:21:53:e3:9f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 13 02:19:48 2026 GMT Not After : Aug 12 02:24:48 2027 GMT Subject: CN=4D84C9A72C04EDAE7411BB79255B7EC36DAF2A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:5c:57:10:a5:b9:b9:9f:7f:d1:97:36:19: f4:01:0e:a0:65:ca:d5:65:46:96:b3:f0:18:91:52: ef:94:16:6d:ce:fb:1a:55:0a:c4:57:39:8d:df:eb: 9a:b2:54:15:46:e5:74:18:fe:47:47:d5:d5:02:fd: c9:26:0e:e5:d1:5f:84:91:5a:69:51:1d:78:60:f7: 61:d7:36:81:f1:7c:e5:a0:59:7e:a6:8e:d4:c0:bd: d5:c4:d0:c8:6f:34:1d:58:00:1f:ef:53:47:6b:b4: ec:d7:79:79:63:c9:6e:a9:96:fa:07:5a:27:ca:86: e6:c8:86:13:40:23:54:93:3b:b0:21:7f:e2:95:8b: 42:5a:27:98:f3:4a:2f:8a:cc:32:44:61:76:0a:1b: bd:de:6c:39:10:53:af:20:85:04:a7:e4:5e:90:28: 0a:21:88:d7:06:fa:6d:a6:e5:8a:ae:53:b4:8d:a2: a0:ec:a4:59:c2:e4:1c:53:9c:be:9e:83:03:a7:3b: c1:71:e7:a0:d7:10:c1:3c:e0:9a:c4:66:9c:e4:b2: 52:ae:69:70:54:9b:8d:7b:14:02:17:cb:53:d2:8c: be:ef:66:b1:64:05:0b:b7:e0:e0:d3:20:82:9a:e7: 12:ea:fd:74:f3:ef:41:6f:c0:89:a0:83:59:fd:88: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:84:C9:A7:2C:04:ED:AE:74:11:BB:79:25:5B:7E:C3:6D:AF:2A:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.109.0/24 115.84.175.0/24 Signature Algorithm: sha256WithRSAEncryption 99:a5:a8:81:0b:9d:37:e7:fc:61:38:3d:10:a9:07:61:ec:7d: 03:57:64:47:b2:8c:b2:06:50:9b:d6:a9:5c:7a:bb:7c:61:54: b7:b9:33:41:94:14:43:dd:d8:6f:c3:f2:bd:95:21:9e:9d:4a: 66:9d:60:1d:d3:64:80:e9:8d:33:1e:ea:ec:7e:b4:14:6c:c1: 72:e6:53:16:ae:fb:76:f1:bd:85:9d:16:c1:86:36:24:f4:ad: b3:b6:16:df:e0:fb:6e:6c:a5:f3:78:a3:8d:a9:18:55:bc:6b: 15:91:6e:7c:47:76:dd:0c:0c:86:e2:20:0a:6d:7c:7e:eb:b4: a7:0c:ee:be:34:e9:0f:6a:df:da:08:a6:a9:f9:5a:3e:46:29: 9c:38:27:49:c5:dc:f6:80:50:9c:71:9a:8f:7e:77:b5:4d:60: 35:43:dc:b9:db:67:97:31:e1:1b:08:ab:31:ec:84:ac:be:b8: f2:6e:ae:f7:9c:3c:42:5d:59:95:ec:62:75:34:d0:0f:b2:21: 14:5d:0c:2a:57:2d:e7:90:a4:5c:d9:1c:41:48:88:72:f0:a1: 46:e0:74:8e:60:f6:3d:c2:87:8a:11:7c:52:0f:96:4d:c7:40: b9:43:41:d7:44:e2:54:e8:75:57:1c:e1:20:f6:4c:d9:8b:b3: 2b:aa:a3:e9 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUOiHJiEgLhTdKaaHkPbeaIVPjn2EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxMzAyMTk0OFoX DTI3MDgxMjAyMjQ0OFowMzExMC8GA1UEAxMoNEQ4NEM5QTcyQzA0RURBRTc0MTFC Qjc5MjU1QjdFQzM2REFGMkE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzXXFcQpbm5n3/RlzYZ9AEOoGXK1WVGlrPwGJFS75QWbc77GlUKxFc5jd/r mrJUFUbldBj+R0fV1QL9ySYO5dFfhJFaaVEdeGD3Ydc2gfF85aBZfqaO1MC91cTQ yG80HVgAH+9TR2u07Nd5eWPJbqmW+gdaJ8qG5siGE0AjVJM7sCF/4pWLQlonmPNK L4rMMkRhdgobvd5sORBTryCFBKfkXpAoCiGI1wb6babliq5TtI2ioOykWcLkHFOc vp6DA6c7wXHnoNcQwTzgmsRmnOSyUq5pcFSbjXsUAhfLU9KMvu9msWQFC7fg4NMg gprnEur9dPPvQW/AiaCDWf2I0TECAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRNhMmn LATtrnQRu3klW37Dba8qeDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAJDJtAwQAc1SvMA0GCSqGSIb3DQEBCwUAA4IBAQCZpaiBC5035/xhOD0Q qQdh7H0DV2RHsoyyBlCb1qlcert8YVS3uTNBlBRD3dhvw/K9lSGenUpmnWAd02SA 6Y0zHursfrQUbMFy5lMWrvt28b2FnRbBhjYk9K2zthbf4PtubKXzeKONqRhVvGsV kW58R3bdDAyG4iAKbXx+67SnDO6+NOkPat/aCKap+Vo+RimcOCdJxdz2gFCccZqP fne1TWA1Q9y522eXMeEbCKsx7ISsvrjybq73nDxCXVmV7GJ1NNAPsiEUXQwqVy3n kKRc2RxBSIhy8KFG4HSOYPY9woeKEXxSD5ZNx0C5Q0HXROJU6HVXHOEg9kzZi7Mr qqPp -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:05 2026 by rpki-client