$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152013.roa File: AS152013.roa (raw, json) Hash identifier: kjKyBmwWVLiQVPxYCbrb97GvCQnklQ/ExAaxiCjmEFc= Subject key identifier: 68:27:74:D7:09:36:BF:BC:FA:B7:25:69:8B:92:DD:F3:04:DD:65:84 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3982943465F4E2CD4B8C18164C22C635B70B6987 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152013.roa Signing time: Wed 09 Sep 2026 04:38:18 +0000 ROA not before: Wed 09 Sep 2026 04:33:18 +0000 ROA not after: Wed 08 Sep 2027 04:38:18 +0000 asID: 152013 IP address blocks: 36.50.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:82:94:34:65:f4:e2:cd:4b:8c:18:16:4c:22:c6:35:b7:0b:69:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 9 04:33:18 2026 GMT Not After : Sep 8 04:38:18 2027 GMT Subject: CN=682774D70936BFBCFAB725698B92DDF304DD6584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:ba:ef:ed:c6:e8:47:31:51:cc:8a:61:5a: a3:2c:dd:ee:99:4f:e2:45:aa:78:40:51:14:c4:ce: fe:88:60:79:91:36:01:04:26:65:48:82:46:f7:0e: 4d:74:1b:dd:a4:2a:c7:a4:d2:88:ba:48:06:c5:0e: f7:a9:9b:1b:b5:12:90:27:2a:12:31:2e:49:f1:6a: c1:b9:65:ce:db:f7:26:9e:c8:95:9f:31:ad:57:66: b4:cb:31:78:74:d3:43:8e:be:23:a1:fd:26:94:0e: 65:d4:2d:5e:47:17:96:8c:b7:35:6c:ae:66:e8:26: 93:47:41:c9:31:99:ef:aa:47:f8:7f:80:7a:42:2c: 28:e5:03:85:dd:13:0d:e6:99:7e:59:10:53:6f:2c: 82:5f:a2:11:82:0a:62:1d:8d:40:1e:df:87:0c:75: ea:cf:b6:53:0e:bc:30:db:08:3e:2b:d4:31:27:e1: 24:24:d3:92:e5:e7:de:4f:2d:52:8e:5d:92:01:97: 38:fc:45:ca:7c:ad:19:21:32:b5:4e:70:1c:fa:e5: fb:93:52:4f:53:aa:8d:63:58:14:7d:b6:ce:01:bb: 56:29:88:18:60:35:3a:ef:b3:89:56:dc:21:5a:5a: 7d:15:21:e0:02:4e:7d:8f:d5:3e:c0:0d:8a:14:f0: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:27:74:D7:09:36:BF:BC:FA:B7:25:69:8B:92:DD:F3:04:DD:65:84 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152013.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e5:4c:8e:74:c2:1e:f8:75:cf:19:7a:be:29:fc:5d:6c:39: 72:a2:d9:66:5b:b2:de:20:82:be:8f:5e:5a:71:5f:50:50:d8: 53:32:ab:25:35:f8:6d:ad:ef:c4:43:2f:a1:1c:8b:2a:5c:3b: 9c:b5:12:01:ab:e2:2d:bf:73:0b:ff:3c:06:f4:1e:26:1a:51: 79:a4:87:ba:20:02:22:24:aa:91:2e:4a:a6:c3:29:64:76:a2: 4f:1d:e4:2d:2f:e6:4a:d0:0d:4a:d7:02:88:37:51:1b:23:4b: 55:76:52:4f:87:1a:b4:43:8f:cc:46:a4:a8:fa:8c:a3:fb:35: ab:46:32:60:5b:9a:38:b2:fc:6f:0e:8a:33:64:8b:57:a4:cf: 7e:eb:bf:0c:b2:7e:f9:0e:ea:86:8e:d8:7c:6e:49:4a:e9:87: 71:03:6e:52:dc:75:46:38:1c:af:d3:32:e8:42:33:f3:ef:fb: 5f:66:44:e5:11:16:58:61:7d:f4:d4:20:a1:08:2c:6c:f8:8b: 45:c6:3f:66:f2:03:32:87:03:de:68:87:68:c6:6b:db:38:93: 5d:dd:59:db:2b:66:eb:dc:9c:f0:79:00:fb:3c:99:f9:45:b0: 67:8f:47:fe:87:e6:ee:ef:ba:6b:11:f3:fe:ee:f7:8d:04:e5: c0:4d:6f:22 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOYKUNGX04s1LjBgWTCLGNbcLaYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwOTA0MzMxOFoX DTI3MDkwODA0MzgxOFowMzExMC8GA1UEAxMoNjgyNzc0RDcwOTM2QkZCQ0ZBQjcy NTY5OEI5MkRERjMwNERENjU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKH+uu/txuhHMVHMimFaoyzd7plP4kWqeEBRFMTO/ohgeZE2AQQmZUiCRvcO TXQb3aQqx6TSiLpIBsUO96mbG7USkCcqEjEuSfFqwbllztv3Jp7IlZ8xrVdmtMsx eHTTQ46+I6H9JpQOZdQtXkcXloy3NWyuZugmk0dByTGZ76pH+H+AekIsKOUDhd0T DeaZflkQU28sgl+iEYIKYh2NQB7fhwx16s+2Uw68MNsIPivUMSfhJCTTkuXn3k8t Uo5dkgGXOPxFynytGSEytU5wHPrl+5NST1OqjWNYFH22zgG7VimIGGA1Ou+ziVbc IVpafRUh4AJOfY/VPsANihTwgL8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRoJ3TX CTa/vPq3JWmLkt3zBN1lhDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAJDIrMA0GCSqGSIb3DQEBCwUAA4IBAQAs5UyOdMIe+HXPGXq+KfxdbDly otlmW7LeIIK+j15acV9QUNhTMqslNfhtre/EQy+hHIsqXDuctRIBq+Itv3ML/zwG 9B4mGlF5pIe6IAIiJKqRLkqmwylkdqJPHeQtL+ZK0A1K1wKIN1EbI0tVdlJPhxq0 Q4/MRqSo+oyj+zWrRjJgW5o4svxvDoozZItXpM9+678Msn75DuqGjth8bklK6Ydx A25S3HVGOByv0zLoQjPz7/tfZkTlERZYYX301CChCCxs+ItFxj9m8gMyhwPeaIdo xmvbOJNd3VnbK2br3JzweQD7PJn5RbBnj0f+h+bu77prEfP+7veNBOXATW8i -----END CERTIFICATE-----Generated at Thu Sep 17 04:37:11 2026 by rpki-client