$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152018.roa File: AS152018.roa (raw, json) Hash identifier: TJxUi151TDaMCPZcYQN2feo0eqoN9HRyuPSPq7HRp7M= Subject key identifier: 82:87:E3:B4:E2:AF:94:E1:D7:49:E6:48:D7:29:66:6B:70:2B:06:EB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2A9260A17BBC1F5D51A9036806E0FB20EE9160CD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152018.roa Signing time: Sat 02 May 2026 18:08:04 +0000 ROA not before: Sat 02 May 2026 18:03:04 +0000 ROA not after: Sat 01 May 2027 18:08:04 +0000 asID: 152018 IP address blocks: 27.124.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:60:a1:7b:bc:1f:5d:51:a9:03:68:06:e0:fb:20:ee:91:60:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 18:03:04 2026 GMT Not After : May 1 18:08:04 2027 GMT Subject: CN=8287E3B4E2AF94E1D749E648D729666B702B06EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:1c:51:4e:45:0a:2c:71:f8:5d:d8:93:d6: 93:89:3b:51:14:87:a5:3d:03:08:e0:c2:6b:6e:ee: 99:78:42:f9:a0:7f:8d:62:fd:6d:90:5c:5a:ae:c0: bc:7d:b2:1e:0b:88:5c:c1:85:37:7f:bb:7d:dc:6a: 35:d2:c3:25:1d:4d:01:5b:fd:59:f9:2b:5f:6a:01: d4:fc:e4:ef:d7:14:a7:40:e6:0f:a0:cc:87:9d:da: af:44:6b:ef:81:8b:60:f8:aa:94:fe:c2:10:0d:e7: 24:3d:f6:df:ce:73:99:76:b5:77:9f:81:e7:5d:bc: de:cc:76:62:b5:3c:84:07:4c:91:a9:0e:8c:19:e1: be:a7:16:53:35:92:89:ed:2e:61:a0:fd:0b:ac:24: 16:11:72:f2:8a:a2:2a:59:77:b7:d6:1c:b8:79:a6: a1:7a:f5:d5:66:ac:bb:98:d0:99:18:b1:ee:1b:62: 78:10:7e:50:74:4c:99:f3:b3:65:6d:11:eb:7c:27: 88:b8:87:46:a0:38:6a:d5:46:bd:1b:7b:fc:17:f5: 82:06:58:ba:0c:83:d4:d6:45:6c:e3:e5:39:7a:d9: 8f:9c:96:bd:e0:14:2f:15:68:78:4c:6d:3e:05:11: c2:2a:85:64:46:13:a8:1c:a8:30:ba:c3:ee:b1:30: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:87:E3:B4:E2:AF:94:E1:D7:49:E6:48:D7:29:66:6B:70:2B:06:EB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152018.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.68.0/23 Signature Algorithm: sha256WithRSAEncryption 51:14:66:e1:ae:d5:42:7d:34:70:74:1d:37:df:93:a8:0d:b2: a5:5e:a2:b1:af:4a:3a:47:a4:97:ee:50:8b:9a:8c:5d:af:1c: 4c:39:fc:c9:f7:82:89:36:69:36:2c:46:86:c6:e3:cc:29:ca: 4d:7d:50:b8:1c:13:fe:6c:54:19:9b:f8:02:c4:3b:71:89:48: a1:97:d7:9f:9b:36:6f:a5:92:21:cd:e7:d0:3c:ee:6c:6a:70: c3:ab:dc:54:5c:fb:7a:d7:30:00:49:fd:ae:4c:6f:07:63:c3: f2:a7:df:f2:5c:95:b3:c4:bc:d8:e0:08:f1:07:80:b3:1c:c1: 5e:63:3e:4f:74:57:31:3c:c5:ce:6d:0e:94:1d:06:40:83:a9: bc:81:d9:d3:e0:d9:95:61:99:36:92:bd:eb:ed:f4:7f:31:b1: 8b:d5:9f:96:e9:7b:d9:8c:fb:b8:e4:de:56:b5:30:1d:a0:eb: ce:bd:a6:79:6d:e7:91:6b:df:4d:e9:63:c9:f9:a2:c1:a5:55: f3:74:d6:c8:6d:3f:12:0a:43:3e:94:c8:17:f2:1d:f1:26:f5: 25:fb:84:1c:92:91:09:ad:c5:81:06:b4:e5:cd:ec:0e:9c:22: 88:b5:99:1a:83:9a:6c:4a:69:6c:1e:05:53:26:1a:03:05:96: d5:c6:a2:5d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKpJgoXu8H11RqQNoBuD7IO6RYM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE4MDMwNFoX DTI3MDUwMTE4MDgwNFowMzExMC8GA1UEAxMoODI4N0UzQjRFMkFGOTRFMUQ3NDlF NjQ4RDcyOTY2NkI3MDJCMDZFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJzHFFORQoscfhd2JPWk4k7URSHpT0DCODCa27umXhC+aB/jWL9bZBcWq7A vH2yHguIXMGFN3+7fdxqNdLDJR1NAVv9WfkrX2oB1Pzk79cUp0DmD6DMh53ar0Rr 74GLYPiqlP7CEA3nJD32385zmXa1d5+B51283sx2YrU8hAdMkakOjBnhvqcWUzWS ie0uYaD9C6wkFhFy8oqiKll3t9YcuHmmoXr11Wasu5jQmRix7htieBB+UHRMmfOz ZW0R63wniLiHRqA4atVGvRt7/Bf1ggZYugyD1NZFbOPlOXrZj5yWveAULxVoeExt PgURwiqFZEYTqByoMLrD7rEwxV0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSCh+O0 4q+U4ddJ5kjXKWZrcCsG6zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBG3xEMA0GCSqGSIb3DQEBCwUAA4IBAQBRFGbhrtVCfTRwdB0335OoDbKl XqKxr0o6R6SX7lCLmoxdrxxMOfzJ94KJNmk2LEaGxuPMKcpNfVC4HBP+bFQZm/gC xDtxiUihl9efmzZvpZIhzefQPO5sanDDq9xUXPt61zAASf2uTG8HY8Pyp9/yXJWz xLzY4AjxB4CzHMFeYz5PdFcxPMXObQ6UHQZAg6m8gdnT4NmVYZk2kr3r7fR/MbGL 1Z+W6XvZjPu45N5WtTAdoOvOvaZ5beeRa99N6WPJ+aLBpVXzdNbIbT8SCkM+lMgX 8h3xJvUl+4QckpEJrcWBBrTlzewOnCKItZkag5psSmlsHgVTJhoDBZbVxqJd -----END CERTIFICATE-----Generated at Sun May 3 00:39:45 2026 by rpki-client