$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152020.roa File: AS152020.roa (raw, json) Hash identifier: PEuT3hdHIC3m7KNuUIZeOP+461cvni0bg8JCGb2SOEo= Subject key identifier: 40:D9:70:C6:30:56:89:A9:64:43:8F:B2:DB:A9:99:47:86:6A:DE:7A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DC25406610367EADEDD6210C78BDC7016856B9B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152020.roa Signing time: Sat 02 May 2026 21:36:52 +0000 ROA not before: Sat 02 May 2026 21:31:52 +0000 ROA not after: Sat 01 May 2027 21:36:52 +0000 asID: 152020 IP address blocks: 27.124.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:54:06:61:03:67:ea:de:dd:62:10:c7:8b:dc:70:16:85:6b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:52 2026 GMT Not After : May 1 21:36:52 2027 GMT Subject: CN=40D970C6305689A964438FB2DBA99947866ADE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:a9:26:b5:05:79:18:f1:93:56:8f:0b:95: 3b:bb:ea:7f:84:dd:3c:35:f5:ef:5e:97:f4:e1:39: ed:8f:d4:f7:02:c7:7f:48:10:65:d2:ce:16:64:24: e6:eb:a7:c4:6a:6e:4b:b8:56:04:9b:34:3e:91:8e: 60:64:75:1f:2f:4c:63:a8:19:af:7c:33:bd:a0:35: 28:e5:60:12:0a:9e:11:c6:b8:05:88:e2:29:6e:08: 26:9a:96:0b:f8:33:82:f2:a5:d4:61:d0:c3:40:9f: 1e:d9:73:9f:ca:fb:d8:05:d3:3f:82:4d:a6:2f:ff: e6:fe:04:e5:c3:1e:b8:12:bb:51:7d:3a:79:02:42: b5:79:a8:5a:69:32:13:5b:d0:f5:61:51:39:0f:38: 0c:c4:4c:dc:ad:4a:1e:1e:3c:d3:a0:99:1d:04:05: 1a:7f:57:b2:70:ff:e7:e7:af:f9:31:f4:c8:89:b1: a3:07:e5:a6:50:32:ac:4a:b4:45:b5:fd:41:37:2c: c6:06:1c:d8:d6:25:dc:97:8d:4e:cb:67:91:70:3a: 34:be:c3:42:c2:03:ff:1c:70:e3:09:e1:c0:8e:7f: 5e:a2:f0:a1:d5:d2:41:76:3a:71:0b:4b:c8:de:fa: ac:12:9a:4c:da:00:21:a1:9b:b3:c5:7d:cb:77:1d: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D9:70:C6:30:56:89:A9:64:43:8F:B2:DB:A9:99:47:86:6A:DE:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.79.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:63:37:55:b1:40:64:0b:62:0b:62:9c:d9:d4:a5:b6:a4:e0: f2:b7:cc:14:cc:01:58:01:a9:a6:f8:6a:63:20:b1:e8:bd:51: 2a:bf:c6:02:c4:1b:54:bd:05:d4:0d:15:dd:67:41:bd:3d:78: e7:d2:33:59:dc:83:86:3b:d1:e7:07:7e:e4:42:d5:6f:7a:80: e3:e2:74:81:cb:69:75:a6:f6:5c:7e:12:d7:f5:6a:38:b6:f9: 9f:41:31:3a:09:37:6c:2a:a2:cf:74:d9:b6:52:6f:39:c4:9f: 2e:85:e4:98:c8:a6:6f:6d:15:f9:7d:d9:b8:eb:f8:39:09:53: 0b:8c:0a:75:05:69:a5:b1:4a:cc:b3:6b:87:7c:b7:24:51:ac: f7:ca:91:44:52:50:a3:da:6b:1d:80:51:f0:1a:5a:3d:3a:21: d4:2b:83:42:5a:cf:bd:f9:01:a4:5a:5e:22:d2:49:70:3a:34: a8:78:60:d6:92:12:9a:6d:c3:12:99:dc:72:b9:23:f1:ca:cd: 3b:b2:c2:11:72:49:ce:18:7a:7a:e0:4f:dc:4a:2f:ed:a0:3e: 48:fb:ae:51:05:a2:d0:f0:f4:7e:63:9f:e6:28:d0:72:81:8b: e8:7d:cf:c7:20:00:62:5b:4f:64:2f:a0:f9:16:44:59:92:c7: d8:fc:a4:e5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDcJUBmEDZ+re3WIQx4vccBaFa5swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzE1MloX DTI3MDUwMTIxMzY1MlowMzExMC8GA1UEAxMoNDBEOTcwQzYzMDU2ODlBOTY0NDM4 RkIyREJBOTk5NDc4NjZBREU3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcZqSa1BXkY8ZNWjwuVO7vqf4TdPDX1716X9OE57Y/U9wLHf0gQZdLOFmQk 5uunxGpuS7hWBJs0PpGOYGR1Hy9MY6gZr3wzvaA1KOVgEgqeEca4BYjiKW4IJpqW C/gzgvKl1GHQw0CfHtlzn8r72AXTP4JNpi//5v4E5cMeuBK7UX06eQJCtXmoWmky E1vQ9WFROQ84DMRM3K1KHh4806CZHQQFGn9XsnD/5+ev+TH0yImxowflplAyrEq0 RbX9QTcsxgYc2NYl3JeNTstnkXA6NL7DQsID/xxw4wnhwI5/XqLwodXSQXY6cQtL yN76rBKaTNoAIaGbs8V9y3cd7E0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRA2XDG MFaJqWRDj7LbqZlHhmreejAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAG3xPMA0GCSqGSIb3DQEBCwUAA4IBAQA+YzdVsUBkC2ILYpzZ1KW2pODy t8wUzAFYAamm+GpjILHovVEqv8YCxBtUvQXUDRXdZ0G9PXjn0jNZ3IOGO9HnB37k QtVveoDj4nSBy2l1pvZcfhLX9Wo4tvmfQTE6CTdsKqLPdNm2Um85xJ8uheSYyKZv bRX5fdm46/g5CVMLjAp1BWmlsUrMs2uHfLckUaz3ypFEUlCj2msdgFHwGlo9OiHU K4NCWs+9+QGkWl4i0klwOjSoeGDWkhKabcMSmdxyuSPxys07ssIRcknOGHp64E/c Si/toD5I+65RBaLQ8PR+Y5/mKNBygYvofc/HIABiW09kL6D5FkRZksfY/KTl -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client