$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152044.roa File: AS152044.roa (raw, json) Hash identifier: hqeyJsFFgmlb+ucJz5PaiBp5l1ecgUHKNAgGWOplw8A= Subject key identifier: DD:D0:6E:FA:B9:22:9C:87:BD:D7:99:4C:39:61:7D:2E:E8:9D:7A:0A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 79E1F164C724A9B404C787A3830B69105E94CFEA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152044.roa Signing time: Sat 02 May 2026 09:22:21 +0000 ROA not before: Sat 02 May 2026 09:17:21 +0000 ROA not after: Sat 01 May 2027 09:22:21 +0000 asID: 152044 IP address blocks: 115.187.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e1:f1:64:c7:24:a9:b4:04:c7:87:a3:83:0b:69:10:5e:94:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:21 2026 GMT Not After : May 1 09:22:21 2027 GMT Subject: CN=DDD06EFAB9229C87BDD7994C39617D2EE89D7A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:19:c5:76:d2:f7:2a:81:29:c1:2b:c9:62: b8:62:80:0b:bb:f1:92:c6:65:62:0e:e2:44:90:b8: 67:cc:38:eb:0e:de:4f:ba:8f:ff:cd:fd:f0:c1:5c: 78:b7:22:34:14:ff:bb:3b:80:b9:ba:e8:8b:cc:e4: 97:0d:7e:ab:c6:fe:c5:bf:11:31:f8:5f:53:18:3e: 2a:0c:df:b3:0d:46:10:0c:1a:cb:8f:02:46:6f:1e: cd:19:7d:50:bf:e8:24:93:75:e9:33:dd:c7:4c:b4: 95:40:78:bf:61:c1:84:d1:76:a3:9d:59:98:35:30: 64:54:31:52:a9:a9:d8:09:55:4d:30:32:5d:d4:42: de:09:85:a3:ac:ed:6b:1c:65:2b:25:e1:fd:ab:b2: cd:c5:40:86:e0:2b:31:8e:a7:40:e0:dc:e5:7e:82: 8c:c1:60:bb:5e:f1:69:4b:81:17:79:5c:29:7c:1d: c3:1b:9b:41:fc:0e:7c:fe:e2:94:1f:17:96:d7:27: 3a:d7:0a:3d:36:7b:51:76:cd:b7:8e:09:ec:a5:3e: 58:26:91:88:18:e8:28:3c:95:c3:ae:25:ce:d2:3d: 2e:89:c1:4b:d8:c0:57:d9:f9:59:a6:ae:81:00:2d: e1:62:e6:e7:59:7c:23:70:4a:22:0c:9f:e2:55:a4: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:6E:FA:B9:22:9C:87:BD:D7:99:4C:39:61:7D:2E:E8:9D:7A:0A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.187.23.0/24 Signature Algorithm: sha256WithRSAEncryption 16:b7:6d:79:d1:92:0b:7f:df:23:32:a1:00:d1:cc:9f:61:0b: 06:da:61:6d:8d:a1:54:12:ee:2b:a0:49:b0:30:ef:3d:78:54: 7a:76:38:55:83:6b:53:95:27:d0:b8:fa:5d:87:5c:51:38:81: 6f:37:f7:a0:d1:ed:f8:87:0d:e9:cf:ed:2e:a6:a4:1f:00:33: ee:31:2d:d8:39:03:35:f5:1b:3c:ed:e0:32:2e:84:9d:0c:87: b2:7e:b9:8a:d0:e4:20:5a:c6:7c:0a:1a:e6:21:65:34:ce:3a: 5f:0d:58:29:e8:e2:34:28:2b:44:0f:f1:68:19:66:fc:eb:f1: 9d:be:58:90:70:39:a2:97:f8:f3:89:88:8b:0d:7d:7b:a1:19: 7f:87:49:8b:68:6a:08:b0:cb:4d:5e:60:39:24:8a:1f:4b:f7: 74:65:a6:4a:16:a5:d8:8f:b0:85:a2:47:93:95:1a:a6:12:a1: c3:f9:2f:41:dd:d4:af:95:12:9f:93:8b:6c:44:ee:d2:6c:fa: 57:3b:f9:4f:c6:41:f9:a3:49:6b:05:23:85:fd:41:c2:93:9f: 54:f2:5f:5a:74:09:cc:90:88:f5:0d:4b:57:a6:f7:f2:c9:35: 47:ce:48:a4:ea:70:5b:3b:7c:70:38:7e:5a:6d:da:7d:2e:d6: 5e:6e:49:4b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeeHxZMckqbQEx4ejgwtpEF6Uz+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcyMVoX DTI3MDUwMTA5MjIyMVowMzExMC8GA1UEAxMoREREMDZFRkFCOTIyOUM4N0JERDc5 OTRDMzk2MTdEMkVFODlEN0EwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFWGcV20vcqgSnBK8liuGKAC7vxksZlYg7iRJC4Z8w46w7eT7qP/8398MFc eLciNBT/uzuAubroi8zklw1+q8b+xb8RMfhfUxg+Kgzfsw1GEAway48CRm8ezRl9 UL/oJJN16TPdx0y0lUB4v2HBhNF2o51ZmDUwZFQxUqmp2AlVTTAyXdRC3gmFo6zt axxlKyXh/auyzcVAhuArMY6nQODc5X6CjMFgu17xaUuBF3lcKXwdwxubQfwOfP7i lB8XltcnOtcKPTZ7UXbNt44J7KU+WCaRiBjoKDyVw64lztI9LonBS9jAV9n5Waau gQAt4WLm51l8I3BKIgyf4lWkt+UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTd0G76 uSKch73XmUw5YX0u6J16CjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAc7sXMA0GCSqGSIb3DQEBCwUAA4IBAQAWt2150ZILf98jMqEA0cyfYQsG 2mFtjaFUEu4roEmwMO89eFR6djhVg2tTlSfQuPpdh1xROIFvN/eg0e34hw3pz+0u pqQfADPuMS3YOQM19Rs87eAyLoSdDIeyfrmK0OQgWsZ8ChrmIWU0zjpfDVgp6OI0 KCtED/FoGWb86/GdvliQcDmil/jziYiLDX17oRl/h0mLaGoIsMtNXmA5JIofS/d0 ZaZKFqXYj7CFokeTlRqmEqHD+S9B3dSvlRKfk4tsRO7SbPpXO/lPxkH5o0lrBSOF /UHCk59U8l9adAnMkIj1DUtXpvfyyTVHzkik6nBbO3xwOH5abdp9LtZebklL -----END CERTIFICATE-----Generated at Sun May 3 00:39:48 2026 by rpki-client