$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152050.roa File: AS152050.roa (raw, json) Hash identifier: qcTHXSS6N9QCE9nIDRQz/pJd1wdT0K6SGPaJKm2GROE= Subject key identifier: 56:10:58:75:0A:27:CE:C9:6C:43:57:EC:93:5D:94:83:EF:B1:D3:AF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3201259BD070D452B72306D623CABD1B388A37DB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152050.roa Signing time: Sat 02 May 2026 08:37:15 +0000 ROA not before: Sat 02 May 2026 08:32:15 +0000 ROA not after: Sat 01 May 2027 08:37:15 +0000 asID: 152050 IP address blocks: 210.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:25:9b:d0:70:d4:52:b7:23:06:d6:23:ca:bd:1b:38:8a:37:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:15 2026 GMT Not After : May 1 08:37:15 2027 GMT Subject: CN=561058750A27CEC96C4357EC935D9483EFB1D3AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:ee:22:76:81:88:29:1d:d3:00:95:8f:e8: 8d:95:bf:b9:d1:32:76:56:20:f4:64:40:ce:1a:75: d1:9b:ed:0f:ee:e1:c4:84:d9:db:65:95:53:15:14: 21:93:ff:2b:31:1c:95:1a:22:cc:d8:46:ae:d0:32: 9d:c8:a2:d7:b7:0e:c4:7d:44:b5:af:50:98:58:5d: e0:23:67:1a:fc:03:9d:fe:94:a8:e1:40:42:e4:00: 7f:53:1c:51:7c:69:77:64:b9:f1:d9:10:8c:79:e9: 8e:c3:22:bb:86:65:d8:32:f6:15:16:03:e4:a0:9f: 1f:54:da:7d:9f:4c:8a:a0:1a:79:05:11:a5:bb:89: 18:c8:92:26:db:55:8a:54:a6:2e:e5:fd:22:18:7a: e7:cc:e9:8e:14:a7:10:74:75:20:f7:fa:ab:12:b0: 1d:21:ae:f7:2a:bb:e8:20:62:85:03:d6:eb:bb:f4: 1c:49:c9:e8:11:b6:ba:b7:94:d0:e7:90:f9:19:1f: 81:a5:72:d3:a4:b4:f8:c6:cb:73:72:e4:82:48:e8: 8a:ec:70:02:a7:bc:31:51:d6:09:3f:0a:c0:b4:3a: 44:70:2d:20:81:4c:fe:0d:36:b0:66:68:0c:f5:b3: 1b:f1:00:01:43:72:58:23:b6:49:b7:5b:a4:b3:d2: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:58:75:0A:27:CE:C9:6C:43:57:EC:93:5D:94:83:EF:B1:D3:AF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.140.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:50:ae:53:b0:99:e9:a7:9c:10:c5:00:5c:c5:9c:b8:b4:5e: 7d:63:70:c0:86:08:ab:ba:7e:2f:88:56:6f:f2:b7:be:1c:96: 8b:3e:89:c4:bb:9c:7f:7a:cf:a6:da:32:b9:26:3a:9b:ee:34: 93:f9:3b:cb:37:eb:db:e8:ae:8b:1c:89:dd:6a:b4:c6:b4:ec: 16:3b:45:61:35:10:31:ea:85:f7:b6:eb:cf:e2:77:df:43:52: 0a:e6:f7:76:08:6b:81:42:0b:ff:69:16:83:17:14:1c:fc:06: d1:76:a7:84:93:6b:39:65:1c:11:25:ad:89:70:61:8e:b9:48: 21:4e:82:65:20:e7:e3:36:ee:00:17:b1:cf:5f:e2:94:7c:6d: 0f:90:5a:00:62:3c:de:3c:ec:91:ee:df:bc:08:7e:ab:47:1b: fc:43:ff:ec:27:2b:85:e8:52:9e:86:35:b6:91:d4:73:54:1d: f0:22:3a:57:6f:76:9d:35:e9:0e:6e:07:99:2a:cf:46:de:3f: 0a:cc:87:1b:a3:f2:9f:f7:9a:5e:6c:b4:6a:c0:76:5d:39:da: 79:a3:c0:d7:5e:90:f6:b4:b4:e0:39:7d:a2:03:ae:c2:e4:d4: 08:62:43:eb:4a:b9:2c:65:0e:0b:d1:83:f2:9b:2e:6b:54:7c: 61:95:3f:c8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMgElm9Bw1FK3IwbWI8q9GziKN9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxNVoX DTI3MDUwMTA4MzcxNVowMzExMC8GA1UEAxMoNTYxMDU4NzUwQTI3Q0VDOTZDNDM1 N0VDOTM1RDk0ODNFRkIxRDNBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5b7iJ2gYgpHdMAlY/ojZW/udEydlYg9GRAzhp10ZvtD+7hxITZ22WVUxUU IZP/KzEclRoizNhGrtAyncii17cOxH1Eta9QmFhd4CNnGvwDnf6UqOFAQuQAf1Mc UXxpd2S58dkQjHnpjsMiu4Zl2DL2FRYD5KCfH1TafZ9MiqAaeQURpbuJGMiSJttV ilSmLuX9Ihh658zpjhSnEHR1IPf6qxKwHSGu9yq76CBihQPW67v0HEnJ6BG2ureU 0OeQ+RkfgaVy06S0+MbLc3LkgkjoiuxwAqe8MVHWCT8KwLQ6RHAtIIFM/g02sGZo DPWzG/EAAUNyWCO2SbdbpLPSOP0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRWEFh1 CifOyWxDV+yTXZSD77HTrzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQA0k+MMA0GCSqGSIb3DQEBCwUAA4IBAQAdUK5TsJnpp5wQxQBcxZy4tF59 Y3DAhgirun4viFZv8re+HJaLPonEu5x/es+m2jK5Jjqb7jST+TvLN+vb6K6LHInd arTGtOwWO0VhNRAx6oX3tuvP4nffQ1IK5vd2CGuBQgv/aRaDFxQc/AbRdqeEk2s5 ZRwRJa2JcGGOuUghToJlIOfjNu4AF7HPX+KUfG0PkFoAYjzePOyR7t+8CH6rRxv8 Q//sJyuF6FKehjW2kdRzVB3wIjpXb3adNekObgeZKs9G3j8KzIcbo/Kf95pebLRq wHZdOdp5o8DXXpD2tLTgOX2iA67C5NQIYkPrSrksZQ4L0YPymy5rVHxhlT/I -----END CERTIFICATE-----Generated at Sun May 3 00:39:51 2026 by rpki-client