$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152053.roa File: AS152053.roa (raw, json) Hash identifier: U3W2Kd2+ALPgWBu+4drFSSiyN+vwZ3tOpMTfrlVRRqU= Subject key identifier: C4:A5:7F:9A:6F:D3:58:7F:2C:EA:A2:23:6F:E8:5C:9D:0A:37:2E:A0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A23E26111DB3FD28BEBC444DEA729E49CD2260F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152053.roa Signing time: Sat 02 May 2026 21:31:07 +0000 ROA not before: Sat 02 May 2026 21:26:07 +0000 ROA not after: Sat 01 May 2027 21:31:07 +0000 asID: 152053 IP address blocks: 210.87.112.0/23 maxlen: 24 2001:df3:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:23:e2:61:11:db:3f:d2:8b:eb:c4:44:de:a7:29:e4:9c:d2:26:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:26:07 2026 GMT Not After : May 1 21:31:07 2027 GMT Subject: CN=C4A57F9A6FD3587F2CEAA2236FE85C9D0A372EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:a2:c1:a9:fd:64:ae:96:85:47:ff:6a:c5: 87:b4:db:df:3c:34:9d:d4:81:1a:b9:c5:5b:13:d9: 57:7b:90:a7:2b:45:85:99:57:59:29:2c:a0:5f:0a: eb:9a:ba:40:7e:2e:b1:03:c5:e0:93:ce:e3:97:07: ab:00:f2:77:1f:25:94:9e:4d:1c:03:74:45:f4:8f: be:9f:f8:a2:1c:7a:ea:e8:99:04:dd:99:11:ce:75: 7e:35:81:ce:de:0d:b9:05:f5:14:99:d7:26:70:a9: d9:39:81:4c:b1:82:ca:2e:91:36:09:03:55:81:6c: bf:92:8a:0a:d4:a5:e9:88:e0:cf:b9:2a:c1:a9:8b: d4:7c:a7:9d:39:05:4c:d9:49:63:61:c9:4e:13:53: 34:f4:ed:36:19:4e:d3:8b:62:f0:47:00:a6:0f:c9: 52:48:6b:e3:a9:89:ea:bc:03:70:e1:73:1b:e0:02: 01:fd:19:a8:e3:7f:8e:c5:a8:59:ee:3e:87:85:55: 2a:bb:87:ca:54:93:a0:18:1a:05:f8:08:8d:51:ef: 0e:2c:6c:4f:6e:d1:71:42:1f:13:a7:9e:4b:2a:e3: 6d:b1:8d:b1:05:2a:0d:81:13:66:61:37:11:10:0d: c1:86:8b:79:9d:77:b0:58:c5:5e:0f:3c:f8:61:ea: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A5:7F:9A:6F:D3:58:7F:2C:EA:A2:23:6F:E8:5C:9D:0A:37:2E:A0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.112.0/23 IPv6: 2001:df3:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 5f:73:94:92:42:58:aa:6d:62:b4:8b:19:9e:0c:7c:8b:f7:57: 8a:30:69:54:31:18:19:73:f0:3f:f6:72:8d:a0:dc:01:34:d5: ec:87:f2:de:46:a2:a2:df:c4:74:16:03:06:e0:35:ea:4a:ca: 24:db:3c:cf:77:83:7b:a9:56:6a:2f:b8:6a:57:42:d7:a3:7a: 9f:92:a1:fc:8b:e5:cd:49:66:5d:bd:36:4b:2c:3d:51:ce:77: ac:13:4b:34:fa:a1:ae:2e:92:0b:d1:a5:d0:d8:d4:01:96:cd: 8f:54:1b:df:6a:10:96:1b:34:69:ce:18:bc:d3:99:23:0f:dc: 86:f8:d8:9d:fa:f6:58:50:94:57:bd:2d:e6:b0:d9:e5:48:a2: e7:09:9c:4b:47:97:70:38:ce:70:43:f1:d2:09:f3:5a:e0:3e: 31:62:9c:1c:e2:d0:e7:f4:88:04:3f:b9:bc:d1:51:d5:f0:2d: b7:b2:9c:72:49:f1:8a:14:59:30:75:37:b9:cb:fa:de:11:45: f1:01:55:33:00:e1:8b:d1:ec:84:93:56:2e:cd:a9:4f:f0:da: 03:39:c9:ba:7c:3b:3e:ac:11:ca:36:81:16:25:74:9c:cf:dd: 2b:e7:6b:0e:ec:72:1c:0d:e5:02:4e:16:ee:d5:d2:96:30:a2: da:51:34:9a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWiPiYRHbP9KL68RE3qcp5JzSJg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjYwN1oX DTI3MDUwMTIxMzEwN1owMzExMC8GA1UEAxMoQzRBNTdGOUE2RkQzNTg3RjJDRUFB MjIzNkZFODVDOUQwQTM3MkVBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCzosGp/WSuloVH/2rFh7Tb3zw0ndSBGrnFWxPZV3uQpytFhZlXWSksoF8K 65q6QH4usQPF4JPO45cHqwDydx8llJ5NHAN0RfSPvp/4ohx66uiZBN2ZEc51fjWB zt4NuQX1FJnXJnCp2TmBTLGCyi6RNgkDVYFsv5KKCtSl6Yjgz7kqwamL1HynnTkF TNlJY2HJThNTNPTtNhlO04ti8EcApg/JUkhr46mJ6rwDcOFzG+ACAf0ZqON/jsWo We4+h4VVKruHylSToBgaBfgIjVHvDixsT27RcUIfE6eeSyrjbbGNsQUqDYETZmE3 ERANwYaLeZ13sFjFXg88+GHqklsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTEpX+a b9NYfyzqoiNv6FydCjcuoDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDUzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQB0ldwMA8EAgACMAkDBwAgAQ3zj0AwDQYJKoZIhvcNAQELBQADggEBAF9z lJJCWKptYrSLGZ4MfIv3V4owaVQxGBlz8D/2co2g3AE01eyH8t5GoqLfxHQWAwbg NepKyiTbPM93g3upVmovuGpXQtejep+SofyL5c1JZl29NkssPVHOd6wTSzT6oa4u kgvRpdDY1AGWzY9UG99qEJYbNGnOGLzTmSMP3Ib42J369lhQlFe9Leaw2eVIoucJ nEtHl3A4znBD8dIJ81rgPjFinBzi0Of0iAQ/ubzRUdXwLbeynHJJ8YoUWTB1N7nL +t4RRfEBVTMA4YvR7ISTVi7NqU/w2gM5ybp8Oz6sEco2gRYldJzP3Svnaw7schwN 5QJOFu7V0pYwotpRNJo= -----END CERTIFICATE-----Generated at Sun May 3 01:41:19 2026 by rpki-client