$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152061.roa File: AS152061.roa (raw, json) Hash identifier: +bx3xWGHXVpAKx8OFBSUkNMFOONKqmvFoVajuHg6zK0= Subject key identifier: 5C:05:8F:86:30:8A:CE:7C:6B:28:D9:E2:FC:91:79:48:DC:75:60:4E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1809FC649A283D738DA8D6C0EB2215E45CE63335 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152061.roa Signing time: Sat 02 May 2026 08:34:53 +0000 ROA not before: Sat 02 May 2026 08:29:53 +0000 ROA not after: Sat 01 May 2027 08:34:53 +0000 asID: 152061 IP address blocks: 113.192.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:09:fc:64:9a:28:3d:73:8d:a8:d6:c0:eb:22:15:e4:5c:e6:33:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:53 2026 GMT Not After : May 1 08:34:53 2027 GMT Subject: CN=5C058F86308ACE7C6B28D9E2FC917948DC75604E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:e7:18:46:c8:fd:38:b8:4a:16:51:de:10: 5d:57:cf:67:14:b0:10:01:c1:2f:6f:d6:5c:3e:c0: 78:40:d1:80:f2:1c:c4:c4:a8:33:3c:1f:ca:26:f1: ae:c0:06:dc:95:22:92:30:74:46:0d:c2:3b:61:ef: a2:02:79:36:38:e7:c0:f3:1f:f6:be:15:f3:50:4e: 90:8b:a0:8d:e4:49:6c:e4:90:7b:05:8c:fd:c9:05: 12:da:d1:6c:f1:8b:71:d5:44:0b:40:0d:c1:3d:95: 23:5d:b9:d2:cd:75:51:a2:28:65:d9:cb:95:63:a3: 76:37:56:7c:b3:a4:a6:89:74:1e:23:00:dc:f0:2e: 8b:cf:09:b2:fb:7e:7f:82:d9:42:10:1f:77:da:67: 35:15:5d:4a:43:64:52:bf:ef:8b:f7:0c:dc:5e:c9: 27:e4:58:db:b8:58:03:f7:63:b3:d0:34:f7:ae:f1: 15:90:e7:c0:92:9b:cf:06:b4:13:d7:73:86:ca:09: 50:90:58:6f:51:81:d0:f5:d6:99:db:02:16:77:7d: 11:55:78:70:0c:b0:3a:3c:bf:51:2b:80:c5:d3:63: fc:07:92:ae:39:41:7e:83:f1:cb:0f:ae:0c:6a:fe: 46:23:a4:35:e1:4a:71:58:83:88:f6:0c:f4:e2:a8: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:05:8F:86:30:8A:CE:7C:6B:28:D9:E2:FC:91:79:48:DC:75:60:4E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.192.2.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:94:35:65:77:3c:8b:71:71:3e:1f:c8:8c:4a:12:0e:cd:cd: b6:c6:d1:63:b3:25:76:11:cf:62:ba:9a:fb:33:7d:64:c9:b7: aa:15:1c:b3:0c:0b:a1:7c:c0:65:80:13:82:1d:be:d2:c3:e5: 40:9a:ac:c0:8f:6a:10:d1:79:5d:14:9b:2a:a9:16:16:99:82: d1:37:ef:ac:28:bb:de:4d:f6:69:dc:dd:6e:b7:6b:1c:61:6c: 5d:02:c9:50:15:ec:1c:4f:74:17:41:73:0c:3a:ef:24:34:e4: 18:e1:c3:9b:3a:03:2f:e2:45:e0:e7:b7:05:4b:87:23:24:d8: 6c:13:a8:69:11:c7:3b:8a:7b:ef:32:98:e7:f2:00:1a:a9:3b: a9:0e:8c:7e:08:c2:9a:cb:7a:ad:9d:4f:4a:31:86:2f:63:42: 1f:d6:43:89:b5:60:79:3b:78:f9:93:0f:c6:63:22:ca:fb:80: 47:e5:6d:ec:fb:11:bc:65:fd:fe:cf:9d:f1:0d:91:85:85:61: 3e:d3:fc:cd:01:f7:5f:56:e3:b5:f2:97:39:63:ff:f0:17:69: e7:a9:1e:83:e3:0a:4a:7f:a5:cd:d5:bc:9d:ef:b9:0e:3f:46: 5a:39:e8:16:60:8e:78:06:07:4f:2b:61:55:5d:01:e2:ba:5a: a9:26:2a:2e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGAn8ZJooPXONqNbA6yIV5FzmMzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk1M1oX DTI3MDUwMTA4MzQ1M1owMzExMC8GA1UEAxMoNUMwNThGODYzMDhBQ0U3QzZCMjhE OUUyRkM5MTc5NDhEQzc1NjA0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOh55xhGyP04uEoWUd4QXVfPZxSwEAHBL2/WXD7AeEDRgPIcxMSoMzwfyibx rsAG3JUikjB0Rg3CO2HvogJ5NjjnwPMf9r4V81BOkIugjeRJbOSQewWM/ckFEtrR bPGLcdVEC0ANwT2VI1250s11UaIoZdnLlWOjdjdWfLOkpol0HiMA3PAui88Jsvt+ f4LZQhAfd9pnNRVdSkNkUr/vi/cM3F7JJ+RY27hYA/djs9A0967xFZDnwJKbzwa0 E9dzhsoJUJBYb1GB0PXWmdsCFnd9EVV4cAywOjy/USuAxdNj/AeSrjlBfoPxyw+u DGr+RiOkNeFKcViDiPYM9OKoQ18CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRcBY+G MIrOfGso2eL8kXlI3HVgTjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAccACMA0GCSqGSIb3DQEBCwUAA4IBAQCclDVldzyLcXE+H8iMShIOzc22 xtFjsyV2Ec9iupr7M31kybeqFRyzDAuhfMBlgBOCHb7Sw+VAmqzAj2oQ0XldFJsq qRYWmYLRN++sKLveTfZp3N1ut2scYWxdAslQFewcT3QXQXMMOu8kNOQY4cObOgMv 4kXg57cFS4cjJNhsE6hpEcc7invvMpjn8gAaqTupDox+CMKay3qtnU9KMYYvY0If 1kOJtWB5O3j5kw/GYyLK+4BH5W3s+xG8Zf3+z53xDZGFhWE+0/zNAfdfVuO18pc5 Y//wF2nnqR6D4wpKf6XN1byd77kOP0ZaOegWYI54BgdPK2FVXQHiulqpJiou -----END CERTIFICATE-----Generated at Sun May 3 00:40:18 2026 by rpki-client