$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152066.roa File: AS152066.roa (raw, json) Hash identifier: hWfM1VBKlLyDkYp6lWcmnfhaNfczfj5Na+W3SYGY1Dc= Subject key identifier: C8:C9:9B:31:D0:F0:4D:EE:54:2D:38:4D:05:6A:57:12:1E:84:72:DE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 53E6C5AF52368EB61B4F5792AF8023B162A8D0D1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152066.roa Signing time: Sat 02 May 2026 21:37:18 +0000 ROA not before: Sat 02 May 2026 21:32:18 +0000 ROA not after: Sat 01 May 2027 21:37:18 +0000 asID: 152066 IP address blocks: 36.50.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e6:c5:af:52:36:8e:b6:1b:4f:57:92:af:80:23:b1:62:a8:d0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:32:18 2026 GMT Not After : May 1 21:37:18 2027 GMT Subject: CN=C8C99B31D0F04DEE542D384D056A57121E8472DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:76:45:17:16:fc:99:f6:4b:52:68:ad:89: b8:b0:98:93:4e:c5:a5:d7:9c:5a:35:36:c3:f3:c6: 58:c8:9a:67:a6:e6:a5:81:5d:a2:c5:2c:3b:29:d7: f0:2e:e0:66:ab:49:b0:7a:5d:ec:43:5e:59:15:65: 21:1a:86:af:4a:02:52:2b:6a:44:b4:00:c1:86:d3: 57:cb:51:22:d3:af:54:0a:40:69:74:3c:93:00:e8: ec:9a:d4:7b:af:d8:34:82:7a:3e:e6:4f:5e:75:c3: 2d:20:d3:c8:8b:02:17:3c:f3:0c:90:84:1f:a0:12: df:c8:55:43:03:3d:42:bb:3f:3d:bd:f9:60:67:ff: 55:50:2b:1d:9c:ba:c8:a5:63:52:ca:2c:4b:da:c5: 04:3c:d0:ae:a8:4d:1d:5d:c2:ad:32:d1:a9:54:08: f8:aa:d7:34:ae:1e:b3:ec:10:2d:a1:c0:7e:87:93: 14:d0:75:a8:4d:59:1f:53:fe:12:50:c0:ea:54:b8: 98:3a:9a:e4:e4:a8:0c:31:62:5c:3a:c7:a9:94:a6: 18:0b:ea:41:48:5d:cd:e4:41:14:fa:96:3c:0d:9a: 62:9c:5f:b4:d9:86:d3:ef:15:cf:59:8d:8a:62:e4: 8d:3c:f3:bf:eb:b0:80:de:03:5c:a1:d6:d7:54:ab: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:9B:31:D0:F0:4D:EE:54:2D:38:4D:05:6A:57:12:1E:84:72:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.222.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:fb:4b:68:7d:f6:7e:51:ff:96:bf:81:93:7e:4d:92:79:01: 8b:50:f1:d7:d4:7c:73:34:89:20:f7:33:ca:01:c3:00:f2:19: 3f:b4:cc:fa:df:e8:28:66:33:a7:3d:ee:a9:42:21:56:62:1e: 31:08:33:99:40:af:74:55:7d:90:93:cf:e6:4a:2e:19:ca:f5: 5c:d0:7a:4a:1a:81:de:5e:9d:60:00:46:62:b0:35:e3:3c:23: fa:dd:65:d1:7d:a2:59:2b:77:e7:be:81:4b:f9:4f:aa:0b:92: 34:7e:cc:7b:a6:d8:a1:fe:59:ba:24:04:16:19:ec:9f:6c:6a: 97:c8:46:57:8a:33:2f:71:37:0d:25:1a:79:8d:a8:2a:db:de: fa:86:be:ca:68:af:3c:dd:d8:72:e8:e7:f7:5e:cd:f5:3f:70: 4b:91:e9:03:98:43:1c:00:89:a8:97:e8:9e:88:e9:36:f0:d9: f0:04:e4:32:c2:e1:41:29:9a:88:64:18:a6:b2:36:45:04:86: 82:d7:0b:82:c6:06:81:87:49:a1:23:0d:25:c4:23:00:cd:b6: 24:5e:bd:ee:f4:47:71:93:6a:d6:11:f1:3b:26:53:18:1f:9e: 6f:fa:f8:6d:a5:85:68:ed:c8:b8:50:9f:3d:8e:12:3d:a8:a4: e1:53:2a:9e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUU+bFr1I2jrYbT1eSr4AjsWKo0NEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzIxOFoX DTI3MDUwMTIxMzcxOFowMzExMC8GA1UEAxMoQzhDOTlCMzFEMEYwNERFRTU0MkQz ODREMDU2QTU3MTIxRTg0NzJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBMdkUXFvyZ9ktSaK2JuLCYk07FpdecWjU2w/PGWMiaZ6bmpYFdosUsOynX 8C7gZqtJsHpd7ENeWRVlIRqGr0oCUitqRLQAwYbTV8tRItOvVApAaXQ8kwDo7JrU e6/YNIJ6PuZPXnXDLSDTyIsCFzzzDJCEH6AS38hVQwM9Qrs/Pb35YGf/VVArHZy6 yKVjUsosS9rFBDzQrqhNHV3CrTLRqVQI+KrXNK4es+wQLaHAfoeTFNB1qE1ZH1P+ ElDA6lS4mDqa5OSoDDFiXDrHqZSmGAvqQUhdzeRBFPqWPA2aYpxftNmG0+8Vz1mN imLkjTzzv+uwgN4DXKHW11SrU8kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTIyZsx 0PBN7lQtOE0FalcSHoRy3jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBJDLeMA0GCSqGSIb3DQEBCwUAA4IBAQBt+0toffZ+Uf+Wv4GTfk2SeQGL UPHX1HxzNIkg9zPKAcMA8hk/tMz63+goZjOnPe6pQiFWYh4xCDOZQK90VX2Qk8/m Si4ZyvVc0HpKGoHeXp1gAEZisDXjPCP63WXRfaJZK3fnvoFL+U+qC5I0fsx7ptih /lm6JAQWGeyfbGqXyEZXijMvcTcNJRp5jagq2976hr7KaK883dhy6Of3Xs31P3BL kekDmEMcAImol+ieiOk28NnwBOQywuFBKZqIZBimsjZFBIaC1wuCxgaBh0mhIw0l xCMAzbYkXr3u9Edxk2rWEfE7JlMYH55v+vhtpYVo7ci4UJ89jhI9qKThUyqe -----END CERTIFICATE-----Generated at Sun May 3 00:40:22 2026 by rpki-client