$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152084.roa File: AS152084.roa (raw, json) Hash identifier: qZDFWo/5mY3z94mq6rS4SxOLXBZiwrZypZgWQD6mgco= Subject key identifier: 79:A2:27:E4:B3:0A:5F:AA:E8:05:4F:A8:CC:AA:BE:84:EE:BF:CD:20 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5E46977D1217191EA368121B44E75B68D3595A64 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152084.roa Signing time: Sat 02 May 2026 09:25:47 +0000 ROA not before: Sat 02 May 2026 09:20:47 +0000 ROA not after: Sat 01 May 2027 09:25:47 +0000 asID: 152084 IP address blocks: 2001:df3:79c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:46:97:7d:12:17:19:1e:a3:68:12:1b:44:e7:5b:68:d3:59:5a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:47 2026 GMT Not After : May 1 09:25:47 2027 GMT Subject: CN=79A227E4B30A5FAAE8054FA8CCAABE84EEBFCD20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:f4:c9:85:e6:60:ea:c0:7c:67:16:62:f9: 59:d0:67:c7:4e:00:db:fe:2b:03:b6:9a:1b:bc:0a: 15:fd:95:7e:be:21:71:b0:a1:74:bc:1c:7d:8a:d0: b3:a1:73:83:e4:f5:fe:ec:55:04:8d:8d:c0:2e:85: 58:1d:22:7d:3e:6a:e2:4f:54:42:21:2a:91:a6:b7: 6e:b6:5f:f3:f3:86:93:bf:83:60:e4:82:47:bf:fe: 44:08:e3:2f:50:a5:fe:30:45:e0:f5:f3:48:ea:35: e0:94:d6:d9:81:b8:d9:bc:c2:42:8e:9d:20:d6:18: e7:31:7b:1c:d6:60:cd:6e:70:3c:0c:35:c4:fa:f7: 24:9a:bd:29:a8:51:e6:59:e4:10:d3:b8:d4:3b:c4: 56:b4:91:c9:56:7a:2b:4d:50:69:de:42:7f:57:fb: 41:79:e9:4e:83:2b:eb:1f:72:28:a6:a3:90:98:31: 3a:83:25:dd:bf:68:49:ff:5b:9d:cc:c0:3c:60:4f: 4d:c1:1d:55:41:a3:7c:b9:7b:ae:15:7f:ba:50:2b: 60:37:46:85:25:91:78:78:a2:59:8f:04:cc:8a:79: dd:77:22:49:34:85:30:3f:c0:ac:1a:3e:e8:c8:58: ab:0b:ee:ec:3d:ca:e1:a4:f8:58:ab:f5:99:a1:f6: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:27:E4:B3:0A:5F:AA:E8:05:4F:A8:CC:AA:BE:84:EE:BF:CD:20 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:79c0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1d:6c:e1:63:f9:ca:aa:91:9e:8c:50:76:ee:b0:9b:d0:62: 9a:bf:bd:cb:95:8c:68:86:67:0b:1f:3e:6f:ef:c5:9f:e9:71: fd:c7:ec:1c:d1:3d:9c:94:44:3e:a0:92:bb:96:91:e3:3b:45: 89:31:45:a0:e2:65:6e:8c:24:da:50:92:3a:82:d0:8b:e7:2d: 2c:81:ad:31:0f:6b:24:00:1a:6d:ac:db:11:47:31:fc:9c:78: 7c:d4:8a:88:4a:cf:06:5c:09:2a:7a:69:7a:88:1d:d6:7b:6f: e8:00:45:b9:1e:5f:41:ff:25:53:20:e0:37:cb:18:c4:65:1d: 3c:04:17:ea:47:f2:41:07:bd:2e:6c:c2:8f:8f:3d:53:ac:53: c0:63:00:45:f6:dd:55:6d:74:54:52:ac:83:05:9b:f5:35:9e: aa:88:07:26:3e:6c:46:e5:fd:fa:05:17:0f:96:f7:56:45:1c: 83:ef:5c:42:23:89:8f:5e:41:d7:4f:52:dd:0d:b4:9c:a5:a3: 86:7a:08:4d:42:21:4d:8a:ab:31:9d:e4:76:df:c2:8e:b9:df: 4f:90:4c:18:b3:4e:b6:b8:51:8b:19:59:8a:45:46:e6:12:98: c5:51:83:3e:4b:36:91:92:90:93:6f:93:f9:d1:c6:59:90:ad: 09:43:76:42 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUXkaXfRIXGR6jaBIbROdbaNNZWmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0N1oX DTI3MDUwMTA5MjU0N1owMzExMC8GA1UEAxMoNzlBMjI3RTRCMzBBNUZBQUU4MDU0 RkE4Q0NBQUJFODRFRUJGQ0QyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrc9MmF5mDqwHxnFmL5WdBnx04A2/4rA7aaG7wKFf2Vfr4hcbChdLwcfYrQ s6Fzg+T1/uxVBI2NwC6FWB0ifT5q4k9UQiEqkaa3brZf8/OGk7+DYOSCR7/+RAjj L1Cl/jBF4PXzSOo14JTW2YG42bzCQo6dINYY5zF7HNZgzW5wPAw1xPr3JJq9KahR 5lnkENO41DvEVrSRyVZ6K01Qad5Cf1f7QXnpToMr6x9yKKajkJgxOoMl3b9oSf9b nczAPGBPTcEdVUGjfLl7rhV/ulArYDdGhSWReHiiWY8EzIp53XciSTSFMD/ArBo+ 6MhYqwvu7D3K4aT4WKv1maH2Mv0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR5oifk swpfqugFT6jMqr6E7r/NIDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN83nAMA0GCSqGSIb3DQEBCwUAA4IBAQAbHWzhY/nKqpGejFB27rCb 0GKav73LlYxohmcLHz5v78Wf6XH9x+wc0T2clEQ+oJK7lpHjO0WJMUWg4mVujCTa UJI6gtCL5y0sga0xD2skABptrNsRRzH8nHh81IqISs8GXAkqeml6iB3We2/oAEW5 Hl9B/yVTIOA3yxjEZR08BBfqR/JBB70ubMKPjz1TrFPAYwBF9t1VbXRUUqyDBZv1 NZ6qiAcmPmxG5f36BRcPlvdWRRyD71xCI4mPXkHXT1LdDbScpaOGeghNQiFNiqsx neR238KOud9PkEwYs062uFGLGVmKRUbmEpjFUYM+SzaRkpCTb5P50cZZkK0JQ3ZC -----END CERTIFICATE-----Generated at Sun May 3 00:39:53 2026 by rpki-client