$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152352.roa File: AS152352.roa (raw, json) Hash identifier: jcQZduzbbjbx2Rk620Fy+uRGahSqfUNi/ToadTb/2N8= Subject key identifier: EE:2E:EC:8E:DB:00:BC:2D:8E:9E:C1:9B:A4:DE:70:DD:66:C4:99:A8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3AC03B6316777285A998E0B0FA92594C11D94813 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152352.roa Signing time: Sat 02 May 2026 09:20:59 +0000 ROA not before: Sat 02 May 2026 09:15:59 +0000 ROA not after: Sat 01 May 2027 09:20:59 +0000 asID: 152352 IP address blocks: 103.184.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c0:3b:63:16:77:72:85:a9:98:e0:b0:fa:92:59:4c:11:d9:48:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:59 2026 GMT Not After : May 1 09:20:59 2027 GMT Subject: CN=EE2EEC8EDB00BC2D8E9EC19BA4DE70DD66C499A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:27:55:39:15:f1:0d:c9:0a:57:5b:99:6b: cb:2a:7e:f4:48:b9:0d:21:66:fe:bd:b6:1e:6f:d8: 89:25:15:c7:e9:fd:92:95:62:eb:47:68:4f:48:9a: 9a:16:11:b3:c4:55:45:f3:2f:d2:90:c7:ef:4a:b2: bf:1c:e9:31:e9:61:e8:1f:c2:2f:39:b9:89:ee:1d: 53:65:d4:ee:54:2e:26:8c:c5:2d:69:09:96:a4:d8: 86:69:ad:70:a0:c7:ae:03:9c:81:a4:4a:2f:0d:0b: 09:f1:ae:c0:9f:71:34:4f:93:9b:07:1c:0c:13:c4: 34:93:72:7a:88:62:a7:28:7a:df:b4:1b:7f:d8:8b: f6:61:b2:c4:37:fc:36:eb:76:b7:44:68:fd:5e:45: 80:b8:36:f0:fe:cf:ff:74:f0:46:e8:b4:a5:bc:7f: 1f:a9:cf:16:1a:2d:8f:e6:c9:fe:e7:eb:66:a2:61: dd:41:96:cc:56:33:82:aa:da:34:fa:45:bb:03:28: ac:cb:d8:8c:60:41:cb:27:e5:52:55:20:9a:75:4f: 24:da:92:14:21:54:bd:1f:39:35:2f:d8:89:fd:2b: 0e:bd:48:a2:8a:c2:39:6e:ba:68:76:22:86:6a:ae: a8:20:c5:dd:1f:7e:e5:12:fd:e2:a4:16:e0:eb:5d: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:EC:8E:DB:00:BC:2D:8E:9E:C1:9B:A4:DE:70:DD:66:C4:99:A8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.57.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:8c:61:54:60:59:2f:e6:ce:62:a7:97:e9:c4:0a:83:60:39: 42:c4:3c:63:55:34:8e:29:ce:25:43:3e:db:83:24:a3:5a:6b: f6:db:a4:a1:f2:6c:40:b4:cb:bc:d4:1f:f2:c2:78:9e:35:de: b4:1a:ac:76:a4:0e:86:bb:d5:28:d3:a1:17:8f:fa:af:1c:e4: 67:93:7f:7b:ac:83:f8:a2:6e:9c:98:63:54:9b:31:ce:ff:0e: c1:d5:f8:c5:4f:af:46:99:37:42:5e:3d:56:1e:77:99:a0:90: 0a:84:67:fb:ba:29:76:eb:b7:31:3e:c0:2a:1b:49:d2:39:f7: 79:c9:23:b8:1d:85:fc:31:a7:cf:e5:b3:18:31:2f:87:2e:e6: f6:96:9e:2c:85:80:62:18:82:4c:1a:c8:7a:85:b3:f3:2c:22: 25:20:dc:f3:06:77:cf:6f:4d:65:2e:91:81:27:81:ef:e5:c1: 19:27:89:6e:50:20:66:ea:6b:65:44:f5:4b:e5:64:01:2b:20: db:10:d2:87:a0:cb:7f:e0:9d:f4:7b:91:f5:24:6b:74:db:c9: 14:c7:67:25:77:06:3d:5c:f5:65:c4:39:ba:a6:d0:62:42:29: 24:4a:8f:c6:d4:51:15:72:5e:4c:50:e4:a9:7e:fe:81:c0:c5: 18:e5:e0:5b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOsA7YxZ3coWpmOCw+pJZTBHZSBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1OVoX DTI3MDUwMTA5MjA1OVowMzExMC8GA1UEAxMoRUUyRUVDOEVEQjAwQkMyRDhFOUVD MTlCQTRERTcwREQ2NkM0OTlBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf5J1U5FfENyQpXW5lryyp+9Ei5DSFm/r22Hm/YiSUVx+n9kpVi60doT0ia mhYRs8RVRfMv0pDH70qyvxzpMelh6B/CLzm5ie4dU2XU7lQuJozFLWkJlqTYhmmt cKDHrgOcgaRKLw0LCfGuwJ9xNE+TmwccDBPENJNyeohipyh637Qbf9iL9mGyxDf8 Nut2t0Ro/V5FgLg28P7P/3TwRui0pbx/H6nPFhotj+bJ/ufrZqJh3UGWzFYzgqra NPpFuwMorMvYjGBByyflUlUgmnVPJNqSFCFUvR85NS/Yif0rDr1IoorCOW66aHYi hmquqCDF3R9+5RL94qQW4OtdnbcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTuLuyO 2wC8LY6ewZuk3nDdZsSZqDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7g5MA0GCSqGSIb3DQEBCwUAA4IBAQA/jGFUYFkv5s5ip5fpxAqDYDlC xDxjVTSOKc4lQz7bgySjWmv226Sh8mxAtMu81B/ywnieNd60Gqx2pA6Gu9Uo06EX j/qvHORnk397rIP4om6cmGNUmzHO/w7B1fjFT69GmTdCXj1WHneZoJAKhGf7uil2 67cxPsAqG0nSOfd5ySO4HYX8MafP5bMYMS+HLub2lp4shYBiGIJMGsh6hbPzLCIl INzzBnfPb01lLpGBJ4Hv5cEZJ4luUCBm6mtlRPVL5WQBKyDbENKHoMt/4J30e5H1 JGt028kUx2cldwY9XPVlxDm6ptBiQikkSo/G1FEVcl5MUOSpfv6BwMUY5eBb -----END CERTIFICATE-----Generated at Sun May 3 01:40:56 2026 by rpki-client