$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152363.roa File: AS152363.roa (raw, json) Hash identifier: 7WK63+hds8DHJk6SWjaAkbFpxc6nycx41bLdR++iiNA= Subject key identifier: 6C:28:AC:C8:82:BD:3B:17:6B:7B:74:42:28:35:C1:C9:03:A4:B8:4A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7552B96A506E0AFACC52DB5934194FB0F5DF4370 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152363.roa Signing time: Sat 02 May 2026 09:25:54 +0000 ROA not before: Sat 02 May 2026 09:20:54 +0000 ROA not after: Sat 01 May 2027 09:25:54 +0000 asID: 152363 IP address blocks: 2001:df4:1140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:52:b9:6a:50:6e:0a:fa:cc:52:db:59:34:19:4f:b0:f5:df:43:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:54 2026 GMT Not After : May 1 09:25:54 2027 GMT Subject: CN=6C28ACC882BD3B176B7B74422835C1C903A4B84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:57:92:2a:9b:e5:89:a7:ef:c2:f7:b3:3c: a9:7a:6b:5c:ca:2d:31:dc:fd:f5:69:94:90:83:db: 0b:36:63:88:59:8a:88:62:4a:e6:b5:ab:0d:17:30: aa:96:3c:aa:a1:61:39:06:9a:a3:de:39:eb:f4:b7: d9:7c:89:25:b7:33:71:76:fb:ef:44:b8:62:27:bb: 08:43:05:b5:f2:7c:6e:0e:03:d3:95:7c:e1:a6:cd: ab:d1:b7:a6:6c:79:92:1f:2a:b1:41:f5:35:36:45: 07:0e:d9:2f:62:61:c2:29:25:5f:98:c2:65:65:1b: 3a:90:82:db:44:ff:af:9a:f6:09:1f:74:f4:f6:29: 1b:b1:ab:22:ef:de:76:a6:94:e6:55:33:a3:e8:9b: 42:17:2d:02:ff:67:c2:17:88:21:36:97:52:0f:66: aa:9c:ee:ca:e1:49:27:d3:e2:23:67:fe:1d:5e:6f: aa:59:56:1f:aa:fc:a8:c8:de:6e:fa:91:35:f4:ef: c8:a9:49:31:f8:9e:2e:63:33:ff:62:b3:06:c4:a6: bb:6a:dc:74:e9:a4:8b:0d:24:27:51:b6:8f:5f:16: 95:04:a8:c0:8d:e4:cf:0e:0a:92:64:66:84:fb:0b: 00:f4:44:16:0f:7c:06:e8:95:2d:5b:4c:4d:29:00: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:AC:C8:82:BD:3B:17:6B:7B:74:42:28:35:C1:C9:03:A4:B8:4A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:1140::/48 Signature Algorithm: sha256WithRSAEncryption 63:ea:0b:75:de:38:84:4b:32:59:46:75:59:99:55:f1:a0:c6: 0f:70:f2:ff:f1:e6:94:32:95:79:af:18:2c:2c:27:18:94:74: a3:e2:fb:80:59:ca:3b:b8:45:2d:8b:38:28:72:97:d4:4f:55: 33:c8:7f:fd:86:a8:04:c0:d5:15:5e:8a:18:4e:b3:c0:fd:1d: 4f:5b:15:89:df:c3:08:e8:ab:75:b2:e2:da:a2:5f:91:42:1e: 43:2a:7a:95:e6:02:01:ff:f7:d7:23:04:57:0b:07:11:2c:ff: 99:90:80:68:be:da:4a:9d:b8:24:30:4e:b4:96:ea:ea:d9:e4: a6:82:3d:c9:50:9c:20:18:a8:70:9b:42:c3:86:1e:5d:3b:5a: 15:85:03:8a:81:5e:b5:18:59:ff:ed:56:75:e5:de:5a:82:9e: 5c:30:ea:c6:80:0c:9d:f3:c0:09:91:9d:2a:fa:36:cc:78:b3: cd:8e:0e:cc:46:aa:d1:52:7a:80:88:f7:dc:0e:3a:97:49:6d: 48:7d:82:12:c3:2f:2e:1d:5d:01:06:d4:ca:2a:a0:26:e6:39: 55:05:97:a6:41:d8:d5:f3:ec:11:78:6e:cf:ed:4e:85:aa:06: 6d:55:b6:5d:72:dc:6c:04:ad:a1:1e:8a:fe:d5:4f:bd:b4:21: 68:2c:8e:77 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdVK5alBuCvrMUttZNBlPsPXfQ3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA1NFoX DTI3MDUwMTA5MjU1NFowMzExMC8GA1UEAxMoNkMyOEFDQzg4MkJEM0IxNzZCN0I3 NDQyMjgzNUMxQzkwM0E0Qjg0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxfV5Iqm+WJp+/C97M8qXprXMotMdz99WmUkIPbCzZjiFmKiGJK5rWrDRcw qpY8qqFhOQaao9456/S32XyJJbczcXb770S4Yie7CEMFtfJ8bg4D05V84abNq9G3 pmx5kh8qsUH1NTZFBw7ZL2JhwiklX5jCZWUbOpCC20T/r5r2CR909PYpG7GrIu/e dqaU5lUzo+ibQhctAv9nwheIITaXUg9mqpzuyuFJJ9PiI2f+HV5vqllWH6r8qMje bvqRNfTvyKlJMfieLmMz/2KzBsSmu2rcdOmkiw0kJ1G2j18WlQSowI3kzw4KkmRm hPsLAPREFg98BuiVLVtMTSkARqUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRsKKzI gr07F2t7dEIoNcHJA6S4SjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9BFAMA0GCSqGSIb3DQEBCwUAA4IBAQBj6gt13jiESzJZRnVZmVXx oMYPcPL/8eaUMpV5rxgsLCcYlHSj4vuAWco7uEUtizgocpfUT1UzyH/9hqgEwNUV XooYTrPA/R1PWxWJ38MI6Kt1suLaol+RQh5DKnqV5gIB//fXIwRXCwcRLP+ZkIBo vtpKnbgkME60lurq2eSmgj3JUJwgGKhwm0LDhh5dO1oVhQOKgV61GFn/7VZ15d5a gp5cMOrGgAyd88AJkZ0q+jbMeLPNjg7MRqrRUnqAiPfcDjqXSW1IfYISwy8uHV0B BtTKKqAm5jlVBZemQdjV8+wReG7P7U6FqgZtVbZdctxsBK2hHor+1U+9tCFoLI53 -----END CERTIFICATE-----Generated at Sun May 3 01:40:02 2026 by rpki-client