$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152368.roa File: AS152368.roa (raw, json) Hash identifier: jqVFxU6/mLN4Oc+oHv2lO565ddD2bgzhw12wcNZRp3o= Subject key identifier: B2:FE:67:B1:9B:3A:14:DE:50:6E:B9:D3:34:D4:50:80:13:4F:3F:82 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 565A7E88A39B3472F1C216D2FDC7EA6FAE836A18 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152368.roa Signing time: Sat 02 May 2026 09:25:29 +0000 ROA not before: Sat 02 May 2026 09:20:29 +0000 ROA not after: Sat 01 May 2027 09:25:29 +0000 asID: 152368 IP address blocks: 163.61.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5a:7e:88:a3:9b:34:72:f1:c2:16:d2:fd:c7:ea:6f:ae:83:6a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:29 2026 GMT Not After : May 1 09:25:29 2027 GMT Subject: CN=B2FE67B19B3A14DE506EB9D334D45080134F3F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e7:ee:c9:c8:8a:54:18:8e:fa:73:9d:de:59: e8:b9:f1:39:c1:91:9a:bd:43:28:e7:d3:6f:6a:0b: e0:32:79:ef:d3:ea:71:0d:e4:9f:f3:79:51:ee:31: d3:96:e9:df:e1:23:0b:76:b3:f7:55:74:0d:fc:4d: 69:68:ed:b3:9f:98:e3:29:a6:a8:26:4c:1b:5f:13: 96:5c:c0:c7:43:fc:b1:e3:fd:9d:9e:80:57:be:79: d7:07:81:c7:77:72:f2:3e:32:83:64:58:8e:4d:4a: a7:0d:91:d0:70:38:47:e1:21:c3:d6:bc:1b:b1:e4: a3:fd:46:48:00:4f:ab:f6:60:71:10:c1:2b:17:ac: 97:ce:50:90:bd:fc:01:8f:67:54:8b:7a:39:5c:c8: 4c:e8:55:22:6e:f1:56:57:27:58:da:02:9e:b6:20: 70:b1:ee:ca:1f:f4:43:db:ca:e3:0f:06:bd:66:31: 89:fe:3f:45:62:5c:e9:bf:7a:55:5a:29:0d:0e:65: ca:f2:42:dd:2e:8f:04:fc:26:cd:20:9e:3c:9e:c7: 56:9a:07:93:7d:a7:99:0b:be:e9:ca:20:e9:06:8f: 95:1f:e9:63:af:4a:f7:bb:f8:16:29:66:3c:bb:ec: 9d:15:2e:e1:94:8a:ce:9a:60:25:a3:3d:56:d4:ab: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FE:67:B1:9B:3A:14:DE:50:6E:B9:D3:34:D4:50:80:13:4F:3F:82 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.159.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e9:35:10:56:e5:70:28:6d:83:0c:df:96:e0:ee:08:8f:3a: 21:dd:93:9d:2f:64:8c:6d:70:e1:be:0d:14:fc:40:e0:63:8e: f4:c5:ab:0d:ee:d4:29:d2:e0:cb:c1:29:f9:db:18:a2:e2:3f: 15:8c:12:6b:f0:b4:a9:ba:8b:3c:bc:cd:12:d2:11:07:26:8f: 8e:8e:bb:f9:89:50:ba:e3:e5:77:d3:81:d6:0e:cf:5a:9f:df: ac:39:d8:1b:8f:f5:ae:20:c5:59:cf:71:ff:b2:84:23:b2:09: 7a:00:20:94:6c:6d:b3:6c:1d:d5:f2:c0:da:0a:0f:10:70:38: 0c:b2:68:1b:f8:03:a0:91:64:a5:02:72:a4:c1:e2:77:54:fa: 46:25:df:ff:15:e8:32:96:cd:cd:38:4d:af:a2:16:85:29:93: 8d:6c:af:92:78:f1:a8:1a:43:df:0f:f3:c4:a1:4e:69:c5:5b: 00:be:96:ee:5c:a4:a1:31:e2:b4:dd:22:07:02:f1:c5:e3:ff: 0f:38:ec:0e:91:bf:e6:b8:38:98:09:f5:c9:c5:82:27:95:57: f9:62:3c:cd:2e:94:74:74:19:a6:15:76:ca:fc:81:fa:56:93: c3:fb:30:51:f1:4c:29:1e:e2:3d:93:7a:ce:67:f7:f9:2c:44: 69:9b:e7:cf -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVlp+iKObNHLxwhbS/cfqb66DahgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjAyOVoX DTI3MDUwMTA5MjUyOVowMzExMC8GA1UEAxMoQjJGRTY3QjE5QjNBMTRERTUwNkVC OUQzMzRENDUwODAxMzRGM0Y4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPLn7snIilQYjvpznd5Z6LnxOcGRmr1DKOfTb2oL4DJ579PqcQ3kn/N5Ue4x 05bp3+EjC3az91V0DfxNaWjts5+Y4ymmqCZMG18TllzAx0P8seP9nZ6AV7551weB x3dy8j4yg2RYjk1Kpw2R0HA4R+Ehw9a8G7Hko/1GSABPq/ZgcRDBKxesl85QkL38 AY9nVIt6OVzITOhVIm7xVlcnWNoCnrYgcLHuyh/0Q9vK4w8GvWYxif4/RWJc6b96 VVopDQ5lyvJC3S6PBPwmzSCePJ7HVpoHk32nmQu+6cog6QaPlR/pY69K97v4Film PLvsnRUu4ZSKzppgJaM9VtSrOzUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSy/mex mzoU3lBuudM01FCAE08/gjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoz2fMA0GCSqGSIb3DQEBCwUAA4IBAQBL6TUQVuVwKG2DDN+W4O4Ijzoh 3ZOdL2SMbXDhvg0U/EDgY470xasN7tQp0uDLwSn52xii4j8VjBJr8LSpuos8vM0S 0hEHJo+Ojrv5iVC64+V304HWDs9an9+sOdgbj/WuIMVZz3H/soQjsgl6ACCUbG2z bB3V8sDaCg8QcDgMsmgb+AOgkWSlAnKkweJ3VPpGJd//Fegyls3NOE2vohaFKZON bK+SePGoGkPfD/PEoU5pxVsAvpbuXKShMeK03SIHAvHF4/8POOwOkb/muDiYCfXJ xYInlVf5YjzNLpR0dBmmFXbK/IH6VpPD+zBR8UwpHuI9k3rOZ/f5LERpm+fP -----END CERTIFICATE-----Generated at Sun May 3 00:39:54 2026 by rpki-client