$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152377.roa File: AS152377.roa (raw, json) Hash identifier: dZpGpY2N/U0gYZdsgLRJNbHF7Zb7rNeSDcauQqg63vo= Subject key identifier: C2:C4:2B:F8:E0:44:16:23:D2:17:6C:3B:D2:DE:4B:5B:67:A0:B9:96 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 25F8BFFF075ECD295EF69E2FA3DC028EB92B4C06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152377.roa Signing time: Sat 02 May 2026 21:33:01 +0000 ROA not before: Sat 02 May 2026 21:28:01 +0000 ROA not after: Sat 01 May 2027 21:33:01 +0000 asID: 152377 IP address blocks: 103.166.10.0/24 maxlen: 24 2402:1aa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f8:bf:ff:07:5e:cd:29:5e:f6:9e:2f:a3:dc:02:8e:b9:2b:4c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:28:01 2026 GMT Not After : May 1 21:33:01 2027 GMT Subject: CN=C2C42BF8E0441623D2176C3BD2DE4B5B67A0B996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:98:aa:bb:60:5b:a6:36:1e:3a:e7:90:87: 51:81:22:8b:18:b1:3d:42:72:9e:6a:c0:99:5a:3a: 15:c0:11:2d:4c:5b:d8:b8:93:6f:23:85:a7:72:d1: 01:46:fa:62:53:95:e3:10:03:65:5e:b5:12:56:51: 00:7b:d5:fa:5c:cb:02:e4:b3:6f:bd:b9:22:0d:dc: 60:82:0e:39:46:7a:34:ee:65:6d:73:d8:d5:3b:d6: 25:c8:0b:65:03:ab:dc:63:8d:b0:d9:1d:18:64:c5: 80:e7:0e:e3:4c:7c:ca:ad:f2:9f:ce:97:16:73:56: 2b:9c:e4:24:fc:07:29:8a:92:ee:3a:54:f0:a8:bd: b4:91:b8:ed:41:ba:2f:34:82:bc:73:52:76:6c:3a: 0c:57:63:a6:bc:04:5e:99:10:49:e4:4a:fc:93:57: 46:6b:55:dc:b9:43:67:af:3e:ea:4e:89:7b:cf:f1: a6:dc:fb:81:dc:6d:04:81:f2:51:cc:c2:63:1a:f2: f1:fa:dd:a7:f1:0f:77:52:9b:00:8a:17:fd:15:47: 88:6f:16:e2:7c:65:ef:8e:d9:0e:1c:3b:47:5c:8f: e1:8c:c3:13:35:73:90:80:83:47:a3:32:26:0b:c2: e8:06:1f:91:05:b7:cc:fb:fe:36:9d:70:22:71:3b: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:2B:F8:E0:44:16:23:D2:17:6C:3B:D2:DE:4B:5B:67:A0:B9:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.10.0/24 IPv6: 2402:1aa0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:81:06:0c:90:19:1d:4f:2f:9b:a5:e3:8b:2a:56:06:90:9b: cb:f1:45:61:23:d3:6d:46:7e:ff:92:74:ce:d0:2c:f5:44:0a: bc:74:37:57:e0:49:82:e5:ff:c6:71:34:db:e4:4b:85:f3:33: 5e:92:99:de:f3:36:0d:58:71:75:df:a7:9d:e2:47:a0:c7:77: e2:7e:d3:9c:32:9a:3f:34:af:0f:5e:a2:2e:80:4a:52:64:f7: 5e:0f:84:49:df:8f:03:d8:5b:49:9e:a1:52:4a:30:6a:07:91: 92:9b:63:00:f9:53:f0:b1:8b:b4:6f:1b:cd:9b:9a:1c:36:ca: 3e:85:9f:7f:df:59:c0:a8:07:49:fa:e6:b2:69:a7:25:47:a0: 96:3d:e1:98:0b:e9:8f:62:b7:df:6f:0b:9b:1b:b9:b6:3a:f5: 14:9f:8f:9d:57:a8:cb:25:94:a4:dc:fe:0a:2a:37:b8:4c:47: e8:d6:2c:79:09:cc:a9:94:0e:18:b0:23:29:ec:ae:94:6f:dd: 5e:13:ff:5e:74:a6:b3:80:57:04:09:d7:69:fc:db:3a:13:72: 39:30:d1:35:95:f3:3b:7e:55:b7:07:73:b4:67:fc:ee:35:4e: 3c:fd:3e:e9:85:1c:47:a1:05:38:98:25:97:07:26:d6:74:d8: dd:23:f4:a0 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUJfi//wdezSle9p4vo9wCjrkrTAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjgwMVoX DTI3MDUwMTIxMzMwMVowMzExMC8GA1UEAxMoQzJDNDJCRjhFMDQ0MTYyM0QyMTc2 QzNCRDJERTRCNUI2N0EwQjk5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIYPmKq7YFumNh4655CHUYEiixixPUJynmrAmVo6FcARLUxb2LiTbyOFp3LR AUb6YlOV4xADZV61ElZRAHvV+lzLAuSzb725Ig3cYIIOOUZ6NO5lbXPY1TvWJcgL ZQOr3GONsNkdGGTFgOcO40x8yq3yn86XFnNWK5zkJPwHKYqS7jpU8Ki9tJG47UG6 LzSCvHNSdmw6DFdjprwEXpkQSeRK/JNXRmtV3LlDZ68+6k6Je8/xptz7gdxtBIHy UczCYxry8frdp/EPd1KbAIoX/RVHiG8W4nxl747ZDhw7R1yP4YzDEzVzkICDR6My JgvC6AYfkQW3zPv+Np1wInE7p5MCAwEAAaOCAdswggHXMB0GA1UdDgQWBBTCxCv4 4EQWI9IXbDvS3ktbZ6C5ljAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQAZ6YKMA0EAgACMAcDBQAkAhqgMA0GCSqGSIb3DQEBCwUAA4IBAQANgQYM kBkdTy+bpeOLKlYGkJvL8UVhI9NtRn7/knTO0Cz1RAq8dDdX4EmC5f/GcTTb5EuF 8zNekpne8zYNWHF136ed4kegx3fiftOcMpo/NK8PXqIugEpSZPdeD4RJ348D2FtJ nqFSSjBqB5GSm2MA+VPwsYu0bxvNm5ocNso+hZ9/31nAqAdJ+uayaaclR6CWPeGY C+mPYrffbwubG7m2OvUUn4+dV6jLJZSk3P4KKje4TEfo1ix5CcyplA4YsCMp7K6U b91eE/9edKazgFcECddp/Ns6E3I5MNE1lfM7flW3B3O0Z/zuNU48/T7phRxHoQU4 mCWXBybWdNjdI/Sg -----END CERTIFICATE-----Generated at Sun May 3 00:39:34 2026 by rpki-client