$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152382.roa File: AS152382.roa (raw, json) Hash identifier: UQ/ePuJIjKgHJIcysc+Ar77r/ITrYH/W6dswrwOiy5g= Subject key identifier: D7:6D:B5:7D:7E:03:49:6D:19:15:17:05:BF:D0:E0:C0:F3:6C:62:BA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D826E3CB0026FFCF43695D1F40031A7AC70E990 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152382.roa Signing time: Tue 06 Oct 2026 04:45:08 +0000 ROA not before: Tue 06 Oct 2026 04:40:08 +0000 ROA not after: Tue 05 Oct 2027 04:45:08 +0000 asID: 152382 IP address blocks: 203.20.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:82:6e:3c:b0:02:6f:fc:f4:36:95:d1:f4:00:31:a7:ac:70:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 6 04:40:08 2026 GMT Not After : Oct 5 04:45:08 2027 GMT Subject: CN=D76DB57D7E03496D19151705BFD0E0C0F36C62BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3e:6b:3b:72:03:a8:d0:11:37:b4:fd:2f:9b: 8c:17:d7:94:ef:84:a5:33:4b:7f:1d:29:c4:32:f1: 1e:e3:ad:b5:83:b3:42:c6:b7:b3:05:10:d7:93:87: be:9a:34:80:48:59:00:7d:e6:37:0b:e2:ad:63:ea: a3:5b:dc:05:5a:b2:7d:e3:07:08:d5:44:4f:b6:bb: e9:0c:fe:a4:a8:bd:34:7a:8f:35:62:cf:b1:a3:a7: 03:a9:7d:f4:55:6b:1a:aa:0e:79:ec:71:24:f4:ea: ed:ae:aa:42:48:60:27:18:61:cd:2e:fd:ad:51:2b: 6e:7d:e1:ed:23:2b:97:10:b4:ad:b9:eb:39:22:b9: 46:4d:d6:58:90:f4:26:71:99:56:22:0a:42:37:3e: a3:84:21:86:45:4a:77:99:fe:76:74:e2:c7:f9:76: c8:53:c4:56:72:b8:40:28:c2:77:dc:0a:ae:f8:36: a3:e7:a5:a4:bd:af:5d:d4:ab:f4:fe:87:21:3f:1a: 8f:7f:e7:a9:e1:bc:94:f7:48:e8:ee:55:c7:b8:8e: 51:45:3c:d5:bd:38:92:e6:a6:bf:40:64:96:65:cd: 14:82:af:85:33:a9:be:c0:5e:c1:53:40:8e:71:11: a9:27:14:f9:ae:c3:6f:37:05:66:d2:43:e7:25:d8: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6D:B5:7D:7E:03:49:6D:19:15:17:05:BF:D0:E0:C0:F3:6C:62:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.20.71.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:94:45:3d:f9:7b:48:b3:50:6c:5b:0b:eb:74:3f:a7:8b:65: e3:8f:74:48:43:96:66:c6:65:d2:c0:c2:eb:54:9b:5d:52:c8: 3f:81:0b:45:da:48:02:87:ae:a3:bd:46:b3:d2:f1:8b:29:0e: ec:bd:36:d4:0e:d0:7c:3b:ea:75:54:99:61:2f:1f:fd:d8:01: cb:27:c5:d8:19:63:7c:f7:84:3c:c2:2c:0f:b9:14:b2:97:89: b9:70:96:2f:d8:1d:ad:86:3b:74:9f:4a:23:1e:ac:e8:6b:ff: 68:ce:aa:c4:18:ad:f5:b8:ee:8a:81:79:16:e8:12:51:22:b7: 43:06:60:71:98:b5:fc:2c:8f:dc:4d:31:31:e9:90:59:b2:ce: ee:39:46:34:30:b6:84:c4:54:12:bb:c1:66:e6:ed:f6:d0:ff: e9:73:c3:eb:4b:43:90:29:51:f5:f1:5f:5d:f2:79:34:b7:6b: b3:f8:69:c5:15:fb:d6:f5:53:e3:e3:b3:76:1b:e4:84:a2:b5: b6:32:28:1b:3a:40:19:33:63:87:3c:82:eb:a0:57:bd:5d:6e: ab:cc:89:cb:b9:37:0d:24:16:2e:b0:bb:63:88:98:60:2c:40: 65:41:4b:da:78:b8:13:57:53:25:22:4e:fc:6b:6b:8a:c2:63: 99:b2:4c:d4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULYJuPLACb/z0NpXR9AAxp6xw6ZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNjA0NDAwOFoX DTI3MTAwNTA0NDUwOFowMzExMC8GA1UEAxMoRDc2REI1N0Q3RTAzNDk2RDE5MTUx NzA1QkZEMEUwQzBGMzZDNjJCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANs+aztyA6jQETe0/S+bjBfXlO+EpTNLfx0pxDLxHuOttYOzQsa3swUQ15OH vpo0gEhZAH3mNwvirWPqo1vcBVqyfeMHCNVET7a76Qz+pKi9NHqPNWLPsaOnA6l9 9FVrGqoOeexxJPTq7a6qQkhgJxhhzS79rVErbn3h7SMrlxC0rbnrOSK5Rk3WWJD0 JnGZViIKQjc+o4QhhkVKd5n+dnTix/l2yFPEVnK4QCjCd9wKrvg2o+elpL2vXdSr 9P6HIT8aj3/nqeG8lPdI6O5Vx7iOUUU81b04kuamv0BklmXNFIKvhTOpvsBewVNA jnERqScU+a7DbzcFZtJD5yXYKEsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTXbbV9 fgNJbRkVFwW/0ODA82xiujAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMzgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyxRHMA0GCSqGSIb3DQEBCwUAA4IBAQAflEU9+XtIs1BsWwvrdD+ni2Xj j3RIQ5ZmxmXSwMLrVJtdUsg/gQtF2kgCh66jvUaz0vGLKQ7svTbUDtB8O+p1VJlh Lx/92AHLJ8XYGWN894Q8wiwPuRSyl4m5cJYv2B2thjt0n0ojHqzoa/9ozqrEGK31 uO6KgXkW6BJRIrdDBmBxmLX8LI/cTTEx6ZBZss7uOUY0MLaExFQSu8Fm5u320P/p c8PrS0OQKVH18V9d8nk0t2uz+GnFFfvW9VPj47N2G+SEorW2MigbOkAZM2OHPILr oFe9XW6rzInLuTcNJBYusLtjiJhgLEBlQUvaeLgTV1MlIk78a2uKwmOZskzU -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:52 2026 by rpki-client