$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152411.roa File: AS152411.roa (raw, json) Hash identifier: SbqFIX5dZbtsaYbIGJ5J0mpnfdNr/5KVguzUn5Ft/SQ= Subject key identifier: A3:E7:5D:BE:C4:3D:37:F9:BA:69:E6:3C:E1:2A:8C:8A:CC:4C:93:52 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3168DF18B9E3C9B9DCA2C1ACB6536CE5A92D1DBD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152411.roa Signing time: Sat 02 May 2026 09:25:44 +0000 ROA not before: Sat 02 May 2026 09:20:44 +0000 ROA not after: Sat 01 May 2027 09:25:44 +0000 asID: 152411 IP address blocks: 2001:df3:a1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:68:df:18:b9:e3:c9:b9:dc:a2:c1:ac:b6:53:6c:e5:a9:2d:1d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:44 2026 GMT Not After : May 1 09:25:44 2027 GMT Subject: CN=A3E75DBEC43D37F9BA69E63CE12A8C8ACC4C9352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:f6:f4:5c:8d:08:61:b3:df:c1:50:c3:30: 0f:17:86:b2:ca:e2:c5:26:04:96:30:9b:3e:37:fc: 66:70:51:b3:b0:95:84:b5:1c:2b:9c:e1:71:bb:42: 0b:f6:79:d5:bc:f4:bb:eb:37:0b:bd:5b:ee:9a:d5: d1:f5:a4:4d:8d:e1:97:2d:43:4e:4d:bd:a2:98:84: 05:66:66:db:0b:9b:6e:2e:32:f9:02:2d:9f:db:0d: b6:4a:e4:48:34:8b:21:24:9c:02:fd:cb:c4:b4:fc: 88:51:9a:80:62:4b:cb:91:97:a8:38:a2:dc:63:d7: f9:e9:8d:06:99:af:79:ce:11:ab:ba:73:b1:c0:fe: c6:f1:5f:1b:a3:cf:fa:60:95:d5:bd:ef:b0:26:14: ab:8c:a7:ec:bc:e1:55:aa:6a:22:5d:01:6f:59:c7: cb:ae:83:29:5f:4d:1e:3f:79:ae:57:49:06:54:5b: ea:11:a8:44:5c:d4:b9:81:ed:3f:d5:be:57:c6:a5: 27:35:09:23:22:bf:a3:71:ba:88:19:c1:d0:49:03: e0:e6:82:a5:0c:49:16:32:4e:e7:ad:48:39:47:89: 5c:9d:3d:dc:62:6a:6b:0b:47:cc:1a:f4:81:a3:12: 24:1d:70:e8:93:7d:26:22:8b:db:fa:a9:be:1d:c7: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E7:5D:BE:C4:3D:37:F9:BA:69:E6:3C:E1:2A:8C:8A:CC:4C:93:52 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152411.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:a1c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:59:82:29:55:ba:59:c2:cd:68:f8:29:15:31:93:df:94:a8: d5:43:f8:bd:94:93:9d:0a:01:b5:6e:3e:69:d3:ec:e2:71:c3: 8c:4a:3a:fc:c8:46:34:ea:13:29:11:a8:2c:d4:bb:3f:dd:b9: 71:62:9b:a2:8b:b7:37:83:7b:85:d1:0d:59:61:e6:3f:1d:27: 3d:5b:21:92:47:16:3c:56:be:d0:da:77:27:2e:f5:c6:c7:56: 2c:86:b3:9d:40:48:e1:aa:57:88:1b:e8:80:06:41:50:9f:f9: ee:06:cf:f0:21:ac:ff:72:2f:62:ab:f8:20:3f:87:bf:b6:ca: e9:95:8e:52:d6:56:f3:08:12:75:f7:28:7d:b7:1c:fd:1a:dd: 15:fa:b2:43:79:84:f4:54:f4:a6:c4:91:63:4a:35:ad:46:33: 67:48:96:40:87:4e:75:63:9f:14:82:26:50:ba:08:19:fe:86: 39:46:a2:89:a2:15:4f:7a:e1:0f:93:22:0c:e5:6a:07:60:99: 74:c0:4f:38:69:1f:a4:4b:9c:e3:d3:2c:99:c2:c8:aa:26:11: 0b:44:4b:df:9d:40:4c:3e:1b:36:e8:b6:66:4d:64:b1:0b:01: 75:13:56:5c:f4:e7:83:61:6b:25:9e:11:2d:ba:22:e5:36:c4: 19:2d:36:f6 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMWjfGLnjybncosGstlNs5aktHb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0NFoX DTI3MDUwMTA5MjU0NFowMzExMC8GA1UEAxMoQTNFNzVEQkVDNDNEMzdGOUJBNjlF NjNDRTEyQThDOEFDQzRDOTM1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrR9vRcjQhhs9/BUMMwDxeGssrixSYEljCbPjf8ZnBRs7CVhLUcK5zhcbtC C/Z51bz0u+s3C71b7prV0fWkTY3hly1DTk29opiEBWZm2wubbi4y+QItn9sNtkrk SDSLISScAv3LxLT8iFGagGJLy5GXqDii3GPX+emNBpmvec4Rq7pzscD+xvFfG6PP +mCV1b3vsCYUq4yn7LzhVapqIl0Bb1nHy66DKV9NHj95rldJBlRb6hGoRFzUuYHt P9W+V8alJzUJIyK/o3G6iBnB0EkD4OaCpQxJFjJO561IOUeJXJ093GJqawtHzBr0 gaMSJB1w6JN9JiKL2/qpvh3HiDcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSj512+ xD03+bpp5jzhKoyKzEyTUjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyNDExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN86HAMA0GCSqGSIb3DQEBCwUAA4IBAQBwWYIpVbpZws1o+CkVMZPf lKjVQ/i9lJOdCgG1bj5p0+ziccOMSjr8yEY06hMpEags1Ls/3blxYpuii7c3g3uF 0Q1ZYeY/HSc9WyGSRxY8Vr7Q2ncnLvXGx1YshrOdQEjhqleIG+iABkFQn/nuBs/w Iaz/ci9iq/ggP4e/tsrplY5S1lbzCBJ19yh9txz9Gt0V+rJDeYT0VPSmxJFjSjWt RjNnSJZAh051Y58UgiZQuggZ/oY5RqKJohVPeuEPkyIM5WoHYJl0wE84aR+kS5zj 0yyZwsiqJhELREvfnUBMPhs26LZmTWSxCwF1E1Zc9OeDYWslnhEtuiLlNsQZLTb2 -----END CERTIFICATE-----Generated at Sun May 3 00:40:36 2026 by rpki-client