$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152679.roa File: AS152679.roa (raw, json) Hash identifier: USbnUwXymKWe9O5cGL+edmSwhfHEPxxyNwOPuf41eOs= Subject key identifier: B2:20:5D:C9:F3:18:BF:70:7F:1E:5B:09:D6:EB:BF:DF:70:F4:5C:3B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2663A6B3994B36B3D171FB6237699CCA13E82A68 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152679.roa Signing time: Fri 04 Sep 2026 02:42:40 +0000 ROA not before: Fri 04 Sep 2026 02:37:40 +0000 ROA not after: Fri 03 Sep 2027 02:42:40 +0000 asID: 152679 IP address blocks: 163.52.78.0/24 maxlen: 24 2001:df7:6ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:63:a6:b3:99:4b:36:b3:d1:71:fb:62:37:69:9c:ca:13:e8:2a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 4 02:37:40 2026 GMT Not After : Sep 3 02:42:40 2027 GMT Subject: CN=B2205DC9F318BF707F1E5B09D6EBBFDF70F45C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:39:19:6a:60:43:bd:02:ef:55:a1:0c:0c: e0:32:05:2f:9c:80:ac:73:7d:fd:40:03:99:20:6b: ee:f0:cd:f4:17:17:66:0c:99:34:6e:6e:81:99:48: 83:ac:f8:d9:f5:bb:5d:b0:f0:2f:b5:ef:d5:7a:e2: 1a:2c:f0:9e:59:f2:e3:9a:a6:4f:d7:fa:fb:69:3e: 5d:0a:8f:68:9a:53:4a:4a:58:cc:5f:4c:67:bc:eb: c7:ed:da:d8:b7:5c:fd:e7:80:af:ca:1f:0c:76:68: bd:0e:94:a1:9d:dd:76:70:ae:6e:ff:0e:46:c5:9a: a6:37:cc:2d:9b:c5:98:a6:0b:67:87:16:cf:8e:8a: 2a:96:9c:b7:ef:b0:2b:ff:02:67:8c:c0:6b:bf:79: c9:27:86:3a:07:87:e1:cc:11:48:fc:1e:7d:4f:33: 2d:e9:5e:eb:32:96:00:30:08:06:6d:c0:d3:b5:54: 46:b7:39:2a:b2:c9:d0:90:c0:09:ae:13:e1:98:9d: fb:36:eb:16:d7:53:68:6a:1f:46:d8:fd:68:85:46: 0b:a5:b0:12:8a:26:00:dd:55:48:10:04:79:48:21: 4d:1b:19:62:5c:0a:a9:e4:5a:e5:8a:36:6d:48:14: 5e:1a:17:c9:5c:06:fd:53:9f:28:d6:3f:68:26:3b: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:20:5D:C9:F3:18:BF:70:7F:1E:5B:09:D6:EB:BF:DF:70:F4:5C:3B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.78.0/24 IPv6: 2001:df7:6ac0::/48 Signature Algorithm: sha256WithRSAEncryption 48:56:53:31:86:ea:49:76:d6:f5:cb:bf:3a:0a:d4:00:97:9f: de:0b:85:e6:93:70:ca:2a:3c:ff:8c:36:57:73:91:09:28:88: 2e:bb:64:d2:10:27:8f:35:a6:a1:e0:08:b2:64:4d:4f:55:36: 34:be:e4:eb:09:3a:0c:42:93:d7:21:f1:2f:d6:67:3a:64:87: fb:e9:c9:97:03:d4:75:6e:3c:e3:95:90:ed:3a:46:e5:52:a3: bb:cd:65:15:3b:a0:78:85:85:3e:bb:a8:57:3b:dd:d1:58:fa: e5:11:8c:f4:4b:67:96:72:78:d3:75:44:7a:f2:c0:6d:8c:f2: ad:e7:cf:cb:94:14:d1:34:da:21:6d:6b:2a:cb:7b:e0:95:bf: 9b:0d:8b:84:92:7f:40:0a:5f:7d:10:b1:7d:0c:46:fe:cf:b7: 72:51:cc:42:13:5d:7d:1f:30:67:0e:ee:4a:3e:d8:c6:e4:9f: 01:8b:81:5a:40:93:77:0d:7a:c9:b7:56:8c:68:1e:fd:fb:2e: c1:3b:a0:e6:7b:48:f0:34:55:15:f5:56:a7:68:2e:89:cd:a4: 5d:e3:78:f8:77:84:ab:a8:00:a5:8b:f2:cf:a0:ff:e0:be:b0: 46:4c:f9:24:3a:10:8b:5e:a1:27:27:51:a7:00:38:19:54:65: 97:8f:2e:af -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJmOms5lLNrPRcftiN2mcyhPoKmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwNDAyMzc0MFoX DTI3MDkwMzAyNDI0MFowMzExMC8GA1UEAxMoQjIyMDVEQzlGMzE4QkY3MDdGMUU1 QjA5RDZFQkJGREY3MEY0NUMzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqvORlqYEO9Au9VoQwM4DIFL5yArHN9/UADmSBr7vDN9BcXZgyZNG5ugZlI g6z42fW7XbDwL7Xv1XriGizwnlny45qmT9f6+2k+XQqPaJpTSkpYzF9MZ7zrx+3a 2Ldc/eeAr8ofDHZovQ6UoZ3ddnCubv8ORsWapjfMLZvFmKYLZ4cWz46KKpact++w K/8CZ4zAa795ySeGOgeH4cwRSPwefU8zLele6zKWADAIBm3A07VURrc5KrLJ0JDA Ca4T4Zid+zbrFtdTaGofRtj9aIVGC6WwEoomAN1VSBAEeUghTRsZYlwKqeRa5Yo2 bUgUXhoXyVwG/VOfKNY/aCY7zqsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSyIF3J 8xi/cH8eWwnW67/fcPRcOzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyNjc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozROMA8EAgACMAkDBwAgAQ33asAwDQYJKoZIhvcNAQELBQADggEBAEhW UzGG6kl21vXLvzoK1ACXn94LheaTcMoqPP+MNldzkQkoiC67ZNIQJ481pqHgCLJk TU9VNjS+5OsJOgxCk9ch8S/WZzpkh/vpyZcD1HVuPOOVkO06RuVSo7vNZRU7oHiF hT67qFc73dFY+uURjPRLZ5ZyeNN1RHrywG2M8q3nz8uUFNE02iFtayrLe+CVv5sN i4SSf0AKX30QsX0MRv7Pt3JRzEITXX0fMGcO7ko+2MbknwGLgVpAk3cNesm3Voxo Hv37LsE7oOZ7SPA0VRX1VqdoLonNpF3jePh3hKuoAKWL8s+g/+C+sEZM+SQ6EIte oScnUacAOBlUZZePLq8= -----END CERTIFICATE-----Generated at Thu Sep 17 05:26:24 2026 by rpki-client