$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152828.roa File: AS152828.roa (raw, json) Hash identifier: ZzYvGeiPwr1w8r1VqShg52uEvzEZHUPsNVN/xLMV/UU= Subject key identifier: 07:82:2D:A5:60:AA:30:C8:8C:BC:6D:5D:6E:C0:B6:2B:1F:BE:FC:97 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EFDAF46E4224530B518B90AA00B9C5A1E14AD48 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152828.roa Signing time: Sat 02 May 2026 08:36:44 +0000 ROA not before: Sat 02 May 2026 08:31:44 +0000 ROA not after: Sat 01 May 2027 08:36:44 +0000 asID: 152828 IP address blocks: 103.182.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:af:46:e4:22:45:30:b5:18:b9:0a:a0:0b:9c:5a:1e:14:ad:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:44 2026 GMT Not After : May 1 08:36:44 2027 GMT Subject: CN=07822DA560AA30C88CBC6D5D6EC0B62B1FBEFC97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1a:c6:24:36:b3:aa:fb:5e:3a:49:ce:85:ac: 3f:f3:af:79:4c:88:c2:55:33:a0:13:44:4b:4f:b9: a6:df:2c:32:d5:3c:28:1d:c6:f2:cb:70:2c:86:df: 64:ce:e2:2e:fb:ed:8d:ee:f7:ed:56:3e:84:e5:6a: 32:11:9f:1e:75:11:e9:35:2d:9a:9b:b3:16:fb:7e: d2:48:df:97:70:49:85:1d:c1:19:07:58:c8:0a:26: 7b:57:42:5d:71:fc:55:1e:ac:6e:b5:9c:95:46:fd: 13:2a:61:77:d7:56:a2:38:28:ca:9f:9a:7d:78:dd: 01:2b:24:0d:27:6e:ce:b0:5a:e9:4a:d8:a0:c5:f5: 6b:bd:bb:2b:a3:1c:64:55:0d:6e:b4:19:f7:e8:ec: f8:32:28:8b:9a:dd:72:c4:a9:98:0d:e1:3d:b9:c2: 85:b2:62:b2:83:6f:89:95:a5:96:59:f1:ee:71:d1: c2:07:62:21:7a:4f:da:2d:db:94:ab:4c:98:90:48: 9a:d3:28:7e:a6:a9:3c:f2:ff:00:f9:a4:39:f8:8d: 3d:5e:c9:a1:16:a2:89:c6:57:8f:26:1c:94:1a:16: b1:92:ba:24:3c:7d:eb:ef:52:d3:07:0d:8b:8d:15: 12:20:db:e0:91:d9:3c:cc:a2:e1:cf:cb:82:3b:07: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:82:2D:A5:60:AA:30:C8:8C:BC:6D:5D:6E:C0:B6:2B:1F:BE:FC:97 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.53.0/24 Signature Algorithm: sha256WithRSAEncryption 11:80:01:a8:c4:67:e0:d2:5e:e9:dd:9f:60:12:bc:ad:ef:1b: f6:1f:eb:9c:c8:79:9a:23:e6:a2:0f:58:08:7f:6d:10:9c:6f: eb:9e:9d:27:0c:be:9d:a2:ac:85:4f:64:a9:43:64:cf:11:28: 2f:6c:92:35:ca:6e:f3:71:c9:09:0f:8a:b7:f5:82:97:a4:a8: 66:64:bb:8b:7c:cb:8c:1a:6f:8d:43:ec:49:d0:51:a8:8d:bc: fb:61:90:16:a9:46:49:cd:95:f0:90:1a:b9:eb:e6:a5:cb:cd: 86:49:3a:bc:35:8a:1a:9f:5f:84:29:3e:ae:3d:fb:7f:cf:4f: 56:47:01:88:a8:f0:10:53:05:e4:5c:a1:c2:38:07:6a:4f:dc: 8c:c3:d0:c2:fc:66:85:ab:f8:47:1b:69:d9:f8:d2:81:3d:f4: b1:9b:83:90:bf:42:a1:ad:58:cb:fa:df:a1:a0:b9:38:f3:5e: af:fc:2e:6c:19:6a:03:02:0d:1e:84:8b:87:a3:fb:fe:90:60: 29:5a:69:bd:5c:b1:a0:ba:09:6c:72:46:a5:5a:73:20:b1:49: 2a:a7:7b:fe:09:8d:e6:da:b1:43:20:6f:b6:d8:d5:86:35:74: cc:be:bf:1d:3a:74:98:c2:c5:74:f6:37:0b:cd:a6:be:d9:a4: 48:83:81:d2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPv2vRuQiRTC1GLkKoAucWh4UrUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0NFoX DTI3MDUwMTA4MzY0NFowMzExMC8GA1UEAxMoMDc4MjJEQTU2MEFBMzBDODhDQkM2 RDVENkVDMEI2MkIxRkJFRkM5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO8axiQ2s6r7XjpJzoWsP/OveUyIwlUzoBNES0+5pt8sMtU8KB3G8stwLIbf ZM7iLvvtje737VY+hOVqMhGfHnUR6TUtmpuzFvt+0kjfl3BJhR3BGQdYyAome1dC XXH8VR6sbrWclUb9Eyphd9dWojgoyp+afXjdASskDSduzrBa6UrYoMX1a727K6Mc ZFUNbrQZ9+js+DIoi5rdcsSpmA3hPbnChbJisoNviZWlllnx7nHRwgdiIXpP2i3b lKtMmJBImtMofqapPPL/APmkOfiNPV7JoRaiicZXjyYclBoWsZK6JDx96+9S0wcN i40VEiDb4JHZPMyi4c/LgjsHa8kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQHgi2l YKowyIy8bV1uwLYrH778lzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7Y1MA0GCSqGSIb3DQEBCwUAA4IBAQARgAGoxGfg0l7p3Z9gEryt7xv2 H+ucyHmaI+aiD1gIf20QnG/rnp0nDL6doqyFT2SpQ2TPESgvbJI1ym7zcckJD4q3 9YKXpKhmZLuLfMuMGm+NQ+xJ0FGojbz7YZAWqUZJzZXwkBq56+aly82GSTq8NYoa n1+EKT6uPft/z09WRwGIqPAQUwXkXKHCOAdqT9yMw9DC/GaFq/hHG2nZ+NKBPfSx m4OQv0KhrVjL+t+hoLk4816v/C5sGWoDAg0ehIuHo/v+kGApWmm9XLGguglsckal WnMgsUkqp3v+CY3m2rFDIG+22NWGNXTMvr8dOnSYwsV09jcLzaa+2aRIg4HS -----END CERTIFICATE-----Generated at Sun May 3 00:39:38 2026 by rpki-client