$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152830.roa File: AS152830.roa (raw, json) Hash identifier: yN8fGuc+hUUP+Y2FpR6TBQGC8zj0Do+IbHkkc17aW04= Subject key identifier: 77:C2:37:1D:DA:96:EC:2E:31:DD:64:F7:1A:62:CA:BB:80:32:6C:BB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4321C053C9758152BC3E07929CE93C16674B8C36 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152830.roa Signing time: Sat 02 May 2026 18:06:53 +0000 ROA not before: Sat 02 May 2026 18:01:53 +0000 ROA not after: Sat 01 May 2027 18:06:53 +0000 asID: 152830 IP address blocks: 2001:df3:f840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:21:c0:53:c9:75:81:52:bc:3e:07:92:9c:e9:3c:16:67:4b:8c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 18:01:53 2026 GMT Not After : May 1 18:06:53 2027 GMT Subject: CN=77C2371DDA96EC2E31DD64F71A62CABB80326CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:32:0d:c4:bb:4f:34:02:98:e6:9a:e6:82: 9d:72:4e:e7:ca:80:2e:03:4e:ca:aa:46:b4:b2:0f: 7b:36:8c:71:2d:7b:1a:41:26:bf:c1:38:74:e7:d7: 7c:50:40:77:9c:9f:a3:5d:ac:cc:2a:01:ea:55:35: 42:0d:a3:93:bb:4d:a0:d9:7e:bb:27:f2:a0:e2:54: 6f:78:3a:b7:65:67:b9:66:7e:de:0b:35:5c:af:3c: 9c:5c:20:f0:b5:54:a9:2e:1e:51:a0:6d:fe:46:fe: 7b:2a:e5:14:b6:1f:bc:9e:ff:29:10:ae:f2:7a:24: 38:d9:88:29:67:1f:fc:22:d6:c0:73:fc:25:0b:5f: 78:cf:83:5a:3d:61:42:8f:97:7f:90:8d:fc:58:67: 25:76:7c:65:b7:f3:6c:fd:45:b6:a4:e8:02:ce:cb: 38:6b:bf:22:6c:96:e5:11:53:e6:24:d1:26:90:fe: 6e:b4:b0:57:57:19:67:8b:bf:9b:01:c1:d2:00:15: 75:69:a6:aa:23:ad:d6:47:00:be:99:94:9b:a7:85: 54:a9:0c:e9:15:a4:36:a7:74:37:7b:dc:ee:01:99: d2:36:b2:a5:6e:ba:6d:ea:78:35:79:64:1a:5d:66: a7:bc:cf:5c:dd:35:d3:a3:4b:5c:4f:cd:5c:d3:6a: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C2:37:1D:DA:96:EC:2E:31:DD:64:F7:1A:62:CA:BB:80:32:6C:BB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:f840::/48 Signature Algorithm: sha256WithRSAEncryption 84:9f:e2:a9:88:2c:6b:f8:2c:c2:24:1b:46:35:22:6c:50:d5: 0e:84:18:cf:ca:89:40:60:38:1b:78:e0:d3:4d:d8:b9:59:f8: 18:7f:16:70:d9:95:f6:9b:d2:02:67:21:98:1b:3d:03:51:9a: 16:06:23:28:e2:72:bb:de:ed:19:b7:86:67:81:22:3e:a1:e4: c0:0b:06:b3:39:3e:5c:6e:57:ba:a1:80:d1:44:59:0f:73:66: fa:b8:ea:0f:b2:57:0b:54:43:4b:8d:00:20:61:4f:6b:15:d5: 16:a7:40:cc:b0:09:bf:e9:b5:6c:cf:95:3d:4e:ec:e5:54:17: e7:8a:eb:48:fc:31:98:77:d1:c5:ce:a5:79:c1:ee:30:e1:29: 2a:1c:63:c7:01:01:d9:1b:53:67:e3:6e:f2:be:d7:a6:40:f2: f2:e0:7b:dc:93:9b:42:86:5a:3b:fb:8a:f6:eb:89:9a:28:28: 32:66:e6:1f:d6:20:75:0e:60:ca:37:8d:ba:b5:37:d1:ae:8d: e1:f8:a2:29:7f:89:c5:1d:63:af:73:d0:3d:39:b3:6e:01:3e: aa:3f:15:4f:b7:2f:57:fe:5a:cb:da:34:11:ff:dd:72:3c:df: 4a:90:92:f4:d8:ac:58:b1:74:34:4c:ad:35:d3:39:de:5c:d4: ed:37:c0:3b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUQyHAU8l1gVK8PgeSnOk8FmdLjDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE4MDE1M1oX DTI3MDUwMTE4MDY1M1owMzExMC8GA1UEAxMoNzdDMjM3MUREQTk2RUMyRTMxREQ2 NEY3MUE2MkNBQkI4MDMyNkNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQqMg3Eu080ApjmmuaCnXJO58qALgNOyqpGtLIPezaMcS17GkEmv8E4dOfX fFBAd5yfo12szCoB6lU1Qg2jk7tNoNl+uyfyoOJUb3g6t2VnuWZ+3gs1XK88nFwg 8LVUqS4eUaBt/kb+eyrlFLYfvJ7/KRCu8nokONmIKWcf/CLWwHP8JQtfeM+DWj1h Qo+Xf5CN/FhnJXZ8ZbfzbP1FtqToAs7LOGu/ImyW5RFT5iTRJpD+brSwV1cZZ4u/ mwHB0gAVdWmmqiOt1kcAvpmUm6eFVKkM6RWkNqd0N3vc7gGZ0jaypW66bep4NXlk Gl1mp7zPXN0106NLXE/NXNNqpFECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR3wjcd 2pbsLjHdZPcaYsq7gDJsuzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8/hAMA0GCSqGSIb3DQEBCwUAA4IBAQCEn+KpiCxr+CzCJBtGNSJs UNUOhBjPyolAYDgbeODTTdi5WfgYfxZw2ZX2m9ICZyGYGz0DUZoWBiMo4nK73u0Z t4ZngSI+oeTACwazOT5cble6oYDRRFkPc2b6uOoPslcLVENLjQAgYU9rFdUWp0DM sAm/6bVsz5U9TuzlVBfniutI/DGYd9HFzqV5we4w4SkqHGPHAQHZG1Nn427yvtem QPLy4Hvck5tChlo7+4r264maKCgyZuYf1iB1DmDKN426tTfRro3h+KIpf4nFHWOv c9A9ObNuAT6qPxVPty9X/lrL2jQR/91yPN9KkJL02KxYsXQ0TK010zneXNTtN8A7 -----END CERTIFICATE-----Generated at Sun May 3 01:40:04 2026 by rpki-client