$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152832.roa File: AS152832.roa (raw, json) Hash identifier: l9IcIcPRDcjgrvOM7rL2YDRUanavayEEHgp9wkCyFqs= Subject key identifier: A5:63:F8:02:92:83:29:6B:BB:2F:D2:86:19:45:D6:14:84:8A:FC:7D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4C29FE4264ED86662560991304B9865BE9B0F432 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152832.roa Signing time: Sat 02 May 2026 09:25:59 +0000 ROA not before: Sat 02 May 2026 09:20:59 +0000 ROA not after: Sat 01 May 2027 09:25:59 +0000 asID: 152832 IP address blocks: 2001:df4:c740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:29:fe:42:64:ed:86:66:25:60:99:13:04:b9:86:5b:e9:b0:f4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:59 2026 GMT Not After : May 1 09:25:59 2027 GMT Subject: CN=A563F8029283296BBB2FD2861945D614848AFC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:c9:5d:bf:71:5b:ca:5e:8b:15:24:b6:73: 38:8f:75:af:05:88:3f:80:9b:76:d1:90:45:93:cd: 20:a8:9c:96:df:80:77:88:5b:c3:d4:6e:3b:b3:04: ac:40:88:a4:8f:2d:67:fb:be:4b:83:62:ef:c3:e4: 8e:7b:60:03:a3:7f:15:f6:9d:03:2f:99:21:7f:98: 05:c0:04:7c:0b:05:1e:31:43:3b:bd:e5:31:6e:fc: f9:a3:0e:e0:9e:23:9a:4e:e6:bb:e0:42:6c:ba:f7: 54:4d:1f:d5:82:fd:d5:96:71:ec:c5:f4:0a:ba:c5: f8:ec:36:cb:fd:96:5e:2d:dd:01:ab:76:ac:8a:e2: 7e:73:0d:1c:c3:14:c5:bf:1e:64:48:61:6e:3f:28: ae:5a:37:f2:1b:14:8d:78:9a:29:95:c3:24:b6:6c: 4b:fc:34:07:cd:df:6d:0f:30:33:c7:0c:ab:00:b0: ea:3e:7b:e0:3a:80:1e:51:70:99:5d:7c:82:93:d7: 7a:7a:a6:cc:a5:d4:22:93:f8:dc:77:2a:41:3d:f8: 84:37:b8:4c:98:fe:d1:5b:fc:12:38:72:57:4c:81: 2e:7c:34:e1:83:f8:44:be:1d:70:a3:17:69:56:7e: c6:d5:2b:b3:a1:9f:f8:e7:d2:d2:70:ef:b3:5f:b7: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:F8:02:92:83:29:6B:BB:2F:D2:86:19:45:D6:14:84:8A:FC:7D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:c740::/48 Signature Algorithm: sha256WithRSAEncryption 3b:0b:33:1c:f6:d2:88:96:ee:a8:1a:85:ed:ac:01:77:79:be: 92:41:45:d5:f4:fd:c9:07:c7:38:bb:fd:93:1a:27:30:a7:a9: 68:0f:c5:34:7f:17:f3:53:b5:10:a4:6b:1a:48:b1:82:a2:0e: 79:e6:3e:27:84:7a:71:1a:43:f9:66:80:fe:ef:24:d5:c3:ce: 76:6e:5c:24:6b:1e:cf:16:c7:40:01:d0:8b:be:f2:e4:6f:e4: 8e:29:c1:8e:13:1c:c8:79:25:b3:d4:84:c5:e6:ec:56:7c:92: d7:3f:a3:3f:32:68:75:2b:e5:06:18:2a:2c:ec:e6:8d:1b:ad: 88:f6:b3:08:d3:2d:db:a1:26:76:31:89:a0:b7:27:5b:ab:59: 81:8f:3c:ee:19:b3:a5:34:45:5a:95:2c:4d:8b:69:3d:da:42: 8c:4f:6e:4c:21:57:47:56:1f:9c:56:52:5e:b1:fb:63:86:38: ce:b1:36:7d:d7:0b:cf:2b:bf:63:21:4b:26:82:67:2f:5f:64: 29:39:74:8b:d1:c7:35:ae:eb:65:ec:d2:2b:d7:4f:8e:e8:0d: 2e:43:1a:cf:18:7a:4f:af:56:78:9b:ca:89:30:43:31:37:16: 88:e9:cd:c0:56:2f:b6:e9:21:d0:27:7b:44:5f:24:0f:7d:0f: c3:9f:e9:5a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUTCn+QmTthmYlYJkTBLmGW+mw9DIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA1OVoX DTI3MDUwMTA5MjU1OVowMzExMC8GA1UEAxMoQTU2M0Y4MDI5MjgzMjk2QkJCMkZE Mjg2MTk0NUQ2MTQ4NDhBRkM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9WyV2/cVvKXosVJLZzOI91rwWIP4CbdtGQRZPNIKiclt+Ad4hbw9RuO7ME rECIpI8tZ/u+S4Ni78PkjntgA6N/FfadAy+ZIX+YBcAEfAsFHjFDO73lMW78+aMO 4J4jmk7mu+BCbLr3VE0f1YL91ZZx7MX0CrrF+Ow2y/2WXi3dAat2rIrifnMNHMMU xb8eZEhhbj8orlo38hsUjXiaKZXDJLZsS/w0B83fbQ8wM8cMqwCw6j574DqAHlFw mV18gpPXenqmzKXUIpP43HcqQT34hDe4TJj+0Vv8EjhyV0yBLnw04YP4RL4dcKMX aVZ+xtUrs6Gf+OfS0nDvs1+3kmsCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSlY/gC koMpa7sv0oYZRdYUhIr8fTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9MdAMA0GCSqGSIb3DQEBCwUAA4IBAQA7CzMc9tKIlu6oGoXtrAF3 eb6SQUXV9P3JB8c4u/2TGicwp6loD8U0fxfzU7UQpGsaSLGCog555j4nhHpxGkP5 ZoD+7yTVw852blwkax7PFsdAAdCLvvLkb+SOKcGOExzIeSWz1ITF5uxWfJLXP6M/ Mmh1K+UGGCos7OaNG62I9rMI0y3boSZ2MYmgtydbq1mBjzzuGbOlNEValSxNi2k9 2kKMT25MIVdHVh+cVlJesftjhjjOsTZ91wvPK79jIUsmgmcvX2QpOXSL0cc1rutl 7NIr10+O6A0uQxrPGHpPr1Z4m8qJMEMxNxaI6c3AVi+26SHQJ3tEXyQPfQ/Dn+la -----END CERTIFICATE-----Generated at Sun May 3 00:39:38 2026 by rpki-client