$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152881.roa File: AS152881.roa (raw, json) Hash identifier: OK22sgcJ04I35Vnuv47BEdswdlqntzuAVv0uu9k+BSM= Subject key identifier: 94:37:68:6F:77:46:16:66:DE:2A:CD:EB:FD:23:2E:82:3A:40:D1:B0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66CDA13A346BA274BC8CC0A71148E871D0F1BAFE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152881.roa Signing time: Wed 30 Sep 2026 04:24:31 +0000 ROA not before: Wed 30 Sep 2026 04:19:31 +0000 ROA not after: Wed 29 Sep 2027 04:24:31 +0000 asID: 152881 IP address blocks: 2001:df7:99c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cd:a1:3a:34:6b:a2:74:bc:8c:c0:a7:11:48:e8:71:d0:f1:ba:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 30 04:19:31 2026 GMT Not After : Sep 29 04:24:31 2027 GMT Subject: CN=9437686F77461666DE2ACDEBFD232E823A40D1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:42:89:09:30:91:b7:f6:cb:5b:40:0e:59: df:cf:0a:b5:27:81:d6:3c:0a:42:13:14:16:86:94: 50:f4:68:65:01:d7:c2:ad:36:6c:43:a6:1b:0b:dd: 80:49:ef:af:70:6e:29:3e:35:9d:e1:16:19:46:26: c0:80:bf:f3:b7:4a:6a:06:08:ea:8d:4f:a1:33:d7: c4:4c:3c:71:3d:f8:b1:62:74:36:a8:8d:bb:aa:64: d7:e7:a2:8c:1f:13:08:42:e1:55:2e:24:ec:51:c5: 9e:0a:9a:84:3c:2b:e6:cf:4d:cf:f8:72:ed:e4:31: bb:47:44:71:90:b6:e5:2c:41:40:2a:5f:8e:70:0b: 4f:79:67:27:62:e3:0f:3f:c4:7f:8a:0c:0e:07:b8: c0:aa:f0:89:38:da:1e:fe:e4:4f:ec:c5:ad:c0:cc: fd:03:bc:7f:d2:d9:9c:dd:a3:08:99:0f:6a:e0:d9: b1:17:e0:ee:6c:d1:50:ba:9c:b1:56:2e:bc:e3:e4: 07:d2:17:97:68:4f:f9:68:f5:b3:29:87:86:52:73: d5:0a:16:c1:7b:8b:de:77:99:00:fa:d3:5c:2f:40: 45:be:23:5d:3d:47:ce:ac:14:16:ef:9c:5d:95:c4: 14:4e:f4:ee:41:c8:98:e5:51:5e:f7:94:26:c7:ec: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:37:68:6F:77:46:16:66:DE:2A:CD:EB:FD:23:2E:82:3A:40:D1:B0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:99c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:d3:60:9e:63:36:c8:ee:5d:69:75:14:32:57:e4:27:ac:14: a5:75:3d:81:b7:98:15:08:2d:57:72:a3:e3:c2:da:18:ea:99: 12:d1:ee:d4:86:b6:a0:44:de:31:98:10:06:45:4e:8a:0c:ee: c3:f3:e5:10:d9:07:1c:b3:52:5d:d8:98:a9:6c:78:0a:82:11: e5:e5:9b:b8:43:c3:1b:bb:ae:83:4e:b0:17:99:10:28:28:dd: 1d:37:52:b1:27:0f:e2:02:2a:96:5e:6f:22:da:77:4c:52:33: be:8f:ca:87:9d:d1:ef:6b:c1:1e:73:7e:c6:fe:4d:0c:48:5b: da:a2:4d:f1:c5:62:2c:d6:ef:29:bf:57:85:f2:44:45:3c:f1: df:c3:0e:11:61:6d:b2:8e:7c:d3:ee:fb:ac:c8:40:64:66:fe: 32:53:8b:bb:bc:ba:d4:cb:8a:9c:61:ba:c4:d5:94:95:04:75: 3f:5b:91:f5:f0:d1:db:4c:9b:d6:87:4c:7c:1d:c9:20:62:be: 91:f8:97:09:ea:6d:42:e4:57:53:39:05:df:f8:a2:cd:ab:1c: d9:91:83:9a:52:ea:3a:e4:2c:d7:9b:d6:4f:05:f4:77:70:a2: e4:c3:04:bd:c6:c4:cb:29:cd:bf:a5:2e:ac:f6:e8:50:ec:c3: 04:68:93:f9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZs2hOjRronS8jMCnEUjocdDxuv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkzMDA0MTkzMVoX DTI3MDkyOTA0MjQzMVowMzExMC8GA1UEAxMoOTQzNzY4NkY3NzQ2MTY2NkRFMkFD REVCRkQyMzJFODIzQTQwRDFCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+oQokJMJG39stbQA5Z388KtSeB1jwKQhMUFoaUUPRoZQHXwq02bEOmGwvd gEnvr3BuKT41neEWGUYmwIC/87dKagYI6o1PoTPXxEw8cT34sWJ0NqiNu6pk1+ei jB8TCELhVS4k7FHFngqahDwr5s9Nz/hy7eQxu0dEcZC25SxBQCpfjnALT3lnJ2Lj Dz/Ef4oMDge4wKrwiTjaHv7kT+zFrcDM/QO8f9LZnN2jCJkPauDZsRfg7mzRULqc sVYuvOPkB9IXl2hP+Wj1symHhlJz1QoWwXuL3neZAPrTXC9ARb4jXT1HzqwUFu+c XZXEFE707kHImOVRXveUJsfs2X0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSUN2hv d0YWZt4qzev9Iy6COkDRsDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN95nAMA0GCSqGSIb3DQEBCwUAA4IBAQCl02CeYzbI7l1pdRQyV+Qn rBSldT2Bt5gVCC1XcqPjwtoY6pkS0e7UhragRN4xmBAGRU6KDO7D8+UQ2Qccs1Jd 2JipbHgKghHl5Zu4Q8Mbu66DTrAXmRAoKN0dN1KxJw/iAiqWXm8i2ndMUjO+j8qH ndHva8Eec37G/k0MSFvaok3xxWIs1u8pv1eF8kRFPPHfww4RYW2yjnzT7vusyEBk Zv4yU4u7vLrUy4qcYbrE1ZSVBHU/W5H18NHbTJvWh0x8HckgYr6R+JcJ6m1C5FdT OQXf+KLNqxzZkYOaUuo65CzXm9ZPBfR3cKLkwwS9xsTLKc2/pS6s9uhQ7MMEaJP5 -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:56 2026 by rpki-client