$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS154252.roa File: AS154252.roa (raw, json) Hash identifier: 5V5VGjh12ZDojs7izB0YbHLzK0Rynxs1bZ4aVSdCgJQ= Subject key identifier: 93:22:2C:23:6F:B8:86:30:2B:DA:5A:36:E8:9F:64:8B:55:98:BA:CB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7856CA4E32F967F8462E40D1676766D59DB6ED52 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154252.roa Signing time: Sat 02 May 2026 21:30:43 +0000 ROA not before: Sat 02 May 2026 21:25:43 +0000 ROA not after: Sat 01 May 2027 21:30:43 +0000 asID: 154252 IP address blocks: 203.32.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:56:ca:4e:32:f9:67:f8:46:2e:40:d1:67:67:66:d5:9d:b6:ed:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:25:43 2026 GMT Not After : May 1 21:30:43 2027 GMT Subject: CN=93222C236FB886302BDA5A36E89F648B5598BACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:97:a1:58:e7:af:9d:55:47:28:e9:0d:9b: 00:28:cb:18:d0:97:02:0b:0b:7d:12:07:82:be:84: 5a:f2:27:c5:f8:39:dc:3c:fd:3c:b7:90:4c:27:b2: 5d:97:ec:72:15:fd:df:a2:f7:f3:41:c9:c1:f6:82: ec:15:9e:35:d8:a0:9a:f5:5b:b6:3c:22:e8:b9:53: e8:42:58:10:dc:56:94:14:30:64:ce:e7:c9:db:e7: 5f:ab:70:2a:ad:45:14:96:2a:33:59:47:f0:9e:c5: 4a:52:f2:0d:93:d6:16:41:c9:91:5b:91:c9:f1:1b: dd:ed:33:e5:f9:bb:8f:38:77:4a:32:d4:5c:2e:65: 52:7f:a0:60:35:94:44:b8:03:99:1b:7b:1a:4e:66: e8:53:ea:f1:85:ae:44:4a:e6:77:47:c3:82:e9:47: 4a:84:8e:a6:69:72:5a:6d:fa:56:5d:1a:da:6e:c8: c0:69:db:e8:08:8d:5a:b5:a3:8b:8f:25:31:28:cc: 9d:57:79:ce:21:ae:23:59:55:66:2c:65:5b:f9:a7: 74:dd:3d:63:71:5b:7f:75:47:35:03:0e:1b:fd:97: f8:89:8b:e4:20:c5:fa:d1:62:a1:0f:77:41:9f:ef: 68:78:e5:de:b9:7e:29:ad:8f:a0:e7:37:55:37:b9: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:22:2C:23:6F:B8:86:30:2B:DA:5A:36:E8:9F:64:8B:55:98:BA:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS154252.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.32.188.0/24 Signature Algorithm: sha256WithRSAEncryption 63:d7:14:9c:89:f4:29:f5:02:09:eb:36:81:87:f6:6a:7b:c2: cf:eb:32:20:24:1a:a7:33:62:19:01:bc:9d:54:e7:77:11:a2: 9a:1e:ea:30:69:5e:cb:5e:d1:51:fc:4f:3c:8c:15:8a:14:da: c3:3d:11:c9:74:0f:5b:5c:c5:23:42:de:56:c7:77:a6:e1:70: eb:dd:6d:6c:df:b6:94:12:36:bd:2d:eb:ea:f6:10:96:ae:a0: a8:96:7b:ad:0d:b9:23:04:cc:5b:c2:61:9b:e7:79:89:cd:56: 22:8a:fc:66:7d:bc:b8:45:1d:1a:bf:5f:de:f6:34:d0:5b:01: 23:e0:4c:18:6f:7d:49:87:52:e8:3e:8d:d7:1f:c6:7d:df:e8: ac:c9:78:e8:e2:25:b4:65:89:13:5e:02:14:84:43:fd:b5:4e: 18:ba:fe:66:84:1d:9b:42:18:f3:01:9d:31:94:07:f0:89:64: 6d:0f:a4:22:d8:62:eb:13:f9:0d:db:7d:9a:38:28:1a:dc:ff: 5b:ff:41:8c:fc:8a:2f:20:a6:a1:96:58:5f:9c:88:0e:5e:5d: 30:50:7f:a1:e7:da:2a:d5:bf:ac:bd:0c:fc:be:60:3c:a5:23: 8b:33:7b:99:57:bd:5d:17:be:e6:59:22:76:d7:88:42:88:a6: d8:89:f4:7b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeFbKTjL5Z/hGLkDRZ2dm1Z227VIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjU0M1oX DTI3MDUwMTIxMzA0M1owMzExMC8GA1UEAxMoOTMyMjJDMjM2RkI4ODYzMDJCREE1 QTM2RTg5RjY0OEI1NTk4QkFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmKl6FY56+dVUco6Q2bACjLGNCXAgsLfRIHgr6EWvInxfg53Dz9PLeQTCey XZfschX936L380HJwfaC7BWeNdigmvVbtjwi6LlT6EJYENxWlBQwZM7nydvnX6tw Kq1FFJYqM1lH8J7FSlLyDZPWFkHJkVuRyfEb3e0z5fm7jzh3SjLUXC5lUn+gYDWU RLgDmRt7Gk5m6FPq8YWuRErmd0fDgulHSoSOpmlyWm36Vl0a2m7IwGnb6AiNWrWj i48lMSjMnVd5ziGuI1lVZixlW/mndN09Y3Fbf3VHNQMOG/2X+ImL5CDF+tFioQ93 QZ/vaHjl3rl+Ka2PoOc3VTe5HjUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSTIiwj b7iGMCvaWjbon2SLVZi6yzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTU0MjUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyyC8MA0GCSqGSIb3DQEBCwUAA4IBAQBj1xScifQp9QIJ6zaBh/Zqe8LP 6zIgJBqnM2IZAbydVOd3EaKaHuowaV7LXtFR/E88jBWKFNrDPRHJdA9bXMUjQt5W x3em4XDr3W1s37aUEja9Levq9hCWrqColnutDbkjBMxbwmGb53mJzVYiivxmfby4 RR0av1/e9jTQWwEj4EwYb31Jh1LoPo3XH8Z93+isyXjo4iW0ZYkTXgIUhEP9tU4Y uv5mhB2bQhjzAZ0xlAfwiWRtD6Qi2GLrE/kN232aOCga3P9b/0GM/IovIKahllhf nIgOXl0wUH+h59oq1b+svQz8vmA8pSOLM3uZV71dF77mWSJ214hCiKbYifR7 -----END CERTIFICATE-----Generated at Sun May 3 00:40:34 2026 by rpki-client