$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS18156.roa File: AS18156.roa (raw, json) Hash identifier: kbWnxg5NPqWe4Ugd7YJ/He4XSxalVo3or+yeeOWA0VY= Subject key identifier: 28:4C:5C:2F:17:6C:18:D9:46:DA:AB:B6:DE:B1:34:54:54:1B:DA:CB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 03EF37DDABBB57C89C8B5E1453F138E19DECE7C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS18156.roa Signing time: Sat 02 May 2026 21:27:04 +0000 ROA not before: Sat 02 May 2026 21:22:04 +0000 ROA not after: Sat 01 May 2027 21:27:04 +0000 asID: 18156 IP address blocks: 202.147.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:37:dd:ab:bb:57:c8:9c:8b:5e:14:53:f1:38:e1:9d:ec:e7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:22:04 2026 GMT Not After : May 1 21:27:04 2027 GMT Subject: CN=284C5C2F176C18D946DAABB6DEB13454541BDACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:1d:94:29:c2:47:ae:2b:27:de:fd:17:83: d7:ae:82:2f:f5:29:e1:e1:29:bd:29:8f:ee:b1:44: 77:1a:26:5e:08:39:cb:fc:4a:09:7c:c5:1f:04:c3: 4d:fa:8f:b7:60:a1:56:9f:9f:33:7f:6c:31:c1:1c: dc:c5:84:2d:4a:c4:6a:da:05:78:62:61:7e:a5:4b: 05:37:d6:22:14:1d:ef:5b:f7:be:da:eb:e1:f7:0d: 5b:78:bf:b3:76:88:92:60:33:eb:72:9c:da:85:34: e9:53:e7:4c:0a:54:5b:8a:77:68:0f:bf:c7:88:c2: d5:a1:14:90:c8:1d:9c:b7:cf:f8:52:03:21:26:27: de:29:bf:45:2a:20:10:74:fb:6b:30:11:e0:b4:47: 1c:31:0c:49:7f:90:60:ba:b0:8e:41:d2:d7:70:8d: 32:d8:e9:cb:54:89:2e:5a:d7:fc:61:c6:11:61:e2: fe:6d:2d:fa:20:4d:f9:9c:cc:ef:c7:17:78:9a:1f: fa:2e:ad:0d:f8:f0:4e:2e:8e:66:4d:f8:b1:81:07: 9c:50:cd:0b:28:87:0f:ed:42:76:5e:a5:13:25:a2: f2:dc:e5:a6:c5:6b:58:b8:04:9d:1d:f0:2f:44:9e: 33:e0:68:01:e1:c5:a5:3a:6d:dd:5b:a2:bc:32:bd: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4C:5C:2F:17:6C:18:D9:46:DA:AB:B6:DE:B1:34:54:54:1B:DA:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS18156.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.147.224.0/19 Signature Algorithm: sha256WithRSAEncryption 44:34:5b:89:32:7c:e1:e2:6e:b0:f5:0d:bb:f3:d4:53:c3:23: 91:3e:b3:cb:dc:20:32:19:6a:b2:49:4c:92:a6:d5:59:d0:85: 4e:2d:b8:25:95:42:a8:4e:be:d9:9d:62:78:d1:e2:89:3f:f0: 3b:59:69:b6:be:60:6c:46:10:c2:41:5a:93:f5:a7:48:14:e0: 8a:72:8d:05:4c:58:47:7e:32:fe:f4:4e:18:e8:1b:89:d3:fb: f8:9c:5a:0b:94:b4:8b:43:21:24:98:d1:ad:da:c0:21:07:a6: bf:73:30:29:80:e3:c0:13:82:a0:08:4c:fb:68:25:49:a9:56: b0:fa:41:c7:c6:86:c4:65:28:15:5b:b5:95:34:96:ff:0d:d6: 46:07:2c:ea:82:41:3d:e1:1e:b1:4a:53:30:3a:bf:ca:db:43: 2b:5a:6b:64:11:3c:f1:53:ba:13:94:70:d5:76:7f:91:35:7f: a5:b9:0e:28:de:10:c4:ff:f8:d6:9c:93:ef:9b:2d:8c:c0:81: 97:c5:56:ec:fc:2b:d5:26:55:b8:b1:5a:5a:3a:30:89:1d:67: 3d:5a:18:df:8f:7d:e0:db:4c:38:34:82:99:da:1a:df:ac:a2: c8:90:63:a5:27:be:71:2c:55:b5:aa:bc:57:30:b1:48:cf:d3: e3:b3:0a:b2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUA+833au7V8ici14UU/E44Z3s58UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjIwNFoX DTI3MDUwMTIxMjcwNFowMzExMC8GA1UEAxMoMjg0QzVDMkYxNzZDMThEOTQ2REFB QkI2REVCMTM0NTQ1NDFCREFDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfQHZQpwkeuKyfe/ReD166CL/Up4eEpvSmP7rFEdxomXgg5y/xKCXzFHwTD TfqPt2ChVp+fM39sMcEc3MWELUrEatoFeGJhfqVLBTfWIhQd71v3vtrr4fcNW3i/ s3aIkmAz63Kc2oU06VPnTApUW4p3aA+/x4jC1aEUkMgdnLfP+FIDISYn3im/RSog EHT7azAR4LRHHDEMSX+QYLqwjkHS13CNMtjpy1SJLlrX/GHGEWHi/m0t+iBN+ZzM 78cXeJof+i6tDfjwTi6OZk34sYEHnFDNCyiHD+1Cdl6lEyWi8tzlpsVrWLgEnR3w L0SeM+BoAeHFpTpt3VuivDK9GZECAwEAAaOCAcswggHHMB0GA1UdDgQWBBQoTFwv F2wY2Ubaq7besTRUVBvayzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTgxNTYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXKk+AwDQYJKoZIhvcNAQELBQADggEBAEQ0W4kyfOHibrD1Dbvz1FPDI5E+ s8vcIDIZarJJTJKm1VnQhU4tuCWVQqhOvtmdYnjR4ok/8DtZaba+YGxGEMJBWpP1 p0gU4IpyjQVMWEd+Mv70ThjoG4nT+/icWguUtItDISSY0a3awCEHpr9zMCmA48AT gqAITPtoJUmpVrD6QcfGhsRlKBVbtZU0lv8N1kYHLOqCQT3hHrFKUzA6v8rbQyta a2QRPPFTuhOUcNV2f5E1f6W5DijeEMT/+Nack++bLYzAgZfFVuz8K9UmVbixWlo6 MIkdZz1aGN+PfeDbTDg0gpnaGt+sosiQY6UnvnEsVbWqvFcwsUjP0+OzCrI= -----END CERTIFICATE-----Generated at Sun May 3 01:44:05 2026 by rpki-client