$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152345.roa File: AS152345.roa (raw, json) Hash identifier: ytjG+2tu86OG/RayLxYEGYsaBU0iouBhYnUzEcWz9IQ= Subject key identifier: 74:36:FB:C5:F1:CD:55:1A:E0:AA:F2:95:C8:98:1A:D6:6D:CE:33:51 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 3106F1A092C8B964D57A4E909E7050F75D6388B9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152345.roa Signing time: Mon 22 Jun 2026 02:37:22 +0000 ROA not before: Mon 22 Jun 2026 02:32:22 +0000 ROA not after: Mon 21 Jun 2027 02:37:22 +0000 asID: 152345 IP address blocks: 162.4.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:06:f1:a0:92:c8:b9:64:d5:7a:4e:90:9e:70:50:f7:5d:63:88:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 22 02:32:22 2026 GMT Not After : Jun 21 02:37:22 2027 GMT Subject: CN=7436FBC5F1CD551AE0AAF295C8981AD66DCE3351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:20:97:b8:51:8e:0e:27:9f:58:ee:c8:8b: 6a:c8:f2:bf:da:d6:ba:d1:71:de:7a:17:d0:0c:80: 0a:12:8f:8b:14:f0:95:f3:fb:e6:8c:ce:3d:74:9c: 3c:cc:7d:28:e6:db:9e:af:a0:3a:19:fd:42:b8:f8: ce:33:4b:12:61:79:a5:8f:91:2d:29:97:67:da:98: c2:1f:db:76:0f:03:4f:0e:41:86:2e:fa:c7:0c:0a: 65:47:9f:dc:57:3b:e4:d9:fa:c9:33:f9:83:73:08: bc:b7:ca:b7:90:d8:59:4c:ae:12:4b:be:59:0e:c7: 5b:d6:2c:d3:87:00:86:f3:48:30:6b:c0:53:1c:39: 8c:0d:0f:ee:0f:ec:d7:1b:e7:bc:08:a0:59:3d:20: 81:bb:eb:0a:a9:d3:21:03:b3:42:b3:87:23:20:62: b6:81:5f:31:37:28:7e:c2:03:51:be:d4:6e:79:bd: 41:7a:75:58:4e:39:82:cc:cb:5c:55:0b:48:31:18: 8b:7d:96:2e:4e:2d:ea:f5:68:34:16:e2:e1:74:2c: 04:c3:2c:4c:d4:a7:f0:f8:68:a9:99:d2:64:7c:c2: f4:ca:3c:aa:27:15:0b:ea:15:36:9e:8f:0c:31:00: a1:6d:99:d4:12:36:30:6a:7a:a2:dd:f2:73:71:1b: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:36:FB:C5:F1:CD:55:1A:E0:AA:F2:95:C8:98:1A:D6:6D:CE:33:51 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152345.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.148.0/24 Signature Algorithm: sha256WithRSAEncryption 49:3a:47:68:79:6e:76:c9:23:ee:aa:67:00:f2:92:cd:44:2b: cc:6c:0e:9f:54:18:b8:96:01:53:b9:ba:56:4f:f9:a8:fb:15: 28:84:42:4b:51:a1:76:ff:1e:93:98:fb:90:49:4b:fc:70:ef: ae:42:6b:ad:24:ad:0e:57:09:bc:8b:8f:a4:15:f7:3f:33:ad: 61:30:d3:cb:4b:af:e2:52:36:66:81:1e:e0:aa:9a:7a:60:7d: cd:5f:16:16:35:97:1d:9f:91:03:10:5c:2e:b1:9b:74:d1:a7: 89:53:92:0c:5f:9a:b5:de:16:2e:ec:92:5b:ec:ad:c8:99:14: d2:b6:51:9c:49:91:c7:8f:c3:cf:18:e9:4d:05:a1:93:bb:07: df:60:46:97:cc:b5:66:ee:cb:6d:03:a5:d1:4b:ed:01:69:a1: eb:b3:dd:bd:35:06:50:d4:b3:b5:3f:12:b6:a8:16:d6:33:58: 0f:77:50:b2:be:a2:2e:63:3a:05:2f:90:49:a9:0c:9e:aa:47: 09:84:b5:8f:4e:4e:76:b3:c1:4a:21:9a:ea:e5:40:84:b1:1b: 42:d5:85:49:68:a1:dc:30:9b:56:94:b3:82:99:49:6e:23:64: b7:52:8d:af:71:47:9d:6c:50:c6:24:60:ec:de:1d:c5:33:06: 9f:46:84:2a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMQbxoJLIuWTVek6QnnBQ911jiLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyMjAyMzIyMloX DTI3MDYyMTAyMzcyMlowMzExMC8GA1UEAxMoNzQzNkZCQzVGMUNENTUxQUUwQUFG Mjk1Qzg5ODFBRDY2RENFMzM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALN6IJe4UY4OJ59Y7siLasjyv9rWutFx3noX0AyAChKPixTwlfP75ozOPXSc PMx9KObbnq+gOhn9Qrj4zjNLEmF5pY+RLSmXZ9qYwh/bdg8DTw5Bhi76xwwKZUef 3Fc75Nn6yTP5g3MIvLfKt5DYWUyuEku+WQ7HW9Ys04cAhvNIMGvAUxw5jA0P7g/s 1xvnvAigWT0ggbvrCqnTIQOzQrOHIyBitoFfMTcofsIDUb7Ubnm9QXp1WE45gszL XFULSDEYi32WLk4t6vVoNBbi4XQsBMMsTNSn8PhoqZnSZHzC9Mo8qicVC+oVNp6P DDEAoW2Z1BI2MGp6ot3yc3EbxOMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR0NvvF 8c1VGuCq8pXImBrWbc4zUTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogSUMA0GCSqGSIb3DQEBCwUAA4IBAQBJOkdoeW52ySPuqmcA8pLNRCvM bA6fVBi4lgFTubpWT/mo+xUohEJLUaF2/x6TmPuQSUv8cO+uQmutJK0OVwm8i4+k Ffc/M61hMNPLS6/iUjZmgR7gqpp6YH3NXxYWNZcdn5EDEFwusZt00aeJU5IMX5q1 3hYu7JJb7K3ImRTStlGcSZHHj8PPGOlNBaGTuwffYEaXzLVm7sttA6XRS+0BaaHr s929NQZQ1LO1PxK2qBbWM1gPd1CyvqIuYzoFL5BJqQyeqkcJhLWPTk52s8FKIZrq 5UCEsRtC1YVJaKHcMJtWlLOCmUluI2S3Uo2vcUedbFDGJGDs3h3FMwafRoQq -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:31 2026 by rpki-client