$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152382.roa File: AS152382.roa (raw, json) Hash identifier: WmhqAxaAqAaxZUnDeJfcRKFyb+EHn8f026mDYj2YwiA= Subject key identifier: E0:7E:E5:CA:59:C3:3C:DE:CE:28:1E:93:A1:6A:67:FE:41:EF:F4:AE Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2C08721B35FC1816590DE44D88910715958A947E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152382.roa Signing time: Sun 03 May 2026 05:38:53 +0000 ROA not before: Sun 03 May 2026 05:33:53 +0000 ROA not after: Sun 02 May 2027 05:38:53 +0000 asID: 152382 IP address blocks: 157.15.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:08:72:1b:35:fc:18:16:59:0d:e4:4d:88:91:07:15:95:8a:94:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 05:33:53 2026 GMT Not After : May 2 05:38:53 2027 GMT Subject: CN=E07EE5CA59C33CDECE281E93A16A67FE41EFF4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:07:73:29:a5:ef:b2:0f:89:ca:fd:49:8a: 11:e2:c4:9a:98:08:a0:ca:02:73:aa:73:93:d9:47: ed:e0:40:cf:90:8c:49:eb:e6:bf:39:19:e0:85:73: 31:4c:12:75:8a:8c:7e:1e:5e:e1:5b:57:6e:22:98: a2:5b:9c:77:7b:d7:d2:f4:ae:9e:02:14:45:8a:5b: 76:35:97:6f:a7:2d:99:18:7d:fe:51:0a:44:aa:00: d6:b9:b0:51:7c:01:68:ad:64:a6:bf:76:39:b7:a8: 33:57:74:7e:0c:82:5c:dd:c0:38:b6:4a:36:a1:88: 1e:1c:8c:1c:06:3a:9d:95:9e:24:7d:40:4b:c4:cd: 96:62:20:e3:06:4b:06:ab:5b:37:f8:9c:f5:92:90: 27:9b:e1:ff:9f:c4:e2:2a:44:44:90:32:5a:81:e2: 3e:80:be:c0:90:4c:45:9b:ed:47:54:61:d2:78:c2: e0:75:82:e1:99:b6:da:e7:99:5c:ba:ae:bf:e6:51: 79:6a:89:2b:81:7a:89:6b:9a:ff:cf:60:fb:a9:96: ac:8e:2f:0c:50:eb:80:9c:7f:46:b4:63:74:dd:f4: 87:67:28:3b:2b:92:1c:b8:c5:31:12:cd:c0:d7:9f: 63:49:a7:89:02:27:c5:54:73:29:ff:0e:ea:9e:cb: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:E5:CA:59:C3:3C:DE:CE:28:1E:93:A1:6A:67:FE:41:EF:F4:AE X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152382.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.166.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:5f:69:4d:d6:3c:40:2e:05:3d:93:28:6f:27:b2:08:28:5f: f3:0e:df:69:00:bf:f1:08:a9:8f:e4:dc:85:10:4a:61:2f:64: 18:f4:82:8b:5b:e0:49:9d:43:1f:94:d9:bb:d5:4c:61:3f:66: dc:58:7a:ea:95:5b:d1:7b:ac:88:42:2e:14:76:86:3a:70:09: bb:5d:07:c9:28:ff:94:d8:8c:79:6e:79:18:42:7f:a2:8e:6e: 68:c3:cc:18:36:47:ea:96:f3:42:7c:2c:8d:83:1a:f9:c5:21: e1:80:63:84:92:b5:14:4a:4c:44:0f:ed:80:14:36:b8:ef:30: 8f:b7:98:77:29:91:23:42:b0:28:57:4d:26:1a:60:85:eb:47: 09:f8:1b:56:38:b7:40:cb:c2:37:f2:ba:23:37:a0:27:c4:e9: 87:1d:d7:f4:0c:9f:2f:a5:52:f1:bf:4f:15:b9:94:ed:da:63: f8:b7:64:13:15:d5:ef:b1:99:35:ec:e4:c0:07:67:bc:0a:16: ce:8b:00:82:cc:56:6a:65:b6:bf:a0:dc:b3:7a:11:ef:f1:25: 4a:f5:ab:57:a1:c0:a3:25:65:d1:2e:67:84:8c:62:84:18:f2: d0:47:1d:c5:1a:6e:b6:c5:26:95:f9:a4:f1:fd:88:d7:ce:81: 0d:5e:f0:c5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULAhyGzX8GBZZDeRNiJEHFZWKlH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzA1MzM1M1oX DTI3MDUwMjA1Mzg1M1owMzExMC8GA1UEAxMoRTA3RUU1Q0E1OUMzM0NERUNFMjgx RTkzQTE2QTY3RkU0MUVGRjRBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5wB3Mppe+yD4nK/UmKEeLEmpgIoMoCc6pzk9lH7eBAz5CMSevmvzkZ4IVz MUwSdYqMfh5e4VtXbiKYolucd3vX0vSungIURYpbdjWXb6ctmRh9/lEKRKoA1rmw UXwBaK1kpr92ObeoM1d0fgyCXN3AOLZKNqGIHhyMHAY6nZWeJH1AS8TNlmIg4wZL BqtbN/ic9ZKQJ5vh/5/E4ipERJAyWoHiPoC+wJBMRZvtR1Rh0njC4HWC4Zm22ueZ XLquv+ZReWqJK4F6iWua/89g+6mWrI4vDFDrgJx/RrRjdN30h2coOyuSHLjFMRLN wNefY0mniQInxVRzKf8O6p7L9nMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTgfuXK WcM83s4oHpOhamf+Qe/0rjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyMzgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnQ+mMA0GCSqGSIb3DQEBCwUAA4IBAQAbX2lN1jxALgU9kyhvJ7IIKF/z Dt9pAL/xCKmP5NyFEEphL2QY9IKLW+BJnUMflNm71UxhP2bcWHrqlVvRe6yIQi4U doY6cAm7XQfJKP+U2Ix5bnkYQn+ijm5ow8wYNkfqlvNCfCyNgxr5xSHhgGOEkrUU SkxED+2AFDa47zCPt5h3KZEjQrAoV00mGmCF60cJ+BtWOLdAy8I38rojN6AnxOmH Hdf0DJ8vpVLxv08VuZTt2mP4t2QTFdXvsZk17OTAB2e8ChbOiwCCzFZqZba/oNyz ehHv8SVK9atXocCjJWXRLmeEjGKEGPLQRx3FGm62xSaV+aTx/YjXzoENXvDF -----END CERTIFICATE-----Generated at Tue May 12 22:43:33 2026 by rpki-client