$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152413.roa File: AS152413.roa (raw, json) Hash identifier: Jz5tx1IUfh5VWXsUGXW+KIZMi3l4y3iAkZ1/8drCJgs= Subject key identifier: C3:3D:8A:32:BB:3C:FD:BB:95:7F:EA:17:0C:80:97:E2:90:66:76:00 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 10EC9DADAF07CBDE17AE5ACCC5A58F90200A48E6 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152413.roa Signing time: Mon 04 May 2026 09:53:14 +0000 ROA not before: Mon 04 May 2026 09:48:14 +0000 ROA not after: Mon 03 May 2027 09:53:14 +0000 asID: 152413 IP address blocks: 157.20.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ec:9d:ad:af:07:cb:de:17:ae:5a:cc:c5:a5:8f:90:20:0a:48:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 4 09:48:14 2026 GMT Not After : May 3 09:53:14 2027 GMT Subject: CN=C33D8A32BB3CFDBB957FEA170C8097E290667600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:89:23:ef:e3:48:4f:fa:be:a8:4b:40:0c: c9:3d:7d:66:9c:a0:6a:ab:98:0d:97:a4:3c:c5:62: 49:df:52:7d:5f:b9:d4:e0:6c:e2:34:8e:7a:64:e8: f2:19:50:ff:8d:dc:f5:6b:a6:f7:f8:7a:54:5e:9c: b7:ac:2c:a1:7a:26:4c:fd:c9:7c:1b:13:7c:b0:ec: 22:8b:45:35:98:5f:25:86:00:49:4e:9c:ef:4b:b6: 54:84:1c:56:8d:81:e3:0b:36:00:31:46:a4:c2:12: 10:fd:29:31:dc:74:67:0a:ec:84:53:6c:d1:52:21: bb:f8:7f:06:f4:52:40:b3:b4:30:5f:b7:02:dc:90: 82:48:ed:83:13:34:9b:fd:2c:be:ee:df:d1:7c:34: ea:06:79:21:be:97:51:35:57:dc:1b:ab:03:c4:73: 4d:21:48:e4:4f:33:c9:46:a0:9e:f6:32:3b:9a:5c: f5:77:16:13:fc:37:62:79:f7:dc:aa:6b:eb:e7:7a: 92:8d:8b:0b:10:e6:49:5c:94:46:03:96:52:b9:0a: b6:3b:5a:f6:22:30:30:ec:a4:d8:66:a6:59:38:da: ee:2f:3e:6d:78:5c:26:f6:d8:12:32:62:39:e0:fa: a4:5d:f8:45:38:ca:3b:b2:25:07:11:5a:f6:58:53: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:8A:32:BB:3C:FD:BB:95:7F:EA:17:0C:80:97:E2:90:66:76:00 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.120.0/23 Signature Algorithm: sha256WithRSAEncryption 12:ac:2d:32:83:16:81:60:73:27:e5:ea:3f:c9:66:f1:10:1a: 09:69:f0:bf:d9:f9:eb:33:09:47:30:7d:e8:fb:a8:d4:57:e4: 9f:26:e8:18:e0:e6:cc:28:88:75:65:34:ce:bb:29:bf:55:3b: ff:f6:0c:b9:6b:a9:b4:4b:1f:81:af:df:b2:8a:d1:cc:bd:10: 3f:37:0b:ec:73:c2:3d:7a:25:18:3a:bc:85:16:84:b8:72:e5: 02:8c:4a:8e:20:40:f1:4f:70:f4:16:fa:b2:45:14:e9:82:db: 8c:c5:c3:8b:8e:f7:10:67:d5:60:51:3b:70:a8:8c:e1:d5:22: a4:34:76:e6:bd:a7:a5:a8:6f:e7:2d:ee:52:ed:21:98:6c:ee: b4:2d:ce:77:48:2b:89:aa:2b:fe:75:3b:7b:6b:c9:ac:74:d9: c1:b0:7c:0b:14:96:ff:14:ef:85:2f:8d:3f:38:40:28:18:43: df:41:17:dd:93:9b:cc:b2:70:8f:06:b5:14:e2:fb:16:8a:68: 9b:69:50:0a:bd:fe:06:e7:d5:da:57:3f:8e:07:16:eb:d9:d0: a8:a0:ee:43:bc:6e:de:06:08:46:39:eb:f7:28:4a:65:8e:8a: 64:59:e9:f5:56:a3:36:94:af:ba:72:ec:ba:f4:14:5b:d5:3f: 5d:e5:d5:c4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEOydra8Hy94XrlrMxaWPkCAKSOYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwNDA5NDgxNFoX DTI3MDUwMzA5NTMxNFowMzExMC8GA1UEAxMoQzMzRDhBMzJCQjNDRkRCQjk1N0ZF QTE3MEM4MDk3RTI5MDY2NzYwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYmiSPv40hP+r6oS0AMyT19ZpygaquYDZekPMViSd9SfV+51OBs4jSOemTo 8hlQ/43c9Wum9/h6VF6ct6wsoXomTP3JfBsTfLDsIotFNZhfJYYASU6c70u2VIQc Vo2B4ws2ADFGpMISEP0pMdx0ZwrshFNs0VIhu/h/BvRSQLO0MF+3AtyQgkjtgxM0 m/0svu7f0Xw06gZ5Ib6XUTVX3BurA8RzTSFI5E8zyUagnvYyO5pc9XcWE/w3Ynn3 3Kpr6+d6ko2LCxDmSVyURgOWUrkKtjta9iIwMOyk2GamWTja7i8+bXhcJvbYEjJi OeD6pF34RTjKO7IlBxFa9lhTV9MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTDPYoy uzz9u5V/6hcMgJfikGZ2ADAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNDEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnRR4MA0GCSqGSIb3DQEBCwUAA4IBAQASrC0ygxaBYHMn5eo/yWbxEBoJ afC/2fnrMwlHMH3o+6jUV+SfJugY4ObMKIh1ZTTOuym/VTv/9gy5a6m0Sx+Br9+y itHMvRA/Nwvsc8I9eiUYOryFFoS4cuUCjEqOIEDxT3D0FvqyRRTpgtuMxcOLjvcQ Z9VgUTtwqIzh1SKkNHbmvaelqG/nLe5S7SGYbO60Lc53SCuJqiv+dTt7a8msdNnB sHwLFJb/FO+FL40/OEAoGEPfQRfdk5vMsnCPBrUU4vsWimibaVAKvf4G59XaVz+O Bxbr2dCooO5DvG7eBghGOev3KEpljopkWen1VqM2lK+6cuy69BRb1T9d5dXE -----END CERTIFICATE-----Generated at Tue May 12 22:43:02 2026 by rpki-client