$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152757.roa File: AS152757.roa (raw, json) Hash identifier: cVtIyX3PBVxF3Y+w7FW5hi0/P80XCO64hwVOYyfDW4I= Subject key identifier: F4:95:08:AF:76:0F:76:BA:3D:6D:B8:53:F7:49:01:7D:0A:A8:46:E4 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6293985003E4CFC887442E3FBA5CF2DE4D67D55A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152757.roa Signing time: Mon 04 May 2026 06:42:22 +0000 ROA not before: Mon 04 May 2026 06:37:22 +0000 ROA not after: Mon 03 May 2027 06:42:22 +0000 asID: 152757 IP address blocks: 157.66.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:93:98:50:03:e4:cf:c8:87:44:2e:3f:ba:5c:f2:de:4d:67:d5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 4 06:37:22 2026 GMT Not After : May 3 06:42:22 2027 GMT Subject: CN=F49508AF760F76BA3D6DB853F749017D0AA846E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:46:85:b5:e4:ec:3d:38:fc:86:25:ad:6c: 20:03:90:e0:ce:33:1a:2f:be:a6:39:92:f9:b6:52: b4:0e:87:62:80:e4:df:70:04:1c:9d:a9:f0:31:71: e0:87:b0:83:be:17:44:7c:43:36:d1:8d:b8:62:89: 03:51:21:8c:9b:12:0f:69:3a:b8:f6:b1:20:03:75: 8b:64:2b:9a:b1:e4:1e:a9:3e:90:d3:2d:6b:bd:3f: d5:2c:d2:ca:8e:a3:5e:b2:b7:57:2a:30:2c:05:48: bc:2f:d1:a4:8c:ca:1e:e2:61:c4:55:a9:07:63:92: 6f:08:b3:e8:fc:f4:64:f2:37:aa:4b:93:35:e2:a4: 90:32:56:53:06:0f:68:c8:86:85:54:5a:43:cf:9d: cc:be:9e:25:85:9a:a3:07:37:df:64:2b:70:b8:23: 40:d2:7f:d3:0d:18:ed:aa:2a:b8:91:71:00:48:c0: ee:ac:21:c3:e2:b3:4d:6e:ff:16:3a:0e:2b:27:a2: 3e:5d:d2:ef:0d:1e:77:b5:e6:91:4b:c2:11:39:5b: c2:c0:ce:1e:18:fb:78:24:b9:91:09:ff:60:56:75: 21:49:d6:b3:48:88:b9:8c:92:00:5c:f9:da:9d:05: a3:bd:81:67:38:db:9d:3e:5f:76:7c:e6:61:4a:f0: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:08:AF:76:0F:76:BA:3D:6D:B8:53:F7:49:01:7D:0A:A8:46:E4 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152757.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.236.0/23 Signature Algorithm: sha256WithRSAEncryption 00:1f:f0:5b:f3:01:5f:61:3a:82:51:f7:10:03:48:92:0b:74: f5:c3:f3:d1:4e:b3:0a:cc:fe:fd:ad:32:3a:3e:94:2c:bf:81: 22:c0:ff:fd:4d:3b:f8:de:4e:90:e7:bb:13:3b:87:77:c9:e9: 1e:c8:09:85:9f:ed:65:0c:5c:b4:bd:00:c2:f8:0b:66:89:54: c0:66:12:04:16:c5:75:ea:9c:ad:41:e3:b4:1e:ea:dd:69:8b: 96:c4:5d:6e:5d:75:4d:50:dd:1e:42:7d:79:30:1c:8b:60:0a: 7a:f9:d7:1d:75:92:0b:a9:de:fd:f2:7a:49:0d:de:f5:a2:58: 46:c6:2d:b1:45:2b:8e:24:ed:a4:2b:80:05:36:5e:99:7b:cc: 3b:a8:03:d0:d2:96:fd:28:b7:1a:c9:79:43:04:b8:1b:f6:ad: ff:1c:d5:57:2c:a8:4e:f3:59:ba:e2:4c:ee:2e:d6:41:46:53: 2e:56:5a:1e:e5:22:c1:e6:a5:13:cb:40:1b:da:c7:8e:7d:38: 60:43:0a:e4:b2:53:b3:f6:72:0c:0e:a5:55:ea:1f:54:d7:72: 87:c7:d9:e2:34:3e:55:e1:0f:be:b9:d2:a3:65:b5:35:5f:7e: 56:7a:33:d3:81:f1:e4:d1:40:b2:ee:5f:f8:ad:30:47:8c:0c: 29:c6:7e:46 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYpOYUAPkz8iHRC4/ulzy3k1n1VowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwNDA2MzcyMloX DTI3MDUwMzA2NDIyMlowMzExMC8GA1UEAxMoRjQ5NTA4QUY3NjBGNzZCQTNENkRC ODUzRjc0OTAxN0QwQUE4NDZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxLRoW15Ow9OPyGJa1sIAOQ4M4zGi++pjmS+bZStA6HYoDk33AEHJ2p8DFx 4Iewg74XRHxDNtGNuGKJA1EhjJsSD2k6uPaxIAN1i2QrmrHkHqk+kNMta70/1SzS yo6jXrK3VyowLAVIvC/RpIzKHuJhxFWpB2OSbwiz6Pz0ZPI3qkuTNeKkkDJWUwYP aMiGhVRaQ8+dzL6eJYWaowc332QrcLgjQNJ/0w0Y7aoquJFxAEjA7qwhw+KzTW7/ FjoOKyeiPl3S7w0ed7XmkUvCETlbwsDOHhj7eCS5kQn/YFZ1IUnWs0iIuYySAFz5 2p0Fo72BZzjbnT5fdnzmYUrwJesCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT0lQiv dg92uj1tuFP3SQF9CqhG5DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNzU3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBnULsMA0GCSqGSIb3DQEBCwUAA4IBAQAAH/Bb8wFfYTqCUfcQA0iSC3T1 w/PRTrMKzP79rTI6PpQsv4EiwP/9TTv43k6Q57sTO4d3yekeyAmFn+1lDFy0vQDC +AtmiVTAZhIEFsV16pytQeO0HurdaYuWxF1uXXVNUN0eQn15MByLYAp6+dcddZIL qd798npJDd71olhGxi2xRSuOJO2kK4AFNl6Ze8w7qAPQ0pb9KLcayXlDBLgb9q3/ HNVXLKhO81m64kzuLtZBRlMuVloe5SLB5qUTy0Ab2seOfThgQwrkslOz9nIMDqVV 6h9U13KHx9niND5V4Q++udKjZbU1X35WejPTgfHk0UCy7l/4rTBHjAwpxn5G -----END CERTIFICATE-----Generated at Tue May 12 22:42:20 2026 by rpki-client