$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa File: AS147152.roa (raw, json) Hash identifier: WG65Sd1jLDQxVilInULw66+nRb7lbTAcfq005kJ9PbM= Subject key identifier: 8E:76:C8:39:6B:8F:2E:F6:08:0D:08:C6:2B:FA:8C:DC:7A:06:96:4A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 16A82AADA4A34F6EC7916A2F5D6435E747B697B6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa Signing time: Sun 03 May 2026 04:30:14 +0000 ROA not before: Sun 03 May 2026 04:25:14 +0000 ROA not after: Sun 02 May 2027 04:30:14 +0000 asID: 147152 IP address blocks: 103.177.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:2a:ad:a4:a3:4f:6e:c7:91:6a:2f:5d:64:35:e7:47:b6:97:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 04:25:14 2026 GMT Not After : May 2 04:30:14 2027 GMT Subject: CN=8E76C8396B8F2EF6080D08C62BFA8CDC7A06964A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:64:f6:bf:5e:3c:6b:c9:7f:f5:b6:d8:9f: 2c:99:a6:7b:8f:93:aa:1f:df:23:b6:33:36:af:ed: 47:66:27:aa:5e:44:51:88:cf:a2:89:7b:e9:55:91: b3:b7:6d:20:77:7d:49:18:a0:10:e5:1a:0e:53:41: 10:40:b4:c5:05:ca:6b:37:ad:ae:1c:15:d9:b0:e4: 88:73:69:d9:2d:1f:dd:fe:57:5e:9c:76:37:4e:75: 0e:1e:ea:1f:ec:18:70:d0:9f:b8:68:36:7a:c3:97: c3:6c:77:bb:33:dc:c6:b1:29:f9:cb:97:53:9e:90: 7a:73:e6:68:f5:f5:c7:9d:aa:2f:c1:20:30:05:d7: 22:4d:3f:ce:da:c6:2b:59:2d:8a:20:e1:74:58:fa: 1c:7b:5c:f7:9b:bf:c0:a9:3a:f7:97:00:61:87:25: 7a:dd:89:27:ab:81:72:95:2f:02:4d:62:63:08:7f: a1:86:49:04:a7:dc:c8:c2:b9:03:9d:f5:9b:f0:ee: 7e:b3:32:ce:c6:83:26:77:90:58:ae:48:c3:9d:61: 51:fc:75:4e:d8:f1:d7:2d:98:e1:88:24:72:4c:59: e5:b7:e0:bd:af:99:57:b4:54:13:68:b2:3c:07:49: f3:55:73:39:8c:6e:fe:80:bc:bb:60:52:09:86:80: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:C8:39:6B:8F:2E:F6:08:0D:08:C6:2B:FA:8C:DC:7A:06:96:4A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.56.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c5:0f:e8:7c:25:00:78:89:a7:d5:f1:01:51:a2:7d:99:95: 8b:38:46:7e:44:d7:d0:4e:82:5f:5f:2c:a1:0d:9c:b9:8a:fe: 45:f7:bd:e1:12:e8:73:63:a6:2a:d5:41:66:47:f1:78:73:9a: ac:fb:3d:2d:02:83:cc:87:11:d3:70:15:4f:66:51:75:98:bd: a7:b7:0e:3f:80:4a:bc:4a:9a:51:27:22:7a:67:8c:e5:3b:18: c4:fd:d2:b5:02:63:51:f7:7f:5d:73:fd:d0:e4:e4:40:f7:69: c8:4f:12:92:9d:a1:e9:ea:8c:8c:52:42:00:0e:ef:cd:08:ea: 9b:a5:e4:52:44:56:9d:30:53:c9:ef:20:a5:9d:78:f0:60:12: aa:b3:36:04:60:8f:c7:2e:ec:33:5b:40:d0:a4:81:b0:1d:0b: 99:ab:d7:37:78:5b:4c:47:ba:c5:44:05:47:78:4f:7f:77:88: e6:01:75:1f:4d:08:ed:80:06:09:80:b3:09:d3:b4:70:5b:d7: 6a:91:9b:43:96:75:49:ee:da:ba:46:7c:43:02:aa:57:6c:aa: d0:71:ab:17:ad:7a:9d:7f:55:0a:cd:2d:3d:f7:df:05:e2:b9: e3:1d:7c:f3:92:3a:78:2c:cf:61:9f:e2:53:7d:c5:b8:07:6b: 7d:75:33:13 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFqgqraSjT27HkWovXWQ150e2l7YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA0MjUxNFoX DTI3MDUwMjA0MzAxNFowMzExMC8GA1UEAxMoOEU3NkM4Mzk2QjhGMkVGNjA4MEQw OEM2MkJGQThDREM3QTA2OTY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpuZPa/XjxryX/1ttifLJmme4+Tqh/fI7YzNq/tR2Ynql5EUYjPool76VWR s7dtIHd9SRigEOUaDlNBEEC0xQXKazetrhwV2bDkiHNp2S0f3f5XXpx2N051Dh7q H+wYcNCfuGg2esOXw2x3uzPcxrEp+cuXU56QenPmaPX1x52qL8EgMAXXIk0/ztrG K1ktiiDhdFj6HHtc95u/wKk695cAYYclet2JJ6uBcpUvAk1iYwh/oYZJBKfcyMK5 A531m/DufrMyzsaDJneQWK5Iw51hUfx1Ttjx1y2Y4YgkckxZ5bfgva+ZV7RUE2iy PAdJ81VzOYxu/oC8u2BSCYaAxgMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSOdsg5 a48u9ggNCMYr+ozcegaWSjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7E4MA0GCSqGSIb3DQEBCwUAA4IBAQBvxQ/ofCUAeImn1fEBUaJ9mZWL OEZ+RNfQToJfXyyhDZy5iv5F973hEuhzY6Yq1UFmR/F4c5qs+z0tAoPMhxHTcBVP ZlF1mL2ntw4/gEq8SppRJyJ6Z4zlOxjE/dK1AmNR939dc/3Q5ORA92nITxKSnaHp 6oyMUkIADu/NCOqbpeRSRFadMFPJ7yClnXjwYBKqszYEYI/HLuwzW0DQpIGwHQuZ q9c3eFtMR7rFRAVHeE9/d4jmAXUfTQjtgAYJgLMJ07RwW9dqkZtDlnVJ7tq6RnxD AqpXbKrQcasXrXqdf1UKzS09998F4rnjHXzzkjp4LM9hn+JTfcW4B2t9dTMT -----END CERTIFICATE-----Generated at Tue May 12 22:43:15 2026 by rpki-client