$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152815.roa File: AS152815.roa (raw, json) Hash identifier: hnJYGYPpCzT4M/ZDIdC2bpMUBwzBnOjlNdTGPBr8GTw= Subject key identifier: 52:04:B2:F7:A5:1B:4C:8E:A3:97:90:E0:9D:C5:C3:DD:2C:2E:5C:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6F12CEB441A524419F1254E537A72FECFB95A842 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152815.roa Signing time: Tue 23 Jun 2026 02:24:30 +0000 ROA not before: Tue 23 Jun 2026 02:19:30 +0000 ROA not after: Tue 22 Jun 2027 02:24:30 +0000 asID: 152815 IP address blocks: 2001:df7:19c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:12:ce:b4:41:a5:24:41:9f:12:54:e5:37:a7:2f:ec:fb:95:a8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 23 02:19:30 2026 GMT Not After : Jun 22 02:24:30 2027 GMT Subject: CN=5204B2F7A51B4C8EA39790E09DC5C3DD2C2E5C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b7:a9:28:e2:5b:15:ea:21:34:f6:ba:78:11: dd:61:a7:63:15:56:39:92:bb:6e:dc:6d:39:cc:e7: c6:2a:de:64:59:27:06:5d:43:e3:cf:d1:b8:6c:02: 9e:79:d8:8c:88:27:fe:37:bd:c4:6f:65:7c:e6:5f: 4c:d1:32:b5:da:a5:f0:94:f6:8b:af:b8:67:08:47: 6a:a3:26:eb:bd:e6:58:a6:46:dd:f4:be:bf:78:a0: 9c:d8:eb:55:93:d7:bf:4a:55:bb:f1:53:3a:cd:38: 3d:82:f3:01:2c:2a:fb:5e:69:20:f8:69:f2:5d:5b: fb:cd:50:0a:21:47:1f:6f:8b:be:f3:6a:2a:a1:82: 02:7d:c7:17:92:8b:d2:82:36:09:22:c6:10:d2:f1: 44:d8:87:2a:84:f3:6a:53:29:9f:62:de:2d:10:33: 09:bf:8b:b6:b7:5c:a2:b7:e5:66:63:59:b3:0a:e4: 82:62:8c:b3:58:bc:48:10:e9:e3:70:dd:47:ad:de: c2:4d:44:a4:4a:39:0a:0d:b1:fc:f5:28:64:ee:f1: 51:54:22:97:ae:29:77:f5:c3:cf:b8:17:60:ba:be: 2b:a0:7e:27:01:82:c7:ec:47:f0:e6:f2:20:d7:e8: 66:66:64:b6:8b:fb:21:0c:d2:7b:9b:00:80:f2:36: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:B2:F7:A5:1B:4C:8E:A3:97:90:E0:9D:C5:C3:DD:2C:2E:5C:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152815.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:19c0::/48 Signature Algorithm: sha256WithRSAEncryption 23:c3:38:ce:d8:7c:e6:98:2a:f3:53:b4:61:a0:66:4b:3b:82: 4a:a2:98:a8:8a:8c:94:52:64:f9:54:e6:e4:d8:07:18:75:67: ec:8f:39:fd:71:14:2e:10:ae:fc:73:80:83:02:8f:69:e3:7f: 1f:1f:42:aa:86:cb:eb:ab:3d:bf:f0:e4:59:2f:21:a1:cf:db: 3e:bb:4e:54:1e:66:3e:ab:46:c3:8d:f1:be:5b:b5:69:fa:a1: 1e:84:2b:08:2e:cd:91:1d:69:77:41:3c:83:42:f5:69:98:c8: 90:d6:79:b4:5b:17:65:e5:d1:b8:ae:fc:0e:72:ae:32:9b:a3: 37:54:17:9b:93:0f:ce:48:cb:5b:2c:60:cb:f3:86:c1:c2:49: f2:60:1a:a7:f4:70:44:b0:09:de:f1:cb:0a:ee:b1:aa:67:64: 74:4b:64:25:d8:99:37:76:c4:bf:67:73:0e:d4:9f:8c:2f:27: ac:49:d1:e3:3c:6f:fe:60:71:35:ce:d4:39:e9:10:11:9f:19: b0:88:e8:80:5c:6e:4e:5e:85:25:63:a4:62:fd:c1:de:79:63: 40:8c:b1:d1:b2:74:f2:d1:50:51:46:5b:96:9e:b0:1e:b2:16: 1b:91:ad:a7:c3:f1:54:37:c8:33:d7:fe:42:74:53:40:d9:ba: f8:33:81:14 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbxLOtEGlJEGfElTlN6cv7PuVqEIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyMzAyMTkzMFoX DTI3MDYyMjAyMjQzMFowMzExMC8GA1UEAxMoNTIwNEIyRjdBNTFCNEM4RUEzOTc5 MEUwOURDNUMzREQyQzJFNUMwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPe3qSjiWxXqITT2ungR3WGnYxVWOZK7btxtOcznxireZFknBl1D48/RuGwC nnnYjIgn/je9xG9lfOZfTNEytdql8JT2i6+4ZwhHaqMm673mWKZG3fS+v3ignNjr VZPXv0pVu/FTOs04PYLzASwq+15pIPhp8l1b+81QCiFHH2+LvvNqKqGCAn3HF5KL 0oI2CSLGENLxRNiHKoTzalMpn2LeLRAzCb+LtrdcorflZmNZswrkgmKMs1i8SBDp 43DdR63ewk1EpEo5Cg2x/PUoZO7xUVQil64pd/XDz7gXYLq+K6B+JwGCx+xH8Oby INfoZmZktov7IQzSe5sAgPI2cfECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRSBLL3 pRtMjqOXkOCdxcPdLC5cAzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9xnAMA0GCSqGSIb3DQEBCwUAA4IBAQAjwzjO2HzmmCrzU7RhoGZL O4JKopioioyUUmT5VObk2AcYdWfsjzn9cRQuEK78c4CDAo9p438fH0Kqhsvrqz2/ 8ORZLyGhz9s+u05UHmY+q0bDjfG+W7Vp+qEehCsILs2RHWl3QTyDQvVpmMiQ1nm0 Wxdl5dG4rvwOcq4ym6M3VBebkw/OSMtbLGDL84bBwknyYBqn9HBEsAne8csK7rGq Z2R0S2Ql2Jk3dsS/Z3MO1J+MLyesSdHjPG/+YHE1ztQ56RARnxmwiOiAXG5OXoUl Y6Ri/cHeeWNAjLHRsnTy0VBRRluWnrAeshYbka2nw/FUN8gz1/5CdFNA2br4M4EU -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:15 2026 by rpki-client