$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152846.roa File: AS152846.roa (raw, json) Hash identifier: OiccMQ/LXsicAvIeLs7B6bUccETNOm1QOurXgLsLkCY= Subject key identifier: 9F:B8:33:C8:76:CE:89:3F:21:D8:3F:08:F1:E8:7E:99:DD:DE:DA:46 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3E5957321EB25209A996C59BCAD02DE3A6AE951F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152846.roa Signing time: Thu 24 Sep 2026 08:24:24 +0000 ROA not before: Thu 24 Sep 2026 08:19:24 +0000 ROA not after: Thu 23 Sep 2027 08:24:24 +0000 asID: 152846 IP address blocks: 163.52.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:59:57:32:1e:b2:52:09:a9:96:c5:9b:ca:d0:2d:e3:a6:ae:95:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 24 08:19:24 2026 GMT Not After : Sep 23 08:24:24 2027 GMT Subject: CN=9FB833C876CE893F21D83F08F1E87E99DDDEDA46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:71:02:7e:fc:a0:b3:02:9e:ff:b7:a9:93:13: b4:50:25:b2:28:dd:48:ae:d9:b7:77:7f:78:8e:6a: 14:b5:4e:7f:e7:f5:2d:3e:9b:07:4d:e2:22:fb:e2: 49:a7:ad:80:b4:06:a5:29:35:13:46:78:48:ba:10: 4f:ae:90:48:08:e9:40:2c:b5:52:b5:41:51:43:67: f9:44:5b:3f:20:ae:46:41:3c:ba:cb:24:a1:73:15: 6f:ed:4e:de:74:95:b4:fe:56:38:b7:cd:ad:e3:38: 55:5f:cc:b8:7a:76:42:94:e4:6f:f5:bb:57:9f:72: b2:6e:2f:f4:d7:32:4c:c6:01:7f:cf:7b:0b:fa:fa: 3b:7c:dd:53:4b:3e:7e:1b:75:37:f4:ba:0d:fe:ab: 95:f4:ec:28:ac:6f:85:3b:d6:64:84:68:89:fe:04: 80:f8:ef:a1:a4:42:f5:13:91:f5:17:46:73:38:82: 6c:a4:30:e3:e0:46:85:3e:ec:e0:c7:d5:4b:78:b9: 7c:5a:52:5e:04:99:25:eb:18:53:b9:3a:64:2f:01: f0:16:e5:ef:2e:a7:72:e9:de:20:8c:61:79:df:4c: 41:8e:de:74:e7:5f:25:4b:e8:cb:c4:be:7a:f8:0b: 87:44:61:bd:83:39:22:a2:9c:a3:be:3a:85:3d:65: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:33:C8:76:CE:89:3F:21:D8:3F:08:F1:E8:7E:99:DD:DE:DA:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.199.0/24 Signature Algorithm: sha256WithRSAEncryption 02:83:bd:46:16:d5:ee:7b:d7:d8:4a:56:d6:2e:7f:0a:6b:ff: 0f:13:69:8a:3f:c9:dc:14:b9:38:df:74:d0:28:bd:ce:6a:73: c0:1d:6e:d8:ea:46:fe:57:da:06:6f:83:14:60:99:ce:e9:95: 15:28:db:9b:0d:b3:94:ec:e5:be:ef:0d:c2:b8:1b:5c:3f:ab: 54:68:f6:e6:77:8d:fe:a8:52:19:49:ee:a9:8c:49:b7:88:2f: 00:e2:33:8a:33:a9:26:a2:fe:1a:58:86:02:8b:42:b9:3d:76: 3b:45:1b:7b:d5:b8:76:c3:30:56:cb:65:b2:25:7c:ba:62:07: 02:14:a1:24:ad:73:87:6a:68:e6:53:4b:57:eb:89:45:e8:fd: a1:cd:d4:3c:17:2c:c7:20:19:b4:26:e3:82:57:f4:6c:27:9a: 2f:6e:a0:53:59:67:aa:29:56:c5:0b:56:c0:4c:fc:74:66:fb: 69:3f:53:85:84:0a:aa:56:43:15:65:07:3f:e1:36:1d:d4:45: 03:a3:f8:e0:fe:55:06:8d:80:14:e8:83:97:43:8a:74:1d:c5: ab:49:89:52:79:f2:1f:70:41:ec:e5:b9:05:42:a9:59:1b:88: 46:83:80:cc:41:a7:97:dc:6d:4a:1f:f0:59:fb:d1:eb:68:06: 5d:ff:eb:72 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPllXMh6yUgmplsWbytAt46aulR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyNDA4MTkyNFoX DTI3MDkyMzA4MjQyNFowMzExMC8GA1UEAxMoOUZCODMzQzg3NkNFODkzRjIxRDgz RjA4RjFFODdFOTlERERFREE0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZxAn78oLMCnv+3qZMTtFAlsijdSK7Zt3d/eI5qFLVOf+f1LT6bB03iIvvi SaetgLQGpSk1E0Z4SLoQT66QSAjpQCy1UrVBUUNn+URbPyCuRkE8usskoXMVb+1O 3nSVtP5WOLfNreM4VV/MuHp2QpTkb/W7V59ysm4v9NcyTMYBf897C/r6O3zdU0s+ fht1N/S6Df6rlfTsKKxvhTvWZIRoif4EgPjvoaRC9ROR9RdGcziCbKQw4+BGhT7s 4MfVS3i5fFpSXgSZJesYU7k6ZC8B8Bbl7y6ncuneIIxhed9MQY7edOdfJUvoy8S+ evgLh0RhvYM5IqKco746hT1lI7UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSfuDPI ds6JPyHYPwjx6H6Z3d7aRjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyODQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAozTHMA0GCSqGSIb3DQEBCwUAA4IBAQACg71GFtXue9fYSlbWLn8Ka/8P E2mKP8ncFLk433TQKL3OanPAHW7Y6kb+V9oGb4MUYJnO6ZUVKNubDbOU7OW+7w3C uBtcP6tUaPbmd43+qFIZSe6pjEm3iC8A4jOKM6kmov4aWIYCi0K5PXY7RRt71bh2 wzBWy2WyJXy6YgcCFKEkrXOHamjmU0tX64lF6P2hzdQ8FyzHIBm0JuOCV/RsJ5ov bqBTWWeqKVbFC1bATPx0ZvtpP1OFhAqqVkMVZQc/4TYd1EUDo/jg/lUGjYAU6IOX Q4p0HcWrSYlSefIfcEHs5bkFQqlZG4hGg4DMQaeX3G1KH/BZ+9HraAZd/+ty -----END CERTIFICATE-----Generated at Fri Sep 25 06:09:55 2026 by rpki-client