$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152402.roa File: AS152402.roa (raw, json) Hash identifier: SmXznsFgJHe8pxnafrr0L0vrOA4ZaB+gA2RpII37iMY= Subject key identifier: 3B:14:E2:D0:53:4A:1F:DD:41:E9:CC:FC:8D:A5:EB:0B:FC:42:3F:E3 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 64E40F7E546A3CC07DFC2EF49DF52FB61454B869 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152402.roa Signing time: Thu 08 Jan 2026 11:00:00 +0000 ROA not before: Thu 08 Jan 2026 10:55:00 +0000 ROA not after: Thu 07 Jan 2027 11:00:00 +0000 asID: 152402 IP address blocks: 157.20.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e4:0f:7e:54:6a:3c:c0:7d:fc:2e:f4:9d:f5:2f:b6:14:54:b8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 8 10:55:00 2026 GMT Not After : Jan 7 11:00:00 2027 GMT Subject: CN=3B14E2D0534A1FDD41E9CCFC8DA5EB0BFC423FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:74:48:fe:0f:5d:3b:48:78:63:30:29:7b: 72:b9:52:ce:48:3b:8e:5f:02:a5:c4:90:ab:f1:d6: 92:eb:d3:aa:8e:62:3a:34:7e:4f:67:c1:a9:ee:a9: 36:8d:df:b1:b6:0f:51:72:be:ad:04:6a:38:e3:c8: 43:98:32:36:42:b5:54:d3:ce:65:94:a4:bb:ef:c3: de:fa:57:19:1b:4b:1b:a4:a2:52:d0:0c:cc:dd:c3: 62:a1:99:0e:49:62:d2:f4:23:61:55:16:e4:1e:8c: b4:9c:d2:ac:92:c7:fd:28:8f:68:d6:4f:16:32:6b: b2:26:bc:5c:f4:28:55:a3:16:81:f2:57:66:a0:1b: bf:4c:4b:69:a1:98:52:0e:43:11:7a:28:9c:c5:ab: 6e:ef:76:8f:05:73:b4:3a:b2:10:7b:21:da:b2:70: 31:d0:b3:9a:a0:b6:45:3c:f5:1b:2e:1f:90:2f:a1: 8e:ce:a3:57:e7:b9:66:73:fd:cb:9a:f7:96:dc:11: 22:01:72:bf:45:aa:d4:ab:cd:1d:68:86:b9:a9:17: 34:71:b9:2c:48:9e:6f:41:85:b1:be:2d:92:01:a5: 18:13:76:01:5d:4d:c4:bb:45:4f:8e:d2:e8:98:c2: 83:4e:7f:91:3a:e6:22:8f:86:12:f8:fc:a6:59:19: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:E2:D0:53:4A:1F:DD:41:E9:CC:FC:8D:A5:EB:0B:FC:42:3F:E3 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS152402.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.124.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:d1:a0:b2:b8:a4:8c:a3:83:cb:c0:0d:f7:a0:a0:60:fe:0f: ed:23:aa:bb:98:ae:72:87:ee:a1:bd:a8:23:4f:3e:13:0d:cf: 27:b7:44:ab:6b:bb:21:c8:f6:e8:fd:18:7b:e1:61:45:c9:96: b9:a1:02:af:37:c1:b7:5b:d8:63:93:d4:6b:64:41:e1:eb:02: a3:88:23:cd:00:1e:92:cb:4c:e3:fd:38:fb:f5:63:98:aa:5e: 32:93:28:07:91:f5:f3:d7:63:2d:d5:3f:bb:48:a8:e4:59:01: fb:45:3d:b7:a7:61:b4:de:fb:bf:7a:74:4f:01:02:5e:be:2f: d7:0f:41:15:a7:b3:33:0c:93:8a:0d:53:03:66:fa:8f:de:b8: 25:35:4c:03:82:73:50:f7:91:51:f4:d5:6a:e4:47:7f:67:1b: b5:a2:2b:1f:07:66:b6:fe:07:f4:5e:de:74:61:87:6f:a0:f3: 73:58:3e:0f:40:72:1e:14:79:0e:ce:de:2d:15:6c:88:57:d8: 6c:1a:0a:b3:0a:45:a8:07:ed:83:c2:ab:4a:56:b7:fc:97:34: d4:c8:4a:c3:a5:81:e3:e3:b4:7b:12:47:7e:dd:97:d4:cb:b0: f7:62:2a:c6:94:98:eb:1a:76:54:e8:8b:13:0a:ec:c7:22:32: 1e:13:b3:dc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUZOQPflRqPMB9/C70nfUvthRUuGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEwODEwNTUwMFoX DTI3MDEwNzExMDAwMFowMzExMC8GA1UEAxMoM0IxNEUyRDA1MzRBMUZERDQxRTlD Q0ZDOERBNUVCMEJGQzQyM0ZFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdEdEj+D107SHhjMCl7crlSzkg7jl8CpcSQq/HWkuvTqo5iOjR+T2fBqe6p No3fsbYPUXK+rQRqOOPIQ5gyNkK1VNPOZZSku+/D3vpXGRtLG6SiUtAMzN3DYqGZ Dkli0vQjYVUW5B6MtJzSrJLH/SiPaNZPFjJrsia8XPQoVaMWgfJXZqAbv0xLaaGY Ug5DEXoonMWrbu92jwVztDqyEHsh2rJwMdCzmqC2RTz1Gy4fkC+hjs6jV+e5ZnP9 y5r3ltwRIgFyv0Wq1KvNHWiGuakXNHG5LEieb0GFsb4tkgGlGBN2AV1NxLtFT47S 6JjCg05/kTrmIo+GEvj8plkZUIMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ7FOLQ U0of3UHpzPyNpesL/EI/4zAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE1MjQwMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0UfDANBgkqhkiG9w0BAQsFAAOCAQEAXdGgsrikjKODy8AN96Cg YP4P7SOqu5iucofuob2oI08+Ew3PJ7dEq2u7Icj26P0Ye+FhRcmWuaECrzfBt1vY Y5PUa2RB4esCo4gjzQAekstM4/04+/VjmKpeMpMoB5H189djLdU/u0io5FkB+0U9 t6dhtN77v3p0TwECXr4v1w9BFaezMwyTig1TA2b6j964JTVMA4JzUPeRUfTVauRH f2cbtaIrHwdmtv4H9F7edGGHb6Dzc1g+D0ByHhR5Ds7eLRVsiFfYbBoKswpFqAft g8KrSla3/Jc01MhKw6WB4+O0exJHft2X1Muw92IqxpSY6xp2VOiLEwrsxyIyHhOz 3A== -----END CERTIFICATE-----Generated at Mon Mar 2 07:56:06 2026 by rpki-client