$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152053.roa File: AS152053.roa (raw, json) Hash identifier: /0RyMfuQXbsZ8DLpS57zVSgv/Jr0ATcWAiYFN06drMY= Subject key identifier: 07:55:BA:90:78:54:2F:7D:0D:7F:D8:97:0C:59:19:CE:49:2B:BC:84 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C39B2C593466942CC1084AFEDF5A930E9A5235C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152053.roa Signing time: Tue 17 Feb 2026 04:00:00 +0000 ROA not before: Tue 17 Feb 2026 03:55:00 +0000 ROA not after: Tue 16 Feb 2027 04:00:00 +0000 asID: 152053 IP address blocks: 210.87.112.0/23 maxlen: 24 2001:df3:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:39:b2:c5:93:46:69:42:cc:10:84:af:ed:f5:a9:30:e9:a5:23:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 17 03:55:00 2026 GMT Not After : Feb 16 04:00:00 2027 GMT Subject: CN=0755BA9078542F7D0D7FD8970C5919CE492BBC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:7e:96:b0:76:6a:ec:26:c6:fe:73:65:3c: 79:b4:bd:d3:ab:d6:56:96:1c:ba:42:f0:6e:8a:ed: d2:1c:0f:bf:a1:ad:27:a3:e7:a2:9a:8c:95:11:3a: 5d:69:f8:ce:62:52:99:0f:de:72:2c:94:40:72:db: 2d:06:c5:07:d3:5c:44:0c:3d:b8:6c:2e:12:de:37: a2:69:77:7b:60:b4:76:47:a9:f2:1f:73:7e:a0:83: 19:4e:96:0b:96:f0:3d:3c:4f:f2:b6:41:d3:2d:e8: 1f:e9:d0:3f:7e:6b:2d:28:46:74:2d:7c:49:16:49: 2b:0e:55:97:47:fd:f0:49:5c:ae:7c:cc:93:dc:ee: 6b:77:56:d0:71:b3:c6:00:e7:25:f7:03:f2:4a:28: 6e:ff:67:f3:3f:75:30:3f:16:a7:d6:00:26:62:fd: a7:e5:07:18:9f:18:6d:bd:63:51:e0:47:4b:d0:a5: 3b:1a:28:61:fb:df:3b:dc:f4:a2:d0:74:0d:7c:44: 3d:59:6b:fa:61:c4:d0:1e:4d:8d:24:0d:f7:1f:c4: 65:2d:ed:59:d3:4f:73:4a:69:f9:17:29:db:c6:dd: 24:f2:8a:b0:7e:7b:1e:4e:8f:6c:90:e5:05:95:a8: 38:54:40:86:86:b4:ca:89:76:05:63:a5:41:a2:98: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:55:BA:90:78:54:2F:7D:0D:7F:D8:97:0C:59:19:CE:49:2B:BC:84 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS152053.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.112.0/23 IPv6: 2001:df3:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 6c:f1:23:4b:2c:7f:47:b1:6c:b8:84:ad:84:0c:f9:5e:05:e1: 56:34:4e:50:7f:31:92:34:3a:7b:42:cb:f8:09:80:91:09:56: 14:3a:57:fe:36:5e:ef:c7:0b:a0:31:ea:f9:44:43:ae:9b:db: bb:29:79:d7:ae:4f:9a:76:a3:c0:43:e3:53:2d:2a:5d:5d:c8: 44:e1:21:a2:ad:11:36:48:e6:a1:dc:93:4c:35:f9:b5:c9:af: 14:08:e5:c8:73:67:af:56:9c:17:73:13:6c:55:2b:97:7d:f5: d3:ba:ac:2c:be:1d:05:1a:bb:51:af:53:ad:6e:5e:99:99:c1: aa:58:7d:d0:d0:e2:cb:0b:95:9a:6a:1a:d5:10:89:ee:4f:f1: 42:3e:8b:06:5c:07:85:61:ed:ca:5f:80:03:9f:7d:da:d5:26: 29:53:79:7a:71:a1:1f:f6:b2:e6:5d:d3:8f:9d:a6:21:38:08: 0a:69:18:3e:7c:c9:1e:51:e4:b4:26:1a:8f:6b:7a:f6:fc:63: 12:fb:40:81:9d:34:0b:82:d4:5c:93:52:61:f0:79:9a:ec:24: e7:57:e0:72:8e:51:4a:5e:c9:2c:3c:c6:81:0f:3d:f5:4e:db: b2:00:4a:95:99:cf:22:01:8f:3e:81:e8:12:ff:10:bd:0c:29: 04:ea:4d:ab -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUbDmyxZNGaULMEISv7fWpMOmlI1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNzAzNTUwMFoX DTI3MDIxNjA0MDAwMFowMzExMC8GA1UEAxMoMDc1NUJBOTA3ODU0MkY3RDBEN0ZE ODk3MEM1OTE5Q0U0OTJCQkM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTJfpawdmrsJsb+c2U8ebS906vWVpYcukLwbort0hwPv6GtJ6PnopqMlRE6 XWn4zmJSmQ/eciyUQHLbLQbFB9NcRAw9uGwuEt43oml3e2C0dkep8h9zfqCDGU6W C5bwPTxP8rZB0y3oH+nQP35rLShGdC18SRZJKw5Vl0f98ElcrnzMk9zua3dW0HGz xgDnJfcD8koobv9n8z91MD8Wp9YAJmL9p+UHGJ8Ybb1jUeBHS9ClOxooYfvfO9z0 otB0DXxEPVlr+mHE0B5NjSQN9x/EZS3tWdNPc0pp+Rcp28bdJPKKsH57Hk6PbJDl BZWoOFRAhoa0yol2BWOlQaKYjqkCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQHVbqQ eFQvfQ1/2JcMWRnOSSu8hDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MjA1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAdJXcDAPBAIAAjAJAwcAIAEN849AMA0GCSqGSIb3DQEBCwUAA4IB AQBs8SNLLH9HsWy4hK2EDPleBeFWNE5QfzGSNDp7Qsv4CYCRCVYUOlf+Nl7vxwug Mer5REOum9u7KXnXrk+adqPAQ+NTLSpdXchE4SGirRE2SOah3JNMNfm1ya8UCOXI c2evVpwXcxNsVSuXffXTuqwsvh0FGrtRr1Otbl6ZmcGqWH3Q0OLLC5WaahrVEInu T/FCPosGXAeFYe3KX4ADn33a1SYpU3l6caEf9rLmXdOPnaYhOAgKaRg+fMkeUeS0 JhqPa3r2/GMS+0CBnTQLgtRck1Jh8Hma7CTnV+ByjlFKXsksPMaBDz31TtuyAEqV mc8iAY8+gegS/xC9DCkE6k2r -----END CERTIFICATE-----Generated at Mon Mar 2 03:01:26 2026 by rpki-client