$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152630.roa File: AS152630.roa (raw, json) Hash identifier: n0/QQCA7JEfhNMNKVGZzIZJxTjUH/yuzYYGh+uIbl7A= Subject key identifier: A4:A6:C3:C3:03:50:1F:ED:69:C8:83:71:19:F1:E6:19:61:36:F6:11 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 07851E05C7803C39BA3B978A2F0E2D0CD8C98B6E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152630.roa Signing time: Mon 25 May 2026 05:06:47 +0000 ROA not before: Mon 25 May 2026 05:01:47 +0000 ROA not after: Mon 24 May 2027 05:06:47 +0000 asID: 152630 IP address blocks: 162.4.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:85:1e:05:c7:80:3c:39:ba:3b:97:8a:2f:0e:2d:0c:d8:c9:8b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 25 05:01:47 2026 GMT Not After : May 24 05:06:47 2027 GMT Subject: CN=A4A6C3C303501FED69C8837119F1E6196136F611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:aa:2c:a8:0d:d9:ab:a4:26:c1:eb:24:2a: f2:ba:52:04:58:8d:7c:23:8f:ff:0b:d7:1a:76:75: 35:97:29:80:dc:2b:88:66:cd:69:42:f9:a0:45:b6: 98:a9:b4:47:86:77:6c:9b:7f:42:16:f3:9c:6a:a9: d0:60:f6:94:33:2c:f7:ec:61:af:d5:b4:47:d9:9e: 3a:3c:dd:eb:8c:df:ab:77:9e:d8:bf:16:04:39:38: 0d:a1:d3:2e:c6:72:ef:9e:ca:74:b0:cd:ec:92:ac: 77:fe:57:b9:c7:58:d1:7c:5a:e4:8d:a4:68:a8:28: 9a:46:53:4f:63:c0:97:24:80:b5:04:dd:25:86:38: 34:c5:ed:81:a9:b8:36:70:8b:3a:99:ce:b1:9c:d3: b2:c0:e3:94:32:c6:b6:c7:b0:e9:33:a6:e8:01:c2: ad:56:5b:8d:f8:d5:ec:f1:66:57:b2:1c:05:44:95: 5d:ad:79:33:88:19:5d:6a:e9:20:5b:f1:2e:f7:b7: 4f:87:91:03:62:a9:0d:d5:48:54:79:5a:3c:60:32: 71:e0:57:6b:01:b9:a4:c4:58:2a:a1:93:a6:bb:7a: b0:e6:92:2e:95:2f:55:60:5a:49:bf:9f:3d:f0:5f: ee:43:82:2d:b3:29:5b:73:c8:7a:40:73:e3:2f:69: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:C3:C3:03:50:1F:ED:69:C8:83:71:19:F1:E6:19:61:36:F6:11 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.149.0/24 Signature Algorithm: sha256WithRSAEncryption 63:cb:07:f4:82:53:ce:66:16:8c:64:e7:3e:e5:a8:52:cd:59: dc:57:9e:55:49:01:85:f3:03:61:97:40:a4:90:7a:41:35:c9: cd:3e:05:53:a0:56:48:97:e1:be:07:79:2a:75:a6:09:6c:3b: 34:57:77:42:33:b0:c1:05:e8:35:c9:aa:2d:5a:83:7c:24:02: a5:5e:21:f9:71:48:dd:42:50:8b:57:0c:81:42:9f:82:eb:5e: f1:f5:c4:50:f3:95:e8:da:86:88:9d:44:35:b5:3b:36:19:e5: 90:3b:5b:a8:b8:1e:66:c2:cb:23:07:07:da:96:c5:7c:62:2b: d2:f5:b0:5d:9e:b1:74:1f:91:64:59:64:d2:1e:b7:4d:bd:86: 40:87:6b:fd:ba:86:30:09:e8:b0:14:aa:a3:e2:e2:8a:ff:40: 05:86:66:cf:75:5e:bf:1d:64:c0:5b:00:23:50:ca:c7:94:67: 28:f2:47:07:bf:f1:6e:7a:20:42:54:30:43:65:3d:ad:ff:a4: 19:79:02:c0:86:d3:3d:86:2c:84:a1:ac:19:cf:04:03:d6:46: 86:84:d4:9a:9e:e8:59:08:30:42:73:12:82:e8:9f:d3:a7:fc: cc:5d:66:a8:a1:4c:11:de:98:ef:a4:3e:2b:a2:df:29:8a:ab: 19:c5:df:8e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUB4UeBceAPDm6O5eKLw4tDNjJi24wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUyNTA1MDE0N1oX DTI3MDUyNDA1MDY0N1owMzExMC8GA1UEAxMoQTRBNkMzQzMwMzUwMUZFRDY5Qzg4 MzcxMTlGMUU2MTk2MTM2RjYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJCgqiyoDdmrpCbB6yQq8rpSBFiNfCOP/wvXGnZ1NZcpgNwriGbNaUL5oEW2 mKm0R4Z3bJt/QhbznGqp0GD2lDMs9+xhr9W0R9meOjzd64zfq3ee2L8WBDk4DaHT LsZy757KdLDN7JKsd/5XucdY0Xxa5I2kaKgomkZTT2PAlySAtQTdJYY4NMXtgam4 NnCLOpnOsZzTssDjlDLGtsew6TOm6AHCrVZbjfjV7PFmV7IcBUSVXa15M4gZXWrp IFvxLve3T4eRA2KpDdVIVHlaPGAyceBXawG5pMRYKqGTprt6sOaSLpUvVWBaSb+f PfBf7kOCLbMpW3PIekBz4y9pTrkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSkpsPD A1Af7WnIg3EZ8eYZYTb2ETAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNjMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogSVMA0GCSqGSIb3DQEBCwUAA4IBAQBjywf0glPOZhaMZOc+5ahSzVnc V55VSQGF8wNhl0CkkHpBNcnNPgVToFZIl+G+B3kqdaYJbDs0V3dCM7DBBeg1yaot WoN8JAKlXiH5cUjdQlCLVwyBQp+C617x9cRQ85Xo2oaInUQ1tTs2GeWQO1uouB5m wssjBwfalsV8YivS9bBdnrF0H5FkWWTSHrdNvYZAh2v9uoYwCeiwFKqj4uKK/0AF hmbPdV6/HWTAWwAjUMrHlGco8kcHv/FueiBCVDBDZT2t/6QZeQLAhtM9hiyEoawZ zwQD1kaGhNSanuhZCDBCcxKC6J/Tp/zMXWaooUwR3pjvpD4rot8piqsZxd+O -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:12 2026 by rpki-client