$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS152717.roa File: AS152717.roa (raw, json) Hash identifier: 079q26trkf8R5+TSEQ5se+cWZ2lxi2FGt+R3ZEBU4rI= Subject key identifier: B8:46:BB:27:27:7B:D6:66:1A:EF:2F:C2:DC:F2:05:E6:8E:3D:9C:3C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2837792CA42BB61DF1B3637B1F606865AD791D1B Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152717.roa Signing time: Fri 24 Jul 2026 06:38:44 +0000 ROA not before: Fri 24 Jul 2026 06:33:44 +0000 ROA not after: Fri 23 Jul 2027 06:38:44 +0000 asID: 152717 IP address blocks: 160.236.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:37:79:2c:a4:2b:b6:1d:f1:b3:63:7b:1f:60:68:65:ad:79:1d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 24 06:33:44 2026 GMT Not After : Jul 23 06:38:44 2027 GMT Subject: CN=B846BB27277BD6661AEF2FC2DCF205E68E3D9C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:63:e2:f3:b7:62:88:f4:18:29:70:a2:ae: 6f:c2:a6:3b:a1:bf:f5:d0:35:3b:62:81:f9:8d:04: 3a:fd:c6:f0:42:f4:99:06:f2:20:8f:0a:86:e2:6d: ba:b1:de:3e:54:7c:b1:04:63:b9:3d:f8:97:3d:e9: 8c:f8:4b:c8:cf:86:c1:28:27:f5:b7:c9:5d:92:62: fd:6d:3d:3e:13:d6:d3:a5:df:6c:d1:c5:8c:49:88: a0:71:60:5c:ef:b4:5b:a9:ad:d0:11:dc:68:7b:82: 6c:1b:2b:c9:67:36:dd:1d:a3:2d:8c:77:05:01:38: 63:f1:ca:20:a2:60:58:95:6a:74:75:27:ba:df:75: ec:7f:ad:8f:40:0d:da:c0:22:d0:ed:5e:53:6c:ef: 7b:ba:db:2d:a4:ea:b5:3b:9d:7b:74:45:39:a2:2d: 76:db:b4:f0:38:bd:53:19:ea:2e:72:a3:31:1c:b7: 32:4d:53:4e:11:60:3e:3f:90:c3:4a:c7:27:30:71: e0:ff:01:53:7d:90:90:85:12:f0:93:3a:7a:85:08: 9d:a6:bc:71:e7:e3:bd:e7:45:e2:03:54:48:ab:45: 0f:9f:ed:5b:25:5f:1d:f0:74:2b:39:01:69:0b:e2: 51:8a:b6:5d:dd:39:69:d8:90:fb:4c:16:1f:d1:99: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:46:BB:27:27:7B:D6:66:1A:EF:2F:C2:DC:F2:05:E6:8E:3D:9C:3C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS152717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.114.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:b6:fe:9d:9c:78:c2:8a:d7:f0:e7:f2:56:3c:5c:51:90:f0: 90:5f:e2:10:2f:c0:11:25:53:12:03:d6:95:09:91:ee:e1:46: 7a:fe:07:4f:51:f7:2f:63:d1:3f:3a:d2:28:2b:c8:8b:9e:61: 48:63:ba:41:16:17:5e:4a:a1:eb:19:c4:48:f0:54:98:4e:a6: 30:1e:c2:9f:9b:90:6b:aa:e2:a5:b7:1a:a4:18:b0:72:c1:d6: f9:ba:e0:9d:81:24:74:db:37:42:93:5f:00:82:eb:1d:94:6c: c5:c0:d0:21:1b:ce:bb:aa:a1:c6:0f:9a:cf:6d:c2:f1:1e:fa: 73:19:f4:4a:50:38:91:f5:01:93:5e:16:b5:11:95:e8:a6:7d: d9:51:cf:12:c0:5b:c4:f3:37:50:c6:87:c4:d1:e3:fb:91:8c: ad:34:ed:e1:f3:b0:19:e0:c4:20:60:d0:49:eb:1e:07:71:db: b8:68:b1:bd:90:99:e4:ba:02:8b:21:0e:97:aa:c9:aa:e4:43: d8:50:d0:14:16:49:aa:a7:a9:0e:1f:95:db:08:fb:07:7c:4b: 57:51:3d:70:42:e9:4d:c5:74:ee:a4:f3:a2:90:8a:de:1b:12: e5:b6:c0:bd:1f:11:c6:cc:f8:ae:a7:b4:1f:bd:9d:11:31:9f: d5:64:4a:d5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKDd5LKQrth3xs2N7H2BoZa15HRswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcyNDA2MzM0NFoX DTI3MDcyMzA2Mzg0NFowMzExMC8GA1UEAxMoQjg0NkJCMjcyNzdCRDY2NjFBRUYy RkMyRENGMjA1RTY4RTNEOUMzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJt3Y+Lzt2KI9BgpcKKub8KmO6G/9dA1O2KB+Y0EOv3G8EL0mQbyII8KhuJt urHePlR8sQRjuT34lz3pjPhLyM+GwSgn9bfJXZJi/W09PhPW06XfbNHFjEmIoHFg XO+0W6mt0BHcaHuCbBsryWc23R2jLYx3BQE4Y/HKIKJgWJVqdHUnut917H+tj0AN 2sAi0O1eU2zve7rbLaTqtTude3RFOaItdtu08Di9UxnqLnKjMRy3Mk1TThFgPj+Q w0rHJzBx4P8BU32QkIUS8JM6eoUInaa8cefjvedF4gNUSKtFD5/tWyVfHfB0KzkB aQviUYq2Xd05adiQ+0wWH9GZnhUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS4Rrsn J3vWZhrvL8Lc8gXmjj2cPDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTUyNzE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOxyMA0GCSqGSIb3DQEBCwUAA4IBAQAvtv6dnHjCitfw5/JWPFxRkPCQ X+IQL8ARJVMSA9aVCZHu4UZ6/gdPUfcvY9E/OtIoK8iLnmFIY7pBFhdeSqHrGcRI 8FSYTqYwHsKfm5BrquKltxqkGLBywdb5uuCdgSR02zdCk18AgusdlGzFwNAhG867 qqHGD5rPbcLxHvpzGfRKUDiR9QGTXha1EZXopn3ZUc8SwFvE8zdQxofE0eP7kYyt NO3h87AZ4MQgYNBJ6x4Hcdu4aLG9kJnkugKLIQ6Xqsmq5EPYUNAUFkmqp6kOH5Xb CPsHfEtXUT1wQulNxXTupPOikIreGxLltsC9HxHGzPiup7QfvZ0RMZ/VZErV -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:25 2026 by rpki-client