$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152032.roa File: AS152032.roa (raw, json) Hash identifier: qNqk0tP0jFSF12rNjmJSLsgvUkIj9Z2OSlNDiS1r4Jw= Subject key identifier: 0A:DC:9C:93:A9:81:5B:76:46:70:89:B5:AA:A8:EA:87:83:27:C4:8B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CA1763553B93BC9AFFC60B4960724703DD9F1F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152032.roa Signing time: Thu 08 Oct 2026 01:26:00 +0000 ROA not before: Thu 08 Oct 2026 01:21:00 +0000 ROA not after: Thu 07 Oct 2027 01:26:00 +0000 asID: 152032 IP address blocks: 103.36.40.0/22 maxlen: 24 103.37.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a1:76:35:53:b9:3b:c9:af:fc:60:b4:96:07:24:70:3d:d9:f1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 8 01:21:00 2026 GMT Not After : Oct 7 01:26:00 2027 GMT Subject: CN=0ADC9C93A9815B76467089B5AAA8EA878327C48B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:9b:5e:7c:f4:ed:37:28:15:66:58:a3:c7: 3a:03:bd:ba:24:1b:42:ea:15:20:57:da:1a:f5:22: 24:cd:1f:98:d3:4c:de:d8:dc:23:1c:62:24:4d:b4: 57:af:b0:27:53:0b:5e:f0:c6:86:e9:6a:b3:cd:d8: e4:2e:7a:04:cd:51:b4:d4:18:ed:cb:d0:5a:87:2c: 84:dc:3d:66:7e:7a:79:27:b3:38:c1:71:cc:5a:2a: db:9e:64:3e:53:5d:3c:30:37:a9:e8:b2:db:72:3a: 95:ef:c7:77:cd:b6:21:f5:66:64:4b:cf:9a:9c:c2: 7a:95:dd:e9:38:6b:6d:82:62:6c:11:5a:43:a3:31: 92:60:26:94:64:6b:18:9d:8d:aa:27:7e:61:24:8c: d1:d3:ca:e9:6a:70:1b:f3:c0:1c:d0:0c:92:2a:6d: 4e:e5:4b:2a:45:d5:28:53:eb:9a:db:70:4b:ab:07: 26:0f:b4:e5:fe:3a:2b:6c:a0:9f:08:4f:e6:48:7b: 8d:8c:66:06:dd:e4:6a:2b:b4:8a:a9:c3:23:c3:7a: c3:22:2c:62:c8:1e:5c:5f:4e:70:2b:58:c2:e6:ea: 9b:d9:29:17:90:ed:b1:65:20:b6:fe:f5:54:cc:70: d1:3a:02:9d:1f:d7:ab:50:90:82:56:6b:3f:80:02: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:9C:93:A9:81:5B:76:46:70:89:B5:AA:A8:EA:87:83:27:C4:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.40.0/22 103.37.244.0/22 Signature Algorithm: sha256WithRSAEncryption 83:e0:0b:04:2b:0f:f8:81:4a:18:8c:53:0c:65:0e:6a:b3:19: 2e:8f:36:77:cf:34:af:d2:59:c5:7a:a1:97:12:c3:be:10:7d: 19:13:f1:eb:f2:76:2a:4b:65:64:0a:5a:31:05:d2:02:9d:bb: 87:43:8f:fd:e9:db:48:3a:4a:14:0c:f4:9b:8b:19:10:79:87: b2:e2:d8:2f:91:57:56:70:32:de:ab:8d:76:90:2e:1e:07:a8: 7e:62:d5:6d:a4:ee:22:d7:2c:9f:e7:e3:bd:a9:af:5d:49:81: b0:f7:01:cb:92:7a:53:09:d1:24:61:3d:30:70:1f:3a:e1:be: 2a:25:c0:63:63:34:6f:49:aa:3e:3f:18:e6:90:bf:46:22:8a: 83:d5:08:8e:f5:8a:7b:1f:97:43:b0:17:a6:e8:b4:e5:3f:4e: 28:92:aa:d3:3b:1d:2e:1e:ce:a8:09:47:c7:ac:8a:52:58:98: 2a:f0:e1:6a:40:f2:95:c1:c3:ef:8a:70:5b:ff:3e:a5:a5:35: 8d:04:8c:5f:a8:63:aa:62:4c:5f:d1:fd:4b:3a:6d:49:6f:5f: f0:d9:88:08:b9:c8:51:77:53:97:8d:28:07:28:6b:70:81:07: 77:0d:b9:7f:9b:f8:fe:52:64:6d:a7:f7:9a:f4:87:68:45:22: ed:82:05:43 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUPKF2NVO5O8mv/GC0lgckcD3Z8fAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwODAxMjEwMFoX DTI3MTAwNzAxMjYwMFowMzExMC8GA1UEAxMoMEFEQzlDOTNBOTgxNUI3NjQ2NzA4 OUI1QUFBOEVBODc4MzI3QzQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRIm1589O03KBVmWKPHOgO9uiQbQuoVIFfaGvUiJM0fmNNM3tjcIxxiJE20 V6+wJ1MLXvDGhulqs83Y5C56BM1RtNQY7cvQWocshNw9Zn56eSezOMFxzFoq255k PlNdPDA3qeiy23I6le/Hd822IfVmZEvPmpzCepXd6ThrbYJibBFaQ6MxkmAmlGRr GJ2Nqid+YSSM0dPK6WpwG/PAHNAMkiptTuVLKkXVKFPrmttwS6sHJg+05f46K2yg nwhP5kh7jYxmBt3kaiu0iqnDI8N6wyIsYsgeXF9OcCtYwubqm9kpF5DtsWUgtv71 VMxw0ToCnR/Xq1CQglZrP4ACXV0CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQK3JyT qYFbdkZwibWqqOqHgyfEizAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyMDMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQCZyQoAwQCZyX0MA0GCSqGSIb3DQEBCwUAA4IBAQCD4AsEKw/4gUoYjFMM ZQ5qsxkujzZ3zzSv0lnFeqGXEsO+EH0ZE/Hr8nYqS2VkCloxBdICnbuHQ4/96dtI OkoUDPSbixkQeYey4tgvkVdWcDLeq412kC4eB6h+YtVtpO4i1yyf5+O9qa9dSYGw 9wHLknpTCdEkYT0wcB864b4qJcBjYzRvSao+PxjmkL9GIoqD1QiO9Yp7H5dDsBem 6LTlP04okqrTOx0uHs6oCUfHrIpSWJgq8OFqQPKVwcPvinBb/z6lpTWNBIxfqGOq Ykxf0f1LOm1Jb1/w2YgIuchRd1OXjSgHKGtwgQd3Dbl/m/j+UmRtp/ea9IdoRSLt ggVD -----END CERTIFICATE-----Generated at Sat Oct 10 20:18:22 2026 by rpki-client