$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS152717.roa File: AS152717.roa (raw, json) Hash identifier: EdeWut8+eW95VIGFPxLHX+9Oq/JLXzQQDukUnTVvuXc= Subject key identifier: 3E:5B:11:8F:A1:32:46:12:62:B4:05:D5:D1:75:5E:01:B6:F7:95:3F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 418412C8B638E05CC44397B8352177DA93ACBA60 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152717.roa Signing time: Fri 24 Jul 2026 06:39:31 +0000 ROA not before: Fri 24 Jul 2026 06:34:31 +0000 ROA not after: Fri 23 Jul 2027 06:39:31 +0000 asID: 152717 IP address blocks: 2001:df7:3740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:84:12:c8:b6:38:e0:5c:c4:43:97:b8:35:21:77:da:93:ac:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 24 06:34:31 2026 GMT Not After : Jul 23 06:39:31 2027 GMT Subject: CN=3E5B118FA132461262B405D5D1755E01B6F7953F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:b3:d1:bc:ac:db:49:cd:20:50:69:3f:5d: c5:b8:a7:5a:0b:74:4e:f7:d3:20:11:ef:f7:8f:0a: 54:b0:15:29:eb:78:cd:b4:21:a1:59:3d:67:b0:14: d1:24:0b:44:2d:06:55:c0:47:cb:2f:94:35:2c:d9: 66:60:2a:4f:23:9e:7e:ad:ed:8f:a5:b9:28:9a:43: 79:e1:0c:1d:29:fd:89:20:79:9a:55:5e:cf:ba:e6: 17:a8:c1:06:93:0b:8d:54:ca:b1:31:7c:be:47:31: 89:59:9f:19:ca:23:2d:1d:c8:70:ce:df:d5:b5:57: 11:21:61:e8:72:c4:fa:7b:58:30:86:cd:b9:18:cd: e8:f6:a8:d0:31:17:64:86:2b:e6:86:b9:66:92:ec: 8d:33:a8:9d:33:d9:e1:c3:96:3e:fb:db:ed:fc:e9: 82:b0:dd:3b:90:70:1a:8e:ee:78:c7:c0:86:14:6a: d5:f9:51:35:36:b2:2d:9e:fc:92:b7:cd:73:96:98: f2:4b:44:b2:45:26:81:bf:fb:81:d3:aa:62:15:05: 10:66:bc:04:a7:c4:d7:d1:4c:b0:ed:49:63:ea:39: 02:38:19:8b:0b:7b:ea:38:bc:38:b7:d8:b5:29:de: 91:34:a4:63:22:22:6a:ec:2f:31:20:bf:9a:e7:3b: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5B:11:8F:A1:32:46:12:62:B4:05:D5:D1:75:5E:01:B6:F7:95:3F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS152717.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:3740::/48 Signature Algorithm: sha256WithRSAEncryption 44:07:6f:8a:8c:f8:24:65:2f:f7:15:78:b4:b0:47:fe:03:3d: d9:b0:c6:36:d7:be:80:75:f9:02:cd:cb:dd:1c:40:c3:b1:0a: b8:22:af:2c:4d:5d:f4:85:34:2d:9a:b8:c4:26:f2:fc:c2:c0: e9:74:d0:4b:39:78:b3:57:c6:c7:4d:72:ff:58:0a:b5:3c:12: 74:85:a4:31:da:17:d9:a1:fb:cc:5f:b4:9e:9a:05:3d:eb:dc: c7:3b:08:be:71:90:4e:30:6b:ca:57:47:4a:ee:54:bf:71:40: f1:43:84:ad:b2:2a:cf:59:f8:3b:6b:ec:b7:82:8e:e2:fd:94: ed:5b:b5:5d:51:fc:83:a7:49:d7:4e:8d:39:77:52:13:5a:ac: 37:e4:ad:04:59:13:ec:d7:9e:5b:e3:31:a0:1c:6f:e7:63:e3: 56:5b:25:66:a8:34:70:91:30:fd:ea:03:c7:5f:30:6c:a1:d6: ed:73:97:f0:71:24:ee:76:5a:88:85:aa:0f:ef:9c:2f:11:81: 7d:0e:c2:65:09:1a:0a:9d:f4:a8:72:48:24:a3:35:39:c6:9c: fc:64:4f:6d:95:60:c4:97:14:0e:bb:03:69:56:5d:18:9c:d6: a2:e5:0b:5b:35:b9:9b:80:d3:61:c2:2f:b5:86:0b:93:83:66: 55:da:d2:b9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUQYQSyLY44FzEQ5e4NSF32pOsumAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyNDA2MzQzMVoX DTI3MDcyMzA2MzkzMVowMzExMC8GA1UEAxMoM0U1QjExOEZBMTMyNDYxMjYyQjQw NUQ1RDE3NTVFMDFCNkY3OTUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfAs9G8rNtJzSBQaT9dxbinWgt0TvfTIBHv948KVLAVKet4zbQhoVk9Z7AU 0SQLRC0GVcBHyy+UNSzZZmAqTyOefq3tj6W5KJpDeeEMHSn9iSB5mlVez7rmF6jB BpMLjVTKsTF8vkcxiVmfGcojLR3IcM7f1bVXESFh6HLE+ntYMIbNuRjN6Pao0DEX ZIYr5oa5ZpLsjTOonTPZ4cOWPvvb7fzpgrDdO5BwGo7ueMfAhhRq1flRNTayLZ78 krfNc5aY8ktEskUmgb/7gdOqYhUFEGa8BKfE19FMsO1JY+o5AjgZiwt76ji8OLfY tSnekTSkYyIiauwvMSC/muc732MCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQ+WxGP oTJGEmK0BdXRdV4BtveVPzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTUyNzE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9zdAMA0GCSqGSIb3DQEBCwUAA4IBAQBEB2+KjPgkZS/3FXi0sEf+ Az3ZsMY2176AdfkCzcvdHEDDsQq4Iq8sTV30hTQtmrjEJvL8wsDpdNBLOXizV8bH TXL/WAq1PBJ0haQx2hfZofvMX7SemgU969zHOwi+cZBOMGvKV0dK7lS/cUDxQ4St sirPWfg7a+y3go7i/ZTtW7VdUfyDp0nXTo05d1ITWqw35K0EWRPs155b4zGgHG/n Y+NWWyVmqDRwkTD96gPHXzBsodbtc5fwcSTudlqIhaoP75wvEYF9DsJlCRoKnfSo ckgkozU5xpz8ZE9tlWDElxQOuwNpVl0YnNai5QtbNbmbgNNhwi+1hguTg2ZV2tK5 -----END CERTIFICATE-----Generated at Wed Jul 29 04:49:24 2026 by rpki-client