$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa File: AS63491.roa (raw, json) Hash identifier: f5YFQX0MhtwqYGRXPxkf+GY6XayK8Yo7Ei38Yt6SoHE= Subject key identifier: F8:70:AA:48:BC:50:CD:91:50:A8:59:FC:17:14:55:C4:FF:FB:03:32 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73C39780BA4D7B012CB72A4F1316287873DB0AF8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa Signing time: Wed 14 May 2025 08:19:28 +0000 ROA not before: Wed 14 May 2025 08:14:28 +0000 ROA not after: Wed 13 May 2026 08:19:28 +0000 asID: 63491 IP address blocks: 202.46.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c3:97:80:ba:4d:7b:01:2c:b7:2a:4f:13:16:28:78:73:db:0a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 14 08:14:28 2025 GMT Not After : May 13 08:19:28 2026 GMT Subject: CN=F870AA48BC50CD9150A859FC171455C4FFFB0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:4e:84:da:6f:6d:da:4d:fc:c1:be:a8:24: dd:50:64:4c:83:9c:ce:7f:ee:0c:38:c9:cd:70:c3: 75:80:fc:db:73:9a:02:af:aa:f2:35:74:c4:ca:ec: ef:c1:11:34:f1:7d:2d:f1:c0:e2:36:0b:03:5d:8b: 92:2e:eb:9d:be:ea:8e:19:9c:84:ed:8c:be:b3:c8: d6:50:e4:ab:53:02:53:da:44:6e:8b:4d:41:35:9d: 1c:e1:9b:5a:97:e6:84:27:32:23:cd:64:7b:3d:0e: 17:1c:78:68:0a:a0:42:e2:13:83:d0:79:51:31:e5: d1:d2:dd:29:81:4e:9b:05:cd:ca:6b:83:9b:a3:37: 5a:51:ac:81:b5:42:50:14:d4:18:f6:36:1e:a1:07: 10:15:07:2b:6e:1d:09:9b:12:89:bb:e6:64:df:0f: a0:4f:9b:57:bf:e0:d1:d0:63:a9:4e:98:1e:f8:6a: 3f:0f:41:22:e1:ab:ff:28:ad:a0:e5:f9:4d:c1:bb: ec:b9:ae:36:15:67:da:0e:a3:93:55:a4:ce:d0:02: ec:eb:9a:94:b2:db:3e:3b:a6:ac:66:ec:3f:ba:bc: 53:6b:8d:a8:71:35:02:0f:db:85:fd:b2:d4:5f:ca: 64:14:ee:6b:3e:c0:40:2b:13:f2:bb:2f:59:5a:5c: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:AA:48:BC:50:CD:91:50:A8:59:FC:17:14:55:C4:FF:FB:03:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.26.0/24 Signature Algorithm: sha256WithRSAEncryption 57:7c:c2:44:e2:21:7a:cc:4c:63:b7:e9:2c:ff:0d:75:15:b6: 2a:8c:f4:70:e6:0f:f2:f0:48:16:2a:43:c1:bc:1e:0d:2b:ff: 5e:f2:4d:2c:6e:4f:9e:05:e6:a2:a2:a0:af:29:2b:50:8e:86: 2d:fe:80:99:fa:1d:83:d8:0e:05:ba:34:82:74:a7:a7:7f:f3: d3:c5:ac:63:d8:ad:3d:5a:05:18:a6:f6:6d:fc:3e:59:f8:bf: 44:f2:00:46:49:f1:6c:91:d6:5e:16:19:88:4c:90:cb:bf:14: 14:e6:54:63:de:6d:d5:af:32:0f:f0:74:d7:24:b9:f6:cc:65: 79:5c:59:69:4a:00:4e:b1:cd:ac:13:09:c8:bf:4a:2b:83:94: db:8c:ee:3a:0f:ad:c8:77:2e:17:c2:00:3b:b5:f6:37:4a:5b: 85:d7:6f:ba:e8:6d:55:0c:c7:d1:09:a7:82:e7:12:ab:28:56: a1:ad:f1:1a:8d:e2:ec:a3:cd:a1:84:b3:9e:c5:c3:21:7b:27: 30:95:0a:20:3a:0c:99:78:c8:36:26:37:d4:cd:f9:14:1d:eb: 7a:37:0a:2e:62:cf:ff:8b:25:a3:fa:ee:7b:e4:f9:85:16:b7: f5:3f:fc:2d:83:0e:2a:dd:f1:fb:8e:af:08:eb:a5:3c:f3:3a: e6:13:e9:b9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUc8OXgLpNewEstypPExYoeHPbCvgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNDA4MTQyOFoX DTI2MDUxMzA4MTkyOFowMzExMC8GA1UEAxMoRjg3MEFBNDhCQzUwQ0Q5MTUwQTg1 OUZDMTcxNDU1QzRGRkZCMDMzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwtToTab23aTfzBvqgk3VBkTIOczn/uDDjJzXDDdYD823OaAq+q8jV0xMrs 78ERNPF9LfHA4jYLA12Lki7rnb7qjhmchO2MvrPI1lDkq1MCU9pEbotNQTWdHOGb WpfmhCcyI81kez0OFxx4aAqgQuITg9B5UTHl0dLdKYFOmwXNymuDm6M3WlGsgbVC UBTUGPY2HqEHEBUHK24dCZsSibvmZN8PoE+bV7/g0dBjqU6YHvhqPw9BIuGr/yit oOX5TcG77LmuNhVn2g6jk1WkztAC7OualLLbPjumrGbsP7q8U2uNqHE1Ag/bhf2y 1F/KZBTuaz7AQCsT8rsvWVpcIucCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT4cKpI vFDNkVCoWfwXFFXE//sDMjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzNDkxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyi4aMA0GCSqGSIb3DQEBCwUAA4IBAQBXfMJE4iF6zExjt+ks/w11 FbYqjPRw5g/y8EgWKkPBvB4NK/9e8k0sbk+eBeaioqCvKStQjoYt/oCZ+h2D2A4F ujSCdKenf/PTxaxj2K09WgUYpvZt/D5Z+L9E8gBGSfFskdZeFhmITJDLvxQU5lRj 3m3VrzIP8HTXJLn2zGV5XFlpSgBOsc2sEwnIv0org5TbjO46D63Idy4XwgA7tfY3 SluF12+66G1VDMfRCaeC5xKrKFahrfEajeLso82hhLOexcMheycwlQogOgyZeMg2 JjfUzfkUHet6NwouYs//iyWj+u575PmFFrf1P/wtgw4q3fH7jq8I66U88zrmE+m5 -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:01 2025 by rpki-client