$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa File: AS24520.roa (raw, json) Hash identifier: y1yvRIZ8+TDA64wDSsRNCNqIaAq5n9yz8ocQqUodaN0= Subject key identifier: 9D:7C:23:DD:D2:7E:C8:07:78:84:63:49:84:FC:93:B0:CE:60:82:6A Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 3452CD462CAE33B947180AD7CDBDC8260605C952 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa Signing time: Fri 13 Mar 2026 05:02:29 +0000 ROA not before: Fri 13 Mar 2026 04:57:29 +0000 ROA not after: Fri 12 Mar 2027 05:02:29 +0000 asID: 24520 IP address blocks: 112.78.96.0/21 maxlen: 24 202.87.190.0/24 maxlen: 24 202.87.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 14:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:52:cd:46:2c:ae:33:b9:47:18:0a:d7:cd:bd:c8:26:06:05:c9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Mar 13 04:57:29 2026 GMT Not After : Mar 12 05:02:29 2027 GMT Subject: CN=9D7C23DDD27EC8077884634984FC93B0CE60826A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:6c:c6:97:7b:22:db:0d:7c:ab:1f:67:bf: 1a:15:8a:4d:c3:1a:b4:a8:63:ac:7c:60:67:57:20: 29:f8:95:77:f6:0b:10:f1:74:36:2a:13:57:1e:4e: 90:b5:50:ac:e6:af:f8:bd:a4:37:81:6b:6d:37:ed: 5c:9a:98:73:24:02:38:80:d6:09:24:d5:7d:3c:db: a7:72:41:c8:4e:23:c4:be:7e:be:18:a5:0e:85:19: 5f:99:e5:ea:d6:18:bb:ea:83:a1:9f:ac:f7:05:6e: a8:a5:68:2e:86:32:9a:84:1a:d5:a5:f6:39:ac:f9: 45:d6:3d:d5:ca:0c:d3:d7:b4:a3:56:fa:1c:59:0f: 75:bc:b4:ff:59:d4:e2:62:ad:29:60:b0:b8:14:dc: 23:a5:53:83:d2:61:aa:d2:45:1b:4f:98:1e:04:d8: 47:5e:76:f4:54:0d:92:30:4e:a3:db:85:08:17:f2: 1c:bc:9f:7b:ef:b3:06:ef:76:61:54:35:27:18:e4: 54:ec:a6:5f:d8:87:4c:9b:8c:36:4a:fd:f7:61:36: 0d:8d:4c:51:29:3e:45:b5:32:0f:a3:8a:31:a7:23: 51:53:d0:3a:f0:8f:0a:a6:69:0d:32:91:b0:6a:54: e1:3d:fb:06:b3:21:9e:9f:24:e7:85:b2:10:06:f0: da:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7C:23:DD:D2:7E:C8:07:78:84:63:49:84:FC:93:B0:CE:60:82:6A X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS24520.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.78.96.0/21 202.87.190.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:c1:26:ad:13:4b:28:8a:84:09:1c:be:22:62:3c:b8:09:41: 60:1e:f6:0a:1d:0e:c6:35:1a:dc:5c:4d:62:04:d6:b2:d9:c3: 27:bb:4e:0d:d1:4c:c1:b0:df:16:d5:01:db:ac:01:2e:f9:8c: 95:f2:e2:a3:66:75:fe:a0:bd:9d:c4:52:b5:ec:70:f2:6f:3c: ca:2f:09:f9:0e:08:f8:a0:a8:bd:70:b6:4a:83:b8:01:96:41: 8f:3a:5f:da:0f:9b:49:ce:86:2b:0e:e8:af:ea:29:57:f7:84: 9c:76:9b:91:b8:fd:08:ca:8c:13:87:a1:a7:ed:a0:db:ba:5c: dc:b5:06:e4:8a:1f:0b:67:e0:8e:e6:8e:eb:c5:0d:30:77:d8: 4f:14:b6:4b:d8:8f:d2:5f:9b:89:6e:da:73:dc:fd:56:86:f5: 66:de:b0:8e:6e:68:ef:13:a9:b9:c3:7c:08:12:9c:af:1c:d8: 84:1c:60:24:02:ba:06:9f:16:ce:22:3f:0e:21:52:55:e7:f8: 2d:6b:13:ae:23:ad:13:44:f6:bd:c7:df:81:e8:2b:6c:3c:5f: ee:0b:b7:27:af:a7:2c:62:9a:fe:78:5d:a0:f6:0c:06:a1:62: 41:9a:8d:d7:75:92:48:c5:fa:5b:1e:d7:a2:60:ff:67:54:91: 65:75:bb:1e -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUNFLNRiyuM7lHGArXzb3IJgYFyVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNjAzMTMwNDU3MjlaFw0yNzAzMTIwNTAyMjlaMDMxMTAvBgNV BAMTKDlEN0MyM0RERDI3RUM4MDc3ODg0NjM0OTg0RkM5M0IwQ0U2MDgyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCGzGl3si2w18qx9nvxoVik3D GrSoY6x8YGdXICn4lXf2CxDxdDYqE1ceTpC1UKzmr/i9pDeBa2037VyamHMkAjiA 1gkk1X0826dyQchOI8S+fr4YpQ6FGV+Z5erWGLvqg6GfrPcFbqilaC6GMpqEGtWl 9jms+UXWPdXKDNPXtKNW+hxZD3W8tP9Z1OJirSlgsLgU3COlU4PSYarSRRtPmB4E 2EdedvRUDZIwTqPbhQgX8hy8n3vvswbvdmFUNScY5FTspl/Yh0ybjDZK/fdhNg2N TFEpPkW1Mg+jijGnI1FT0DrwjwqmaQ0ykbBqVOE9+wazIZ6fJOeFshAG8NprAgMB AAGjggIEMIICADAdBgNVHQ4EFgQUnXwj3dJ+yAd4hGNJhPyTsM5ggmowHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzI0NTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDcE5gAwQByle+MA0GCSqG SIb3DQEBCwUAA4IBAQCLwSatE0soioQJHL4iYjy4CUFgHvYKHQ7GNRrcXE1iBNay 2cMnu04N0UzBsN8W1QHbrAEu+YyV8uKjZnX+oL2dxFK17HDybzzKLwn5Dgj4oKi9 cLZKg7gBlkGPOl/aD5tJzoYrDuiv6ilX94ScdpuRuP0IyowTh6Gn7aDbulzctQbk ih8LZ+CO5o7rxQ0wd9hPFLZL2I/SX5uJbtpz3P1WhvVm3rCObmjvE6m5w3wIEpyv HNiEHGAkAroGnxbOIj8OIVJV5/gtaxOuI60TRPa9x9+B6CtsPF/uC7cnr6csYpr+ eF2g9gwGoWJBmo3XdZJIxfpbHteiYP9nVJFldbse -----END CERTIFICATE-----Generated at Tue Mar 24 08:29:57 2026 by rpki-client