$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17538.roa File: AS17538.roa (raw, json) Hash identifier: /871RSQChODABO+YwCeYn1Qr3hqMLUHNULcBSvtRuTs= Subject key identifier: 10:CE:78:EA:3D:50:1A:15:2D:60:29:F3:34:1F:87:1E:80:9D:B8:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 67CBA6610909CC48CFDA09E5F4DA6BD05B6A541D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17538.roa Signing time: Sat 02 May 2026 21:36:19 +0000 ROA not before: Sat 02 May 2026 21:31:19 +0000 ROA not after: Sat 01 May 2027 21:36:19 +0000 asID: 17538 IP address blocks: 2407:55c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cb:a6:61:09:09:cc:48:cf:da:09:e5:f4:da:6b:d0:5b:6a:54:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:19 2026 GMT Not After : May 1 21:36:19 2027 GMT Subject: CN=10CE78EA3D501A152D6029F3341F871E809DB8AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:c3:8b:a4:21:d0:40:7a:2f:18:95:3f:84: 88:26:01:5c:47:cb:c8:79:26:65:aa:7b:13:2b:25: b3:de:fd:ac:7d:b8:17:95:e6:50:77:f4:2f:8c:12: d3:43:eb:70:8d:f9:8f:3e:60:69:29:2e:3e:3f:d8: f9:d7:59:db:5c:7c:85:5b:15:41:92:59:bb:26:71: d9:0c:39:00:68:d1:8d:0d:ef:00:6c:8e:72:b1:b0: 84:dc:56:8c:46:e5:74:6f:e9:51:b2:c6:42:8b:32: 07:b8:c7:15:7b:dc:f9:0b:ce:75:e1:e3:b8:48:6b: ef:7b:8b:4e:c2:3f:f2:17:b1:1f:b3:a5:cf:d9:58: 70:69:64:f3:6d:ba:14:5b:4e:5e:c2:1a:ac:d4:04: bc:b1:be:9d:0f:3c:14:4b:30:3b:b6:81:de:7a:e3: 99:7c:60:d8:5e:fa:2e:73:e0:b3:15:b9:9f:5e:d7: 89:ec:03:b5:d8:e8:bf:8a:86:42:9a:3a:b2:a8:50: 2e:a2:c9:f9:ca:e2:df:2b:60:bc:dc:1f:78:10:42: 35:e7:56:b9:b6:f5:92:9b:e7:1e:ea:8f:78:f0:0f: fe:77:8b:d9:cd:ab:cb:30:f4:0c:4c:a3:8a:36:7b: 65:36:aa:01:7d:f4:60:73:34:fe:36:0c:09:78:ba: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CE:78:EA:3D:50:1A:15:2D:60:29:F3:34:1F:87:1E:80:9D:B8:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 82:01:b0:7f:08:36:b9:26:68:b1:26:65:53:1b:42:d1:2a:c1: 6d:4b:c5:90:32:ea:e5:76:67:73:3b:8f:9f:db:d9:3d:7a:8e: c0:3f:74:a3:15:4c:19:86:dd:78:74:17:a5:3b:f0:5a:a0:ae: 55:53:b6:fc:7c:a8:48:53:d1:ff:39:6f:e2:cf:36:b3:72:23: c6:a3:05:bf:08:3a:6e:0c:a0:b3:04:b3:8b:23:fc:b6:a3:8d: 66:6d:23:02:37:09:1b:29:47:7f:56:d1:f2:f5:81:16:56:e2: 42:72:b9:ed:de:f8:8b:65:91:cf:44:b9:78:43:3f:e3:7f:cc: 02:61:40:03:b6:84:6f:6e:79:fd:04:c4:5f:87:21:38:58:ff: 35:ba:dd:f2:8f:c9:a0:44:0b:ec:a7:dd:81:bf:ca:02:64:b2: 44:e4:32:52:e9:f8:b1:59:25:01:47:7b:42:d8:25:1a:19:f7: 70:e5:9a:37:ed:46:dd:dc:3b:a7:3e:fc:64:a8:5d:d1:57:b8: 82:56:7c:f8:3b:19:dd:f2:f1:33:f8:4b:62:25:4e:03:41:44: 9d:88:a1:27:6d:d1:de:77:5f:74:38:3c:01:58:9b:1c:dd:1e: ab:d9:13:0a:da:f7:62:6e:3f:d1:35:91:44:51:90:9a:dc:e6: d0:14:ce:4c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZ8umYQkJzEjP2gnl9Npr0FtqVB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzExOVoX DTI3MDUwMTIxMzYxOVowMzExMC8GA1UEAxMoMTBDRTc4RUEzRDUwMUExNTJENjAy OUYzMzQxRjg3MUU4MDlEQjhBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJyw4ukIdBAei8YlT+EiCYBXEfLyHkmZap7Eysls979rH24F5XmUHf0L4wS 00PrcI35jz5gaSkuPj/Y+ddZ21x8hVsVQZJZuyZx2Qw5AGjRjQ3vAGyOcrGwhNxW jEbldG/pUbLGQosyB7jHFXvc+QvOdeHjuEhr73uLTsI/8hexH7Olz9lYcGlk8226 FFtOXsIarNQEvLG+nQ88FEswO7aB3nrjmXxg2F76LnPgsxW5n17XiewDtdjov4qG Qpo6sqhQLqLJ+cri3ytgvNwfeBBCNedWubb1kpvnHuqPePAP/neL2c2ryzD0DEyj ijZ7ZTaqAX30YHM0/jYMCXi6x6sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQQznjq PVAaFS1gKfM0H4cegJ24rTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTc1Mzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB1XAMA0GCSqGSIb3DQEBCwUAA4IBAQCCAbB/CDa5JmixJmVTG0LRKsFt S8WQMurldmdzO4+f29k9eo7AP3SjFUwZht14dBelO/BaoK5VU7b8fKhIU9H/OW/i zzazciPGowW/CDpuDKCzBLOLI/y2o41mbSMCNwkbKUd/VtHy9YEWVuJCcrnt3viL ZZHPRLl4Qz/jf8wCYUADtoRvbnn9BMRfhyE4WP81ut3yj8mgRAvsp92Bv8oCZLJE 5DJS6fixWSUBR3tC2CUaGfdw5Zo37Ubd3DunPvxkqF3RV7iCVnz4Oxnd8vEz+Eti JU4DQUSdiKEnbdHed190ODwBWJsc3R6r2RMK2vdibj/RNZFEUZCa3ObQFM5M -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client