$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17884.roa File: AS17884.roa (raw, json) Hash identifier: 7iqQclE/bLDHXgl+wmR3THWBPvIhEabMwRCQ8I/aFv4= Subject key identifier: 7F:77:18:01:69:68:C2:DD:B6:E7:1D:F6:32:6A:87:E5:F4:B8:F6:D8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 191122910BDB96B027AF801992D416C6FF306C83 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17884.roa Signing time: Sat 02 May 2026 21:33:21 +0000 ROA not before: Sat 02 May 2026 21:28:21 +0000 ROA not after: Sat 01 May 2027 21:33:21 +0000 asID: 17884 IP address blocks: 103.158.56.0/23 maxlen: 24 202.145.0.0/22 maxlen: 24 2402:7980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:11:22:91:0b:db:96:b0:27:af:80:19:92:d4:16:c6:ff:30:6c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:28:21 2026 GMT Not After : May 1 21:33:21 2027 GMT Subject: CN=7F7718016968C2DDB6E71DF6326A87E5F4B8F6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:20:88:67:2e:3b:ea:22:d9:f9:be:3c:c9: fd:14:88:9c:9c:3f:25:61:c6:07:03:b0:62:5d:45: d0:47:81:04:c9:10:c2:91:7c:e7:88:20:7d:85:7f: 88:d3:a2:cf:ca:d5:74:01:52:fa:9f:05:ba:66:de: 86:55:3e:6a:29:62:3f:ae:98:77:ac:b4:9a:bb:98: 50:04:36:66:f8:69:90:bd:d8:00:59:0d:61:9a:2a: 3e:b5:de:13:98:37:6c:68:c1:52:c4:bd:4a:b4:69: 44:c2:6f:a5:f5:06:23:3b:79:10:30:eb:a9:4d:5b: 76:0c:50:07:e7:ee:72:ea:fd:2f:ab:a6:db:db:98: 43:1d:5c:4b:e0:93:f1:41:8f:36:c7:8a:e0:1e:b0: e2:81:7b:5c:30:e7:1c:8f:0e:9b:95:2a:99:5c:fa: 88:23:b1:68:71:f0:49:1d:5a:f2:8b:83:c4:ee:0e: fe:1a:c4:23:27:7c:b4:ce:dd:1b:d8:8f:28:9d:1a: 3d:34:db:fd:03:06:e0:c6:ab:7e:0e:8c:c6:41:2a: 96:97:ec:b1:8a:c9:57:18:e8:28:90:8a:cc:0a:ab: b7:7f:f6:45:80:3e:5e:32:14:46:7f:87:de:16:75: 8c:c7:27:1b:92:7d:4f:9b:e1:b9:61:7f:b6:95:f1: 06:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:18:01:69:68:C2:DD:B6:E7:1D:F6:32:6A:87:E5:F4:B8:F6:D8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.56.0/23 202.145.0.0/22 IPv6: 2402:7980::/32 Signature Algorithm: sha256WithRSAEncryption 15:ea:2a:e0:22:02:dc:45:03:15:0d:2a:74:89:a3:d3:d6:2c: 87:ac:fb:6b:e3:61:5e:ed:5e:52:ee:3e:63:96:96:e5:20:c3: a2:b3:d0:ed:e1:dd:1a:c7:0f:b2:54:fa:a8:ff:c1:a9:08:de: 7f:4a:13:c8:c4:3c:39:1c:41:0d:77:d7:3e:e5:04:96:4e:6e: 11:b0:01:f0:bf:b8:91:8f:d2:a6:b5:1e:f0:61:4c:e8:dd:c2: 15:81:41:77:68:4b:1b:e1:44:a4:5a:f1:d5:56:13:cc:79:2f: f6:9c:d1:2d:2f:04:02:93:df:f1:57:be:1b:66:e1:28:2c:94: 8e:a9:75:a3:79:a9:4f:de:f2:a9:14:3c:a2:34:29:0c:5e:8d: 28:4c:04:cc:38:c9:cd:fa:44:42:fd:14:3a:af:db:a7:e8:af: 7c:a4:db:d9:29:b7:61:f6:a6:54:90:f1:dc:e1:a2:12:cd:b5: 4a:f7:84:8d:2e:c6:ab:38:d4:d7:af:ab:17:e5:62:d9:0a:d5: 0f:1b:db:8c:7f:04:c8:17:ab:19:3c:4b:f2:fb:98:cb:b0:12: 47:bc:0c:51:30:84:b2:76:67:11:90:51:1d:f5:95:e7:31:86: 69:06:23:e2:81:32:c2:42:1c:30:5d:65:b9:1e:31:6a:f4:c3: df:0b:78:f7 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUGREikQvblrAnr4AZktQWxv8wbIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjgyMVoX DTI3MDUwMTIxMzMyMVowMzExMC8GA1UEAxMoN0Y3NzE4MDE2OTY4QzJEREI2RTcx REY2MzI2QTg3RTVGNEI4RjZEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMoIIhnLjvqItn5vjzJ/RSInJw/JWHGBwOwYl1F0EeBBMkQwpF854ggfYV/ iNOiz8rVdAFS+p8FumbehlU+ailiP66Yd6y0mruYUAQ2ZvhpkL3YAFkNYZoqPrXe E5g3bGjBUsS9SrRpRMJvpfUGIzt5EDDrqU1bdgxQB+fucur9L6um29uYQx1cS+CT 8UGPNseK4B6w4oF7XDDnHI8Om5UqmVz6iCOxaHHwSR1a8ouDxO4O/hrEIyd8tM7d G9iPKJ0aPTTb/QMG4Marfg6MxkEqlpfssYrJVxjoKJCKzAqrt3/2RYA+XjIURn+H 3hZ1jMcnG5J9T5vhuWF/tpXxBqsCAwEAAaOCAeAwggHcMB0GA1UdDgQWBBR/dxgB aWjC3bbnHfYyaofl9Lj22DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTc4ODQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgAB MAwDBAFnnjgDBALKkQAwDQQCAAIwBwMFACQCeYAwDQYJKoZIhvcNAQELBQADggEB ABXqKuAiAtxFAxUNKnSJo9PWLIes+2vjYV7tXlLuPmOWluUgw6Kz0O3h3RrHD7JU +qj/wakI3n9KE8jEPDkcQQ131z7lBJZObhGwAfC/uJGP0qa1HvBhTOjdwhWBQXdo SxvhRKRa8dVWE8x5L/ac0S0vBAKT3/FXvhtm4SgslI6pdaN5qU/e8qkUPKI0KQxe jShMBMw4yc36REL9FDqv26for3yk29kpt2H2plSQ8dzhohLNtUr3hI0uxqs41Nev qxflYtkK1Q8b24x/BMgXqxk8S/L7mMuwEke8DFEwhLJ2ZxGQUR31lecxhmkGI+KB MsJCHDBdZbkeMWr0w98LePc= -----END CERTIFICATE-----Generated at Sun May 3 00:42:22 2026 by rpki-client