$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS17996.roa File: AS17996.roa (raw, json) Hash identifier: ULf5GiTJjqzfthZZldGVnBqjESXwVFCc6GgXfp8TBBM= Subject key identifier: 29:89:11:55:09:8C:CC:79:75:BE:03:29:27:B1:AD:7F:2B:88:C5:3E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2A686D52F3401B31D8DC059C45569DD3F1FB9FB0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17996.roa Signing time: Sat 02 May 2026 09:19:47 +0000 ROA not before: Sat 02 May 2026 09:14:47 +0000 ROA not after: Sat 01 May 2027 09:19:47 +0000 asID: 17996 IP address blocks: 103.162.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:68:6d:52:f3:40:1b:31:d8:dc:05:9c:45:56:9d:d3:f1:fb:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:47 2026 GMT Not After : May 1 09:19:47 2027 GMT Subject: CN=29891155098CCC7975BE032927B1AD7F2B88C53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:a1:df:ad:3e:92:55:b2:0c:58:f1:30:83: 68:1c:42:dc:bd:97:b2:ef:a3:a8:59:bf:1d:63:c1: 2c:54:a5:12:a3:10:08:fd:ec:a3:76:30:9f:34:61: ec:a3:92:71:2b:5f:e8:de:6e:3a:42:0e:29:53:e0: 32:13:6b:d9:aa:73:8d:0b:cd:ec:0b:9c:a3:79:63: 18:b4:b7:61:cb:c8:ba:9a:83:2b:70:4a:01:41:7f: 8d:da:a7:05:34:ce:47:3a:de:7d:0b:b5:c2:f1:0f: 7b:aa:b1:58:e9:58:26:5b:3e:6c:b2:66:1a:54:a8: dc:d4:2c:7f:61:a9:28:53:0b:a0:d9:c1:f3:35:3d: cb:d0:86:d2:fd:e1:19:87:83:6c:02:09:4f:7b:da: f1:f6:c0:62:f0:c2:d6:0a:62:d7:7c:96:fa:3f:0c: b5:88:80:69:1b:d4:3a:72:c0:37:4d:fc:64:db:3f: 13:73:04:15:45:67:77:27:43:db:08:2f:fe:d9:8e: 6e:32:8b:8c:4f:39:ef:cb:14:4f:d8:8c:fb:35:85: 50:80:73:df:ad:da:3f:d8:00:a3:37:d8:de:6b:53: cf:95:ce:b7:2f:21:bd:39:34:52:24:b6:0f:2d:13: f3:f0:16:ba:c3:38:5b:ac:59:ae:d0:c1:77:15:f9: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:11:55:09:8C:CC:79:75:BE:03:29:27:B1:AD:7F:2B:88:C5:3E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS17996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.100.0/23 Signature Algorithm: sha256WithRSAEncryption 79:89:c0:d9:bf:cb:b2:37:d8:50:6c:d0:ab:f0:1d:bf:50:7e: 3b:ed:68:1a:ec:b4:d7:6f:5b:cd:31:0d:48:ce:70:7a:24:01: 2a:6a:4c:eb:8f:9f:a8:65:77:2a:82:78:90:38:0f:55:02:79: d4:56:36:bb:bf:2d:b0:7b:aa:86:f2:55:e3:92:3b:a8:33:c4: ae:ef:24:be:90:c6:52:81:76:8c:d3:3a:99:18:43:35:6e:74: 02:07:64:bd:cf:df:a4:cf:07:14:45:80:45:91:ed:87:ad:91: 4d:72:7b:01:f8:0c:34:0f:82:df:e9:27:df:17:35:38:a4:cb: 79:e2:95:62:5b:f7:ca:16:95:7d:cb:ac:36:9d:97:ed:07:cc: 82:dc:de:06:7d:26:a2:10:29:8e:6a:eb:ff:05:e8:36:62:12: 3f:66:02:d2:82:8b:f5:7c:b5:ff:4d:d2:1b:f4:58:40:d0:2d: 1b:4a:3c:fa:8f:df:7a:2f:16:b0:ca:bc:af:b3:48:cf:61:c6: 75:2d:b8:ed:64:74:6d:7f:12:0d:f0:53:97:04:89:7a:8d:24: a4:39:91:4f:3f:f5:53:05:4c:bc:46:88:d5:18:df:7b:54:b1: d5:d9:b7:b7:53:f1:5a:52:aa:33:3b:db:ca:a9:ce:9a:8a:f6: 01:42:38:d9 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUKmhtUvNAGzHY3AWcRVad0/H7n7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0N1oX DTI3MDUwMTA5MTk0N1owMzExMC8GA1UEAxMoMjk4OTExNTUwOThDQ0M3OTc1QkUw MzI5MjdCMUFEN0YyQjg4QzUzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJoCod+tPpJVsgxY8TCDaBxC3L2Xsu+jqFm/HWPBLFSlEqMQCP3so3YwnzRh 7KOScStf6N5uOkIOKVPgMhNr2apzjQvN7Auco3ljGLS3YcvIupqDK3BKAUF/jdqn BTTORzrefQu1wvEPe6qxWOlYJls+bLJmGlSo3NQsf2GpKFMLoNnB8zU9y9CG0v3h GYeDbAIJT3va8fbAYvDC1gpi13yW+j8MtYiAaRvUOnLAN038ZNs/E3MEFUVndydD 2wgv/tmObjKLjE8578sUT9iM+zWFUIBz363aP9gAozfY3mtTz5XOty8hvTk0UiS2 Dy0T8/AWusM4W6xZrtDBdxX5LncCAwEAAaOCAcswggHHMB0GA1UdDgQWBBQpiRFV CYzMeXW+Ayknsa1/K4jFPjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTc5OTYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnomQwDQYJKoZIhvcNAQELBQADggEBAHmJwNm/y7I32FBs0KvwHb9Qfjvt aBrstNdvW80xDUjOcHokASpqTOuPn6hldyqCeJA4D1UCedRWNru/LbB7qobyVeOS O6gzxK7vJL6QxlKBdozTOpkYQzVudAIHZL3P36TPBxRFgEWR7YetkU1yewH4DDQP gt/pJ98XNTiky3nilWJb98oWlX3LrDadl+0HzILc3gZ9JqIQKY5q6/8F6DZiEj9m AtKCi/V8tf9N0hv0WEDQLRtKPPqP33ovFrDKvK+zSM9hxnUtuO1kdG1/Eg3wU5cE iXqNJKQ5kU8/9VMFTLxGiNUY33tUsdXZt7dT8VpSqjM728qpzpqK9gFCONk= -----END CERTIFICATE-----Generated at Sun May 3 00:40:42 2026 by rpki-client