$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24211.roa File: AS24211.roa (raw, json) Hash identifier: NRZJpuuSqjc9x4mKudlJs5tr6btoH9zFh6RGt29y1AQ= Subject key identifier: EF:FC:4F:42:58:B7:D6:0D:F5:F9:C3:66:3E:7D:D2:5D:72:54:94:A7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FEB5F3D81B81F9E13BA593603583506C8466A7A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24211.roa Signing time: Sat 02 May 2026 15:58:41 +0000 ROA not before: Sat 02 May 2026 15:53:41 +0000 ROA not after: Sat 01 May 2027 15:58:41 +0000 asID: 24211 IP address blocks: 203.190.240.0/21 maxlen: 24 2402:a000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:eb:5f:3d:81:b8:1f:9e:13:ba:59:36:03:58:35:06:c8:46:6a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 15:53:41 2026 GMT Not After : May 1 15:58:41 2027 GMT Subject: CN=EFFC4F4258B7D60DF5F9C3663E7DD25D725494A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:1c:03:a5:67:bc:57:69:29:20:5e:f9:fb: e9:a3:69:61:db:5e:00:47:17:94:f1:61:3c:be:9b: ed:f9:37:c4:0a:54:fd:39:c5:83:d4:df:2f:07:4c: 9c:d1:00:2a:f3:0c:8a:18:34:de:d5:e6:5c:75:68: 8e:31:73:34:b9:e6:ca:5c:e0:60:3a:7c:1f:35:d5: da:8e:21:17:3b:c0:a6:31:05:62:62:84:d8:51:ea: 90:d7:4c:9a:16:09:02:28:b6:10:ff:14:52:06:37: c5:fe:68:e8:b2:c2:5a:0c:e1:cc:1d:f6:81:c2:e4: f8:29:5a:20:e2:ab:c9:be:90:74:aa:cb:ca:8f:90: 24:3d:78:6c:b8:a2:65:d8:f6:a1:6d:22:eb:62:c3: ca:18:5c:ad:fe:bb:f5:18:b8:fa:e6:fc:aa:6d:33: 45:25:13:9f:61:18:98:eb:5b:5d:76:d7:98:d9:e1: 28:30:0e:7f:df:16:f6:51:5e:67:63:6f:bc:49:66: 24:4e:0a:97:bf:6f:c8:0a:11:84:df:9a:9c:cf:a4: 4b:c1:9a:e2:18:5b:0c:c1:d7:a8:12:d6:9e:27:43: 63:b1:a4:6b:58:b5:4c:84:4a:a1:ff:f9:51:30:39: 49:f7:45:67:16:bb:49:b4:27:5c:bc:64:dc:f0:d0: ec:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FC:4F:42:58:B7:D6:0D:F5:F9:C3:66:3E:7D:D2:5D:72:54:94:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24211.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.240.0/21 IPv6: 2402:a000::/32 Signature Algorithm: sha256WithRSAEncryption 89:ec:d0:ca:21:18:f9:39:15:f1:10:88:a1:74:d1:ee:c0:e9: 97:dd:ab:c7:48:61:03:ed:80:da:90:43:97:74:23:f1:6e:18: 3d:70:16:b9:04:ab:2b:77:48:8c:89:64:be:1e:c2:0b:89:71: b7:c4:4a:7d:7d:c9:ef:ca:04:9d:7b:3c:b4:6f:86:d0:03:e1: 77:06:7d:3e:1f:20:7d:d0:6a:3d:88:37:fc:f3:f5:13:61:60: fb:20:d1:b0:a5:f5:9e:81:74:de:24:33:94:81:a8:eb:22:ec: 2c:c5:8b:0d:5c:dc:72:68:31:9b:fa:56:19:25:02:a7:92:14: 0a:4c:66:eb:1e:4f:a8:18:0d:54:a2:91:90:5e:39:02:0e:c8: c7:e6:65:49:37:84:a9:b0:9a:a1:4e:87:24:02:c0:49:76:e0: e7:f2:5b:77:ed:3f:0c:1a:a1:d7:10:5f:27:4a:0c:5f:97:b9: b4:17:6a:c4:a1:11:0e:fe:09:a0:60:11:ae:0d:99:e8:5b:a9: cd:24:e7:e2:cb:42:80:97:0b:07:e5:8e:36:1f:70:70:b2:15: f0:3e:13:7d:3c:41:24:4a:77:ae:4e:20:a0:56:bd:3f:ff:0c: 92:80:aa:a7:d1:09:e1:2c:88:08:94:25:3d:d5:e8:83:1a:8b: 09:19:9e:44 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUH+tfPYG4H54Tulk2A1g1BshGanowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE1NTM0MVoX DTI3MDUwMTE1NTg0MVowMzExMC8GA1UEAxMoRUZGQzRGNDI1OEI3RDYwREY1RjlD MzY2M0U3REQyNUQ3MjU0OTRBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+tHAOlZ7xXaSkgXvn76aNpYdteAEcXlPFhPL6b7fk3xApU/TnFg9TfLwdM nNEAKvMMihg03tXmXHVojjFzNLnmylzgYDp8HzXV2o4hFzvApjEFYmKE2FHqkNdM mhYJAii2EP8UUgY3xf5o6LLCWgzhzB32gcLk+ClaIOKryb6QdKrLyo+QJD14bLii Zdj2oW0i62LDyhhcrf679Ri4+ub8qm0zRSUTn2EYmOtbXXbXmNnhKDAOf98W9lFe Z2NvvElmJE4Kl79vyAoRhN+anM+kS8Ga4hhbDMHXqBLWnidDY7Gka1i1TIRKof/5 UTA5SfdFZxa7SbQnXLxk3PDQ7KUCAwEAAaOCAdowggHWMB0GA1UdDgQWBBTv/E9C WLfWDfX5w2Y+fdJdclSUpzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQyMTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB MAYDBAPLvvAwDQQCAAIwBwMFACQCoAAwDQYJKoZIhvcNAQELBQADggEBAIns0Moh GPk5FfEQiKF00e7A6Zfdq8dIYQPtgNqQQ5d0I/FuGD1wFrkEqyt3SIyJZL4ewguJ cbfESn19ye/KBJ17PLRvhtAD4XcGfT4fIH3Qaj2IN/zz9RNhYPsg0bCl9Z6BdN4k M5SBqOsi7CzFiw1c3HJoMZv6VhklAqeSFApMZuseT6gYDVSikZBeOQIOyMfmZUk3 hKmwmqFOhyQCwEl24OfyW3ftPwwaodcQXydKDF+XubQXasShEQ7+CaBgEa4Nmehb qc0k5+LLQoCXCwfljjYfcHCyFfA+E308QSRKd65OIKBWvT//DJKAqqfRCeEsiAiU JT3V6IMaiwkZnkQ= -----END CERTIFICATE-----Generated at Sun May 3 01:44:54 2026 by rpki-client