$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24213.roa File: AS24213.roa (raw, json) Hash identifier: K0sks1do236kCK7Ab+M8GPJZax+Wq7W+E4F9ooe2mhc= Subject key identifier: 92:0D:32:B8:F4:DD:30:8E:17:63:CA:D3:D1:E2:43:AC:D6:53:26:87 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2655A8556BE4AE6E2C29C2EBEEC59EE347D706E3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24213.roa Signing time: Wed 29 Jul 2026 10:48:29 +0000 ROA not before: Wed 29 Jul 2026 10:43:29 +0000 ROA not after: Wed 28 Jul 2027 10:48:29 +0000 asID: 24213 IP address blocks: 202.182.57.0/24 maxlen: 24 202.182.58.0/24 maxlen: 24 2402:680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 11:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:55:a8:55:6b:e4:ae:6e:2c:29:c2:eb:ee:c5:9e:e3:47:d7:06:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 29 10:43:29 2026 GMT Not After : Jul 28 10:48:29 2027 GMT Subject: CN=920D32B8F4DD308E1763CAD3D1E243ACD6532687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:e2:54:db:20:e2:00:bb:15:96:b0:e2:52: 3e:c3:7d:08:15:9b:4b:69:e8:98:fe:f0:74:42:e8: f3:97:9f:28:3c:65:ad:9e:8a:87:2b:2d:47:73:11: c2:1b:2b:84:fb:c9:89:53:73:8a:e7:57:e8:af:f0: 29:f0:2a:94:e0:58:bc:8c:d6:b8:8f:47:3c:e3:91: 48:95:09:e5:41:37:9c:cd:8e:4a:4d:e2:96:b5:96: e2:b0:d5:c6:4c:77:1e:94:fa:82:6c:4c:fc:00:08: ba:ed:3e:15:dd:6a:b7:b3:71:be:70:97:7c:f9:fa: f3:30:39:b7:0a:91:c8:1b:08:5a:ed:63:a1:bc:3e: 4a:97:c7:c2:b1:35:d8:68:87:bf:58:0f:6b:eb:e5: 4c:6e:91:fd:01:16:bf:b8:e7:6a:42:3b:e9:f5:3d: 14:5d:be:b0:36:fc:1b:5d:90:33:75:44:1f:66:36: 5d:2e:cf:cf:a1:d7:60:08:12:a8:68:c0:df:cc:fd: e0:20:4e:f3:b6:80:ea:c6:03:c3:51:0b:6a:68:e4: 87:17:53:64:f5:09:c3:aa:25:0e:7d:fe:a5:88:04: cc:46:06:a7:25:33:a4:1a:ec:f6:88:56:85:dd:7b: d1:e8:de:f3:46:f0:5c:b8:65:90:d5:41:56:12:06: 01:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0D:32:B8:F4:DD:30:8E:17:63:CA:D3:D1:E2:43:AC:D6:53:26:87 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.182.57.0-202.182.58.255 IPv6: 2402:680::/32 Signature Algorithm: sha256WithRSAEncryption 59:96:33:4f:fb:a9:33:84:fc:a1:51:e0:b7:8d:63:0f:73:27: 88:e6:9e:b5:82:51:dc:77:35:ec:83:01:92:3e:d0:ff:45:86: 0a:c1:ec:60:84:45:03:c4:da:a8:b7:fe:b9:af:8d:e4:ab:4b: 2e:86:b8:cc:73:38:7c:ab:73:b0:59:35:b7:57:9f:0b:4b:ce: 9c:4b:75:10:7d:5c:76:5c:87:6d:55:64:a0:64:92:18:0f:e3: a7:bc:c3:80:ac:7c:b9:f8:87:11:e2:fc:9b:9b:e8:0c:36:63: 90:b7:31:06:34:7d:47:c8:df:99:9d:e9:4b:dd:56:79:f5:ab: 09:43:32:26:a5:41:c1:e1:60:49:9e:fc:40:1a:67:55:bd:67: 59:c3:e4:f4:2b:b4:b1:3e:fc:64:cd:9d:9c:56:fe:35:fc:83: 96:ff:53:e5:90:d3:17:e0:76:32:c0:f9:39:6b:b6:30:23:b4: ac:c6:60:85:9a:4b:49:b1:63:86:a7:f2:0a:4f:7e:9d:73:b6: 6d:4b:3a:bf:84:b0:ed:c2:0d:53:d5:5e:a0:94:09:3c:14:cf: 40:b1:4f:87:32:1d:30:73:e0:65:f0:03:df:56:78:8d:48:42: e3:69:04:15:98:21:35:89:80:e6:1b:d1:de:f8:09:80:6f:28: df:10:a5:54 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUJlWoVWvkrm4sKcLr7sWe40fXBuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyOTEwNDMyOVoX DTI3MDcyODEwNDgyOVowMzExMC8GA1UEAxMoOTIwRDMyQjhGNEREMzA4RTE3NjND QUQzRDFFMjQzQUNENjUzMjY4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVR4lTbIOIAuxWWsOJSPsN9CBWbS2nomP7wdELo85efKDxlrZ6KhystR3MR whsrhPvJiVNziudX6K/wKfAqlOBYvIzWuI9HPOORSJUJ5UE3nM2OSk3ilrWW4rDV xkx3HpT6gmxM/AAIuu0+Fd1qt7NxvnCXfPn68zA5twqRyBsIWu1jobw+SpfHwrE1 2GiHv1gPa+vlTG6R/QEWv7jnakI76fU9FF2+sDb8G12QM3VEH2Y2XS7Pz6HXYAgS qGjA38z94CBO87aA6sYDw1ELamjkhxdTZPUJw6olDn3+pYgEzEYGpyUzpBrs9ohW hd170eje80bwXLhlkNVBVhIGASUCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBSSDTK4 9N0wjhdjytPR4kOs1lMmhzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQyMTMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBQEAgAB MA4wDAMEAMq2OQMEAMq2OjANBAIAAjAHAwUAJAIGgDANBgkqhkiG9w0BAQsFAAOC AQEAWZYzT/upM4T8oVHgt41jD3MniOaetYJR3Hc17IMBkj7Q/0WGCsHsYIRFA8Ta qLf+ua+N5KtLLoa4zHM4fKtzsFk1t1efC0vOnEt1EH1cdlyHbVVkoGSSGA/jp7zD gKx8ufiHEeL8m5voDDZjkLcxBjR9R8jfmZ3pS91WefWrCUMyJqVBweFgSZ78QBpn Vb1nWcPk9Cu0sT78ZM2dnFb+NfyDlv9T5ZDTF+B2MsD5OWu2MCO0rMZghZpLSbFj hqfyCk9+nXO2bUs6v4Sw7cINU9VeoJQJPBTPQLFPhzIdMHPgZfAD31Z4jUhC42kE FZghNYmA5hvR3vgJgG8o3xClVA== -----END CERTIFICATE-----Generated at Thu Sep 10 22:42:51 2026 by rpki-client