$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24530.roa File: AS24530.roa (raw, json) Hash identifier: rRj4cD+SFm7oh4AJFMfAWCFu29uDJtcJvqgKPANL5pY= Subject key identifier: 87:AA:7C:60:15:6B:1A:21:43:BD:B9:6C:20:F7:49:02:D5:79:33:75 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A3DEB806B0595894A7A185248DA032D6B089426 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24530.roa Signing time: Sat 02 May 2026 21:30:24 +0000 ROA not before: Sat 02 May 2026 21:25:24 +0000 ROA not after: Sat 01 May 2027 21:30:24 +0000 asID: 24530 IP address blocks: 103.178.196.0/23 maxlen: 24 203.190.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:eb:80:6b:05:95:89:4a:7a:18:52:48:da:03:2d:6b:08:94:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:25:24 2026 GMT Not After : May 1 21:30:24 2027 GMT Subject: CN=87AA7C60156B1A2143BDB96C20F74902D5793375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:57:c0:b0:cd:39:13:a6:fe:df:52:a8:6e: 1e:15:76:5c:9f:a5:16:23:d0:94:77:a4:05:b8:02: d8:5c:11:5c:ff:1c:df:e6:e8:ca:11:1b:d1:8f:a6: ca:1d:6b:63:03:62:51:60:70:96:74:ff:ee:29:96: 98:a7:6d:d5:07:4e:cf:5b:55:c9:d8:fb:64:53:8e: 9d:a0:ab:e4:4f:7c:66:33:f8:b3:9e:6f:e6:ca:12: 64:c3:9e:53:b0:2f:33:f2:b5:1f:ed:e8:17:15:69: f7:57:16:34:93:3e:ff:3b:fc:0d:c4:b3:41:b5:5d: 06:1b:9e:7c:d0:60:18:69:93:46:74:5b:d5:66:6b: 4f:db:1b:0b:3e:5b:1e:48:0e:fe:a9:58:3f:5f:20: 58:8f:4b:f8:30:77:6f:4e:4e:6b:da:a8:bb:17:17: 0f:9a:ed:e8:c5:b8:21:b0:94:89:15:38:c8:c9:17: 32:e5:3c:7b:35:20:b9:89:04:ea:3e:28:3c:f6:a5: 8f:6c:96:c1:e8:3b:d1:f1:d5:77:2d:de:ea:02:2a: a8:00:14:8c:8a:e3:5a:7d:d8:e3:dc:10:e4:ef:ef: ec:71:d1:01:04:9e:3a:d4:a6:6e:06:0a:13:97:8b: b9:0c:93:2a:30:4e:59:65:00:86:ce:bd:fe:3d:18: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:7C:60:15:6B:1A:21:43:BD:B9:6C:20:F7:49:02:D5:79:33:75 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.196.0/23 203.190.48.0/21 Signature Algorithm: sha256WithRSAEncryption 33:e6:9a:6c:98:1f:b5:bc:f3:85:34:9a:16:8e:20:99:85:8b: a6:fb:4a:24:c1:09:8d:9b:d6:a6:4e:ea:91:6b:72:a7:06:44: 76:7c:fa:11:78:72:6a:b1:f9:f9:86:70:11:56:e6:74:3b:b0: ef:8a:c1:db:04:29:49:86:d0:d0:3c:5b:79:df:48:7a:31:75: 49:0d:b9:e3:1f:47:fc:3e:23:a9:7a:60:4b:e4:ba:ca:84:a4: 26:f1:eb:66:89:54:86:c2:a4:2f:3a:25:52:aa:f0:62:bd:e2: 02:e1:99:a0:81:85:29:f5:85:54:04:e1:95:12:f4:e4:ca:07: 8f:e3:df:6b:9b:5a:e1:a3:0a:b6:99:c7:ca:c1:30:11:b2:eb: 04:a3:39:16:70:43:07:ad:4a:4e:c6:41:9c:d4:ac:37:7e:b2: b3:b6:77:c4:53:99:37:c1:f2:71:ea:33:7a:ad:4e:c9:b1:af: 89:af:b2:8a:b4:30:ae:c9:8a:cf:59:9d:3d:65:ec:14:16:03: 38:78:6b:ea:1a:16:cf:67:1f:7d:82:30:4c:ce:cd:00:fc:54: 9f:55:6e:58:91:28:b6:25:df:87:dc:32:d4:69:dc:75:9e:bd: cf:0a:ed:d3:b6:dc:7d:ee:07:f9:d9:49:4b:58:b2:66:c2:90: cb:fd:dd:ca -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUWj3rgGsFlYlKehhSSNoDLWsIlCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjUyNFoX DTI3MDUwMTIxMzAyNFowMzExMC8GA1UEAxMoODdBQTdDNjAxNTZCMUEyMTQzQkRC OTZDMjBGNzQ5MDJENTc5MzM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKegV8CwzTkTpv7fUqhuHhV2XJ+lFiPQlHekBbgC2FwRXP8c3+boyhEb0Y+m yh1rYwNiUWBwlnT/7imWmKdt1QdOz1tVydj7ZFOOnaCr5E98ZjP4s55v5soSZMOe U7AvM/K1H+3oFxVp91cWNJM+/zv8DcSzQbVdBhuefNBgGGmTRnRb1WZrT9sbCz5b HkgO/qlYP18gWI9L+DB3b05Oa9qouxcXD5rt6MW4IbCUiRU4yMkXMuU8ezUguYkE 6j4oPPalj2yWweg70fHVdy3e6gIqqAAUjIrjWn3Y49wQ5O/v7HHRAQSeOtSmbgYK E5eLuQyTKjBOWWUAhs69/j0Yy+0CAwEAAaOCAdEwggHNMB0GA1UdDgQWBBSHqnxg FWsaIUO9uWwg90kC1XkzdTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQ1MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAFnssQDBAPLvjAwDQYJKoZIhvcNAQELBQADggEBADPmmmyYH7W884U0mhaO IJmFi6b7SiTBCY2b1qZO6pFrcqcGRHZ8+hF4cmqx+fmGcBFW5nQ7sO+KwdsEKUmG 0NA8W3nfSHoxdUkNueMfR/w+I6l6YEvkusqEpCbx62aJVIbCpC86JVKq8GK94gLh maCBhSn1hVQE4ZUS9OTKB4/j32ubWuGjCraZx8rBMBGy6wSjORZwQwetSk7GQZzU rDd+srO2d8RTmTfB8nHqM3qtTsmxr4mvsoq0MK7Jis9ZnT1l7BQWAzh4a+oaFs9n H32CMEzOzQD8VJ9VbliRKLYl34fcMtRp3HWevc8K7dO23H3uB/nZSUtYsmbCkMv9 3co= -----END CERTIFICATE-----Generated at Sun May 3 00:40:33 2026 by rpki-client