$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS396982.roa File: AS396982.roa (raw, json) Hash identifier: GnBH9MUJ2h9PL5DgfDxVZYieg7TR40EdMzJpzZ/Kf6k= Subject key identifier: B9:25:83:1C:3D:0F:82:1C:64:83:49:07:A2:E5:6C:F4:E3:00:AF:DE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3813BCAF14732C3CC4709BFC77187E4D1C0E364F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS396982.roa Signing time: Sat 02 May 2026 09:20:09 +0000 ROA not before: Sat 02 May 2026 09:15:09 +0000 ROA not after: Sat 01 May 2027 09:20:09 +0000 asID: 396982 IP address blocks: 103.165.152.0/24 maxlen: 24 103.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:13:bc:af:14:73:2c:3c:c4:70:9b:fc:77:18:7e:4d:1c:0e:36:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:09 2026 GMT Not After : May 1 09:20:09 2027 GMT Subject: CN=B925831C3D0F821C64834907A2E56CF4E300AFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6a:96:39:cc:1d:fd:f3:f8:87:2f:01:04:12: dd:c5:aa:6c:33:7a:5e:d4:25:0c:02:bb:4c:5f:b0: 70:79:e7:81:a8:4f:97:fb:f6:95:70:95:1b:f6:08: 95:b4:f3:2a:32:e7:7a:4e:a0:b3:fb:f1:0a:c6:ce: 72:05:1e:41:0c:b0:63:1d:a5:43:02:aa:59:67:5e: ba:ad:c0:95:52:ad:50:7c:e6:c0:5d:5a:2a:6c:63: 38:f1:49:4a:99:e1:5f:a7:35:01:9b:9a:7b:90:39: 7e:fa:ae:91:a8:9d:97:ff:d7:39:51:74:f9:e8:32: 53:84:7b:5d:82:b1:4a:2c:ab:c1:29:b2:0e:9b:a8: 5f:6e:4f:55:c6:86:1f:83:43:4c:af:d1:ca:ea:2b: 04:08:90:c5:b4:b1:e2:5f:27:ee:2e:81:c4:b3:40: a1:aa:c1:dc:d3:87:c8:cd:61:12:ba:67:40:b1:c4: a1:b9:a4:1b:ba:e7:b6:c6:0c:06:c4:6c:db:60:1e: 60:67:c1:c3:41:de:09:fb:b4:0f:e8:e7:d8:7b:be: b7:3a:ba:1f:52:d6:45:f1:ac:7d:ff:0e:2f:9a:57: 44:b0:89:f4:5e:19:c4:66:ed:70:02:f1:3f:04:d9: c2:1c:c2:38:fb:c2:57:05:d0:f2:37:f7:ac:74:9d: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:25:83:1C:3D:0F:82:1C:64:83:49:07:A2:E5:6C:F4:E3:00:AF:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS396982.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.152.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:91:13:a9:f2:ea:75:70:3b:a6:13:88:09:40:a2:97:38:a5: 43:8e:b0:48:01:ae:10:04:7c:0e:d6:06:6c:27:de:97:a4:98: 3e:0c:75:56:cc:5f:d8:c2:0f:0c:8f:ea:ae:f5:91:a1:6b:0d: 9a:60:45:aa:20:11:94:63:8e:db:28:2b:05:fa:28:5d:41:f4: d8:f2:7d:86:a1:30:6f:98:7b:3b:06:28:8f:b3:6d:26:0c:8b: 49:b0:fa:6d:80:e3:4b:28:36:08:0a:a4:81:e7:a2:3e:b9:0b: a1:f0:61:50:64:49:9f:96:d8:cf:ea:76:ee:56:a2:92:22:05: a8:0e:31:b0:32:7a:ce:d7:fb:17:67:0e:23:61:d5:78:73:f7: 94:66:4d:4f:b2:db:90:0e:21:f0:bf:a0:dc:c4:a4:07:58:66: 03:ff:d0:ce:ee:6e:db:f6:c9:61:cb:06:b7:6a:01:de:34:0e: c1:a7:9b:1b:da:30:0c:5c:b7:75:fd:5a:6f:5b:53:1a:0d:04: fd:fe:fc:ac:58:4f:29:99:61:e5:f0:a7:7f:14:ad:37:ad:00: ad:30:e2:9d:0f:a1:4e:b4:e1:cb:a3:e7:49:c5:73:74:20:93: a5:9a:98:e2:5b:7c:b0:21:43:83:bd:eb:7d:f4:95:a3:62:80: 87:94:a4:ae -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOBO8rxRzLDzEcJv8dxh+TRwONk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwOVoX DTI3MDUwMTA5MjAwOVowMzExMC8GA1UEAxMoQjkyNTgzMUMzRDBGODIxQzY0ODM0 OTA3QTJFNTZDRjRFMzAwQUZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJFqljnMHf3z+IcvAQQS3cWqbDN6XtQlDAK7TF+wcHnngahPl/v2lXCVG/YI lbTzKjLnek6gs/vxCsbOcgUeQQywYx2lQwKqWWdeuq3AlVKtUHzmwF1aKmxjOPFJ SpnhX6c1AZuae5A5fvqukaidl//XOVF0+egyU4R7XYKxSiyrwSmyDpuoX25PVcaG H4NDTK/RyuorBAiQxbSx4l8n7i6BxLNAoarB3NOHyM1hErpnQLHEobmkG7rntsYM BsRs22AeYGfBw0HeCfu0D+jn2Hu+tzq6H1LWRfGsff8OL5pXRLCJ9F4ZxGbtcALx PwTZwhzCOPvCVwXQ8jf3rHSdiTECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS5JYMc PQ+CHGSDSQei5Wz04wCv3jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMzk2OTgyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6WYMA0GCSqGSIb3DQEBCwUAA4IBAQAMkROp8up1cDumE4gJQKKXOKVD jrBIAa4QBHwO1gZsJ96XpJg+DHVWzF/Ywg8Mj+qu9ZGhaw2aYEWqIBGUY47bKCsF +ihdQfTY8n2GoTBvmHs7BiiPs20mDItJsPptgONLKDYICqSB56I+uQuh8GFQZEmf ltjP6nbuVqKSIgWoDjGwMnrO1/sXZw4jYdV4c/eUZk1PstuQDiHwv6DcxKQHWGYD /9DO7m7b9slhywa3agHeNA7Bp5sb2jAMXLd1/VpvW1MaDQT9/vysWE8pmWHl8Kd/ FK03rQCtMOKdD6FOtOHLo+dJxXN0IJOlmpjiW3ywIUODvet99JWjYoCHlKSu -----END CERTIFICATE-----Generated at Sun May 3 00:40:37 2026 by rpki-client