$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55002.roa File: AS55002.roa (raw, json) Hash identifier: ZvFYBtOW9C1iOWJyTDzA/7M1ykFWoEDVCv6WVqEj72w= Subject key identifier: FB:A9:EC:84:D7:1B:D9:F0:0E:F8:45:7B:1C:8D:DC:83:8C:27:3C:21 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F548C96563188DD1AF27BE8DAFC675B49109BAE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55002.roa Signing time: Sat 02 May 2026 08:35:34 +0000 ROA not before: Sat 02 May 2026 08:30:34 +0000 ROA not after: Sat 01 May 2027 08:35:34 +0000 asID: 55002 IP address blocks: 103.209.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:54:8c:96:56:31:88:dd:1a:f2:7b:e8:da:fc:67:5b:49:10:9b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:34 2026 GMT Not After : May 1 08:35:34 2027 GMT Subject: CN=FBA9EC84D71BD9F00EF8457B1C8DDC838C273C21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:41:c7:55:4c:73:64:af:da:ed:5b:6b:16: 00:36:76:55:14:c6:42:b6:78:85:59:ba:a4:ff:62: e9:ee:6b:ea:ba:9f:22:08:b5:44:ec:81:e9:80:f8: cf:d6:fc:a9:12:63:28:f7:5f:6b:1a:c5:f5:b0:16: ca:0b:69:fa:b6:ea:de:db:a9:a1:c9:ff:8c:25:73: f8:1f:b5:d3:1b:bc:92:bb:23:86:8e:fb:81:ad:86: 49:03:f3:85:62:57:1e:b5:02:81:21:3b:bc:ba:66: bd:0e:09:c8:30:2c:33:62:b4:8e:cf:16:80:d2:0e: 19:75:23:c0:e8:45:00:26:3c:20:29:7c:9d:55:ca: 85:b9:af:04:51:32:74:a5:5b:10:80:88:7b:ee:4c: b6:93:68:7f:a0:e1:c5:a7:64:f6:81:79:8a:a9:1b: 61:2f:58:b9:33:83:a8:8e:32:9f:17:89:f2:9b:f4: dd:e8:cf:93:7c:17:58:53:fc:88:76:51:c1:04:71: f4:3b:cc:ef:4f:9f:3b:c8:db:cc:f8:ef:0a:90:af: 82:f0:f0:7d:2f:45:ff:c8:f5:98:ef:45:fb:2b:dd: 62:0a:db:38:46:da:f2:28:73:8e:7d:7b:25:57:0e: a8:ae:51:bd:49:f5:db:ca:4e:d3:98:72:83:97:5a: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:EC:84:D7:1B:D9:F0:0E:F8:45:7B:1C:8D:DC:83:8C:27:3C:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.7.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3e:44:c2:ad:a1:52:f7:ec:26:01:f1:94:28:8e:1b:e0:1e: 9a:6f:80:19:28:d8:ae:08:a7:30:a7:7a:90:ce:b2:e6:33:9b: cf:6b:8a:41:6b:51:3b:cb:d2:93:b1:f8:72:1b:2d:a3:63:5d: 75:99:db:c7:c9:a1:5c:a8:89:94:fa:ff:6f:a7:66:ac:a8:a8: c4:b8:44:6a:b2:14:c6:6b:1e:8f:d0:ef:8d:63:57:6e:62:1d: 37:29:3c:a2:41:19:31:7d:35:1c:33:a4:35:45:da:56:fa:2a: a0:6e:4d:25:03:49:b9:fa:e4:c5:e8:62:f9:11:34:74:95:54: 0f:9e:66:4a:89:59:0a:16:49:3f:ae:69:83:e4:c7:46:3f:83: 57:78:5b:40:06:15:6c:fb:53:62:dd:21:cf:e8:f4:a8:55:78: 55:0a:a5:11:61:56:14:88:45:0d:28:44:16:47:22:d4:db:cf: aa:e0:74:67:b5:d9:c5:0e:59:eb:56:94:b9:29:a6:c5:39:1e: a6:f9:71:13:91:65:b9:ed:34:37:a5:fb:3f:62:c2:d8:2e:be: 0d:24:6f:de:75:1d:2b:38:b5:f3:f2:d8:93:24:74:71:71:af: bf:c2:53:0c:43:69:2a:96:3e:46:01:ad:2d:ab:4d:17:09:21: ed:7a:2b:b5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUf1SMllYxiN0a8nvo2vxnW0kQm64wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAzNFoX DTI3MDUwMTA4MzUzNFowMzExMC8GA1UEAxMoRkJBOUVDODRENzFCRDlGMDBFRjg0 NTdCMUM4RERDODM4QzI3M0MyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUPQcdVTHNkr9rtW2sWADZ2VRTGQrZ4hVm6pP9i6e5r6rqfIgi1ROyB6YD4 z9b8qRJjKPdfaxrF9bAWygtp+rbq3tupocn/jCVz+B+10xu8krsjho77ga2GSQPz hWJXHrUCgSE7vLpmvQ4JyDAsM2K0js8WgNIOGXUjwOhFACY8ICl8nVXKhbmvBFEy dKVbEICIe+5MtpNof6Dhxadk9oF5iqkbYS9YuTODqI4ynxeJ8pv03ejPk3wXWFP8 iHZRwQRx9DvM70+fO8jbzPjvCpCvgvDwfS9F/8j1mO9F+yvdYgrbOEba8ihzjn17 JVcOqK5RvUn128pO05hyg5daPDkCAwEAAaOCAcswggHHMB0GA1UdDgQWBBT7qeyE 1xvZ8A74RXscjdyDjCc8ITAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTUwMDIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABn0QcwDQYJKoZIhvcNAQELBQADggEBADk+RMKtoVL37CYB8ZQojhvgHppv gBko2K4IpzCnepDOsuYzm89rikFrUTvL0pOx+HIbLaNjXXWZ28fJoVyoiZT6/2+n ZqyoqMS4RGqyFMZrHo/Q741jV25iHTcpPKJBGTF9NRwzpDVF2lb6KqBuTSUDSbn6 5MXoYvkRNHSVVA+eZkqJWQoWST+uaYPkx0Y/g1d4W0AGFWz7U2LdIc/o9KhVeFUK pRFhVhSIRQ0oRBZHItTbz6rgdGe12cUOWetWlLkppsU5Hqb5cRORZbntNDel+z9i wtguvg0kb951HSs4tfPy2JMkdHFxr7/CUwxDaSqWPkYBrS2rTRcJIe16K7U= -----END CERTIFICATE-----Generated at Sun May 3 00:39:50 2026 by rpki-client