$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS5511.roa File: AS5511.roa (raw, json) Hash identifier: rWeCSQVS8rGeYl8P3396CL0sFaw7XdlT7oH5Mb4SrZE= Subject key identifier: 4D:CF:6E:5B:4A:1E:51:DF:25:77:07:9F:4E:26:97:BD:7D:1E:7D:07 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 723DCB7074D51E14D318FAEE7019F58DE526717E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS5511.roa Signing time: Wed 08 Jul 2026 03:52:02 +0000 ROA not before: Wed 08 Jul 2026 03:47:02 +0000 ROA not after: Wed 07 Jul 2027 03:52:02 +0000 asID: 5511 IP address blocks: 103.105.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3d:cb:70:74:d5:1e:14:d3:18:fa:ee:70:19:f5:8d:e5:26:71:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 8 03:47:02 2026 GMT Not After : Jul 7 03:52:02 2027 GMT Subject: CN=4DCF6E5B4A1E51DF2577079F4E2697BD7D1E7D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:6a:22:22:bd:91:c0:9a:97:b9:30:e0:bc: 47:d7:d2:b1:f2:ac:f7:3e:f1:ba:bf:4d:fd:65:74: 51:14:9d:d5:a2:be:4d:4e:62:51:91:97:de:ba:5b: f9:69:98:8b:7e:a0:5f:b1:28:6a:b1:69:75:5e:d8: e0:a8:d4:63:b1:e5:74:13:89:ad:88:be:8e:d2:fa: 5a:75:cd:0d:8d:c4:56:1a:2e:86:a1:ae:ab:7d:11: 1e:f4:83:7f:6f:88:ea:4e:96:51:b7:ae:23:38:fb: 27:e8:cb:d8:27:42:46:55:24:ca:fe:6e:5b:ba:2c: 5e:ca:c4:cd:9d:c0:df:93:8a:61:56:cb:f6:c5:38: 4d:ae:8d:cf:af:46:95:02:2e:ff:ee:72:bc:4c:a7: 23:2d:ce:d0:87:6c:e1:e0:66:fd:bf:d7:c7:22:e6: 71:81:e6:bb:40:68:a2:69:2a:12:01:0a:0e:bf:aa: 69:28:f1:89:54:7d:2f:d6:2d:5d:bb:98:75:36:79: 37:7c:b7:a9:58:7e:e6:c9:70:56:6a:12:94:a9:ab: 2e:1f:c8:34:86:bb:f1:21:48:b1:c1:19:ea:17:ee: b2:c8:e1:73:bf:4c:b5:58:ca:b2:45:a2:dc:07:05: 3b:ab:c9:f6:ce:51:0c:b5:8b:d3:44:db:a3:31:ea: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:6E:5B:4A:1E:51:DF:25:77:07:9F:4E:26:97:BD:7D:1E:7D:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS5511.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:01:4b:b6:32:01:89:ad:c8:4d:61:bf:5f:69:45:5c:74:a6: 35:8b:0c:47:59:b7:b9:8f:f6:00:7a:44:38:32:bf:34:19:36: 36:38:76:23:39:ba:c4:80:cf:85:da:f8:80:92:b7:ec:9b:31: 23:a3:90:c4:64:59:a9:1d:bf:e7:a9:91:5d:76:ed:ae:4c:ed: 5b:a7:14:86:01:e0:29:c2:12:df:69:e4:b1:c9:07:b7:9e:5d: 35:b5:9d:4f:d6:bd:69:68:09:dc:e7:55:cb:d0:1d:e2:c1:c9: 08:a7:be:63:f1:bf:86:ae:24:47:33:91:fd:3b:69:a8:3d:20: d3:47:7b:06:d3:43:ce:ff:f8:8f:4b:22:1d:74:d5:fd:1a:6d: d6:19:98:6e:9a:c6:9e:44:95:dc:59:e7:97:a3:0b:c6:dc:d2: 54:8d:24:b9:22:d2:f9:d7:b6:40:f8:b8:9c:f1:bd:ab:3a:3e: af:60:60:4a:d5:6e:8a:0e:36:38:e4:c6:e1:5c:b0:4e:f8:42: ee:52:c5:2f:b5:0c:2a:23:e5:4c:85:c2:93:08:d2:81:7d:fa: bf:c4:2b:7b:0b:f4:ff:b4:b4:25:14:9e:e3:06:ea:d8:7f:54: 3f:cb:cd:b6:55:32:a0:5b:e4:8b:1d:5f:3c:1d:87:c3:12:0f: 74:5b:16:47 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUcj3LcHTVHhTTGPrucBn1jeUmcX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcwODAzNDcwMloX DTI3MDcwNzAzNTIwMlowMzExMC8GA1UEAxMoNERDRjZFNUI0QTFFNTFERjI1Nzcw NzlGNEUyNjk3QkQ3RDFFN0QwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJI7aiIivZHAmpe5MOC8R9fSsfKs9z7xur9N/WV0URSd1aK+TU5iUZGX3rpb +WmYi36gX7EoarFpdV7Y4KjUY7HldBOJrYi+jtL6WnXNDY3EVhouhqGuq30RHvSD f2+I6k6WUbeuIzj7J+jL2CdCRlUkyv5uW7osXsrEzZ3A35OKYVbL9sU4Ta6Nz69G lQIu/+5yvEynIy3O0Ids4eBm/b/XxyLmcYHmu0BoomkqEgEKDr+qaSjxiVR9L9Yt XbuYdTZ5N3y3qVh+5slwVmoSlKmrLh/INIa78SFIscEZ6hfussjhc79MtVjKskWi 3AcFO6vJ9s5RDLWL00TbozHqodUCAwEAAaOCAcowggHGMB0GA1UdDgQWBBRNz25b Sh5R3yV3B59OJpe9fR59BzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTUxMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdpwDANBgkqhkiG9w0BAQsFAAOCAQEAmgFLtjIBia3ITWG/X2lFXHSmNYsM R1m3uY/2AHpEODK/NBk2Njh2Izm6xIDPhdr4gJK37JsxI6OQxGRZqR2/56mRXXbt rkztW6cUhgHgKcIS32nksckHt55dNbWdT9a9aWgJ3OdVy9Ad4sHJCKe+Y/G/hq4k RzOR/TtpqD0g00d7BtNDzv/4j0siHXTV/Rpt1hmYbprGnkSV3Fnnl6MLxtzSVI0k uSLS+de2QPi4nPG9qzo+r2BgStVuig42OOTG4VywTvhC7lLFL7UMKiPlTIXCkwjS gX36v8Qrewv0/7S0JRSe4wbq2H9UP8vNtlUyoFvkix1fPB2HwxIPdFsWRw== -----END CERTIFICATE-----Generated at Sun Jul 19 14:53:07 2026 by rpki-client