$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55652.roa File: AS55652.roa (raw, json) Hash identifier: qxENIn61J6Dofqjr8djpcaA6X7duGMk/NFfUDdw+y9Y= Subject key identifier: 39:EC:2D:1D:74:E6:33:36:30:DC:29:E4:64:25:37:CB:C2:1B:53:3F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2AFE97DBE04B5FC42D0D7C8F33EE33BDDC2EE3EA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55652.roa Signing time: Sat 02 May 2026 21:17:20 +0000 ROA not before: Sat 02 May 2026 21:12:20 +0000 ROA not after: Sat 01 May 2027 21:17:20 +0000 asID: 55652 IP address blocks: 103.24.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fe:97:db:e0:4b:5f:c4:2d:0d:7c:8f:33:ee:33:bd:dc:2e:e3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:12:20 2026 GMT Not After : May 1 21:17:20 2027 GMT Subject: CN=39EC2D1D74E6333630DC29E4642537CBC21B533F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:a5:9d:48:51:9a:26:15:a2:1f:47:a4:aa: ac:05:e9:8b:56:49:d7:3b:0e:39:7c:45:83:c2:7a: cb:9b:07:7a:b3:3a:e3:70:ad:b4:02:21:30:e1:11: 0a:2f:35:5c:63:70:e1:e0:16:b3:35:65:b9:1f:7e: f8:c1:a8:2c:f0:45:76:00:ed:bb:f4:d5:71:4a:a5: ad:28:c6:ad:46:bb:59:86:2f:38:30:c3:ce:c5:d1: b1:63:07:4a:22:70:b4:f2:b0:fd:9c:c2:3f:49:b0: 35:54:82:e6:88:96:cb:ee:98:c7:d5:58:5b:bd:5f: 1a:7f:ac:b0:88:fc:07:bc:ce:14:ff:e6:f5:97:cc: 18:0c:32:1b:b7:a8:ee:58:c7:dd:aa:94:f9:68:cb: e5:ba:c3:31:82:63:66:2c:43:ff:03:94:77:21:6a: 40:08:55:72:05:fc:c4:b0:db:ec:6b:07:25:91:2c: 9d:8a:ed:69:bc:ee:62:32:7a:d6:0d:42:4f:d0:fb: 88:01:32:85:94:9d:8f:9c:bf:fa:18:b2:00:4a:38: e4:fe:d6:79:eb:ca:22:6b:47:d6:b1:9a:95:dd:db: 48:96:c2:71:d5:37:43:36:4a:44:ab:4b:1d:48:df: ec:ae:fe:34:dd:42:5e:45:a4:4e:81:d1:2e:94:8c: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:2D:1D:74:E6:33:36:30:DC:29:E4:64:25:37:CB:C2:1B:53:3F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.196.0/23 Signature Algorithm: sha256WithRSAEncryption 12:8c:6c:a7:b2:8a:28:5d:3b:20:03:3c:a3:85:ae:69:c6:fd: e8:d4:7b:df:4b:03:c9:88:db:f6:41:c1:78:49:d6:95:78:cf: a4:a7:ed:5d:25:24:94:22:0a:fb:e1:9b:a0:4c:36:61:0c:7f: 66:ab:af:f2:6d:d9:8a:99:83:ae:72:8a:1b:53:22:9a:ca:7d: c1:71:98:fd:08:92:0e:28:0d:62:a2:3a:7f:af:19:01:56:8a: 29:ca:d1:6a:d9:e0:d1:15:80:2e:8f:23:b0:f1:80:fb:9c:ed: 78:22:df:50:68:32:10:48:35:af:43:b1:1b:19:ee:d4:2d:06: 03:9f:df:93:8d:f4:30:73:3f:eb:d7:88:b6:bd:5c:aa:86:56: aa:7e:a8:b5:64:e2:e8:de:87:26:4b:f8:03:5f:df:43:ae:48: 60:15:3b:11:3d:28:5c:6a:50:06:10:e2:6e:9a:c3:13:8a:4b: eb:cd:35:43:68:34:3b:4a:91:5c:05:b0:4d:08:bc:29:ee:a0: f4:e9:35:e2:de:87:e1:d5:3a:09:c6:d9:95:2b:80:21:31:83: d3:07:6c:cb:81:32:0d:1b:e5:af:60:ee:25:4f:aa:9b:af:e6: d9:42:83:28:3b:1f:56:9e:7a:ec:f2:e0:68:2f:a5:5e:21:cf: 63:4a:8b:9d -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUKv6X2+BLX8QtDXyPM+4zvdwu4+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTIyMFoX DTI3MDUwMTIxMTcyMFowMzExMC8GA1UEAxMoMzlFQzJEMUQ3NEU2MzMzNjMwREMy OUU0NjQyNTM3Q0JDMjFCNTMzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPIpZ1IUZomFaIfR6SqrAXpi1ZJ1zsOOXxFg8J6y5sHerM643CttAIhMOER Ci81XGNw4eAWszVluR9++MGoLPBFdgDtu/TVcUqlrSjGrUa7WYYvODDDzsXRsWMH SiJwtPKw/ZzCP0mwNVSC5oiWy+6Yx9VYW71fGn+ssIj8B7zOFP/m9ZfMGAwyG7eo 7ljH3aqU+WjL5brDMYJjZixD/wOUdyFqQAhVcgX8xLDb7GsHJZEsnYrtabzuYjJ6 1g1CT9D7iAEyhZSdj5y/+hiyAEo45P7WeevKImtH1rGald3bSJbCcdU3QzZKRKtL HUjf7K7+NN1CXkWkToHRLpSM0lkCAwEAAaOCAcswggHHMB0GA1UdDgQWBBQ57C0d dOYzNjDcKeRkJTfLwhtTPzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTU2NTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnGMQwDQYJKoZIhvcNAQELBQADggEBABKMbKeyiihdOyADPKOFrmnG/ejU e99LA8mI2/ZBwXhJ1pV4z6Sn7V0lJJQiCvvhm6BMNmEMf2arr/Jt2YqZg65yihtT IprKfcFxmP0Ikg4oDWKiOn+vGQFWiinK0WrZ4NEVgC6PI7DxgPuc7Xgi31BoMhBI Na9DsRsZ7tQtBgOf35ON9DBzP+vXiLa9XKqGVqp+qLVk4ujehyZL+ANf30OuSGAV OxE9KFxqUAYQ4m6awxOKS+vNNUNoNDtKkVwFsE0IvCnuoPTpNeLeh+HVOgnG2ZUr gCExg9MHbMuBMg0b5a9g7iVPqpuv5tlCgyg7H1aeeuzy4GgvpV4hz2NKi50= -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client