$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS55672.roa File: AS55672.roa (raw, json) Hash identifier: 7c1Wy6r/fC5bgZt7l93d5Nz7OGJH/KLdbLoigGc5GiI= Subject key identifier: 6B:C3:AC:72:BF:96:71:50:BF:EF:04:5E:99:67:DD:C9:33:15:05:B8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1AA0A18103ED9FE7ACA5463A700409F3B49FCE1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55672.roa Signing time: Sat 02 May 2026 09:19:58 +0000 ROA not before: Sat 02 May 2026 09:14:58 +0000 ROA not after: Sat 01 May 2027 09:19:58 +0000 asID: 55672 IP address blocks: 103.162.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a0:a1:81:03:ed:9f:e7:ac:a5:46:3a:70:04:09:f3:b4:9f:ce:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:58 2026 GMT Not After : May 1 09:19:58 2027 GMT Subject: CN=6BC3AC72BF967150BFEF045E9967DDC9331505B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:ec:1b:33:b3:f7:1e:81:e4:aa:65:94:a9: 83:49:52:8d:ac:6b:21:b3:2a:d5:f6:0f:56:b3:fc: bf:3f:02:28:de:bc:ed:e4:c3:91:76:af:57:fa:dd: a5:82:bf:89:95:d1:9c:ce:b2:1f:20:e8:30:e8:2b: 2d:75:44:15:af:4e:82:ad:74:a1:59:5b:c7:ad:4f: 46:68:79:26:c2:66:e9:0f:f8:5c:9c:96:ae:5f:ac: 77:a6:bf:0a:4e:d6:23:d3:8f:fe:ee:ff:54:38:78: ad:0e:20:01:3d:bd:df:de:e1:de:bb:69:3e:51:36: 85:29:7d:25:45:83:46:38:01:cb:98:83:5f:e2:f6: 51:d5:ab:38:ee:1a:e6:db:09:a7:05:2b:78:9f:d9: 76:f6:6e:b7:96:b0:ae:16:39:72:2c:74:ea:9e:d4: e8:43:3b:55:db:f2:62:2e:97:d1:85:05:e6:94:63: 8c:d0:95:47:d3:a4:b5:74:31:0d:99:17:98:5d:9d: 6c:8f:d7:99:c5:dd:82:8f:bf:db:44:4f:73:1d:65: 40:98:98:61:55:02:ec:2b:99:11:9e:2a:7e:c7:55: 32:e8:08:86:5c:1e:fb:8b:d5:89:34:b4:67:f4:80: 67:74:69:25:cc:fb:fe:d2:a4:b5:40:00:ac:b1:6e: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:AC:72:BF:96:71:50:BF:EF:04:5E:99:67:DD:C9:33:15:05:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS55672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.251.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b7:9b:f9:f8:42:4e:82:45:01:c3:1b:5e:e7:5c:24:23:29: 7f:66:d2:23:5b:91:59:67:ba:68:5e:f6:0c:79:ce:d4:d7:a3: 28:d9:0a:3d:cc:3e:b3:4d:83:c2:ec:12:1f:fc:35:24:b9:97: b6:55:03:0a:9c:be:9a:3b:0c:e6:56:d6:10:4b:2f:1a:5c:d7: d5:fb:7b:28:9e:cc:8a:84:1f:f1:b5:ca:98:64:78:85:83:67: 00:f2:46:53:69:dc:6e:88:ff:cf:02:12:65:63:25:dc:af:24: b6:11:eb:52:91:3f:ff:94:99:67:58:ff:63:64:65:55:15:29: a0:87:76:fc:3d:13:e8:1e:50:e6:22:99:b3:e2:f9:2c:21:84: 34:71:83:0c:ee:a5:d5:6f:0a:d8:de:47:53:41:2c:85:f3:8c: b1:a5:08:89:63:17:4c:16:74:3d:31:9f:9d:85:a4:b1:6b:f6: 7e:6a:72:13:fb:31:e8:b5:26:7e:76:66:2a:89:84:89:fc:26: 72:96:4a:f0:c6:b5:15:aa:58:c2:43:23:9a:02:6f:80:20:f5: da:ba:36:37:8a:1b:81:ce:6e:94:af:72:c2:14:b8:ed:94:df: 28:a1:6d:dd:b8:8c:bc:5b:e1:ef:1f:3e:7f:50:bb:cb:7e:e0: a7:d5:97:b3 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUGqChgQPtn+espUY6cAQJ87SfzhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1OFoX DTI3MDUwMTA5MTk1OFowMzExMC8GA1UEAxMoNkJDM0FDNzJCRjk2NzE1MEJGRUYw NDVFOTk2N0REQzkzMzE1MDVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK827Bszs/cegeSqZZSpg0lSjaxrIbMq1fYPVrP8vz8CKN687eTDkXavV/rd pYK/iZXRnM6yHyDoMOgrLXVEFa9Ogq10oVlbx61PRmh5JsJm6Q/4XJyWrl+sd6a/ Ck7WI9OP/u7/VDh4rQ4gAT29397h3rtpPlE2hSl9JUWDRjgBy5iDX+L2UdWrOO4a 5tsJpwUreJ/ZdvZut5awrhY5cix06p7U6EM7VdvyYi6X0YUF5pRjjNCVR9OktXQx DZkXmF2dbI/XmcXdgo+/20RPcx1lQJiYYVUC7CuZEZ4qfsdVMugIhlwe+4vViTS0 Z/SAZ3RpJcz7/tKktUAArLFuEYECAwEAAaOCAcswggHHMB0GA1UdDgQWBBRrw6xy v5ZxUL/vBF6ZZ93JMxUFuDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTU2NzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnovswDQYJKoZIhvcNAQELBQADggEBABS3m/n4Qk6CRQHDG17nXCQjKX9m 0iNbkVlnumhe9gx5ztTXoyjZCj3MPrNNg8LsEh/8NSS5l7ZVAwqcvpo7DOZW1hBL Lxpc19X7eyiezIqEH/G1yphkeIWDZwDyRlNp3G6I/88CEmVjJdyvJLYR61KRP/+U mWdY/2NkZVUVKaCHdvw9E+geUOYimbPi+SwhhDRxgwzupdVvCtjeR1NBLIXzjLGl CIljF0wWdD0xn52FpLFr9n5qchP7Mei1Jn52ZiqJhIn8JnKWSvDGtRWqWMJDI5oC b4Ag9dq6NjeKG4HObpSvcsIUuO2U3yihbd24jLxb4e8fPn9Qu8t+4KfVl7M= -----END CERTIFICATE-----Generated at Sun May 3 00:39:53 2026 by rpki-client