$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS56233.roa File: AS56233.roa (raw, json) Hash identifier: LCCMhjBGjxS7wA+M7MoEXF2ONbOZfjv8jMi1kDXXcSs= Subject key identifier: B6:20:3F:0E:A3:45:52:2B:7D:FC:64:C9:1E:CF:2A:CA:F7:B5:4B:1F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A2278DA47C777C37E4609C69122AE0DEDE6E844 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS56233.roa Signing time: Sat 02 May 2026 21:27:07 +0000 ROA not before: Sat 02 May 2026 21:22:07 +0000 ROA not after: Sat 01 May 2027 21:27:07 +0000 asID: 56233 IP address blocks: 59.153.80.0/22 maxlen: 24 103.184.28.0/23 maxlen: 24 202.160.136.0/23 maxlen: 24 202.160.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:22:78:da:47:c7:77:c3:7e:46:09:c6:91:22:ae:0d:ed:e6:e8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:22:07 2026 GMT Not After : May 1 21:27:07 2027 GMT Subject: CN=B6203F0EA345522B7DFC64C91ECF2ACAF7B54B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:c5:d4:7f:16:99:51:01:6b:1d:21:c7:c2: f0:19:ce:cf:af:f4:fe:66:38:76:5d:d6:3e:93:2d: 22:5e:ca:db:d4:c2:be:3a:41:8f:97:65:fc:ee:91: e3:bd:d6:2b:15:67:b0:54:c5:ae:1d:8c:54:ed:c5: f5:7e:24:97:89:fe:03:4f:e3:b5:36:68:c3:29:7e: 8a:54:80:e7:16:ea:71:70:bc:b2:7c:51:9b:3b:ef: a7:e3:22:cd:7b:50:ee:48:13:5d:8b:40:90:a5:d0: 17:95:31:18:c1:11:e2:07:73:71:df:91:16:54:c9: 53:b9:7a:c6:3a:14:32:a3:48:a6:fb:da:e5:0f:14: 62:fc:5f:a8:0b:8c:76:a1:d5:4e:96:8c:78:aa:6c: 77:be:2e:a9:2a:43:76:1c:5b:e5:cd:6b:17:5b:1d: 01:64:c9:28:6b:2d:9a:19:4c:6f:9e:97:22:eb:0a: 7d:ed:8b:29:f5:18:22:30:aa:76:38:eb:99:24:ce: 73:b9:18:54:36:cc:29:5a:79:0a:d4:47:bd:d8:da: 36:96:02:70:95:d8:91:80:fc:01:8d:06:ba:07:b6: 8a:43:84:57:57:1c:05:1e:82:c4:55:5c:44:8b:bf: a0:33:fd:28:28:b3:8d:05:61:f8:74:c4:72:21:83: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:3F:0E:A3:45:52:2B:7D:FC:64:C9:1E:CF:2A:CA:F7:B5:4B:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS56233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.80.0/22 103.184.28.0/23 202.160.136.0-202.160.138.255 Signature Algorithm: sha256WithRSAEncryption 06:69:f6:d1:b3:55:dd:9c:66:22:cb:3a:b7:4f:83:6d:91:fe: 4a:02:4c:70:1e:f0:77:ea:e6:13:63:12:06:93:2a:96:89:90: 0b:88:94:42:15:81:33:23:7e:f0:be:64:ca:13:ea:e6:9d:7e: 0e:0d:a7:06:2c:97:64:df:de:67:ea:85:97:c6:a3:13:9f:e0: 7a:e9:c3:0f:35:a5:a5:fd:8f:87:ae:20:4d:3a:0c:c9:f6:1f: 6b:7b:da:26:5f:85:b7:72:46:5e:4d:ae:7d:4b:7a:05:a8:9a: 41:e5:34:11:6b:af:8f:a4:7c:a6:9d:ac:db:ee:5d:f0:9a:5f: 79:ff:a1:a6:89:a8:df:bd:8a:8d:fb:7d:b1:a2:36:37:d8:fd: d1:c6:52:3a:f4:af:72:78:0b:6f:75:d4:26:f3:bd:0e:57:bd: c3:15:f6:8f:fd:78:48:15:e4:45:b0:0e:83:a6:80:d3:00:a2: b9:8a:a3:65:7b:f0:c4:b5:30:50:e9:dd:20:0a:76:57:37:f7: 8d:19:fa:22:3c:ae:6a:33:63:1e:e9:9e:83:80:d2:29:41:17: ea:28:f1:7d:da:85:66:96:2f:4c:a3:de:fe:41:99:70:89:7e: 95:15:79:16:07:3c:9a:c6:c4:66:c2:b4:d9:d1:bc:10:4c:cc: af:0b:a0:5d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUCiJ42kfHd8N+RgnGkSKuDe3m6EQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjIwN1oX DTI3MDUwMTIxMjcwN1owMzExMC8GA1UEAxMoQjYyMDNGMEVBMzQ1NTIyQjdERkM2 NEM5MUVDRjJBQ0FGN0I1NEIxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQjxdR/FplRAWsdIcfC8BnOz6/0/mY4dl3WPpMtIl7K29TCvjpBj5dl/O6R 473WKxVnsFTFrh2MVO3F9X4kl4n+A0/jtTZowyl+ilSA5xbqcXC8snxRmzvvp+Mi zXtQ7kgTXYtAkKXQF5UxGMER4gdzcd+RFlTJU7l6xjoUMqNIpvva5Q8UYvxfqAuM dqHVTpaMeKpsd74uqSpDdhxb5c1rF1sdAWTJKGstmhlMb56XIusKfe2LKfUYIjCq djjrmSTOc7kYVDbMKVp5CtRHvdjaNpYCcJXYkYD8AY0Guge2ikOEV1ccBR6CxFVc RIu/oDP9KCizjQVh+HTEciGDxG8CAwEAAaOCAd8wggHbMB0GA1UdDgQWBBS2ID8O o0VSK338ZMkezyrK97VLHzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTYyMzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgAB MBoDBAI7mVADBAFnuBwwDAMEA8qgiAMEAMqgijANBgkqhkiG9w0BAQsFAAOCAQEA Bmn20bNV3ZxmIss6t0+DbZH+SgJMcB7wd+rmE2MSBpMqlomQC4iUQhWBMyN+8L5k yhPq5p1+Dg2nBiyXZN/eZ+qFl8ajE5/geunDDzWlpf2Ph64gTToMyfYfa3vaJl+F t3JGXk2ufUt6BaiaQeU0EWuvj6R8pp2s2+5d8Jpfef+hpomo372Kjft9saI2N9j9 0cZSOvSvcngLb3XUJvO9Dle9wxX2j/14SBXkRbAOg6aA0wCiuYqjZXvwxLUwUOnd IAp2Vzf3jRn6IjyuajNjHumeg4DSKUEX6ijxfdqFZpYvTKPe/kGZcIl+lRV5Fgc8 msbEZsK02dG8EEzMrwugXQ== -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client