$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa File: AS63490.roa (raw, json) Hash identifier: 17kzT6yNi/D0xp++igCrsQQEJKmKh05EBoMtj2H1zUk= Subject key identifier: 24:94:6D:25:50:4D:51:16:E9:0B:93:91:50:E8:2C:AB:45:FB:95:E9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C4239973C89B5B50B0F160CA97E57E8320D4D22 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa Signing time: Sat 02 May 2026 21:27:36 +0000 ROA not before: Sat 02 May 2026 21:22:36 +0000 ROA not after: Sat 01 May 2027 21:27:36 +0000 asID: 63490 IP address blocks: 202.46.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:42:39:97:3c:89:b5:b5:0b:0f:16:0c:a9:7e:57:e8:32:0d:4d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:22:36 2026 GMT Not After : May 1 21:27:36 2027 GMT Subject: CN=24946D25504D5116E90B939150E82CAB45FB95E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:47:7f:5c:e5:2a:cd:e0:ad:42:41:ae:30: 0a:d0:fb:8d:91:b4:6c:53:f4:a6:b5:28:94:97:ce: 42:6e:4f:73:57:db:44:82:f2:6f:72:ce:00:3e:59: a7:fd:da:43:bf:c5:9e:87:88:20:70:a1:3a:e3:97: 4c:15:d4:58:51:eb:d3:81:b6:3e:e9:58:93:f7:f6: 9f:e5:87:84:be:96:9b:01:2b:e4:ec:7c:d0:27:f7: 81:e7:6c:01:cc:5a:91:fc:69:e7:70:80:d8:97:d9: d6:c7:10:9a:10:41:e1:11:d7:70:e4:19:20:79:8c: 52:3b:b5:4f:db:c3:3c:d6:a3:43:d0:58:65:3f:98: 7d:c4:34:d2:40:63:cc:f0:34:14:20:e2:f3:27:23: df:1d:c5:7a:ca:c3:71:c2:ff:5e:4d:95:5f:6f:04: f4:2e:bf:ff:f9:e0:b5:bd:b9:87:b7:e2:cb:5e:0d: 06:5e:2d:30:a0:e6:e2:72:c5:08:04:3c:0d:22:50: ec:33:50:65:8b:c7:ae:8a:1e:10:82:e3:e8:81:fb: 8c:df:bf:d7:f3:b8:6f:37:9e:51:ea:cf:c3:13:2c: e4:23:0b:14:18:54:5a:c8:50:71:5c:d8:be:ce:40: a0:75:3c:3a:4e:b5:05:90:0a:69:f4:31:7a:ab:31: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:6D:25:50:4D:51:16:E9:0B:93:91:50:E8:2C:AB:45:FB:95:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.156.0/22 Signature Algorithm: sha256WithRSAEncryption 21:cb:69:7f:bd:ad:38:42:8b:ff:aa:ac:eb:dd:15:64:0b:32: a4:34:67:ee:42:61:b0:fd:b1:c6:6d:8c:0f:b3:a8:74:58:20: 0c:2a:a5:05:49:30:15:26:cb:8f:f6:21:11:dc:78:67:10:5d: da:b4:25:76:80:8d:8f:ca:71:00:ce:cb:c4:e1:d8:54:ce:6f: 99:91:63:65:7d:76:93:49:3c:21:b1:06:01:cf:2d:9b:28:6d: f1:74:51:12:d1:3e:ae:64:c7:1a:57:20:53:5b:f8:aa:44:fa: ca:2c:cc:7f:e6:13:78:b2:fd:41:46:ad:e5:89:be:20:9a:dd: 0e:60:c6:ec:c6:85:4c:27:79:6a:1c:f1:0b:73:77:bf:0d:3e: 96:37:c0:80:ff:c3:3f:49:dc:84:f3:6c:39:b3:a5:df:85:df: b9:fa:30:e3:82:85:a5:8a:4a:42:8c:11:99:3f:bf:df:39:c5: 60:17:fa:5a:29:78:76:f2:f2:10:87:c5:2a:c5:da:89:01:21: 3b:81:56:91:ee:b9:dd:c9:59:75:93:3f:e2:90:75:27:e2:f5: 79:8a:b4:b5:7e:79:ae:81:1f:35:ad:8f:a6:11:db:ce:7f:82: e0:a7:1f:ca:a3:8e:4f:c5:f5:f8:4a:c7:4a:5c:67:30:b3:23: 12:6b:10:be -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUXEI5lzyJtbULDxYMqX5X6DINTSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjIzNloX DTI3MDUwMTIxMjczNlowMzExMC8GA1UEAxMoMjQ5NDZEMjU1MDRENTExNkU5MEI5 MzkxNTBFODJDQUI0NUZCOTVFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTxR39c5SrN4K1CQa4wCtD7jZG0bFP0prUolJfOQm5Pc1fbRILyb3LOAD5Z p/3aQ7/FnoeIIHChOuOXTBXUWFHr04G2PulYk/f2n+WHhL6WmwEr5Ox80Cf3geds Acxakfxp53CA2JfZ1scQmhBB4RHXcOQZIHmMUju1T9vDPNajQ9BYZT+YfcQ00kBj zPA0FCDi8ycj3x3FesrDccL/Xk2VX28E9C6///ngtb25h7fiy14NBl4tMKDm4nLF CAQ8DSJQ7DNQZYvHrooeEILj6IH7jN+/1/O4bzeeUerPwxMs5CMLFBhUWshQcVzY vs5AoHU8Ok61BZAKafQxeqsx5SECAwEAAaOCAcswggHHMB0GA1UdDgQWBBQklG0l UE1RFukLk5FQ6CyrRfuV6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM0OTAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALKLpwwDQYJKoZIhvcNAQELBQADggEBACHLaX+9rThCi/+qrOvdFWQLMqQ0 Z+5CYbD9scZtjA+zqHRYIAwqpQVJMBUmy4/2IRHceGcQXdq0JXaAjY/KcQDOy8Th 2FTOb5mRY2V9dpNJPCGxBgHPLZsobfF0URLRPq5kxxpXIFNb+KpE+soszH/mE3iy /UFGreWJviCa3Q5gxuzGhUwneWoc8Qtzd78NPpY3wID/wz9J3ITzbDmzpd+F37n6 MOOChaWKSkKMEZk/v985xWAX+lopeHby8hCHxSrF2okBITuBVpHuud3JWXWTP+KQ dSfi9XmKtLV+ea6BHzWtj6YR285/guCnH8qjjk/F9fhKx0pcZzCzIxJrEL4= -----END CERTIFICATE-----Generated at Sun May 3 00:40:30 2026 by rpki-client