$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63491.roa File: AS63491.roa (raw, json) Hash identifier: WAyof0M8bDYCu9F9d8ELcdD8QxyyFxpY8bajE2bNbOQ= Subject key identifier: BC:19:2A:62:0B:AC:7B:A0:EE:8A:43:A3:C9:F7:95:53:DB:D6:2A:93 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 511222CEA00990A4839EEAA78AEC659A1771538A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63491.roa Signing time: Sat 02 May 2026 21:27:38 +0000 ROA not before: Sat 02 May 2026 21:22:38 +0000 ROA not after: Sat 01 May 2027 21:27:38 +0000 asID: 63491 IP address blocks: 202.46.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:12:22:ce:a0:09:90:a4:83:9e:ea:a7:8a:ec:65:9a:17:71:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:22:38 2026 GMT Not After : May 1 21:27:38 2027 GMT Subject: CN=BC192A620BAC7BA0EE8A43A3C9F79553DBD62A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:b3:d2:0a:75:72:50:cb:da:d3:d9:ad:44: ce:6d:e2:e3:ad:c8:18:58:08:c5:6c:c8:01:3e:d1: 1e:05:93:20:7a:ea:ab:db:f9:b0:7c:60:ea:b9:57: 19:ef:87:3c:65:66:26:2a:99:3d:8d:c3:dd:2f:de: 26:cd:b0:11:74:fe:1b:6f:86:c4:f8:6f:fa:a5:51: 6c:2a:f9:34:cc:3f:f3:ef:ba:a8:8e:09:ae:06:1e: 4f:4b:74:4d:86:ca:6e:27:e0:22:f8:2a:45:92:9f: b3:af:c3:c0:db:d3:ec:c7:bf:49:c8:f0:ec:f4:e7: 2a:df:66:27:82:82:b3:1a:0c:ac:23:a8:60:c3:c0: dd:5d:07:e4:0e:fe:e4:98:a3:89:4e:44:33:3f:62: a5:b3:e4:37:71:36:84:6f:5a:06:21:0c:7d:8b:2b: 7b:8c:30:e9:ff:4e:d5:ee:8f:d8:43:89:8f:20:11: 87:64:7c:bc:f1:16:ad:99:45:ac:9f:08:81:93:c3: f9:ba:95:d6:5f:fa:34:81:40:40:23:c1:cb:0b:53: 95:cf:21:a3:a4:d2:62:8a:15:34:20:0d:a8:ca:1e: af:d2:29:b5:9e:af:dd:c3:ac:40:23:3a:c0:75:6f: d1:d6:81:74:5d:bd:7d:c3:64:08:d9:76:9b:a7:08: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:19:2A:62:0B:AC:7B:A0:EE:8A:43:A3:C9:F7:95:53:DB:D6:2A:93 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.26.0/24 Signature Algorithm: sha256WithRSAEncryption 35:bb:6c:c3:13:4a:cf:5e:ac:1c:75:ec:cb:0a:b3:c3:28:e0: 36:4a:45:5e:c5:e8:00:da:94:95:56:60:ed:a7:36:9a:ec:2b: 6d:12:76:c3:28:e4:2d:e9:58:81:22:2c:a2:b2:86:55:d2:d5: 46:50:11:86:4e:da:a8:0d:f3:1e:e9:6b:54:4a:23:45:b8:c5: b7:6a:ee:fc:c8:ea:19:82:f7:06:23:75:ca:cc:23:d8:16:74: 84:9b:dc:85:3f:57:71:83:00:84:27:14:56:a9:16:41:9a:1c: 14:9a:b0:a3:9b:8d:d5:ff:87:9e:08:cc:c1:6a:b5:e3:8f:94: d8:71:5c:81:e7:f0:c8:88:ed:84:d5:38:10:c1:82:d4:7a:1f: 1d:26:77:6a:22:eb:de:b3:20:55:6a:44:88:94:9f:ae:cd:32: e6:09:8f:15:b9:bb:33:08:ef:b5:fa:b8:b8:c0:ef:52:81:fa: 9a:7f:49:30:72:b4:2d:01:3b:f9:ac:11:fb:e6:98:c8:9e:a2: a5:ad:08:85:39:f4:55:a6:82:b9:7f:25:cb:cc:27:10:3f:ed: cc:38:0a:8d:53:ee:35:9d:61:d0:15:f5:88:31:f6:3a:08:3d: 07:d5:a9:66:8b:83:94:29:75:3d:56:c5:45:2b:c4:2b:b8:90: 24:51:f4:9e -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUURIizqAJkKSDnuqniuxlmhdxU4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjIzOFoX DTI3MDUwMTIxMjczOFowMzExMC8GA1UEAxMoQkMxOTJBNjIwQkFDN0JBMEVFOEE0 M0EzQzlGNzk1NTNEQkQ2MkE5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMl0s9IKdXJQy9rT2a1Ezm3i463IGFgIxWzIAT7RHgWTIHrqq9v5sHxg6rlX Ge+HPGVmJiqZPY3D3S/eJs2wEXT+G2+GxPhv+qVRbCr5NMw/8++6qI4JrgYeT0t0 TYbKbifgIvgqRZKfs6/DwNvT7Me/Scjw7PTnKt9mJ4KCsxoMrCOoYMPA3V0H5A7+ 5JijiU5EMz9ipbPkN3E2hG9aBiEMfYsre4ww6f9O1e6P2EOJjyARh2R8vPEWrZlF rJ8IgZPD+bqV1l/6NIFAQCPBywtTlc8ho6TSYooVNCANqMoer9IptZ6v3cOsQCM6 wHVv0daBdF29fcNkCNl2m6cI3CMCAwEAAaOCAcswggHHMB0GA1UdDgQWBBS8GSpi C6x7oO6KQ6PJ95VT29YqkzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM0OTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADKLhowDQYJKoZIhvcNAQELBQADggEBADW7bMMTSs9erBx17MsKs8Mo4DZK RV7F6ADalJVWYO2nNprsK20SdsMo5C3pWIEiLKKyhlXS1UZQEYZO2qgN8x7pa1RK I0W4xbdq7vzI6hmC9wYjdcrMI9gWdISb3IU/V3GDAIQnFFapFkGaHBSasKObjdX/ h54IzMFqteOPlNhxXIHn8MiI7YTVOBDBgtR6Hx0md2oi696zIFVqRIiUn67NMuYJ jxW5uzMI77X6uLjA71KB+pp/STBytC0BO/msEfvmmMieoqWtCIU59FWmgrl/JcvM JxA/7cw4Co1T7jWdYdAV9Ygx9joIPQfVqWaLg5QpdT1WxUUrxCu4kCRR9J4= -----END CERTIFICATE-----Generated at Sun May 3 00:41:44 2026 by rpki-client