
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa
File: AS9794.roa (raw, json)
Hash identifier: E/UHvxBCjm8sjVoElaorcW43TywuJmJGA0IVQSDrnlU=
Subject key identifier: FC:CB:4F:CA:64:A4:2C:33:54:94:21:75:1E:BA:EC:E1:C2:53:EC:BE
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 42F66B64409C52362CE08F1D9429CA35863E48CF
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa
Signing time: Sat 02 May 2026 21:18:54 +0000
ROA not before: Sat 02 May 2026 21:13:54 +0000
ROA not after: Sat 01 May 2027 21:18:54 +0000
asID: 9794
IP address blocks: 103.252.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f6:6b:64:40:9c:52:36:2c:e0:8f:1d:94:29:ca:35:86:3e:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:13:54 2026 GMT
Not After : May 1 21:18:54 2027 GMT
Subject: CN=FCCB4FCA64A42C33549421751EBAECE1C253ECBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:9b:7d:4d:c0:d3:6c:dd:6f:fe:e6:35:23:
a6:aa:15:bd:75:4c:f3:8c:5a:cf:47:b0:df:82:64:
33:45:8c:b8:45:43:96:c6:7f:7a:55:7c:b0:3a:be:
3b:a3:c7:2f:5f:54:39:ec:96:29:57:87:65:bb:9b:
43:1f:33:56:61:ab:ab:e0:de:7e:be:42:a6:7a:58:
08:79:bb:96:fd:6f:de:bc:da:d2:ce:d6:88:04:15:
b3:08:02:4e:74:ab:a2:4e:a3:0c:e7:e6:f1:16:34:
28:f2:63:bb:78:7e:f4:ca:9b:2c:df:8d:98:e4:f9:
a9:fa:9d:40:fb:c0:e9:fa:0e:34:59:20:ba:ce:9e:
38:e2:00:47:05:5a:8e:f0:36:1a:fb:27:e8:b1:42:
e5:33:93:27:ec:7f:4d:9b:7f:fb:f6:7a:dc:37:31:
6f:b5:9d:91:38:7c:91:94:6a:de:26:44:c6:82:d9:
2a:38:e7:bc:19:db:a5:c5:a0:4d:b8:70:27:00:14:
65:97:9e:5a:8f:1f:9b:1c:0d:bb:23:2f:4b:4f:08:
50:eb:6b:26:70:ca:f6:5f:cf:b4:9b:2c:a4:d5:e5:
94:63:ed:5f:d1:53:8c:f4:b3:d1:48:02:96:0b:dc:
3c:6b:e9:d8:37:7f:5f:0e:0a:1a:9f:63:54:eb:77:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:4F:CA:64:A4:2C:33:54:94:21:75:1E:BA:EC:E1:C2:53:EC:BE
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS9794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.252.22.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c9:17:d6:f0:c6:df:a7:bb:fc:a9:a3:7c:58:b3:de:dd:65:
cf:2e:0e:57:0a:dc:e4:79:5e:21:30:fd:af:ac:ab:71:a4:88:
e3:ee:64:a0:42:ed:5a:52:c6:e9:93:e8:bf:3d:78:f8:6d:78:
bb:07:64:b6:93:09:34:69:0e:28:66:55:d8:25:98:ed:10:c8:
c2:08:6b:e7:8a:fc:1b:26:72:45:c2:ef:87:7e:6e:c3:25:3e:
cf:c7:a6:fe:65:bd:79:9e:4b:c1:94:12:41:a4:34:bd:45:34:
40:22:bf:5f:5b:27:14:bc:3d:11:7a:e9:59:d6:c6:34:5b:8d:
56:87:f6:86:10:eb:d1:ea:02:90:1c:28:f1:95:3c:9d:a3:31:
91:9d:6f:4e:08:ae:e2:c1:53:2e:73:2d:2e:3d:02:9f:b2:25:
3f:71:72:95:2d:1f:87:87:ed:1b:ec:37:4b:c2:51:83:38:a8:
d0:bb:95:9a:b5:1f:96:49:80:37:80:dc:db:bb:b4:73:c9:f4:
d9:a8:ce:6b:b7:75:9b:71:e7:98:d4:9c:b1:f9:b8:ba:43:b8:
58:98:52:80:1f:65:46:fb:d8:5f:6e:65:19:03:b6:a8:5c:e3:
44:f9:d4:48:c4:82:8f:cc:22:0c:d8:dc:b2:a7:07:25:df:db:
4b:4f:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:40:29 2026 by rpki-client