$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa File: AS56233.roa (raw, json) Hash identifier: ZcWTq3SVrCMXb35aYCzjGXp9c3XSgy2HmfCh+3Me8Hs= Subject key identifier: D8:E2:66:B3:07:0F:D9:74:FC:2E:C1:C4:1D:22:E9:26:2F:7A:76:25 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D7E34AA758B9D3C63456E0CA691B98582E3C19D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa Signing time: Tue 24 Mar 2026 04:00:00 +0000 ROA not before: Tue 24 Mar 2026 03:55:00 +0000 ROA not after: Tue 23 Mar 2027 04:00:00 +0000 asID: 56233 IP address blocks: 59.153.80.0/22 maxlen: 24 103.184.28.0/23 maxlen: 24 202.160.136.0/23 maxlen: 24 202.160.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7e:34:aa:75:8b:9d:3c:63:45:6e:0c:a6:91:b9:85:82:e3:c1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 24 03:55:00 2026 GMT Not After : Mar 23 04:00:00 2027 GMT Subject: CN=D8E266B3070FD974FC2EC1C41D22E9262F7A7625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:b9:52:38:ff:b8:a9:a0:bd:4a:22:74:c0: 3f:0a:0f:5e:29:51:9a:5d:0e:c2:14:09:8a:d5:51: b1:f3:95:22:19:29:43:0f:b9:91:99:72:41:f4:06: 10:a7:77:35:e8:a2:2c:ec:c0:26:77:9b:99:dd:62: 23:06:d9:43:63:3c:39:56:fb:ca:ae:23:80:93:88: 70:f1:49:c6:30:27:1c:37:06:b1:a4:c1:f4:b4:8a: c3:1d:04:90:a4:a8:a8:b2:4b:ec:23:65:d4:70:e9: ad:bf:86:b0:68:7d:93:4a:27:39:3a:0d:f7:95:86: 7f:32:b0:b4:b6:37:32:b3:23:aa:c2:71:25:89:d8: fd:5d:e9:f2:97:47:d8:8c:ed:5c:a6:a5:d3:dd:15: c7:23:76:b4:f7:a2:6a:d4:43:6e:ee:c3:8d:1b:80: bc:38:a7:3c:17:e0:99:4d:9b:7a:f1:ab:bd:40:49: 39:37:86:84:f8:07:6c:0d:9c:2c:01:12:db:ae:7c: 28:d9:6d:55:6a:c6:3d:8f:53:47:64:e4:0b:82:18: ac:5f:c4:5b:58:38:c0:01:62:8e:40:61:f5:78:0b: a5:66:02:10:70:6d:1e:15:00:b0:05:61:e7:ab:a0: 09:a6:78:fe:45:cb:e1:8a:47:5a:b9:81:46:f5:42: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:66:B3:07:0F:D9:74:FC:2E:C1:C4:1D:22:E9:26:2F:7A:76:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.80.0/22 103.184.28.0/23 202.160.136.0-202.160.138.255 Signature Algorithm: sha256WithRSAEncryption 42:00:9c:55:ae:81:36:f1:cb:4f:22:92:49:07:e9:15:81:35: 9f:64:8f:09:6a:ac:45:aa:40:a8:9a:b5:59:7c:fd:0b:8d:5f: fd:ff:dc:77:7e:a0:89:da:2e:bd:ce:50:26:e1:ea:15:77:c8: 64:92:7a:53:7d:04:7a:82:84:37:80:c8:c0:b0:b4:ee:f0:90: 13:bd:e1:6b:3f:55:b1:87:18:35:d8:42:31:2a:0d:a4:cc:6a: 26:b2:4c:7a:ff:d8:6a:fb:6d:07:49:eb:57:bb:ff:f4:73:d3: d4:e5:61:bd:4d:95:80:ad:50:37:21:85:47:43:97:ee:dd:9d: b4:d0:58:4d:03:80:74:e4:aa:2c:91:32:91:5b:19:c3:39:f1: 8d:f2:d1:2c:c8:38:e3:1b:78:8c:85:f5:2d:a9:f6:16:64:eb: c8:70:01:ea:a0:ea:c7:9d:50:58:50:32:d3:21:c1:28:69:46: b2:e4:e4:be:09:66:c2:c1:e7:dc:fa:d1:68:59:48:b9:88:ec: 35:fd:c6:d8:ca:1d:5f:43:10:09:7b:8b:6a:cc:24:ef:fc:2e: bd:28:83:e2:d8:ec:9d:17:d4:28:2d:fc:82:5c:80:cc:cf:10: c6:15:90:a7:0c:36:8a:45:23:84:a9:71:5a:1f:11:e1:e1:e2: 67:0a:a2:ef -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIULX40qnWLnTxjRW4MppG5hYLjwZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNDAzNTUwMFoX DTI3MDMyMzA0MDAwMFowMzExMC8GA1UEAxMoRDhFMjY2QjMwNzBGRDk3NEZDMkVD MUM0MUQyMkU5MjYyRjdBNzYyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKGguVI4/7ipoL1KInTAPwoPXilRml0OwhQJitVRsfOVIhkpQw+5kZlyQfQG EKd3NeiiLOzAJnebmd1iIwbZQ2M8OVb7yq4jgJOIcPFJxjAnHDcGsaTB9LSKwx0E kKSoqLJL7CNl1HDprb+GsGh9k0onOToN95WGfzKwtLY3MrMjqsJxJYnY/V3p8pdH 2IztXKal090VxyN2tPeiatRDbu7DjRuAvDinPBfgmU2bevGrvUBJOTeGhPgHbA2c LAES2658KNltVWrGPY9TR2TkC4IYrF/EW1g4wAFijkBh9XgLpWYCEHBtHhUAsAVh 56ugCaZ4/kXL4YpHWrmBRvVCgR0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBTY4maz Bw/ZdPwuwcQdIukmL3p2JTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU2MjMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCO5lQAwQBZ7gcMAwDBAPKoIgDBADKoIowDQYJKoZIhvcNAQELBQAD ggEBAEIAnFWugTbxy08ikkkH6RWBNZ9kjwlqrEWqQKiatVl8/QuNX/3/3Hd+oIna Lr3OUCbh6hV3yGSSelN9BHqChDeAyMCwtO7wkBO94Ws/VbGHGDXYQjEqDaTMaiay THr/2Gr7bQdJ61e7//Rz09TlYb1NlYCtUDchhUdDl+7dnbTQWE0DgHTkqiyRMpFb GcM58Y3y0SzIOOMbeIyF9S2p9hZk68hwAeqg6sedUFhQMtMhwShpRrLk5L4JZsLB 59z60WhZSLmI7DX9xtjKHV9DEAl7i2rMJO/8Lr0og+LY7J0X1Cgt/IJcgMzPEMYV kKcMNopFI4SpcVofEeHh4mcKou8= -----END CERTIFICATE-----Generated at Thu Mar 26 04:02:15 2026 by rpki-client