$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS215748.roa File: AS215748.roa (raw, json) Hash identifier: zRIckOrEqSKisrL6XFyFDk9TA+DHKRrfiBfsFR7cPX8= Subject key identifier: 98:9D:7C:14:93:FD:4B:04:71:89:C8:4A:74:9D:AD:B8:E2:F1:54:E5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 36B8905A8956E5DAF43DBA476B3D62EC600DF530 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS215748.roa Signing time: Wed 22 Jul 2026 06:17:33 +0000 ROA not before: Wed 22 Jul 2026 06:12:33 +0000 ROA not after: Wed 21 Jul 2027 06:17:33 +0000 asID: 215748 IP address blocks: 203.84.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b8:90:5a:89:56:e5:da:f4:3d:ba:47:6b:3d:62:ec:60:0d:f5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 22 06:12:33 2026 GMT Not After : Jul 21 06:17:33 2027 GMT Subject: CN=989D7C1493FD4B047189C84A749DADB8E2F154E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:54:c0:38:33:4a:c7:c5:0b:a3:c5:bb:7e: 3f:1e:a5:36:e5:f6:14:f3:b6:48:92:f3:29:f0:74: 0c:d9:da:94:81:18:65:df:2a:3e:df:ef:40:f3:ad: 11:35:c2:0b:86:6a:7d:a4:ce:fa:77:97:87:3f:f3: 98:c2:58:3a:9e:29:75:1e:bc:97:3d:cd:71:a6:c9: 03:99:d2:4b:49:dd:b9:30:ad:28:77:55:3f:33:65: 1b:d2:24:9c:78:11:1b:50:d1:d0:e9:8b:9e:85:95: 54:ce:a8:bd:e1:9c:0a:06:98:b1:8e:16:b1:95:ce: fe:67:de:cc:dd:7c:98:af:9a:0f:bf:b4:1a:bc:2a: 75:80:99:2a:18:f8:b6:7a:f6:3d:60:84:c1:1d:97: a6:fd:82:14:0c:ce:35:9c:fb:56:f1:e0:6f:19:21: e6:3b:3d:a4:44:19:87:16:d6:30:0e:78:34:a2:c5: fd:94:8c:8c:17:7e:f3:20:a9:3f:eb:76:ad:e5:7f: 36:42:5a:2b:e6:3b:a6:52:d3:c1:00:48:80:56:82: 8f:41:61:5b:37:93:3a:ba:95:81:55:a0:fa:38:ed: 78:cb:05:cc:c9:84:e6:65:54:85:02:61:07:5a:7a: bd:28:1f:05:40:e7:fb:f4:c7:32:fe:67:46:a1:cf: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:7C:14:93:FD:4B:04:71:89:C8:4A:74:9D:AD:B8:E2:F1:54:E5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS215748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.136.0/24 Signature Algorithm: sha256WithRSAEncryption 71:7c:f8:3d:89:48:59:2a:64:82:08:77:68:eb:8f:e2:67:6b: 36:21:be:22:c1:06:ce:a3:1e:e8:57:72:b8:8f:47:81:1f:40: c2:57:0f:97:28:9a:43:9b:ef:66:c8:a8:c2:02:d3:83:38:0d: f0:ff:f3:c5:f8:44:89:49:84:86:de:f8:83:ea:0c:93:0e:37: 60:f6:38:a4:fe:6d:7e:3e:cd:d5:c0:29:84:03:3f:1e:a8:db: 11:4f:cb:af:e9:a9:61:32:5d:e1:c9:48:a5:b5:90:21:17:c2: 39:a0:83:2a:03:7b:ca:f7:6b:df:a3:59:27:b6:9e:89:51:b0: 21:2e:1d:b7:4e:ef:f1:09:10:86:a4:f6:0b:64:ed:e2:b8:f5: 71:d3:e9:2a:09:79:94:02:7f:83:3c:6a:d9:41:57:00:9e:74: 77:7e:d6:e2:20:36:cd:75:b7:aa:4e:aa:42:61:6f:74:0b:29: cb:de:db:df:ac:21:8c:74:5e:f6:6d:04:33:77:71:a5:98:33: 66:9f:7a:f3:c3:21:a5:33:6a:bf:08:ea:34:32:e7:90:cc:c7: d0:c3:53:3f:d0:4e:a9:38:ef:0c:df:bb:49:e7:dd:09:a5:aa: 65:e5:6e:3f:ea:81:e0:02:68:74:15:90:36:94:e0:29:0c:4e: ec:da:c3:59 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNriQWolW5dr0PbpHaz1i7GAN9TAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyMjA2MTIzM1oX DTI3MDcyMTA2MTczM1owMzExMC8GA1UEAxMoOTg5RDdDMTQ5M0ZENEIwNDcxODlD ODRBNzQ5REFEQjhFMkYxNTRFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuUVMA4M0rHxQujxbt+Px6lNuX2FPO2SJLzKfB0DNnalIEYZd8qPt/vQPOt ETXCC4ZqfaTO+neXhz/zmMJYOp4pdR68lz3NcabJA5nSS0nduTCtKHdVPzNlG9Ik nHgRG1DR0OmLnoWVVM6oveGcCgaYsY4WsZXO/mfezN18mK+aD7+0GrwqdYCZKhj4 tnr2PWCEwR2Xpv2CFAzONZz7VvHgbxkh5js9pEQZhxbWMA54NKLF/ZSMjBd+8yCp P+t2reV/NkJaK+Y7plLTwQBIgFaCj0FhWzeTOrqVgVWg+jjteMsFzMmE5mVUhQJh B1p6vSgfBUDn+/THMv5nRqHPr98CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSYnXwU k/1LBHGJyEp0na244vFU5TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjE1NzQ4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAy1SIMA0GCSqGSIb3DQEBCwUAA4IBAQBxfPg9iUhZKmSCCHdo64/iZ2s2 Ib4iwQbOox7oV3K4j0eBH0DCVw+XKJpDm+9myKjCAtODOA3w//PF+ESJSYSG3viD 6gyTDjdg9jik/m1+Ps3VwCmEAz8eqNsRT8uv6alhMl3hyUiltZAhF8I5oIMqA3vK 92vfo1kntp6JUbAhLh23Tu/xCRCGpPYLZO3iuPVx0+kqCXmUAn+DPGrZQVcAnnR3 ftbiIDbNdbeqTqpCYW90CynL3tvfrCGMdF72bQQzd3GlmDNmn3rzwyGlM2q/COo0 MueQzMfQw1M/0E6pOO8M37tJ590Jpapl5W4/6oHgAmh0FZA2lOApDE7s2sNZ -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:15 2026 by rpki-client