$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24210.roa File: AS24210.roa (raw, json) Hash identifier: kqMhDM4eqBT27yyVY51LdOSduEs9J2vzV9+4IVUf8Ew= Subject key identifier: C0:FE:A6:BD:D7:31:67:DD:A9:4D:48:54:CB:C6:22:42:73:C2:42:22 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A02354A9595E6AC1024FF234CE4656CD3645385 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24210.roa Signing time: Sun 03 May 2026 05:55:57 +0000 ROA not before: Sun 03 May 2026 05:50:57 +0000 ROA not after: Sun 02 May 2027 05:55:57 +0000 asID: 24210 IP address blocks: 180.150.232.0/21 maxlen: 21 202.173.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:02:35:4a:95:95:e6:ac:10:24:ff:23:4c:e4:65:6c:d3:64:53:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:50:57 2026 GMT Not After : May 2 05:55:57 2027 GMT Subject: CN=C0FEA6BDD73167DDA94D4854CBC6224273C24222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:5d:88:39:03:c0:38:8f:63:65:4f:ba:35: a8:39:87:71:c3:cb:5d:53:47:9f:b9:e9:23:e9:cb: c2:f6:69:37:75:58:bf:12:e9:25:2e:95:1f:cd:76: 56:0d:18:8d:67:bf:fd:4c:a3:67:7d:6b:09:42:84: 17:91:7a:21:16:76:65:3f:8d:02:15:e6:cd:58:48: b7:8e:a1:a7:c8:55:0a:02:55:b7:20:95:4b:34:54: 9a:ab:09:68:9f:54:dd:5d:e3:4b:64:b6:ff:1c:29: 62:bc:7c:b9:c5:35:0b:f3:7b:8f:91:99:ef:0a:e1: 23:7a:ad:2c:70:4a:d7:fe:62:10:21:0d:55:1e:b2: 2f:32:bb:d3:4d:93:c9:04:50:2a:98:b3:7a:03:b4: 63:93:8f:76:98:69:4c:23:41:4a:4d:1e:f7:12:37: 4f:16:84:de:46:65:f4:43:cf:b9:95:58:f8:4f:eb: 4f:f5:d0:ad:3a:fd:97:28:c2:75:ea:c8:9f:f7:47: 1c:12:1d:5b:f9:f8:4b:1b:ee:af:89:23:c8:cd:d1: 84:ab:c6:cd:ff:bf:99:c5:ab:67:bd:5f:36:93:d3: 55:1f:fc:1c:a8:61:be:4e:ef:5e:98:97:61:d7:15: af:1b:51:d7:26:38:04:d6:ab:17:cd:0a:09:a4:1c: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:A6:BD:D7:31:67:DD:A9:4D:48:54:CB:C6:22:42:73:C2:42:22 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24210.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.150.232.0/21 202.173.16.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:fe:3f:83:58:cf:5f:e0:df:bc:55:9d:30:66:96:53:5a:f0: cb:ca:97:3a:49:ac:28:21:b7:0e:58:8d:dd:29:74:dc:79:89: 72:08:41:a3:ae:c3:7e:54:4f:66:fc:5f:19:53:3c:10:ac:9f: 5e:bc:88:43:03:34:8c:89:6d:30:da:2d:f9:7c:83:de:b3:07: 8e:b0:68:c8:40:df:7e:22:50:d1:24:45:af:05:35:64:de:b9: 75:bd:4d:a2:75:b7:15:ac:fb:dc:01:04:2f:98:25:01:7c:bb: ba:6d:ba:8a:9b:06:e3:ec:f0:8d:02:28:b7:34:e0:2d:f7:f7: 6f:08:e8:d7:d0:2b:b0:fa:f6:e2:eb:3a:5d:ca:59:f2:9c:f8: 9b:a0:1e:e2:71:a8:39:8d:85:22:88:06:29:ab:a4:e7:86:72: 03:17:65:a6:5b:98:78:32:8e:0f:3a:ba:c1:24:e8:a3:55:95: 89:ea:83:50:13:b8:0e:af:df:7f:cd:a9:ca:f0:d8:c6:b0:c8: aa:90:2b:bc:f2:b1:7f:dc:54:bc:23:a6:a5:cf:df:18:aa:b6: 02:c0:6d:55:c9:51:f2:bc:db:0c:10:e3:be:e3:b5:1c:cb:93: c3:47:70:a5:e2:50:47:e4:73:0f:b5:ae:7e:03:58:fa:22:43: 69:48:98:f0 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUCgI1SpWV5qwQJP8jTORlbNNkU4UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NTA1N1oX DTI3MDUwMjA1NTU1N1owMzExMC8GA1UEAxMoQzBGRUE2QkRENzMxNjdEREE5NEQ0 ODU0Q0JDNjIyNDI3M0MyNDIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsFXYg5A8A4j2NlT7o1qDmHccPLXVNHn7npI+nLwvZpN3VYvxLpJS6VH812 Vg0YjWe//UyjZ31rCUKEF5F6IRZ2ZT+NAhXmzVhIt46hp8hVCgJVtyCVSzRUmqsJ aJ9U3V3jS2S2/xwpYrx8ucU1C/N7j5GZ7wrhI3qtLHBK1/5iECENVR6yLzK7002T yQRQKpizegO0Y5OPdphpTCNBSk0e9xI3TxaE3kZl9EPPuZVY+E/rT/XQrTr9lyjC derIn/dHHBIdW/n4Sxvur4kjyM3RhKvGzf+/mcWrZ71fNpPTVR/8HKhhvk7vXpiX YdcVrxtR1yY4BNarF80KCaQc4SECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTA/qa9 1zFn3alNSFTLxiJCc8JCIjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQyMTAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAO0lugDBAPKrRAwDQYJKoZIhvcNAQELBQADggEBACz+P4NYz1/g37xVnTBm llNa8MvKlzpJrCghtw5Yjd0pdNx5iXIIQaOuw35UT2b8XxlTPBCsn168iEMDNIyJ bTDaLfl8g96zB46waMhA334iUNEkRa8FNWTeuXW9TaJ1txWs+9wBBC+YJQF8u7pt uoqbBuPs8I0CKLc04C33928I6NfQK7D69uLrOl3KWfKc+JugHuJxqDmNhSKIBimr pOeGcgMXZaZbmHgyjg86usEk6KNVlYnqg1ATuA6v33/Nqcrw2MawyKqQK7zysX/c VLwjpqXP3xiqtgLAbVXJUfK82wwQ477jtRzLk8NHcKXiUEfkcw+1rn4DWPoiQ2lI mPA= -----END CERTIFICATE-----Generated at Tue May 12 22:42:49 2026 by rpki-client