$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24529.roa File: AS24529.roa (raw, json) Hash identifier: f4uswIosVeIRDq3pIsTAOGe5G2EIjxO6DZtQoXnbwXE= Subject key identifier: 84:27:1D:57:41:3A:23:26:64:FC:F3:28:D8:7E:E8:3B:9E:75:3B:D5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 427A53A88BC51982A6BA0084D13133306E9D89EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24529.roa Signing time: Sun 03 May 2026 05:54:59 +0000 ROA not before: Sun 03 May 2026 05:49:59 +0000 ROA not after: Sun 02 May 2027 05:54:59 +0000 asID: 24529 IP address blocks: 103.217.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7a:53:a8:8b:c5:19:82:a6:ba:00:84:d1:31:33:30:6e:9d:89:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:49:59 2026 GMT Not After : May 2 05:54:59 2027 GMT Subject: CN=84271D57413A232664FCF328D87EE83B9E753BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:49:03:03:0f:11:7a:4e:49:81:39:3b:0f: 13:14:05:a1:10:61:93:ac:f9:bd:d9:5c:c0:a2:e5: 0d:23:1a:5d:3e:df:d6:8d:3f:15:90:c1:e7:31:37: f8:41:ba:36:6a:63:8d:0c:5a:9a:26:78:12:b4:53: 47:47:95:af:73:2f:7f:3d:d8:ea:9c:d9:8a:9e:59: c5:d5:da:90:f7:fa:64:dd:2f:7b:19:5a:5a:a6:0d: 49:d8:90:d7:34:37:cc:76:a7:c3:ec:8f:a5:de:53: 9c:48:7b:b4:f3:b5:d4:c0:b1:81:e0:73:85:d7:d7: 4f:67:4e:3f:b0:12:d7:76:5e:98:f5:5b:7f:7b:67: 20:06:db:5f:1e:b5:2a:a5:e6:37:76:a8:c1:f3:f1: 7a:71:7d:56:1b:77:5c:4d:03:7d:ce:ea:23:74:e9: 89:73:6b:81:ba:d6:d4:a5:18:f5:9d:27:1d:6c:04: 9d:09:02:e0:9f:27:b1:79:ad:75:b8:40:fe:77:17: 42:22:e0:f8:85:2b:e7:69:21:24:cf:33:f5:23:34: 12:20:64:05:42:ba:18:af:ce:40:1f:ef:51:a1:db: 33:89:cf:b6:dc:fa:4f:e6:1e:b0:30:c0:ec:ab:04: 7b:07:7c:05:60:1d:37:44:5b:f9:50:8f:18:57:2f: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:1D:57:41:3A:23:26:64:FC:F3:28:D8:7E:E8:3B:9E:75:3B:D5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.216.0/22 Signature Algorithm: sha256WithRSAEncryption 91:bd:a3:8e:30:48:e2:4c:e8:33:ea:62:84:4f:95:86:02:ad: ad:1a:db:e5:e6:b0:17:92:f4:34:3f:f2:f8:5a:b8:2b:4c:a9: 45:3d:dc:b0:b4:19:72:03:a3:c6:99:36:06:9a:b6:da:ee:5a: 2d:d8:d5:5f:9c:4b:34:9c:2a:3f:9f:9f:46:1f:f2:0a:67:2e: e5:bb:26:80:20:3e:93:2f:89:ec:c1:d6:b4:75:7f:78:b4:af: cd:f8:c8:c0:3c:b0:73:7b:ab:b5:00:24:ff:c4:95:e8:b3:5e: e3:0e:0a:44:34:98:c7:84:b2:4c:c1:16:bf:e7:3b:94:a2:54: 4d:a5:81:81:b0:50:a5:34:c4:98:82:3c:4b:5d:2a:15:b1:91: 20:d9:11:86:cc:47:2e:d1:2c:7a:93:6a:09:8a:76:9c:18:2e: b6:b4:1f:6e:98:fc:18:ec:f9:99:05:9a:c0:0e:4a:8a:c7:63: 9c:78:7d:e2:25:d9:b5:40:d6:3c:db:e4:57:84:ed:2a:08:03: 8e:fd:64:b6:30:59:d4:c3:6c:de:6d:a6:0f:76:0a:7b:cf:60: e9:84:a0:d4:fb:79:96:2d:89:8e:88:ce:e0:43:9c:30:5f:c0: 52:bb:f9:70:3a:bc:60:7a:2f:21:ab:9f:d7:d7:a3:0a:96:e0: d8:7b:09:e2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUQnpTqIvFGYKmugCE0TEzMG6die8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NDk1OVoX DTI3MDUwMjA1NTQ1OVowMzExMC8GA1UEAxMoODQyNzFENTc0MTNBMjMyNjY0RkNG MzI4RDg3RUU4M0I5RTc1M0JENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYkSQMDDxF6TkmBOTsPExQFoRBhk6z5vdlcwKLlDSMaXT7f1o0/FZDB5zE3 +EG6NmpjjQxamiZ4ErRTR0eVr3Mvfz3Y6pzZip5ZxdXakPf6ZN0vexlaWqYNSdiQ 1zQ3zHanw+yPpd5TnEh7tPO11MCxgeBzhdfXT2dOP7AS13ZemPVbf3tnIAbbXx61 KqXmN3aowfPxenF9Vht3XE0Dfc7qI3TpiXNrgbrW1KUY9Z0nHWwEnQkC4J8nsXmt dbhA/ncXQiLg+IUr52khJM8z9SM0EiBkBUK6GK/OQB/vUaHbM4nPttz6T+YesDDA 7KsEewd8BWAdN0Rb+VCPGFcvShECAwEAAaOCAcswggHHMB0GA1UdDgQWBBSEJx1X QTojJmT88yjYfug7nnU71TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQ1Mjkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJn2dgwDQYJKoZIhvcNAQELBQADggEBAJG9o44wSOJM6DPqYoRPlYYCra0a 2+XmsBeS9DQ/8vhauCtMqUU93LC0GXIDo8aZNgaattruWi3Y1V+cSzScKj+fn0Yf 8gpnLuW7JoAgPpMviezB1rR1f3i0r834yMA8sHN7q7UAJP/EleizXuMOCkQ0mMeE skzBFr/nO5SiVE2lgYGwUKU0xJiCPEtdKhWxkSDZEYbMRy7RLHqTagmKdpwYLra0 H26Y/Bjs+ZkFmsAOSorHY5x4feIl2bVA1jzb5FeE7SoIA479ZLYwWdTDbN5tpg92 CnvPYOmEoNT7eZYtiY6IzuBDnDBfwFK7+XA6vGB6LyGrn9fXowqW4Nh7CeI= -----END CERTIFICATE-----Generated at Tue May 12 22:42:50 2026 by rpki-client