$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS24537.roa File: AS24537.roa (raw, json) Hash identifier: G2ylpwUJzThWbbeWf8qzuSxldhSpc3qax1Dg8YwIOLI= Subject key identifier: BF:3D:65:CB:D0:5B:D7:C1:B2:3C:98:88:52:A0:ED:BC:BE:D4:B7:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 51ED3C447F72E9AEBA16CC4822FA540A386AC789 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24537.roa Signing time: Sun 03 May 2026 10:13:51 +0000 ROA not before: Sun 03 May 2026 10:08:51 +0000 ROA not after: Sun 02 May 2027 10:13:51 +0000 asID: 24537 IP address blocks: 103.173.162.0/23 maxlen: 24 103.173.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ed:3c:44:7f:72:e9:ae:ba:16:cc:48:22:fa:54:0a:38:6a:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 10:08:51 2026 GMT Not After : May 2 10:13:51 2027 GMT Subject: CN=BF3D65CBD05BD7C1B23C988852A0EDBCBED4B7AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8e:ce:ae:bf:68:74:b9:e8:4d:6e:88:41:1e: 94:6d:e6:6f:f4:bc:2c:2d:8d:93:d0:e8:33:93:11: bd:82:a0:9b:0d:f7:e6:c6:71:09:ca:97:43:dd:14: 4d:c3:76:4e:7c:2b:e5:51:f6:e1:b5:ef:69:c1:7f: 39:2f:f4:46:6a:5d:0f:6f:c5:f2:26:25:a3:52:cc: 43:1b:b7:05:e0:a8:07:ec:e0:21:e2:4b:ca:fa:b6: 1c:d7:b1:b4:d6:26:13:52:13:47:90:5a:c5:ea:e7: e6:e4:06:9e:ea:9d:01:c1:c8:ee:c8:1f:e5:84:25: fe:33:da:83:57:e4:54:3d:2e:f3:39:6e:c6:ee:b7: 0c:1d:99:3a:80:d9:27:3f:bd:2a:c4:83:9b:5c:da: 29:de:10:ec:38:6b:45:2f:e6:23:9c:dd:6a:11:c9: ff:58:57:23:29:72:a9:43:a6:bc:12:02:d8:8a:6e: 05:7f:4f:cd:19:d7:2b:15:d7:9a:07:30:8c:1c:c6: a4:f1:eb:bb:98:bb:91:cf:cb:29:9f:15:2a:95:d3: fe:12:89:95:22:ca:94:03:36:3d:8d:5b:81:7f:29: 92:e0:3c:d0:87:fa:7f:1e:38:2e:31:6a:b5:87:66: cd:35:75:92:e7:36:b1:c6:71:c1:90:c0:b7:d4:e8: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3D:65:CB:D0:5B:D7:C1:B2:3C:98:88:52:A0:ED:BC:BE:D4:B7:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS24537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.162.0/23 Signature Algorithm: sha256WithRSAEncryption 09:7a:a7:0e:6f:de:09:52:a8:08:d7:05:da:ec:de:d7:23:95: 7f:80:c6:02:86:2a:cf:d4:f9:da:4e:a3:e3:cd:fa:12:00:ac: 36:93:83:2e:42:b3:ba:fe:a9:94:42:6d:4f:6f:e2:5d:fa:91: b2:1a:d1:4f:c2:e8:b3:fb:ce:15:3d:4c:f9:58:82:60:52:5a: b8:00:9c:a8:9a:f3:c1:41:46:f5:22:4e:7e:3f:b8:b5:da:6e: 71:c6:51:cd:92:16:90:8e:6a:94:76:bd:ea:8d:71:c2:a7:36: ed:9f:31:39:46:c8:92:11:97:52:cc:3a:88:ae:76:1c:64:23: e2:1d:0b:fd:c2:c0:ad:79:03:ad:fc:b4:0b:74:0e:f9:2c:69: 0e:1a:ec:de:ee:95:ef:dd:04:f7:bb:69:ae:68:a1:d6:9d:08: fa:a2:05:31:10:74:48:59:a8:71:58:27:aa:8e:42:2e:41:eb: 08:62:c3:8d:63:bb:dc:20:07:a2:01:6a:10:0f:64:a9:55:63: 75:d0:69:66:1e:f3:51:90:f1:59:2d:bc:01:08:9f:02:9a:28: 0e:89:18:e3:8a:62:75:a7:c9:49:20:eb:43:fe:17:5e:dd:02: e8:07:80:da:a6:ed:40:e8:f2:bb:c9:bc:81:dc:b9:2d:b6:20: c1:ea:fe:30 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUUe08RH9y6a66FsxIIvpUCjhqx4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzEwMDg1MVoX DTI3MDUwMjEwMTM1MVowMzExMC8GA1UEAxMoQkYzRDY1Q0JEMDVCRDdDMUIyM0M5 ODg4NTJBMEVEQkNCRUQ0QjdBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiOzq6/aHS56E1uiEEelG3mb/S8LC2Nk9DoM5MRvYKgmw335sZxCcqXQ90U TcN2Tnwr5VH24bXvacF/OS/0RmpdD2/F8iYlo1LMQxu3BeCoB+zgIeJLyvq2HNex tNYmE1ITR5Baxern5uQGnuqdAcHI7sgf5YQl/jPag1fkVD0u8zluxu63DB2ZOoDZ Jz+9KsSDm1zaKd4Q7DhrRS/mI5zdahHJ/1hXIylyqUOmvBIC2IpuBX9PzRnXKxXX mgcwjBzGpPHru5i7kc/LKZ8VKpXT/hKJlSLKlAM2PY1bgX8pkuA80If6fx44LjFq tYdmzTV1kuc2scZxwZDAt9ToM+UCAwEAAaOCAcswggHHMB0GA1UdDgQWBBS/PWXL 0FvXwbI8mIhSoO28vtS3rTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjQ1Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnraIwDQYJKoZIhvcNAQELBQADggEBAAl6pw5v3glSqAjXBdrs3tcjlX+A xgKGKs/U+dpOo+PN+hIArDaTgy5Cs7r+qZRCbU9v4l36kbIa0U/C6LP7zhU9TPlY gmBSWrgAnKia88FBRvUiTn4/uLXabnHGUc2SFpCOapR2veqNccKnNu2fMTlGyJIR l1LMOoiudhxkI+IdC/3CwK15A638tAt0DvksaQ4a7N7ule/dBPe7aa5oodadCPqi BTEQdEhZqHFYJ6qOQi5B6whiw41ju9wgB6IBahAPZKlVY3XQaWYe81GQ8VktvAEI nwKaKA6JGOOKYnWnyUkg60P+F17dAugHgNqm7UDo8rvJvIHcuS22IMHq/jA= -----END CERTIFICATE-----Generated at Tue May 12 22:42:46 2026 by rpki-client