
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
File: AS63490.roa (raw, json)
Hash identifier: fyz4sp37jiemh1akRplYuLHBDt9AKiHTvKjorCKZ7pY=
Subject key identifier: A5:B2:55:AB:CC:96:9C:0F:69:5E:55:F3:79:7B:13:B6:FE:B3:5F:01
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 475F24F2EE5A23B0212398E97B0342686442276F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
Signing time: Sun 03 May 2026 05:39:08 +0000
ROA not before: Sun 03 May 2026 05:34:08 +0000
ROA not after: Sun 02 May 2027 05:39:08 +0000
asID: 63490
IP address blocks: 103.93.236.0/24 maxlen: 24
103.93.237.0/24 maxlen: 24
103.235.66.0/24 maxlen: 24
103.235.67.0/24 maxlen: 24
202.46.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5f:24:f2:ee:5a:23:b0:21:23:98:e9:7b:03:42:68:64:42:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 3 05:34:08 2026 GMT
Not After : May 2 05:39:08 2027 GMT
Subject: CN=A5B255ABCC969C0F695E55F3797B13B6FEB35F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:dd:26:a7:d2:2d:88:1f:1f:4d:bd:5c:41:
fa:de:96:86:dc:e0:e7:18:40:43:ef:8f:cc:82:d9:
85:f3:f0:a0:c4:b3:82:5c:b8:9c:89:c9:b4:9b:06:
ff:e6:8c:93:90:b7:95:a1:d5:f4:2c:2f:bd:e6:9b:
2d:8b:40:a3:0a:99:ec:10:8b:22:6e:e7:09:95:47:
22:ec:4e:41:a5:89:ad:7c:2c:8a:8e:9a:d4:31:a7:
de:46:a9:19:0c:ca:d7:f4:55:cb:49:67:e4:7c:91:
eb:3d:f7:c5:ca:ce:6c:e8:70:16:60:35:a5:61:db:
e9:29:29:35:a8:d2:de:15:f0:5d:05:79:bc:b3:7a:
58:74:6a:c3:6f:c9:54:fb:37:1c:f9:d7:f3:d6:99:
d6:15:81:50:c2:65:11:80:46:72:46:30:03:82:8d:
03:7b:22:8d:ff:0e:7f:d0:52:42:c2:a8:7b:82:60:
2f:ad:95:94:53:16:36:1d:7e:68:63:96:9d:0c:21:
aa:19:05:b3:15:b9:b9:b6:83:51:ba:44:00:d3:07:
e3:a0:bc:41:4b:7d:ba:e5:24:31:82:c7:17:4f:2a:
8c:cd:80:ae:66:3f:25:6b:23:81:e0:49:fe:81:a2:
95:fb:6f:8f:10:da:96:59:84:bf:7f:75:49:b0:49:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:55:AB:CC:96:9C:0F:69:5E:55:F3:79:7B:13:B6:FE:B3:5F:01
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.93.236.0/23
103.235.66.0/23
202.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:55:7d:1f:5e:51:54:15:c5:94:62:5f:87:d5:b8:b5:fb:ab:
48:35:b5:40:c2:a2:80:33:56:fb:73:0e:78:ce:95:4c:36:5d:
c2:1b:a7:06:de:05:87:91:f0:14:32:42:74:da:93:a4:23:11:
2d:3d:cc:1c:a1:1d:eb:37:19:0f:f5:fe:27:4f:52:a9:6d:48:
20:de:27:3e:5f:9b:09:82:ec:a3:3b:e0:08:4a:43:a8:7b:16:
13:c0:3a:5d:5f:70:18:a5:1c:c6:44:0a:7b:4a:6f:fa:60:d2:
da:94:5e:e5:90:ca:08:85:aa:34:46:a6:3d:a3:b1:66:33:cb:
7a:20:df:b6:8b:4f:15:f4:18:cd:ce:a8:7f:e4:e7:7f:34:78:
a4:3a:32:1b:66:00:ac:cd:11:89:12:d4:27:e8:13:e2:78:7e:
b9:41:f0:a0:41:d2:f1:f8:f6:88:91:dd:e9:1e:a1:88:f1:ae:
e6:71:39:6c:0c:82:f8:4b:86:c3:8f:39:02:55:9d:23:f7:25:
b3:ee:c0:a8:b5:fa:99:eb:69:15:3a:5d:19:39:81:71:41:a4:
9a:98:7d:9d:1c:b4:a5:b2:3c:08:bc:fc:52:87:b9:86:57:1c:
67:36:33:ef:61:cd:4b:cc:16:ed:86:eb:58:b3:79:99:1b:41:
b2:34:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:45 2026 by rpki-client