$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17996.roa File: AS17996.roa (raw, json) Hash identifier: k/YFg8lQYz1RgfTEqMvWglSK3PJm85YutDYDcmRZS7c= Subject key identifier: 6D:EE:9B:53:4C:FB:A6:51:7D:E7:BA:A9:63:60:70:D4:78:AD:48:3A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E10285798E8196ED34963CC32CCFA6687D4C064 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17996.roa Signing time: Fri 31 Oct 2025 02:32:25 +0000 ROA not before: Fri 31 Oct 2025 02:27:25 +0000 ROA not after: Fri 30 Oct 2026 02:32:25 +0000 asID: 17996 IP address blocks: 103.162.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:10:28:57:98:e8:19:6e:d3:49:63:cc:32:cc:fa:66:87:d4:c0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 31 02:27:25 2025 GMT Not After : Oct 30 02:32:25 2026 GMT Subject: CN=6DEE9B534CFBA6517DE7BAA9636070D478AD483A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:43:73:f7:8c:4b:71:25:b6:30:0e:d8:61: 5b:50:66:56:0a:6f:48:73:ee:ed:16:81:8e:d9:a1: 3c:b0:88:42:08:e0:ac:41:b0:4b:67:84:88:22:7c: 97:f8:f0:c0:29:cb:a1:dc:2e:47:27:7e:03:73:dc: 5e:d0:46:e3:b5:4f:4d:f5:d1:13:52:98:26:fb:06: c0:cc:57:3d:21:f9:10:40:65:91:7e:ea:9f:75:2b: e7:6f:d6:df:87:02:ae:12:32:58:93:2a:3c:3d:b4: ab:8e:03:ea:41:01:13:c2:1f:81:b6:59:b3:26:58: 3c:8f:4f:ea:2b:38:cd:f6:06:ec:cb:08:58:39:a3: 80:12:be:80:e6:d1:8f:ad:9a:ff:5a:20:0b:69:77: f9:43:ae:6f:e2:9f:4e:06:e3:9a:53:7f:b7:0d:a4: 5a:fe:c6:d6:54:2f:0b:4f:07:29:d9:91:dc:3e:1c: f1:97:b0:58:ac:d6:df:e6:0f:a6:02:32:e6:0c:4c: 8c:9b:a7:b5:b3:7f:b2:0e:5b:b9:c2:65:66:e9:fb: c5:9f:87:0f:ef:5c:c2:21:1f:11:69:b9:97:2b:ee: cb:45:62:a7:2e:97:3d:08:28:5f:59:fc:63:9e:a4: 49:d0:60:c7:ab:60:05:1d:93:5c:98:ad:bd:0b:2f: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EE:9B:53:4C:FB:A6:51:7D:E7:BA:A9:63:60:70:D4:78:AD:48:3A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS17996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.100.0/23 Signature Algorithm: sha256WithRSAEncryption 77:96:f6:6d:44:70:bf:36:6e:08:2b:fc:b2:a7:ba:f3:a9:0a: 2f:88:a4:2c:16:7b:33:9d:77:97:af:d4:fa:49:ae:96:ab:98: 79:95:6d:cd:95:8f:71:f2:c7:a3:8a:e1:59:c1:6f:03:95:97: d2:f0:9e:56:11:fe:bd:ca:27:8e:0c:29:ae:2d:8a:47:19:d7: f6:cf:86:5b:91:24:ae:cf:12:88:0d:88:41:7a:6d:d2:17:e1: 20:5a:76:cc:c7:3a:1f:c9:a9:d4:97:7b:38:62:13:32:a7:06: eb:32:72:49:e7:04:69:23:61:5c:c6:f6:74:cf:00:58:cb:ab: 5e:9f:4b:5c:15:30:04:bb:34:85:75:3e:73:4f:f2:f5:a8:11: 84:b1:91:43:da:f4:77:9b:1b:83:8a:a6:06:13:20:db:47:ff: 86:35:b6:f0:bb:e6:60:e8:f7:57:74:bf:14:ad:36:cd:10:49: aa:20:33:cf:9f:28:ea:a9:ca:86:03:e0:f6:dd:28:8c:f7:2f: d5:60:5c:0b:dd:42:16:8e:8c:5f:aa:01:ab:ae:4d:58:01:31: fa:0a:5f:ba:3f:20:f4:6a:77:9c:00:d9:a6:1e:41:da:de:e3: 52:65:02:02:b3:f8:30:9d:c4:8b:74:a7:6c:d2:d4:f0:de:5f: 43:df:d1:a9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDhAoV5joGW7TSWPMMsz6ZofUwGQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAzMTAyMjcyNVoX DTI2MTAzMDAyMzIyNVowMzExMC8GA1UEAxMoNkRFRTlCNTM0Q0ZCQTY1MTdERTdC QUE5NjM2MDcwRDQ3OEFENDgzQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKPQ3P3jEtxJbYwDthhW1BmVgpvSHPu7RaBjtmhPLCIQgjgrEGwS2eEiCJ8 l/jwwCnLodwuRyd+A3PcXtBG47VPTfXRE1KYJvsGwMxXPSH5EEBlkX7qn3Ur52/W 34cCrhIyWJMqPD20q44D6kEBE8IfgbZZsyZYPI9P6is4zfYG7MsIWDmjgBK+gObR j62a/1ogC2l3+UOub+KfTgbjmlN/tw2kWv7G1lQvC08HKdmR3D4c8ZewWKzW3+YP pgIy5gxMjJuntbN/sg5bucJlZun7xZ+HD+9cwiEfEWm5lyvuy0Vipy6XPQgoX1n8 Y56kSdBgx6tgBR2TXJitvQsvKqUCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRt7ptT TPumUX3nuqljYHDUeK1IOjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE3OTk2LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6JkMA0GCSqGSIb3DQEBCwUAA4IBAQB3lvZtRHC/Nm4IK/yyp7rz qQoviKQsFnsznXeXr9T6Sa6Wq5h5lW3NlY9x8sejiuFZwW8DlZfS8J5WEf69yieO DCmuLYpHGdf2z4ZbkSSuzxKIDYhBem3SF+EgWnbMxzofyanUl3s4YhMypwbrMnJJ 5wRpI2FcxvZ0zwBYy6ten0tcFTAEuzSFdT5zT/L1qBGEsZFD2vR3mxuDiqYGEyDb R/+GNbbwu+Zg6PdXdL8UrTbNEEmqIDPPnyjqqcqGA+D23SiM9y/VYFwL3UIWjoxf qgGrrk1YATH6Cl+6PyD0anecANmmHkHa3uNSZQICs/gwncSLdKds0tTw3l9D39Gp -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:21 2025 by rpki-client