$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa File: AS63491.roa (raw, json) Hash identifier: VpmHNI8/KmWl08HPDypI2r3OW7ax/V/xX39InQIcIOo= Subject key identifier: 1A:11:D7:BA:71:14:6E:B2:FE:F5:8E:2A:A2:F7:2A:82:2D:60:70:4C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B9AA450ACD2648DACB9B9E9C86331D025BC682E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa Signing time: Wed 15 Apr 2026 09:00:00 +0000 ROA not before: Wed 15 Apr 2026 08:55:00 +0000 ROA not after: Wed 14 Apr 2027 09:00:00 +0000 asID: 63491 IP address blocks: 202.46.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9a:a4:50:ac:d2:64:8d:ac:b9:b9:e9:c8:63:31:d0:25:bc:68:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 08:55:00 2026 GMT Not After : Apr 14 09:00:00 2027 GMT Subject: CN=1A11D7BA71146EB2FEF58E2AA2F72A822D60704C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:74:95:69:16:35:c5:ea:ef:64:be:61:22: 63:a5:5f:7a:1d:1d:84:75:0c:a9:0e:97:71:38:52: 05:5c:15:e2:d3:18:61:de:fe:2e:11:fb:51:1d:91: 41:91:63:2f:be:19:b0:a6:01:6c:fc:b9:b1:a4:6d: 6e:c6:5a:8c:b2:34:e3:1f:e9:f4:ac:ec:a6:e3:64: eb:bd:b0:2c:9c:52:0b:f8:e7:44:5b:83:3d:5b:da: b6:b5:44:aa:95:9d:e0:a5:e5:f5:b3:6c:c2:59:89: 58:fa:74:56:5d:26:e4:0b:95:1b:bb:2c:7c:55:44: 2f:a8:17:d3:7a:72:3f:06:cc:48:88:6a:4b:5c:9b: 5e:73:49:97:75:7c:ab:3b:73:88:61:2c:3a:be:8a: b5:b6:f6:bd:4d:fc:4f:10:f8:fe:bf:20:1e:b9:b4: 43:8f:cd:cc:35:46:4d:21:9d:e1:5c:a3:af:12:79: ba:ad:49:3e:25:63:42:3c:be:aa:89:07:03:c7:61: e1:5b:1d:f5:7f:19:9e:a5:26:b5:9b:43:d3:a5:fb: 1a:39:cb:81:b8:33:99:77:65:4b:08:dd:f0:fc:87: 09:c8:d2:c7:e5:e5:d5:8f:45:94:7a:50:7d:f0:b5: f8:75:2a:01:f5:25:e4:25:65:0f:8f:03:7a:65:49: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:D7:BA:71:14:6E:B2:FE:F5:8E:2A:A2:F7:2A:82:2D:60:70:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.46.26.0/24 Signature Algorithm: sha256WithRSAEncryption 80:0c:39:74:85:3d:a0:a2:8b:df:bc:7f:aa:9d:be:d8:b5:e3: b8:5b:ca:b8:94:b1:18:73:da:4f:47:90:ce:07:01:5f:fc:86: 08:8c:61:ea:e2:28:cf:c9:ad:ea:35:8e:43:d5:37:8e:bb:6e: b5:6e:6f:e9:24:b3:3e:d0:71:0c:23:d5:ec:98:65:6d:e1:84: e1:15:44:04:e4:55:f1:51:ab:23:34:82:78:a5:08:87:d5:4f: 84:0b:7a:35:36:42:30:8a:f6:bb:02:af:50:56:cb:ee:8c:75: c3:c9:df:ad:39:ee:5a:54:e5:eb:55:8f:40:36:df:ab:d9:a6: af:c1:b1:a1:bc:de:02:8e:cb:1f:d7:d9:b1:59:f1:f6:8f:5f: ff:a6:2c:da:a2:50:87:42:b5:1e:b1:a5:b2:3c:b3:f7:96:68: 06:e4:67:f1:f9:de:f2:bd:28:06:57:92:ae:be:a3:6e:16:85: e1:81:00:50:7c:2f:41:dd:6b:ac:08:de:c7:36:43:a9:74:57: a9:d7:fc:23:a2:07:f7:d5:a7:0f:db:4b:d9:49:03:2f:a7:a8: 6d:2e:32:18:90:0f:e9:c2:c3:98:b3:3c:b9:cf:35:68:fc:57: 53:8d:f9:fa:13:9a:29:de:24:eb:be:d6:73:f4:93:9f:af:0a: 91:dc:81:5f -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUO5qkUKzSZI2subnpyGMx0CW8aC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNTA4NTUwMFoX DTI3MDQxNDA5MDAwMFowMzExMC8GA1UEAxMoMUExMUQ3QkE3MTE0NkVCMkZFRjU4 RTJBQTJGNzJBODIyRDYwNzA0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgddJVpFjXF6u9kvmEiY6Vfeh0dhHUMqQ6XcThSBVwV4tMYYd7+LhH7UR2R QZFjL74ZsKYBbPy5saRtbsZajLI04x/p9KzspuNk672wLJxSC/jnRFuDPVvatrVE qpWd4KXl9bNswlmJWPp0Vl0m5AuVG7ssfFVEL6gX03pyPwbMSIhqS1ybXnNJl3V8 qztziGEsOr6Ktbb2vU38TxD4/r8gHrm0Q4/NzDVGTSGd4VyjrxJ5uq1JPiVjQjy+ qokHA8dh4Vsd9X8ZnqUmtZtD06X7GjnLgbgzmXdlSwjd8PyHCcjSx+Xl1Y9FlHpQ ffC1+HUqAfUl5CVlD48DemVJXv0CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQaEde6 cRRusv71jiqi9yqCLWBwTDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzNDkxLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyi4aMA0GCSqGSIb3DQEBCwUAA4IBAQCADDl0hT2goovfvH+qnb7Y teO4W8q4lLEYc9pPR5DOBwFf/IYIjGHq4ijPya3qNY5D1TeOu261bm/pJLM+0HEM I9XsmGVt4YThFUQE5FXxUasjNIJ4pQiH1U+EC3o1NkIwiva7Aq9QVsvujHXDyd+t Oe5aVOXrVY9ANt+r2aavwbGhvN4Cjssf19mxWfH2j1//pizaolCHQrUesaWyPLP3 lmgG5Gfx+d7yvSgGV5KuvqNuFoXhgQBQfC9B3WusCN7HNkOpdFep1/wjogf31acP 20vZSQMvp6htLjIYkA/pwsOYszy5zzVo/FdTjfn6E5op3iTrvtZz9JOfrwqR3IFf -----END CERTIFICATE-----Generated at Fri Apr 17 09:49:12 2026 by rpki-client