$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS63863.roa File: AS63863.roa (raw, json) Hash identifier: 5+6ySD9PaKgwQ23frDTHG52WKPG/Xcm/dSuefBXvkrc= Subject key identifier: E5:F0:72:8F:3B:12:5B:8F:39:CC:E0:0A:0E:2C:FD:9D:ED:D4:BD:93 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7829309ABC11075C5D550132D8CFBBFD24963467 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63863.roa Signing time: Sun 03 May 2026 08:16:31 +0000 ROA not before: Sun 03 May 2026 08:11:31 +0000 ROA not after: Sun 02 May 2027 08:16:31 +0000 asID: 63863 IP address blocks: 157.66.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:29:30:9a:bc:11:07:5c:5d:55:01:32:d8:cf:bb:fd:24:96:34:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 3 08:11:31 2026 GMT Not After : May 2 08:16:31 2027 GMT Subject: CN=E5F0728F3B125B8F39CCE00A0E2CFD9DEDD4BD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:fb:2c:8c:70:58:02:be:b0:9a:c6:79:9f: 50:7d:a0:00:7a:ee:ff:17:af:42:27:20:f6:1a:0d: fc:39:7f:99:43:a2:f6:4b:ed:a8:07:c7:5e:7b:c7: 8c:7e:fc:1b:d9:d4:75:c9:f5:b1:50:d6:f4:e5:85: a2:4f:12:d3:3f:9a:f4:82:4d:21:e0:aa:53:b4:4c: 1a:8e:f8:20:60:af:e6:3e:1d:89:73:c3:78:88:e7: 04:51:58:e0:6f:e1:10:86:d9:42:3f:26:96:dd:26: 6e:18:19:bc:31:b5:42:4f:86:eb:5a:be:2b:23:10: b3:5c:7a:61:d1:53:37:81:93:de:1c:b8:c6:60:0c: a7:35:31:be:e1:fd:8a:e3:50:2f:50:49:17:09:aa: 17:db:0c:94:09:0b:4d:be:d1:cc:49:c4:80:1b:ae: d4:7d:ea:d9:b0:f4:d5:3e:f2:f8:ed:50:4f:03:38: 61:da:01:ba:ba:d1:9b:b2:42:01:39:6a:1e:f9:48: 3f:bb:cf:23:29:0f:f3:4b:d4:e4:22:c0:17:51:86: 27:45:f8:57:60:c0:c5:7c:51:9f:e4:c2:d5:7a:e8: ab:3b:47:77:da:1c:30:d4:76:3f:79:6a:b5:3c:c8: df:29:59:4f:d9:13:e8:5a:7d:a2:b4:1e:74:81:28: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F0:72:8F:3B:12:5B:8F:39:CC:E0:0A:0E:2C:FD:9D:ED:D4:BD:93 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63863.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.58.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c6:c3:bb:26:91:ab:41:4f:33:a6:a4:28:0c:f4:20:36:9f: 8d:0c:4c:bc:a8:18:09:6b:99:ad:3f:e8:c7:cf:9f:30:c1:a7: 08:2a:79:59:80:f3:b3:d8:83:fd:7c:5b:c8:d5:c2:72:09:dd: 7e:c9:83:1c:02:28:ba:58:0f:7c:b0:b6:a8:02:f2:78:ee:27: 4f:c8:2a:9a:42:a1:b2:c6:6d:10:0f:97:b9:b5:bc:4f:ce:f5: 0f:19:c6:5e:da:34:90:0a:fd:2f:35:be:29:ef:3e:e5:68:9b: f0:77:a8:1f:5c:c6:e5:4d:fe:68:20:4c:b3:f6:d2:50:6f:de: 14:4f:e4:b3:90:ae:d6:d5:d7:b4:ca:3d:48:32:b5:3e:d5:a7: bf:ce:2d:89:5f:b0:bb:fd:c8:88:67:1f:f9:a1:3e:2d:ca:e5: 23:dc:3a:a8:47:16:d3:6c:b7:76:9d:24:cc:44:1e:83:72:8c: 02:c3:10:73:07:b4:27:b4:ee:71:cd:8a:4f:f0:b7:2a:f7:81: a8:07:c5:2c:c6:f6:c9:9a:76:ce:fc:d1:44:cc:a7:15:69:ef: b5:8b:6f:15:25:3d:6d:94:8d:f0:d8:f8:eb:bc:ed:cc:08:7a: 02:20:f6:32:ca:83:78:53:bd:c7:fb:78:79:27:3d:11:02:50: 85:0a:ad:f8 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUeCkwmrwRB1xdVQEy2M+7/SSWNGcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMzA4MTEzMVoX DTI3MDUwMjA4MTYzMVowMzExMC8GA1UEAxMoRTVGMDcyOEYzQjEyNUI4RjM5Q0NF MDBBMEUyQ0ZEOURFREQ0QkQ5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGP+yyMcFgCvrCaxnmfUH2gAHru/xevQicg9hoN/Dl/mUOi9kvtqAfHXnvH jH78G9nUdcn1sVDW9OWFok8S0z+a9IJNIeCqU7RMGo74IGCv5j4diXPDeIjnBFFY 4G/hEIbZQj8mlt0mbhgZvDG1Qk+G61q+KyMQs1x6YdFTN4GT3hy4xmAMpzUxvuH9 iuNQL1BJFwmqF9sMlAkLTb7RzEnEgBuu1H3q2bD01T7y+O1QTwM4YdoBurrRm7JC ATlqHvlIP7vPIykP80vU5CLAF1GGJ0X4V2DAxXxRn+TC1XroqztHd9ocMNR2P3lq tTzI3ylZT9kT6Fp9orQedIEoIkkCAwEAAaOCAcswggHHMB0GA1UdDgQWBBTl8HKP OxJbjznM4AoOLP2d7dS9kzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTNjM4NjMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGdQjowDQYJKoZIhvcNAQELBQADggEBAG/Gw7smkatBTzOmpCgM9CA2n40M TLyoGAlrma0/6MfPnzDBpwgqeVmA87PYg/18W8jVwnIJ3X7JgxwCKLpYD3ywtqgC 8njuJ0/IKppCobLGbRAPl7m1vE/O9Q8Zxl7aNJAK/S81vinvPuVom/B3qB9cxuVN /mggTLP20lBv3hRP5LOQrtbV17TKPUgytT7Vp7/OLYlfsLv9yIhnH/mhPi3K5SPc OqhHFtNst3adJMxEHoNyjALDEHMHtCe07nHNik/wtyr3gagHxSzG9smads780UTM pxVp77WLbxUlPW2UjfDY+Ou87cwIegIg9jLKg3hTvcf7eHknPRECUIUKrfg= -----END CERTIFICATE-----Generated at Tue May 12 22:43:00 2026 by rpki-client