$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa File: AS23947.roa (raw, json) Hash identifier: 7C7fT7F5MV9ZWdBttVqGvZJHpH3KQ2qPc0hfpGyTHR0= Subject key identifier: 03:E2:79:16:59:2B:DF:71:7C:2A:A2:78:9A:41:B8:FD:C6:8C:4E:32 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3C9A53C79D98242CEB828447B731B194EB8BBE30 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa Signing time: Thu 16 Jul 2026 10:29:31 +0000 ROA not before: Thu 16 Jul 2026 10:24:31 +0000 ROA not after: Thu 15 Jul 2027 10:29:31 +0000 asID: 23947 IP address blocks: 103.111.144.0/24 maxlen: 24 103.129.216.0/22 maxlen: 24 103.154.136.0/24 maxlen: 24 2400:dc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9a:53:c7:9d:98:24:2c:eb:82:84:47:b7:31:b1:94:eb:8b:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 16 10:24:31 2026 GMT Not After : Jul 15 10:29:31 2027 GMT Subject: CN=03E27916592BDF717C2AA2789A41B8FDC68C4E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3f:3d:95:34:ce:4f:13:62:15:96:ea:49:3a: 93:21:d9:6e:6d:ef:aa:c1:3e:4a:d1:bb:6b:c4:eb: 3e:71:11:c5:6b:37:a2:21:0e:0a:09:4f:48:79:3e: d0:36:f4:da:5b:58:46:ef:d8:01:a6:b2:da:d4:de: 88:b6:08:eb:6d:b8:2d:14:e6:c8:b4:dc:52:f8:d7: 28:24:46:ba:93:74:5c:2a:ed:c6:f6:ab:a2:c6:af: d9:64:88:09:71:5d:34:a9:73:43:31:d1:d8:36:18: 90:c2:ed:6d:20:d7:32:62:df:73:06:33:cd:5d:08: 2c:9e:1d:aa:b7:97:17:ec:d0:3c:11:e7:65:e0:40: 9f:b6:27:b1:82:65:25:1d:fd:aa:56:42:ae:4b:c0: c7:5b:7e:b1:7b:88:98:7b:2d:90:e4:65:5f:d2:3e: e5:d3:14:ce:b9:d4:fa:0f:91:c4:ea:d2:7a:35:c4: f7:b1:12:81:ba:f7:00:61:b4:2c:82:52:ca:e3:43: e1:12:3e:d0:db:5e:36:9c:0f:94:f8:cf:d4:2b:ab: 75:cc:e1:15:a5:10:cf:85:31:e8:fd:c7:8e:e8:8a: 0e:a5:3e:3e:7d:16:95:ca:d8:24:81:60:80:a1:16: 25:de:e3:57:d3:0f:cc:e5:d9:aa:55:21:56:31:b3: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E2:79:16:59:2B:DF:71:7C:2A:A2:78:9A:41:B8:FD:C6:8C:4E:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.144.0/24 103.129.216.0/22 103.154.136.0/24 IPv6: 2400:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 78:b8:a6:26:2f:16:fd:c6:dd:66:23:5c:46:c1:a3:fd:a5:21: e0:4c:55:4f:a4:95:79:a1:3e:6f:2f:c9:62:32:d9:18:af:b2: 72:b1:79:59:f5:16:79:ac:ab:66:26:73:af:af:18:85:81:81: 17:37:4d:66:c0:95:58:87:b6:fd:4e:fd:77:a5:4c:bf:6e:d2: d2:7e:9e:e2:f3:91:44:62:46:07:57:71:48:b3:3d:38:f1:e7: b0:2a:c3:84:2d:a7:f5:18:ee:b2:66:9b:18:60:86:65:3a:73: b1:ad:95:12:a7:6c:24:7a:d4:57:58:c2:49:5a:96:a3:50:58: a7:d6:17:84:d5:c1:2d:87:73:b5:f7:d6:cb:d6:1d:bb:20:4e: 56:00:91:06:e0:cc:34:db:c1:ec:f8:cb:d2:a2:8b:f5:f3:76: df:ee:ab:0f:93:46:85:82:5e:ef:a2:21:06:c9:c8:0d:a9:97: e8:98:6b:a7:cd:f7:84:77:ca:ee:ac:75:92:d1:2f:f7:2d:7b: 1d:ec:28:e2:24:53:19:8f:91:01:21:29:f8:5c:00:16:24:e0: cc:8c:c7:99:f7:f2:c4:b0:5e:3b:dd:b2:98:53:7c:ea:25:59: 7c:67:d2:91:2c:4b:a8:6d:a8:62:61:13:49:80:4d:71:71:b9: 38:f2:66:ee -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUPJpTx52YJCzrgoRHtzGxlOuLvjAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcxNjEwMjQzMVoX DTI3MDcxNTEwMjkzMVowMzExMC8GA1UEAxMoMDNFMjc5MTY1OTJCREY3MTdDMkFB Mjc4OUE0MUI4RkRDNjhDNEUzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPI/PZU0zk8TYhWW6kk6kyHZbm3vqsE+StG7a8TrPnERxWs3oiEOCglPSHk+ 0Db02ltYRu/YAaay2tTeiLYI6224LRTmyLTcUvjXKCRGupN0XCrtxvarosav2WSI CXFdNKlzQzHR2DYYkMLtbSDXMmLfcwYzzV0ILJ4dqreXF+zQPBHnZeBAn7YnsYJl JR39qlZCrkvAx1t+sXuImHstkORlX9I+5dMUzrnU+g+RxOrSejXE97ESgbr3AGG0 LIJSyuND4RI+0NteNpwPlPjP1CurdczhFaUQz4Ux6P3HjuiKDqU+Pn0WlcrYJIFg gKEWJd7jV9MPzOXZqlUhVjGzFQcCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBQD4nkW WSvfcXwqoniaQbj9xoxOMjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM5NDcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgAB MBIDBABnb5ADBAJngdgDBABnmogwDQQCAAIwBwMFACQA3AAwDQYJKoZIhvcNAQEL BQADggEBAHi4piYvFv3G3WYjXEbBo/2lIeBMVU+klXmhPm8vyWIy2RivsnKxeVn1 Fnmsq2Ymc6+vGIWBgRc3TWbAlViHtv1O/XelTL9u0tJ+nuLzkURiRgdXcUizPTjx 57Aqw4Qtp/UY7rJmmxhghmU6c7GtlRKnbCR61FdYwklalqNQWKfWF4TVwS2Hc7X3 1svWHbsgTlYAkQbgzDTbwez4y9Kii/Xzdt/uqw+TRoWCXu+iIQbJyA2pl+iYa6fN 94R3yu6sdZLRL/ctex3sKOIkUxmPkQEhKfhcABYk4MyMx5n38sSwXjvdsphTfOol WXxn0pEsS6htqGJhE0mATXFxuTjyZu4= -----END CERTIFICATE-----Generated at Thu Jul 23 23:48:49 2026 by rpki-client