$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23950.roa File: AS23950.roa (raw, json) Hash identifier: 3ednWNJtC0lB0UlicEtlpave/YyvjJVjO2TSLBUyfLY= Subject key identifier: F6:B0:81:D4:34:A5:ED:90:AF:FB:29:26:B0:AA:63:AA:3C:9D:BE:F0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7188FB86C5EAA3371A794E3E7FDC5165968873FD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23950.roa Signing time: Sun 03 May 2026 08:13:45 +0000 ROA not before: Sun 03 May 2026 08:08:45 +0000 ROA not after: Sun 02 May 2027 08:13:45 +0000 asID: 23950 IP address blocks: 202.51.16.0/24 maxlen: 24 202.51.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:88:fb:86:c5:ea:a3:37:1a:79:4e:3e:7f:dc:51:65:96:88:73:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 08:08:45 2026 GMT Not After : May 2 08:13:45 2027 GMT Subject: CN=F6B081D434A5ED90AFFB2926B0AA63AA3C9DBEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:08:1f:37:70:53:47:ab:ad:7c:38:bc:11: e4:43:ac:54:e1:26:1b:09:bf:23:b4:f7:a5:66:b6: fd:94:3b:2e:b3:52:04:fb:e2:51:9b:a5:af:be:59: d7:64:a0:56:16:5f:33:fb:da:fe:1d:65:8a:0a:14: ba:f4:b3:e9:f1:41:ad:99:fa:52:80:d3:f4:3a:40: 97:7f:86:6b:de:a4:c1:91:85:22:aa:90:df:e3:a9: 03:a9:37:a7:b0:9a:9c:a4:aa:e6:82:14:42:c3:2e: 6f:d0:df:58:72:df:1d:65:35:1b:4d:7b:a5:fe:2a: 27:b0:22:8e:db:d2:cb:7a:20:e9:59:8c:73:77:c4: 19:a7:77:f7:f6:37:e2:c4:97:21:12:ac:c8:7d:47: 79:b0:39:5d:ab:5a:76:22:b6:be:be:f0:fe:55:a9: 76:0f:2e:3d:b0:22:49:c8:03:4b:e4:44:a9:23:02: 75:8d:de:ea:db:1d:1d:5a:e8:af:9c:1d:38:84:38: 9e:18:bc:ad:24:b8:1a:c9:d3:ac:64:30:0e:1f:c6: 20:82:bc:3d:a4:aa:15:35:fd:43:49:f4:59:3a:61: d5:72:61:c3:d1:73:f4:bb:a5:95:78:e4:6c:10:42: 24:ed:e6:ad:fd:25:8d:98:f7:22:73:ba:05:89:c9: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B0:81:D4:34:A5:ED:90:AF:FB:29:26:B0:AA:63:AA:3C:9D:BE:F0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.16.0/24 202.51.19.0/24 Signature Algorithm: sha256WithRSAEncryption a4:1b:a1:90:43:71:8a:3f:ae:b8:93:46:7c:31:6d:14:52:12: ca:69:54:9d:3f:f9:d7:29:8e:bc:d2:b3:23:5a:c7:ef:7c:ac: d2:fa:6d:37:c1:36:ae:4c:41:17:d6:3f:a7:c1:e7:1e:81:ef: 45:16:07:d8:f1:a8:57:7a:0f:da:88:75:ac:5e:13:fb:2c:d6: 68:a0:fc:2d:1c:ee:39:c3:1a:af:cd:6c:08:89:1b:02:43:1c: b0:4c:37:a4:a0:b6:1e:5c:e3:b8:03:d5:f4:33:ad:10:f6:28: 3d:8e:60:97:c6:a0:df:5e:72:ea:7d:e0:ab:e3:a6:ff:14:3a: 41:93:86:b9:b8:32:95:80:63:2f:fe:1f:5e:78:69:1b:68:f5: 5d:90:52:96:25:0b:4e:0b:5b:32:63:2c:46:37:28:e8:92:8a: fa:05:78:05:3e:53:62:b4:f6:9f:a7:72:b1:55:93:1f:55:83: 4e:b1:58:97:70:93:5b:ae:85:d6:4a:6c:50:be:70:14:76:28: 6a:71:69:5b:1e:16:e1:21:53:c8:e0:82:db:ba:f5:91:c8:00: 4a:b8:d5:c6:a0:1f:7f:bb:11:f2:e3:a4:78:f4:c6:e6:0e:2a: 6e:ff:c9:19:7e:f2:5c:ab:8e:ed:f0:ed:50:bb:94:1a:a2:f9: 31:93:09:d5 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUcYj7hsXqozcaeU4+f9xRZZaIc/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA4MDg0NVoX DTI3MDUwMjA4MTM0NVowMzExMC8GA1UEAxMoRjZCMDgxRDQzNEE1RUQ5MEFGRkIy OTI2QjBBQTYzQUEzQzlEQkVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAJCB83cFNHq618OLwR5EOsVOEmGwm/I7T3pWa2/ZQ7LrNSBPviUZulr75Z 12SgVhZfM/va/h1ligoUuvSz6fFBrZn6UoDT9DpAl3+Ga96kwZGFIqqQ3+OpA6k3 p7CanKSq5oIUQsMub9DfWHLfHWU1G017pf4qJ7AijtvSy3og6VmMc3fEGad39/Y3 4sSXIRKsyH1HebA5XatadiK2vr7w/lWpdg8uPbAiScgDS+REqSMCdY3e6tsdHVro r5wdOIQ4nhi8rSS4GsnTrGQwDh/GIIK8PaSqFTX9Q0n0WTph1XJhw9Fz9LullXjk bBBCJO3mrf0ljZj3InO6BYnJHeUCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBT2sIHU NKXtkK/7KSawqmOqPJ2+8DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM5NTAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBADKMxADBADKMxMwDQYJKoZIhvcNAQELBQADggEBAKQboZBDcYo/rriTRnwx bRRSEsppVJ0/+dcpjrzSsyNax+98rNL6bTfBNq5MQRfWP6fB5x6B70UWB9jxqFd6 D9qIdaxeE/ss1mig/C0c7jnDGq/NbAiJGwJDHLBMN6Sgth5c47gD1fQzrRD2KD2O YJfGoN9ecup94Kvjpv8UOkGThrm4MpWAYy/+H154aRto9V2QUpYlC04LWzJjLEY3 KOiSivoFeAU+U2K09p+ncrFVkx9Vg06xWJdwk1uuhdZKbFC+cBR2KGpxaVseFuEh U8jggtu69ZHIAEq41cagH3+7EfLjpHj0xuYOKm7/yRl+8lyrju3w7VC7lBqi+TGT CdU= -----END CERTIFICATE-----Generated at Tue May 12 22:43:32 2026 by rpki-client