$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa File: AS63865.roa (raw, json) Hash identifier: cCZYq3dRdiWnZjULBdf7wiVGLt/LDRhk5JUKeFEXSbU= Subject key identifier: 8B:5A:BB:CE:4C:83:58:A2:FF:4F:F0:B3:2C:1E:25:0F:DF:EA:F8:1D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22EFF9BA93C9D12313E5753339348DC156B13968 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa Signing time: Mon 20 Jul 2026 02:33:53 +0000 ROA not before: Mon 20 Jul 2026 02:28:53 +0000 ROA not after: Mon 19 Jul 2027 02:33:53 +0000 asID: 63865 IP address blocks: 2001:df7:2e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ef:f9:ba:93:c9:d1:23:13:e5:75:33:39:34:8d:c1:56:b1:39:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 20 02:28:53 2026 GMT Not After : Jul 19 02:33:53 2027 GMT Subject: CN=8B5ABBCE4C8358A2FF4FF0B32C1E250FDFEAF81D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:98:7a:b4:b0:7f:2b:0e:6b:80:61:76:20: 23:e3:37:7a:67:c8:8f:fa:c1:2f:0a:ea:cb:72:56: 87:9e:5d:57:09:15:34:2b:b1:90:c3:29:ea:80:e7: 7f:fd:d1:c2:1f:20:b5:10:b4:d0:95:f9:8a:27:39: bf:73:e7:41:9e:be:0b:35:8c:a5:6c:4d:0f:30:14: 9f:d8:12:85:b0:5f:df:97:17:ac:5f:bf:b3:9a:ed: 1d:27:69:ca:c9:32:08:43:ab:e9:3b:df:c6:90:6b: bf:c9:92:34:9c:24:9b:64:3f:ef:d5:d9:9f:af:a8: 45:98:37:52:75:de:9c:31:31:40:d9:66:9d:cf:ad: ef:e6:70:f6:bd:93:7d:06:b8:aa:47:16:af:e9:40: 59:23:7c:f3:13:20:3a:cb:af:a0:f4:6f:97:f4:a2: fd:87:99:85:f0:cf:01:53:40:87:66:05:5d:0f:d6: a2:bc:33:96:e4:4b:0b:d5:4d:e8:5a:9a:a0:02:c0: 1a:fd:3d:f0:11:ec:63:38:2d:24:5c:cd:01:02:eb: fd:80:0e:76:91:80:8c:2d:e4:e0:18:07:89:c8:8c: 42:8a:85:e9:67:d7:72:cd:60:09:1e:7e:77:ce:30: 57:fb:61:4a:29:fa:f4:3b:7d:4e:ac:47:74:97:ef: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:BB:CE:4C:83:58:A2:FF:4F:F0:B3:2C:1E:25:0F:DF:EA:F8:1D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:2e40::/48 Signature Algorithm: sha256WithRSAEncryption 9c:b6:58:c8:0e:a6:bd:12:27:f9:87:72:19:fb:6f:27:f0:f7: 7a:1e:52:0b:cc:b2:fe:b1:99:b1:38:2a:db:09:48:d1:39:68: 74:86:9b:8b:2b:38:af:82:6f:80:fb:69:ad:b4:ef:82:16:bd: 57:73:b8:78:b8:0c:dd:4a:ff:eb:31:45:aa:d0:86:ea:e9:90: 56:f3:48:ed:3d:4c:69:eb:19:26:e7:f8:0b:63:db:2c:7c:61: 9a:db:af:18:41:40:7d:5b:33:1d:94:d5:98:b6:56:e0:fb:90: ad:7b:3a:1b:d0:15:c9:fa:1e:79:c7:83:78:99:90:ad:75:1b: 90:f5:76:de:2a:55:26:62:1b:6f:da:25:c0:ca:b8:6a:45:9a: 35:87:60:69:fe:89:93:bd:85:fe:c0:81:17:48:d5:54:7a:bc: 73:ee:e9:ee:1b:ba:7e:2a:07:5f:7b:e4:b1:fa:b0:a9:1d:e0: 9a:90:0f:34:f5:8c:a6:b6:e9:d3:f4:03:b2:6a:b4:40:3b:20: 61:1d:b2:4b:f0:0a:4a:42:05:15:00:04:47:2b:67:72:4f:99: 7f:34:15:c4:0a:75:69:44:13:0b:3e:1f:74:25:73:ff:00:7d: 30:16:7d:41:5c:f9:3e:e8:bf:21:ff:9a:0c:f8:f8:8a:de:e9: c9:18:79:99 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUIu/5upPJ0SMT5XUzOTSNwVaxOWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyMDAyMjg1M1oX DTI3MDcxOTAyMzM1M1owMzExMC8GA1UEAxMoOEI1QUJCQ0U0QzgzNThBMkZGNEZG MEIzMkMxRTI1MEZERkVBRjgxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnpmHq0sH8rDmuAYXYgI+M3emfIj/rBLwrqy3JWh55dVwkVNCuxkMMp6oDn f/3Rwh8gtRC00JX5iic5v3PnQZ6+CzWMpWxNDzAUn9gShbBf35cXrF+/s5rtHSdp yskyCEOr6TvfxpBrv8mSNJwkm2Q/79XZn6+oRZg3UnXenDExQNlmnc+t7+Zw9r2T fQa4qkcWr+lAWSN88xMgOsuvoPRvl/Si/YeZhfDPAVNAh2YFXQ/WorwzluRLC9VN 6FqaoALAGv098BHsYzgtJFzNAQLr/YAOdpGAjC3k4BgHiciMQoqF6WfXcs1gCR5+ d84wV/thSin69Dt9TqxHdJfvieECAwEAAaOCAc4wggHKMB0GA1UdDgQWBBSLWrvO TINYov9P8LMsHiUP3+r4HTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4NjUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAgAQ33LkAwDQYJKoZIhvcNAQELBQADggEBAJy2WMgOpr0SJ/mHchn7byfw 93oeUgvMsv6xmbE4KtsJSNE5aHSGm4srOK+Cb4D7aa2074IWvVdzuHi4DN1K/+sx RarQhurpkFbzSO09TGnrGSbn+Atj2yx8YZrbrxhBQH1bMx2U1Zi2VuD7kK17OhvQ Fcn6HnnHg3iZkK11G5D1dt4qVSZiG2/aJcDKuGpFmjWHYGn+iZO9hf7AgRdI1VR6 vHPu6e4bun4qB1975LH6sKkd4JqQDzT1jKa26dP0A7JqtEA7IGEdskvwCkpCBRUA BEcrZ3JPmX80FcQKdWlEEws+H3Qlc/8AfTAWfUFc+T7ovyH/mgz4+Ire6ckYeZk= -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:07 2026 by rpki-client