$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS63865.roa File: AS63865.roa (raw, json) Hash identifier: /zZdhtsytiOukoe+2tJTGI9U56LgejZAegOyh0HonaQ= Subject key identifier: 7E:AE:20:C1:BA:78:AE:9D:43:3D:B9:B2:F3:3D:9F:E8:50:04:4E:92 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7E3925F921BA69EE18E1D0209BD87CAE8EFB82D4 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63865.roa Signing time: Wed 21 Oct 2026 03:47:49 +0000 ROA not before: Wed 21 Oct 2026 03:42:49 +0000 ROA not after: Wed 20 Oct 2027 03:47:49 +0000 asID: 63865 IP address blocks: 198.17.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:39:25:f9:21:ba:69:ee:18:e1:d0:20:9b:d8:7c:ae:8e:fb:82:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Oct 21 03:42:49 2026 GMT Not After : Oct 20 03:47:49 2027 GMT Subject: CN=7EAE20C1BA78AE9D433DB9B2F33D9FE850044E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:95:27:a5:44:14:fc:0d:f3:79:bd:24:a5: 80:a0:d1:e2:92:81:ae:80:c6:07:9f:f2:46:71:18: f2:62:de:80:f1:ba:67:98:78:55:56:62:4d:f7:05: 9b:5f:17:b3:16:4f:8b:a8:91:a5:09:ba:5c:64:27: da:ac:98:62:49:c1:15:2d:7c:3a:41:c2:69:cf:98: d9:a0:a3:67:bd:92:55:ba:e5:90:6f:ec:56:27:0b: 9d:d8:d9:35:a9:7b:65:3f:32:b1:60:c0:67:0b:6c: fe:97:a4:8a:17:6d:dc:fe:af:15:1f:4a:45:26:64: 52:09:a0:65:ab:34:2f:5a:af:bd:1d:9e:8e:d7:c9: 8c:d4:e5:cb:55:f0:76:29:92:c2:21:dc:7e:fa:a9: 0a:22:f8:b7:58:d6:c9:0d:b2:b8:a5:1d:e1:10:54: ec:67:6d:32:90:66:bf:08:38:26:20:76:61:f7:83: 8d:f0:cc:24:f8:b4:33:f3:be:99:ca:2d:87:db:ed: e7:4b:94:e6:c7:cb:a4:62:2d:ba:f1:12:f7:ee:67: 4e:f0:7b:60:13:fe:93:83:1f:d6:1b:e5:a0:fc:df: 33:9d:c0:a0:e3:c8:ef:84:56:32:39:48:56:f1:35: 57:52:55:15:2a:e0:cb:07:5e:f6:6e:6b:79:5f:0b: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AE:20:C1:BA:78:AE:9D:43:3D:B9:B2:F3:3D:9F:E8:50:04:4E:92 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.17.240.0/24 Signature Algorithm: sha256WithRSAEncryption 48:14:0b:28:4e:75:00:2d:c6:3e:6d:25:d5:d2:56:8f:19:c1: 2c:6b:ad:fd:27:b7:32:2e:c1:0d:b9:4b:5e:f5:17:f9:01:56: 41:01:0f:2f:c6:2c:d1:90:a8:b0:6e:08:c9:5d:ad:2f:d4:3c: d3:4a:47:3a:05:38:e8:da:f6:ab:9b:6f:31:31:d9:c6:a7:f1: 87:1e:77:c7:91:14:45:80:96:16:5b:94:65:4b:21:fc:ab:d4: 6d:ef:98:61:b2:dc:a8:d7:2b:e7:17:62:51:8d:f9:13:cb:d9: 42:02:32:3d:7b:c6:1e:57:ed:da:ab:a6:9e:51:a9:ec:a5:16: 73:1c:0c:4c:a5:f5:88:79:88:10:37:1c:85:f4:b8:ff:55:64: 42:69:b6:62:c9:c3:fe:14:fa:f1:59:bb:63:c1:8e:22:70:e4: c8:7d:f2:19:f8:19:8a:83:08:8d:c8:e8:75:43:cb:d1:49:d9: a8:0e:8c:88:5a:d1:33:d8:42:fa:8c:ac:d7:95:bb:cd:b1:1b: 88:cc:07:17:a4:f6:bf:5e:83:70:5e:dc:f3:8e:3f:81:81:89: 55:ae:98:31:8c:49:c7:63:21:c6:df:02:f4:da:17:b8:2f:77: 73:8b:b8:0a:7e:9a:bd:33:ef:27:b6:bc:e0:fe:36:76:ac:07: 91:77:a6:db -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUfjkl+SG6ae4Y4dAgm9h8ro77gtQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTAyMTAzNDI0OVoX DTI3MTAyMDAzNDc0OVowMzExMC8GA1UEAxMoN0VBRTIwQzFCQTc4QUU5RDQzM0RC OUIyRjMzRDlGRTg1MDA0NEU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaHlSelRBT8DfN5vSSlgKDR4pKBroDGB5/yRnEY8mLegPG6Z5h4VVZiTfcF m18XsxZPi6iRpQm6XGQn2qyYYknBFS18OkHCac+Y2aCjZ72SVbrlkG/sVicLndjZ Nal7ZT8ysWDAZwts/pekihdt3P6vFR9KRSZkUgmgZas0L1qvvR2ejtfJjNTly1Xw dimSwiHcfvqpCiL4t1jWyQ2yuKUd4RBU7GdtMpBmvwg4JiB2YfeDjfDMJPi0M/O+ mcoth9vt50uU5sfLpGItuvES9+5nTvB7YBP+k4Mf1hvloPzfM53AoOPI74RWMjlI VvE1V1JVFSrgywde9m5reV8Lht0CAwEAAaOCAcswggHHMB0GA1UdDgQWBBR+riDB uniunUM9ubLzPZ/oUAROkjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTNjM4NjUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADGEfAwDQYJKoZIhvcNAQELBQADggEBAEgUCyhOdQAtxj5tJdXSVo8ZwSxr rf0ntzIuwQ25S171F/kBVkEBDy/GLNGQqLBuCMldrS/UPNNKRzoFOOja9qubbzEx 2can8Yced8eRFEWAlhZblGVLIfyr1G3vmGGy3KjXK+cXYlGN+RPL2UICMj17xh5X 7dqrpp5RqeylFnMcDEyl9Yh5iBA3HIX0uP9VZEJptmLJw/4U+vFZu2PBjiJw5Mh9 8hn4GYqDCI3I6HVDy9FJ2agOjIha0TPYQvqMrNeVu82xG4jMBxek9r9eg3Be3POO P4GBiVWumDGMScdjIcbfAvTaF7gvd3OLuAp+mr0z7ye2vOD+NnasB5F3pts= -----END CERTIFICATE-----Generated at Tue Nov 3 05:55:23 2026 by rpki-client