
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa
File: AS63885.roa (raw, json)
Hash identifier: GmdUvAqcXu2KCo0hyY1OQzADk/5vLb4pAeT4XaTDV/c=
Subject key identifier: D6:28:1C:E6:78:E2:4A:C9:0E:D4:C7:D8:F0:7F:24:EB:60:FD:B8:5B
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 54849605FF8AC46D068728E003107DB379663939
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa
Signing time: Fri 22 May 2026 08:38:19 +0000
ROA not before: Fri 22 May 2026 08:33:19 +0000
ROA not after: Fri 21 May 2027 08:38:19 +0000
asID: 63885
IP address blocks: 103.235.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:84:96:05:ff:8a:c4:6d:06:87:28:e0:03:10:7d:b3:79:66:39:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 22 08:33:19 2026 GMT
Not After : May 21 08:38:19 2027 GMT
Subject: CN=D6281CE678E24AC90ED4C7D8F07F24EB60FDB85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:c8:b4:6e:35:8c:b8:2c:26:ef:b5:7d:e8:
d4:47:88:b4:74:0b:c6:b9:cc:18:ad:27:e3:24:34:
70:7d:81:3c:f8:65:6a:95:29:be:e9:94:ee:9b:b1:
3e:2f:7e:e8:67:3f:aa:3d:4b:bc:88:77:fa:7e:49:
2c:8a:0e:1c:91:a9:c2:12:ac:b3:d4:ea:39:1a:8d:
ac:47:59:a2:7a:34:04:cf:27:e7:a0:11:c9:98:40:
d7:aa:bf:3d:1f:2a:c2:c3:e5:18:28:50:66:7f:d7:
5b:86:b4:e1:1c:2a:03:74:10:2b:73:5a:1e:7c:0a:
92:4a:a7:27:ab:e0:cc:f7:2c:6e:97:71:b2:d1:80:
5e:07:73:df:60:d7:b5:15:9d:1e:a8:50:7f:2a:ea:
77:58:e6:f5:fb:02:2f:00:72:eb:3d:4a:2b:c0:37:
80:85:10:71:dd:3e:7e:09:90:c2:75:4d:b3:e8:e6:
99:c6:ea:fb:b7:72:05:95:dd:21:33:a0:41:27:5c:
0c:75:e9:00:7f:34:b4:58:45:cb:48:0d:64:1f:cf:
e3:b9:83:13:63:c3:8d:53:4f:b0:70:33:7b:e7:32:
8f:c5:3b:57:1a:5c:35:18:aa:83:e7:36:86:cc:7a:
5c:3c:de:ea:7f:79:97:2c:ec:41:83:50:9c:08:76:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:28:1C:E6:78:E2:4A:C9:0E:D4:C7:D8:F0:7F:24:EB:60:FD:B8:5B
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.183.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f9:e5:8e:65:e1:38:dd:91:c6:a5:60:d5:51:37:d7:b7:31:
f1:61:6d:36:cc:bb:93:36:83:4d:98:58:a2:df:1e:2f:82:6a:
8e:49:23:3f:44:ce:80:5c:81:07:28:14:c8:23:9c:0d:a8:89:
55:68:3d:24:a5:15:2d:ee:bb:12:c1:89:42:c1:ea:c8:e5:99:
80:e7:4f:58:f3:51:ed:a7:df:b6:1d:34:be:ff:3c:65:84:ed:
13:5f:4b:4f:de:d4:6b:79:7b:a0:d7:1b:f7:ce:57:75:ab:16:
16:bf:85:4e:ea:6f:89:be:aa:ac:b8:12:dd:51:59:69:82:a1:
df:fc:ad:f2:2d:7a:32:7a:d1:8e:31:1c:5c:8d:f9:cf:a2:71:
aa:7c:32:8f:9a:d0:d4:7c:94:6d:b9:91:ca:29:93:0d:bc:6f:
dd:f6:a6:51:d2:8a:f5:11:f7:a1:88:06:af:91:2e:c8:fd:0c:
33:3a:bd:f7:49:21:9d:ef:66:1b:59:e3:64:7c:fe:de:e1:8f:
c7:d7:4a:84:5e:7b:59:46:1b:31:27:e3:32:ae:11:53:c8:18:
c7:9e:f2:af:b9:f7:11:82:da:2d:fb:b7:9c:d8:1b:75:25:5f:
62:d9:c6:2c:02:07:fe:51:3e:d8:52:73:c2:41:dd:b6:61:20:
b3:35:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:31:50 2026 by rpki-client