$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS23947.roa File: AS23947.roa (raw, json) Hash identifier: JSPoA1ukiX3u/iObmajYkfpaN9VurhW6bYHhhl30W3c= Subject key identifier: 33:FB:A8:E6:D0:64:92:90:0E:4A:5C:CE:50:88:8C:52:8E:DE:9D:6B Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2547D4E9AE3817F43F49D2473EA68D5F6138C2FE Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS23947.roa Signing time: Wed 09 Sep 2026 06:35:39 +0000 ROA not before: Wed 09 Sep 2026 06:30:39 +0000 ROA not after: Wed 08 Sep 2027 06:35:39 +0000 asID: 23947 IP address blocks: 9.154.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:47:d4:e9:ae:38:17:f4:3f:49:d2:47:3e:a6:8d:5f:61:38:c2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 9 06:30:39 2026 GMT Not After : Sep 8 06:35:39 2027 GMT Subject: CN=33FBA8E6D06492900E4A5CCE50888C528EDE9D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:4c:b9:37:ec:7e:66:4d:b9:28:20:26:d3: 61:c3:c4:48:a2:d9:4d:91:27:3a:19:af:11:89:b9: c6:e5:71:fe:0e:3e:8c:42:25:0d:8a:f1:f3:a2:5f: 80:77:6c:9a:dd:b7:a5:e3:9c:c8:7d:b7:f2:04:8e: ff:1b:16:e5:7d:cf:67:ab:24:b7:db:1d:c8:e6:4c: 59:d5:23:f5:be:38:ce:5c:2b:b9:7a:bd:49:e3:9e: 36:61:f4:eb:e6:02:3c:de:78:a4:6a:ed:32:22:23: 24:d6:54:17:08:ad:2d:9e:a0:7d:0e:39:40:3f:8f: af:62:5b:85:47:ab:d8:a3:cd:6b:a1:b5:c0:7b:95: 1c:2b:46:b8:48:9d:a3:25:f9:e7:1c:27:6a:c5:07: 54:28:a0:cb:b2:56:f4:20:88:f3:f6:d4:1b:c9:08: 65:b0:70:4c:ab:c1:c7:f9:fa:68:79:ff:d4:87:e6: 01:5b:bf:85:0c:06:e6:32:64:3b:6b:3d:0f:f7:8a: 5b:59:12:c0:90:20:26:d2:cd:a2:60:be:8b:24:0b: 3e:31:e2:47:0e:c5:1f:a5:fc:e9:fb:3e:9d:f4:ed: e6:a4:2c:a8:d8:ac:89:f0:ba:fe:77:47:e1:cb:de: 2b:85:2f:07:d7:aa:ac:01:cc:d5:51:50:52:2f:0e: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:A8:E6:D0:64:92:90:0E:4A:5C:CE:50:88:8C:52:8E:DE:9D:6B X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS23947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:aa:19:5e:37:36:4d:66:67:45:f4:d5:b1:a3:c3:91:8c:05: e3:80:4b:5e:9d:f6:cc:72:72:39:37:92:04:ac:f9:3d:d6:79: d8:a4:95:3c:be:e6:8e:28:92:dd:39:ba:77:0e:f2:1f:b5:d9: 09:8f:c4:fc:5f:0b:c7:c5:20:0c:5c:be:8b:e4:e6:1e:9e:ff: b7:8b:5e:d1:18:99:ba:bb:34:81:3f:b9:d9:0b:d7:8e:db:99: 68:fd:5d:81:10:d8:aa:93:ca:a1:8e:72:88:79:ec:02:bc:c7: 98:d4:01:cd:1c:b5:df:e4:47:7d:0e:b3:c0:09:a7:49:b9:5e: a8:da:d1:d5:bb:1d:88:c6:06:ca:46:a1:81:50:ef:9f:6f:95: 70:37:24:b1:c8:95:79:60:2c:b2:9a:cd:b3:b1:ed:48:2e:7c: ea:06:11:f4:16:c2:3a:18:75:8a:23:6e:c8:0d:3d:cb:e9:06: 03:bb:de:5d:26:30:00:22:68:6d:6c:11:13:03:57:2c:0f:b3: a6:42:df:53:4e:c6:40:07:94:46:3a:7d:a8:5f:73:f2:01:68: d2:d4:3f:8f:45:c9:c4:17:8f:c7:b6:3c:c5:f4:71:62:75:a9: 27:1c:3e:1e:11:67:f5:e5:59:0a:ac:56:c1:bc:c3:63:7a:04: e6:76:82:5a -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUJUfU6a44F/Q/SdJHPqaNX2E4wv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkwOTA2MzAzOVoX DTI3MDkwODA2MzUzOVowMzExMC8GA1UEAxMoMzNGQkE4RTZEMDY0OTI5MDBFNEE1 Q0NFNTA4ODhDNTI4RURFOUQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHUTLk37H5mTbkoICbTYcPESKLZTZEnOhmvEYm5xuVx/g4+jEIlDYrx86Jf gHdsmt23peOcyH238gSO/xsW5X3PZ6skt9sdyOZMWdUj9b44zlwruXq9SeOeNmH0 6+YCPN54pGrtMiIjJNZUFwitLZ6gfQ45QD+Pr2JbhUer2KPNa6G1wHuVHCtGuEid oyX55xwnasUHVCigy7JW9CCI8/bUG8kIZbBwTKvBx/n6aHn/1IfmAVu/hQwG5jJk O2s9D/eKW1kSwJAgJtLNomC+iyQLPjHiRw7FH6X86fs+nfTt5qQsqNisifC6/ndH 4cveK4UvB9eqrAHM1VFQUi8OQu0CAwEAAaOCAcowggHGMB0GA1UdDgQWBBQz+6jm 0GSSkA5KXM5QiIxSjt6dazAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMjM5NDcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAJmjANBgkqhkiG9w0BAQsFAAOCAQEAJqoZXjc2TWZnRfTVsaPDkYwF44BL Xp32zHJyOTeSBKz5PdZ52KSVPL7mjiiS3Tm6dw7yH7XZCY/E/F8Lx8UgDFy+i+Tm Hp7/t4te0RiZurs0gT+52QvXjtuZaP1dgRDYqpPKoY5yiHnsArzHmNQBzRy13+RH fQ6zwAmnSbleqNrR1bsdiMYGykahgVDvn2+VcDcksciVeWAssprNs7HtSC586gYR 9BbCOhh1iiNuyA09y+kGA7veXSYwACJobWwREwNXLA+zpkLfU07GQAeURjp9qF9z 8gFo0tQ/j0XJxBePx7Y8xfRxYnWpJxw+HhFn9eVZCqxWwbzDY3oE5naCWg== -----END CERTIFICATE-----Generated at Thu Sep 17 09:09:09 2026 by rpki-client