$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS63858.roa File: AS63858.roa (raw, json) Hash identifier: Rs7O6hwOcT7HBV8VnGwHAAnZnblTAoXikdvJCPpuRyA= Subject key identifier: 46:A5:3B:DB:4F:84:47:7A:54:05:AD:AE:8C:33:15:2D:02:0E:83:7F Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7E4E1C1D6FF28874FBDB4E35A5B6A01C8CF9C3E9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63858.roa Signing time: Fri 11 Sep 2026 01:35:49 +0000 ROA not before: Fri 11 Sep 2026 01:30:49 +0000 ROA not after: Fri 10 Sep 2027 01:35:49 +0000 asID: 63858 IP address blocks: 162.4.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4e:1c:1d:6f:f2:88:74:fb:db:4e:35:a5:b6:a0:1c:8c:f9:c3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 11 01:30:49 2026 GMT Not After : Sep 10 01:35:49 2027 GMT Subject: CN=46A53BDB4F84477A5405ADAE8C33152D020E837F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:62:14:b3:44:9d:0b:ef:de:b0:ec:9c:66: cf:0e:3b:27:53:37:aa:3d:8d:7f:d8:97:78:5a:e9: ac:d0:f7:7c:b8:40:16:4c:ad:4b:27:3c:ba:9a:b5: e2:6c:a6:6b:5f:96:f6:02:30:ca:a7:d0:33:22:c0: 7a:e6:f0:f2:57:e3:2b:e6:5d:a3:8a:83:a3:83:d3: 45:19:0e:d0:cf:49:30:49:24:c1:05:87:f0:4f:e2: b0:51:43:35:1b:c5:21:d2:f4:cf:fd:e4:f9:51:16: 18:3d:46:10:a5:c4:a7:57:8a:43:47:c4:ae:9b:ec: af:49:d3:e7:fc:9a:b3:1c:52:8c:2b:43:67:55:7c: 82:ea:f8:30:69:0a:af:91:0c:36:7a:9c:72:3b:c7: db:71:7e:65:7f:b0:ef:16:a8:6f:34:d9:4a:3b:78: 64:34:48:f3:c5:b6:14:e3:df:8e:5c:ad:8c:f4:49: 10:b3:93:f2:81:28:29:85:31:b5:6c:c7:cd:c6:48: c8:37:9a:8b:1f:26:5a:93:19:b2:f7:24:c8:02:d7: c6:c8:52:2e:61:bd:5f:3c:c3:6c:22:5c:ef:24:86: 95:f7:83:44:29:10:73:5f:94:6e:3a:57:c6:4d:74: 63:76:b7:51:1f:5f:bc:5d:1c:69:5b:d3:48:ca:df: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:3B:DB:4F:84:47:7A:54:05:AD:AE:8C:33:15:2D:02:0E:83:7F X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS63858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.158.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c9:a7:ab:64:d7:c3:59:ec:55:0c:e8:ee:76:a1:57:62:fd: ed:47:dd:b8:e4:1b:ba:53:72:4a:0a:3c:ce:ca:81:09:39:4f: 7d:e5:ff:81:d6:2e:00:c1:d9:f0:80:78:00:de:6f:d4:50:97: c3:d0:b7:3d:cd:ae:4e:39:4b:dc:01:89:e5:45:49:6e:84:82: 8e:bb:35:48:8e:18:c8:6e:55:24:b2:ab:50:9a:ad:d5:15:7f: 85:f8:22:4a:fd:b7:54:2c:27:4f:8b:7d:c3:47:80:8c:1e:3d: 80:2c:80:83:5d:c7:f0:4e:42:bf:2e:a6:41:07:77:2b:01:ad: 53:be:ad:73:84:e6:c7:cf:c6:27:df:3b:5f:54:53:70:81:98: 5e:11:27:52:1e:49:89:8b:bc:4c:8c:d9:5c:c8:da:e0:86:57: 16:13:62:53:5f:6d:bf:a5:f4:62:e4:f4:e3:b5:da:9b:18:ad: 01:03:72:66:2f:4c:b0:34:02:7f:72:c5:3d:50:61:f7:1c:55: 9a:15:b8:5c:9a:d6:ab:2e:b2:2c:4b:46:ad:94:dc:b2:ab:8f: 26:97:ff:0c:02:4d:66:7b:a6:8d:55:9c:b1:85:f5:b4:15:91: ee:6d:db:da:8b:1a:41:ee:a6:61:46:1a:ce:5b:fa:24:64:61: 3a:cd:8b:80 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUfk4cHW/yiHT72041pbagHIz5w+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkxMTAxMzA0OVoX DTI3MDkxMDAxMzU0OVowMzExMC8GA1UEAxMoNDZBNTNCREI0Rjg0NDc3QTU0MDVB REFFOEMzMzE1MkQwMjBFODM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+/YhSzRJ0L796w7Jxmzw47J1M3qj2Nf9iXeFrprND3fLhAFkytSyc8upq1 4myma1+W9gIwyqfQMyLAeubw8lfjK+Zdo4qDo4PTRRkO0M9JMEkkwQWH8E/isFFD NRvFIdL0z/3k+VEWGD1GEKXEp1eKQ0fErpvsr0nT5/yasxxSjCtDZ1V8gur4MGkK r5EMNnqccjvH23F+ZX+w7xaobzTZSjt4ZDRI88W2FOPfjlytjPRJELOT8oEoKYUx tWzHzcZIyDeaix8mWpMZsvckyALXxshSLmG9XzzDbCJc7ySGlfeDRCkQc1+UbjpX xk10Y3a3UR9fvF0caVvTSMrfk1UCAwEAAaOCAcswggHHMB0GA1UdDgQWBBRGpTvb T4RHelQFra6MMxUtAg6DfzAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTNjM4NTgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACiBJ4wDQYJKoZIhvcNAQELBQADggEBAAfJp6tk18NZ7FUM6O52oVdi/e1H 3bjkG7pTckoKPM7KgQk5T33l/4HWLgDB2fCAeADeb9RQl8PQtz3Nrk45S9wBieVF SW6Ego67NUiOGMhuVSSyq1CardUVf4X4Ikr9t1QsJ0+LfcNHgIwePYAsgINdx/BO Qr8upkEHdysBrVO+rXOE5sfPxiffO19UU3CBmF4RJ1IeSYmLvEyM2VzI2uCGVxYT YlNfbb+l9GLk9OO12psYrQEDcmYvTLA0An9yxT1QYfccVZoVuFya1qsusixLRq2U 3LKrjyaX/wwCTWZ7po1VnLGF9bQVke5t29qLGkHupmFGGs5b+iRkYTrNi4A= -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:46 2026 by rpki-client