$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa File: AS23693.roa (raw, json) Hash identifier: lQKgKzmi5vp0VaGZNk9RL7hREMu1CIajW/2BV+bH21s= Subject key identifier: 92:B1:E7:31:D6:8E:D3:86:2D:60:9F:1F:EA:3A:41:C1:54:74:16:EC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0DBCEBA6D78D6B20E2960DBB595610232A4DF453 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa Signing time: Sat 30 May 2026 02:06:11 +0000 ROA not before: Sat 30 May 2026 02:01:11 +0000 ROA not after: Sat 29 May 2027 02:06:11 +0000 asID: 23693 IP address blocks: 202.158.129.0/24 maxlen: 24 202.158.130.0/24 maxlen: 24 202.158.131.0/24 maxlen: 24 202.158.134.0/24 maxlen: 24 202.158.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 08:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bc:eb:a6:d7:8d:6b:20:e2:96:0d:bb:59:56:10:23:2a:4d:f4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 30 02:01:11 2026 GMT Not After : May 29 02:06:11 2027 GMT Subject: CN=92B1E731D68ED3862D609F1FEA3A41C1547416EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:c9:26:a4:20:7d:2e:79:56:18:94:6c:fb: 40:d0:23:50:ce:3a:20:f6:c4:61:87:a8:9c:ad:76: 36:b2:a8:d2:56:dc:c4:9b:ac:cb:16:9c:d2:9c:a5: a5:ba:27:a2:2d:15:a5:c7:b2:49:ad:3e:60:7a:f7: 6b:2e:6b:9a:37:64:6e:b5:2f:65:52:44:b1:7c:e6: 6b:b7:3f:aa:de:03:0e:a5:6a:61:70:f6:e3:b5:61: b1:8b:eb:59:17:46:40:26:f2:40:88:8f:90:28:b5: 5b:f6:d0:04:45:c9:07:c0:7b:c0:9e:2b:f4:1a:41: 78:6f:af:6b:3c:7c:b8:4e:92:ae:0a:b4:54:7c:09: 9e:7e:d5:99:80:94:93:53:32:58:5c:f0:d0:89:7c: 9a:65:87:5e:f6:00:12:33:03:50:6e:45:cc:8e:39: ce:6f:dd:b7:69:09:ec:98:27:9f:c9:5e:b8:b9:fc: 3c:d7:52:dd:96:91:c3:9e:49:20:59:79:70:84:a3: b3:fc:4c:06:48:52:93:40:c9:68:de:9c:df:5d:3a: 47:9d:91:6d:3d:57:5c:30:f0:95:ed:4b:98:c2:6f: b6:47:73:a4:75:20:79:93:be:31:64:6b:4b:25:d8: bc:30:66:7f:4b:e0:e2:db:a9:39:e5:7d:b9:31:c3: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:E7:31:D6:8E:D3:86:2D:60:9F:1F:EA:3A:41:C1:54:74:16:EC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.158.129.0-202.158.131.255 202.158.134.0/23 Signature Algorithm: sha256WithRSAEncryption 07:82:80:c8:e9:4c:c4:85:d7:89:ba:1d:5d:8e:57:c8:86:b7: 0f:d4:fa:cf:8f:0e:01:41:ef:9e:78:09:7d:9e:5e:ff:03:5e: 8b:3b:0b:06:26:ba:1f:b8:f7:94:35:97:8b:de:65:5c:a9:b9: 8d:f3:15:92:b7:40:b0:49:5d:84:a9:73:cb:d6:ab:9e:3b:ec: 2c:6a:20:99:38:a7:11:19:54:c9:ac:f4:ac:84:e9:92:2e:61: df:56:2d:03:2f:a5:59:47:12:a9:bd:18:01:b3:0d:85:71:05: 2b:09:83:c3:8f:21:5f:16:db:eb:13:be:5d:84:18:dd:3b:d4: 13:da:39:c0:45:cf:bc:d2:ca:a6:fc:6c:5a:99:9b:ac:dc:1c: 5c:2c:c4:fe:72:9f:84:9f:00:78:6b:d7:0e:75:31:65:0c:13: 49:2b:c6:47:5d:b7:ac:f9:74:85:e6:ca:e4:01:5c:af:85:10: 79:e2:42:d0:1a:3a:a3:d4:87:84:39:6a:3a:eb:5f:fd:24:cc: 64:9b:e6:f4:97:6f:41:91:6d:b1:8a:ea:be:96:f6:1a:a2:92: 6d:78:ed:23:a8:ab:3f:e2:f0:a6:31:61:3d:a1:ab:0f:18:1c: d7:52:c7:38:5b:a8:b8:4b:fb:d7:d1:7a:20:4a:49:b0:6c:1c: d0:c0:cb:cc -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUDbzrpteNayDilg27WVYQIypN9FMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUzMDAyMDExMVoX DTI3MDUyOTAyMDYxMVowMzExMC8GA1UEAxMoOTJCMUU3MzFENjhFRDM4NjJENjA5 RjFGRUEzQTQxQzE1NDc0MTZFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJV3ySakIH0ueVYYlGz7QNAjUM46IPbEYYeonK12NrKo0lbcxJusyxac0pyl pbonoi0VpceySa0+YHr3ay5rmjdkbrUvZVJEsXzma7c/qt4DDqVqYXD247VhsYvr WRdGQCbyQIiPkCi1W/bQBEXJB8B7wJ4r9BpBeG+vazx8uE6Srgq0VHwJnn7VmYCU k1MyWFzw0Il8mmWHXvYAEjMDUG5FzI45zm/dt2kJ7Jgnn8leuLn8PNdS3ZaRw55J IFl5cISjs/xMBkhSk0DJaN6c3106R52RbT1XXDDwle1LmMJvtkdzpHUgeZO+MWRr SyXYvDBmf0vg4tupOeV9uTHDIO8CAwEAAaOCAdkwggHVMB0GA1UdDgQWBBSSsecx 1o7Thi1gnx/qOkHBVHQW7DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM2OTMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgAB MBQwDAMEAMqegQMEAsqegAMEAcqehjANBgkqhkiG9w0BAQsFAAOCAQEAB4KAyOlM xIXXibodXY5XyIa3D9T6z48OAUHvnngJfZ5e/wNeizsLBia6H7j3lDWXi95lXKm5 jfMVkrdAsEldhKlzy9arnjvsLGogmTinERlUyaz0rITpki5h31YtAy+lWUcSqb0Y AbMNhXEFKwmDw48hXxbb6xO+XYQY3TvUE9o5wEXPvNLKpvxsWpmbrNwcXCzE/nKf hJ8AeGvXDnUxZQwTSSvGR123rPl0hebK5AFcr4UQeeJC0Bo6o9SHhDlqOutf/STM ZJvm9JdvQZFtsYrqvpb2GqKSbXjtI6irP+LwpjFhPaGrDxgc11LHOFuouEv719F6 IEpJsGwc0MDLzA== -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:18 2026 by rpki-client