$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23952.roa File: AS23952.roa (raw, json) Hash identifier: p2CJlaf0gZ1f0dzRydAwbeErRmP18Q+pKFDfu2OibJg= Subject key identifier: 60:35:A0:F0:AB:D3:D1:5E:A3:8F:5A:26:2D:A1:4E:DB:72:19:0B:0E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5F58282E791E5EE0DF6DD32FA81750CC243C0604 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23952.roa Signing time: Sat 02 May 2026 08:37:23 +0000 ROA not before: Sat 02 May 2026 08:32:23 +0000 ROA not after: Sat 01 May 2027 08:37:23 +0000 asID: 23952 IP address blocks: 2402:23a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:58:28:2e:79:1e:5e:e0:df:6d:d3:2f:a8:17:50:cc:24:3c:06:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:23 2026 GMT Not After : May 1 08:37:23 2027 GMT Subject: CN=6035A0F0ABD3D15EA38F5A262DA14EDB72190B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:a1:a4:cd:ad:6e:a6:74:ab:07:3b:3d:1a: 92:0c:b4:ab:0b:52:f6:54:43:1e:59:6f:79:5a:9b: 05:31:36:f6:83:89:5c:28:ef:71:d4:c2:fb:91:5d: b6:24:a2:06:0a:91:f6:cf:23:7e:32:38:dd:0a:cc: 90:8a:7d:00:7c:79:8a:81:54:e2:de:4f:9a:0d:18: 0d:76:db:68:bb:b7:28:e9:de:04:1c:92:1f:98:e0: ca:68:8a:d3:09:38:0c:93:d7:8f:61:fd:3b:40:c3: 23:4b:86:59:ac:cb:e3:c1:b2:0d:2f:e0:db:d1:14: 98:1d:fb:0a:98:67:c0:84:2e:88:27:30:54:4c:2f: 81:a2:47:47:a6:99:35:1b:41:a4:40:f8:ab:cc:c9: 48:b7:47:f5:b8:b2:06:a7:32:4f:91:97:f7:e3:59: 28:57:09:df:06:99:08:07:9e:a4:7b:28:e7:c3:b4: c2:f5:02:4b:1d:25:b9:34:69:9a:ce:2c:35:16:9d: 02:74:11:1c:67:ec:c6:36:3d:74:6a:33:b3:50:f8: 0f:7e:3f:09:97:9e:31:7b:1b:fd:72:72:7b:88:3a: e4:52:8b:49:8c:60:40:90:01:91:4e:81:f7:8e:25: 6c:69:af:d1:50:80:56:83:cd:e1:b7:af:da:3f:78: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:35:A0:F0:AB:D3:D1:5E:A3:8F:5A:26:2D:A1:4E:DB:72:19:0B:0E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:23a0::/32 Signature Algorithm: sha256WithRSAEncryption 69:f9:d2:75:e6:da:bc:1b:24:4f:0e:5f:29:0e:29:00:91:fe: bf:26:de:7a:d4:00:66:1a:70:4b:1e:4c:ae:db:bb:0b:08:ec: d9:72:57:91:20:79:02:22:1b:c6:ba:0a:c9:5d:f0:23:9e:8e: 04:af:df:54:15:65:25:22:94:99:3a:ae:7e:b8:12:25:b9:6c: 68:d7:7c:76:01:c8:c0:ac:fe:da:c4:c6:81:7e:2c:73:71:cd: 2a:1a:65:9d:93:f9:83:83:d9:bd:96:06:dc:e0:76:fb:00:00: 27:06:1d:d0:2d:79:9d:94:34:6b:7f:29:5f:b4:68:57:40:35: 67:dc:c7:e9:87:68:a5:9e:3f:b9:c5:75:df:f0:2a:d0:a9:6c: 7a:68:2e:23:75:4f:71:6c:c1:1c:4f:39:4c:f8:c6:2e:2d:c8: 05:9e:53:74:96:bf:5c:78:59:08:ef:0f:ba:52:0f:a8:ba:28: d4:f0:bf:fd:83:28:2f:91:67:27:68:0c:3e:ad:8c:a6:b1:0b: 76:66:04:15:44:bd:71:ea:d8:2d:93:6e:5d:f7:cb:b5:8f:c6: 41:fd:91:a3:d8:64:3c:df:9d:a5:97:42:4e:b3:b8:ab:eb:bd: fc:2f:20:72:f5:e7:a1:d7:18:a5:f2:f0:ad:37:1e:78:b5:fa: 08:94:39:93 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUX1goLnkeXuDfbdMvqBdQzCQ8BgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIyM1oX DTI3MDUwMTA4MzcyM1owMzExMC8GA1UEAxMoNjAzNUEwRjBBQkQzRDE1RUEzOEY1 QTI2MkRBMTRFREI3MjE5MEIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6moaTNrW6mdKsHOz0akgy0qwtS9lRDHllveVqbBTE29oOJXCjvcdTC+5Fd tiSiBgqR9s8jfjI43QrMkIp9AHx5ioFU4t5Pmg0YDXbbaLu3KOneBBySH5jgymiK 0wk4DJPXj2H9O0DDI0uGWazL48GyDS/g29EUmB37CphnwIQuiCcwVEwvgaJHR6aZ NRtBpED4q8zJSLdH9biyBqcyT5GX9+NZKFcJ3waZCAeepHso58O0wvUCSx0luTRp ms4sNRadAnQRHGfsxjY9dGozs1D4D34/CZeeMXsb/XJye4g65FKLSYxgQJABkU6B 944lbGmv0VCAVoPN4bev2j94pncCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRgNaDw q9PRXqOPWiYtoU7bchkLDjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM5NTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAiOgMA0GCSqGSIb3DQEBCwUAA4IBAQBp+dJ15tq8GyRPDl8pDikAkf6/ Jt561ABmGnBLHkyu27sLCOzZcleRIHkCIhvGugrJXfAjno4Er99UFWUlIpSZOq5+ uBIluWxo13x2AcjArP7axMaBfixzcc0qGmWdk/mDg9m9lgbc4Hb7AAAnBh3QLXmd lDRrfylftGhXQDVn3Mfph2ilnj+5xXXf8CrQqWx6aC4jdU9xbMEcTzlM+MYuLcgF nlN0lr9ceFkI7w+6Ug+ouijU8L/9gygvkWcnaAw+rYymsQt2ZgQVRL1x6tgtk25d 98u1j8ZB/ZGj2GQ8352ll0JOs7ir6738LyBy9eeh1xil8vCtNx54tfoIlDmT -----END CERTIFICATE-----Generated at Sun May 3 00:40:40 2026 by rpki-client