$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63858.roa File: AS63858.roa (raw, json) Hash identifier: kitYw0w9kU35oBOmCdOwkXFx0MuZxdyfzzwdZl9ah+c= Subject key identifier: 0B:82:02:AE:8A:BC:E1:EE:45:D8:96:5D:F2:46:B6:14:FD:1E:79:DA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F5AE0961EE44588E9D72CC3277CD8E5DB6BBDA2 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63858.roa Signing time: Fri 25 Sep 2026 14:31:13 +0000 ROA not before: Fri 25 Sep 2026 14:26:13 +0000 ROA not after: Fri 24 Sep 2027 14:31:13 +0000 asID: 63858 IP address blocks: 163.52.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:e0:96:1e:e4:45:88:e9:d7:2c:c3:27:7c:d8:e5:db:6b:bd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 25 14:26:13 2026 GMT Not After : Sep 24 14:31:13 2027 GMT Subject: CN=0B8202AE8ABCE1EE45D8965DF246B614FD1E79DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:93:b9:31:c0:a9:80:24:cb:94:78:c6:c1: 04:fb:b8:0b:27:03:0d:b2:48:e3:19:bd:6b:4c:5b: 12:35:25:8d:f5:60:fe:3e:88:12:23:00:4a:2c:90: ef:35:86:57:e9:f7:68:64:6f:f8:07:0c:3f:0e:6f: 70:1d:20:d7:b1:67:f9:5c:7c:b0:32:88:30:66:38: 25:19:20:80:ad:fa:30:d8:87:d6:6a:53:c5:53:c1: 10:27:8a:7f:10:e9:68:2d:bd:49:5f:6d:1e:98:54: e4:95:0a:23:e7:fd:44:7d:75:6b:4c:98:59:e1:88: a1:08:b5:89:1d:a1:41:a2:71:f2:5a:be:a2:32:9f: 3e:72:f0:27:1e:9e:71:28:46:ec:0d:62:e4:12:f3: 38:fa:da:3b:69:6a:e9:a2:b4:f2:f3:c7:6c:73:04: 2d:df:15:cd:1d:fa:05:bf:53:c9:20:0d:d1:a5:97: 04:89:67:c8:a1:db:d6:24:55:9b:8e:ea:41:f0:91: b8:d0:bc:6c:49:fa:3f:9e:56:8b:05:bb:7b:e2:79: bc:93:d9:09:d5:b8:33:62:3c:5c:b1:af:05:fe:6c: 8f:8b:ad:bc:93:65:a1:61:5e:4e:8d:bc:9e:d2:8e: af:35:3e:16:d7:2b:b1:06:3c:67:09:81:8c:45:13: ae:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:82:02:AE:8A:BC:E1:EE:45:D8:96:5D:F2:46:B6:14:FD:1E:79:DA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63858.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.199.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:60:05:fc:bd:06:f5:13:97:25:b7:9b:4b:91:05:68:be:63: 7b:b1:d1:34:1a:43:74:88:ca:fc:a5:16:0c:7c:85:15:31:13: 62:02:14:38:15:a6:69:78:72:0a:91:78:de:a0:86:2c:68:a3: 1f:5d:02:a0:d3:c8:91:c5:b9:d4:0a:f5:9c:7f:a9:73:9b:58: 67:77:f6:29:61:2c:1b:f3:67:f1:60:d4:57:44:74:54:46:25: 48:7a:49:d1:84:f4:b0:ba:0a:b7:be:66:13:30:a1:43:4c:3e: 8a:2c:85:de:1e:2b:0b:5c:73:0c:ae:21:ad:16:0d:5c:a6:60: 3f:58:b8:56:71:c4:67:82:c7:3d:0a:09:39:d8:89:a0:ec:32: c0:0d:2b:bb:e3:e8:ce:9d:d8:02:72:c3:07:22:e5:2e:0b:b6: 38:b9:ae:d3:89:3e:4d:95:dd:62:8f:4e:92:6f:12:d9:7c:bd: 2f:5e:b1:7d:08:5f:fc:d9:9e:35:ef:13:ff:a1:7f:a9:4c:99: 48:72:ee:02:92:e6:bc:d1:26:ed:21:04:59:4e:4c:8a:3b:a0: cf:3e:6e:79:51:ea:5b:01:86:6c:90:d0:8e:7d:c3:47:68:1a: 72:01:94:77:7b:45:57:37:1c:31:1a:12:3e:94:97:82:70:8e: 9a:0f:f3:b2 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUL1rglh7kRYjp1yzDJ3zY5dtrvaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyNTE0MjYxM1oX DTI3MDkyNDE0MzExM1owMzExMC8GA1UEAxMoMEI4MjAyQUU4QUJDRTFFRTQ1RDg5 NjVERjI0NkI2MTRGRDFFNzlEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKl2k7kxwKmAJMuUeMbBBPu4CycDDbJI4xm9a0xbEjUljfVg/j6IEiMASiyQ 7zWGV+n3aGRv+AcMPw5vcB0g17Fn+Vx8sDKIMGY4JRkggK36MNiH1mpTxVPBECeK fxDpaC29SV9tHphU5JUKI+f9RH11a0yYWeGIoQi1iR2hQaJx8lq+ojKfPnLwJx6e cShG7A1i5BLzOPraO2lq6aK08vPHbHMELd8VzR36Bb9TySAN0aWXBIlnyKHb1iRV m47qQfCRuNC8bEn6P55WiwW7e+J5vJPZCdW4M2I8XLGvBf5sj4utvJNloWFeTo28 ntKOrzU+FtcrsQY8ZwmBjEUTrn8CAwEAAaOCAcswggHHMB0GA1UdDgQWBBQLggKu irzh7kXYll3yRrYU/R552jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4NTgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACjNMcwDQYJKoZIhvcNAQELBQADggEBAI1gBfy9BvUTlyW3m0uRBWi+Y3ux 0TQaQ3SIyvylFgx8hRUxE2ICFDgVpml4cgqReN6ghixoox9dAqDTyJHFudQK9Zx/ qXObWGd39ilhLBvzZ/Fg1FdEdFRGJUh6SdGE9LC6Cre+ZhMwoUNMPooshd4eKwtc cwyuIa0WDVymYD9YuFZxxGeCxz0KCTnYiaDsMsANK7vj6M6d2AJywwci5S4Ltji5 rtOJPk2V3WKPTpJvEtl8vS9esX0IX/zZnjXvE/+hf6lMmUhy7gKS5rzRJu0hBFlO TIo7oM8+bnlR6lsBhmyQ0I59w0doGnIBlHd7RVc3HDEaEj6Ul4JwjpoP87I= -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:00 2026 by rpki-client