$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63869.roa File: AS63869.roa (raw, json) Hash identifier: A3YaVcYeLWP87Tr7LwuzCKjz8l/j52WLktjQpd2oMtY= Subject key identifier: C1:7B:27:0A:A9:48:22:E0:A5:59:84:B3:36:74:0A:2E:07:AA:84:4B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4A6FF6FEE4501A3F8A2574805BDA824B221B59FF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63869.roa Signing time: Sat 02 May 2026 21:32:38 +0000 ROA not before: Sat 02 May 2026 21:27:38 +0000 ROA not after: Sat 01 May 2027 21:32:38 +0000 asID: 63869 IP address blocks: 2401:b0a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6f:f6:fe:e4:50:1a:3f:8a:25:74:80:5b:da:82:4b:22:1b:59:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:38 2026 GMT Not After : May 1 21:32:38 2027 GMT Subject: CN=C17B270AA94822E0A55984B336740A2E07AA844B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:11:c0:df:e2:41:34:69:53:a4:74:34:ab: 88:8e:e0:8c:3c:8d:f8:ad:e8:be:b1:b2:50:eb:96: b9:4a:66:02:b1:d2:a8:9b:ea:b0:a1:5b:3a:8f:68: 7d:a0:01:cd:8a:2c:68:1c:3b:1c:6a:57:58:a6:cb: 67:41:c3:ae:5c:29:f6:30:dd:38:3a:95:0a:b6:52: 07:d0:51:cd:b7:db:65:38:57:bd:eb:05:53:7b:86: 3f:4c:a9:5c:91:45:98:11:93:63:85:56:64:f8:78: c3:41:f4:30:c8:cb:9b:ef:d3:16:61:03:01:47:84: c3:d3:42:84:9f:84:59:62:36:86:06:31:68:78:a9: aa:51:91:6c:db:1b:7f:31:04:ad:1d:e5:2a:67:61: 41:78:ea:e4:06:a5:69:0d:a2:40:90:c0:ba:9f:ab: ff:23:9e:10:ce:76:6d:02:d8:c6:53:84:d3:7c:8b: b2:16:47:ec:e2:79:c6:b2:b4:3b:23:30:d8:52:f6: 41:0b:f1:04:d7:51:b2:10:87:c5:aa:b7:66:ae:75: e0:12:d7:9e:87:c7:e6:be:8b:9a:bf:60:86:98:e0: ed:20:a8:1f:db:8a:37:10:5e:3b:55:68:af:e2:c9: 38:21:53:a0:33:56:d4:b7:a6:29:c5:df:ad:a1:de: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:27:0A:A9:48:22:E0:A5:59:84:B3:36:74:0A:2E:07:AA:84:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63869.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:b0a0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:0d:0b:5e:53:cd:f5:ef:76:da:25:a7:90:cd:2b:2e:07:49: d5:61:b0:a7:2e:a6:aa:7b:01:eb:64:fa:a5:96:68:43:2a:ae: 60:39:c4:55:a1:a4:7d:34:0c:2e:1f:cf:58:ae:33:48:4e:06: ad:1b:f3:77:74:94:9b:10:db:03:5d:9a:11:70:77:95:77:02: d1:27:e6:65:71:2e:d1:fd:49:97:23:1f:0e:99:95:fb:1e:84: 35:57:cd:66:51:65:44:79:53:4a:00:7a:8e:b8:51:b6:58:db: 2e:8c:5a:93:5d:de:f5:8d:ed:3a:d6:72:84:71:a3:78:b1:ee: d1:b3:97:91:19:1c:44:8d:6b:ec:7f:6f:14:28:ca:8a:7f:69: 1a:e2:c5:b5:e9:3a:98:33:4d:f1:25:83:e9:ca:23:63:e8:94: 04:06:59:53:8f:ad:ba:73:0e:1a:28:2d:43:d0:76:fd:a0:8c: a4:c7:75:07:b0:31:dc:82:57:36:66:06:02:5b:d6:0c:e1:18: 97:60:6b:f8:0e:06:5a:9d:10:73:b9:ad:a9:f7:77:f1:d4:69: 81:df:21:de:76:cc:e8:af:d2:d5:6e:c1:68:fb:c8:44:6a:e5: 84:dd:36:26:18:aa:46:e8:d1:19:37:2c:25:7b:73:61:62:78: 7d:4a:62:9d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSm/2/uRQGj+KJXSAW9qCSyIbWf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjczOFoX DTI3MDUwMTIxMzIzOFowMzExMC8GA1UEAxMoQzE3QjI3MEFBOTQ4MjJFMEE1NTk4 NEIzMzY3NDBBMkUwN0FBODQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaXEcDf4kE0aVOkdDSriI7gjDyN+K3ovrGyUOuWuUpmArHSqJvqsKFbOo9o faABzYosaBw7HGpXWKbLZ0HDrlwp9jDdODqVCrZSB9BRzbfbZThXvesFU3uGP0yp XJFFmBGTY4VWZPh4w0H0MMjLm+/TFmEDAUeEw9NChJ+EWWI2hgYxaHipqlGRbNsb fzEErR3lKmdhQXjq5AalaQ2iQJDAup+r/yOeEM52bQLYxlOE03yLshZH7OJ5xrK0 OyMw2FL2QQvxBNdRshCHxaq3Zq514BLXnofH5r6Lmr9ghpjg7SCoH9uKNxBeO1Vo r+LJOCFToDNW1LemKcXfraHe1uUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBeycK qUgi4KVZhLM2dAouB6qESzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4Njkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAbCgMA0GCSqGSIb3DQEBCwUAA4IBAQBtDQteU83173baJaeQzSsuB0nV YbCnLqaqewHrZPqllmhDKq5gOcRVoaR9NAwuH89YrjNITgatG/N3dJSbENsDXZoR cHeVdwLRJ+ZlcS7R/UmXIx8OmZX7HoQ1V81mUWVEeVNKAHqOuFG2WNsujFqTXd71 je061nKEcaN4se7Rs5eRGRxEjWvsf28UKMqKf2ka4sW16TqYM03xJYPpyiNj6JQE BllTj626cw4aKC1D0Hb9oIykx3UHsDHcglc2ZgYCW9YM4RiXYGv4DgZanRBzua2p 93fx1GmB3yHedszor9LVbsFo+8hEauWE3TYmGKpG6NEZNywle3NhYnh9SmKd -----END CERTIFICATE-----Generated at Sun May 3 00:40:26 2026 by rpki-client