$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63879.roa File: AS63879.roa (raw, json) Hash identifier: eOG03ZI3PQxWMiE68jCYRUtoi1aExJUiUk59aNw1ghE= Subject key identifier: 5A:8E:77:D4:F4:8A:70:0C:38:97:B5:58:C6:63:3F:DB:4B:D5:51:04 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 584F435AC435E5047BE5608B74BA08F41CF2205F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63879.roa Signing time: Mon 14 Sep 2026 04:14:50 +0000 ROA not before: Mon 14 Sep 2026 04:09:50 +0000 ROA not after: Mon 13 Sep 2027 04:14:50 +0000 asID: 63879 IP address blocks: 103.55.33.0/24 maxlen: 24 163.223.70.0/24 maxlen: 24 2001:df5:7400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4f:43:5a:c4:35:e5:04:7b:e5:60:8b:74:ba:08:f4:1c:f2:20:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 14 04:09:50 2026 GMT Not After : Sep 13 04:14:50 2027 GMT Subject: CN=5A8E77D4F48A700C3897B558C6633FDB4BD55104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:cf:88:35:8b:48:af:13:44:64:0a:89:94: 6a:d0:a3:fc:47:64:af:10:fb:da:a1:cb:50:43:17: b2:fd:2a:66:02:e4:83:d5:65:da:8a:a8:65:99:f0: 96:0d:e3:8b:ef:d7:25:4b:6b:0b:6f:40:39:8b:32: 3b:f7:78:58:aa:04:c1:ca:54:4e:f3:ab:eb:4b:a2: 1e:7a:11:1c:31:1a:b2:4f:56:bb:64:ab:f8:f1:64: 42:14:bf:a0:44:4f:27:e7:36:5a:fa:9d:97:e2:df: 04:49:45:35:05:57:ab:e8:51:95:5e:72:27:75:ab: 75:70:fe:96:8d:7b:ea:bc:5f:2c:db:ea:fd:51:46: 75:53:fa:04:00:52:35:c5:8d:6a:58:43:14:f9:84: a6:2a:f9:e2:42:05:8f:c4:0b:1c:f7:6c:a7:23:a8: 4f:c4:2c:f2:57:03:4e:cb:cd:3f:2b:1a:02:53:54: 96:cf:c4:99:f4:20:80:e3:8a:7d:81:84:22:c2:1b: d7:cb:d7:66:25:28:00:d7:bd:d2:70:46:51:3b:82: d8:f8:8e:0e:ba:4f:08:fe:85:93:d7:d8:bf:4b:65: 1b:0b:23:76:6a:61:42:56:f3:bd:f7:bc:58:b2:b0: 45:2d:18:f8:4d:82:7f:9c:33:38:f5:e6:a3:09:53: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8E:77:D4:F4:8A:70:0C:38:97:B5:58:C6:63:3F:DB:4B:D5:51:04 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63879.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.33.0/24 163.223.70.0/24 IPv6: 2001:df5:7400::/48 Signature Algorithm: sha256WithRSAEncryption 04:01:e2:17:9d:6f:e6:51:77:5c:36:b5:dc:de:5c:c5:3e:a0: 61:80:bd:bd:ae:a8:f9:33:0d:10:dc:84:66:ca:fa:f5:a4:ac: fb:48:ef:65:c2:ad:af:58:7d:09:4a:ed:fd:da:66:b4:d0:bb: 8b:7c:96:f4:68:61:4a:de:1b:20:2e:d6:19:61:41:a7:2e:83: a4:21:3d:ab:ce:f5:8a:ac:fe:04:d4:60:ac:52:72:11:b6:ad: 8e:a2:92:2d:ca:1f:bf:b2:fa:cd:c6:6c:72:2d:22:3f:ae:8b: db:93:69:1c:47:bf:35:7c:b9:18:08:fe:61:21:da:b4:67:1a: c6:ae:8d:33:32:10:69:20:63:23:59:de:06:b6:77:40:25:20: b8:96:b0:e4:c6:c4:42:50:78:29:cd:06:9d:d9:84:86:dd:d8: ae:73:4a:31:55:27:cf:94:ff:71:d5:0d:ff:2c:00:a5:01:cc: ac:e0:8f:60:40:5a:e8:b9:69:f6:ae:a9:cc:27:3d:fc:3a:fe: 23:f5:10:06:23:be:b9:f3:9f:2d:1f:16:c1:1f:63:56:27:a8: 22:3f:36:01:c9:44:2e:43:8d:a8:d8:11:3d:48:98:ea:ec:c4: ea:76:7a:13:8f:9b:3d:3e:02:1e:02:ba:98:f9:1c:02:90:f4: 00:37:85:70 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUWE9DWsQ15QR75WCLdLoI9BzyIF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNDA0MDk1MFoX DTI3MDkxMzA0MTQ1MFowMzExMC8GA1UEAxMoNUE4RTc3RDRGNDhBNzAwQzM4OTdC NTU4QzY2MzNGREI0QkQ1NTEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwPz4g1i0ivE0RkComUatCj/EdkrxD72qHLUEMXsv0qZgLkg9Vl2oqoZZnw lg3ji+/XJUtrC29AOYsyO/d4WKoEwcpUTvOr60uiHnoRHDEask9Wu2Sr+PFkQhS/ oERPJ+c2Wvqdl+LfBElFNQVXq+hRlV5yJ3WrdXD+lo176rxfLNvq/VFGdVP6BABS NcWNalhDFPmEpir54kIFj8QLHPdspyOoT8Qs8lcDTsvNPysaAlNUls/EmfQggOOK fYGEIsIb18vXZiUoANe90nBGUTuC2PiODrpPCP6Fk9fYv0tlGwsjdmphQlbzvfe8 WLKwRS0Y+E2Cf5wzOPXmowlT25kCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBRajnfU 9IpwDDiXtVjGYz/bS9VRBDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4Nzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgAB MAwDBABnNyEDBACj30YwDwQCAAIwCQMHACABDfV0ADANBgkqhkiG9w0BAQsFAAOC AQEABAHiF51v5lF3XDa13N5cxT6gYYC9va6o+TMNENyEZsr69aSs+0jvZcKtr1h9 CUrt/dpmtNC7i3yW9GhhSt4bIC7WGWFBpy6DpCE9q871iqz+BNRgrFJyEbatjqKS Lcofv7L6zcZsci0iP66L25NpHEe/NXy5GAj+YSHatGcaxq6NMzIQaSBjI1neBrZ3 QCUguJaw5MbEQlB4Kc0GndmEht3YrnNKMVUnz5T/cdUN/ywApQHMrOCPYEBa6Llp 9q6pzCc9/Dr+I/UQBiO+ufOfLR8WwR9jVieoIj82AclELkONqNgRPUiY6uzE6nZ6 E4+bPT4CHgK6mPkcApD0ADeFcA== -----END CERTIFICATE-----Generated at Thu Sep 17 05:27:54 2026 by rpki-client