$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23699.roa File: AS23699.roa (raw, json) Hash identifier: MLQzOy8Db1PCSKs0p+EgDjABUSKmfxJKVlqsjLIasaU= Subject key identifier: 9B:6A:A6:EC:23:EC:9E:64:72:5A:75:A0:B1:B7:89:29:DC:F1:BF:93 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B970CB0A377D741176D18EFE6C22DE9CFC630F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23699.roa Signing time: Fri 26 Sep 2025 04:00:00 +0000 ROA not before: Fri 26 Sep 2025 03:55:00 +0000 ROA not after: Fri 25 Sep 2026 04:00:00 +0000 asID: 23699 IP address blocks: 2400:cce0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:97:0c:b0:a3:77:d7:41:17:6d:18:ef:e6:c2:2d:e9:cf:c6:30:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 03:55:00 2025 GMT Not After : Sep 25 04:00:00 2026 GMT Subject: CN=9B6AA6EC23EC9E64725A75A0B1B78929DCF1BF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:3d:11:8c:78:bc:70:25:5b:7e:68:f7:be: 60:7e:f2:97:5e:e1:c8:f5:fd:ee:b6:9c:f7:16:c5: 32:3b:1d:b2:02:7b:92:da:c7:d1:a1:8a:29:d6:ca: 81:89:bd:1a:1d:d9:9a:76:bb:da:f6:31:12:9b:5f: db:0e:7e:39:42:b3:97:ca:90:c2:0a:c7:3a:20:fe: fd:a1:24:20:f4:9c:6f:d0:e5:a2:8b:66:d0:21:b1: 81:93:28:ac:1f:24:f3:9e:df:23:a7:12:51:40:7f: 48:1e:71:5b:6b:66:54:90:6f:55:73:5f:87:81:5b: c6:11:6a:7f:53:d2:af:54:d0:2b:a7:13:18:b5:72: b3:58:a3:3d:37:d8:ed:ee:66:8e:c9:5f:6b:f1:66: d8:25:1b:89:5c:e6:d7:99:04:3d:10:fa:cb:fd:98: 21:e2:95:a1:70:58:47:c8:d5:d2:63:a2:17:b7:f5: d5:5a:c1:ba:e8:92:ea:d2:80:5f:af:f7:69:8d:d3: 1e:ec:e1:69:e1:79:23:51:34:25:f4:99:f3:02:47: aa:4d:8a:ca:0d:fb:c0:57:0a:bf:7d:c3:19:d5:8b: 02:92:a1:bc:bf:56:b8:61:99:c7:ed:f5:57:0a:3c: 13:d0:52:9e:c1:6d:3b:f2:78:58:f0:a5:b8:b5:6f: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:A6:EC:23:EC:9E:64:72:5A:75:A0:B1:B7:89:29:DC:F1:BF:93 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23699.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cce0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:40:90:b0:31:22:3d:52:87:a4:e9:a4:4b:fb:0d:45:e5:f5: 1c:f0:85:c6:54:25:28:2e:f8:96:65:de:b8:88:17:bf:a8:1b: 56:6b:68:bd:1d:1a:31:6d:fd:8b:d9:ca:92:2a:56:d3:ec:0b: 23:e4:4d:f4:6a:8d:bc:bc:92:c9:aa:87:27:cf:f8:ac:e9:18: ef:60:84:a2:fe:98:31:4e:35:07:dc:c1:f2:3c:82:6f:01:c3: 58:25:4e:d4:ba:78:5a:e7:2a:fd:b2:3c:01:fc:eb:82:53:7f: b5:1b:ac:1f:23:5e:cb:23:0d:21:7c:ca:ad:3a:23:be:07:67: 86:93:e4:23:7a:13:32:9b:c0:2c:6b:d8:cd:f5:e0:7c:98:c1: 23:e6:89:31:13:c4:4a:d3:fb:6d:4b:d5:36:24:be:96:29:47: e8:1a:03:21:f5:07:1b:6b:2b:68:72:56:42:34:7b:c8:4d:ab: 4d:a9:c4:87:82:f3:a3:6e:8f:1d:ee:e7:4b:43:04:a4:44:62: 0d:c0:71:99:56:c2:f4:72:20:a0:f5:23:fe:89:6f:da:ee:1f: b8:ff:87:87:5a:6f:49:4f:5b:9b:4e:7a:dd:50:bd:cd:e2:61: 04:97:5b:b4:97:74:29:83:b0:99:6f:30:00:8f:55:e1:af:ba: 6d:4e:f7:4f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUS5cMsKN310EXbRjv5sIt6c/GMPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNjAzNTUwMFoX DTI2MDkyNTA0MDAwMFowMzExMC8GA1UEAxMoOUI2QUE2RUMyM0VDOUU2NDcyNUE3 NUEwQjFCNzg5MjlEQ0YxQkY5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPrPRGMeLxwJVt+aPe+YH7yl17hyPX97rac9xbFMjsdsgJ7ktrH0aGKKdbK gYm9Gh3Zmna72vYxEptf2w5+OUKzl8qQwgrHOiD+/aEkIPScb9Dlootm0CGxgZMo rB8k857fI6cSUUB/SB5xW2tmVJBvVXNfh4FbxhFqf1PSr1TQK6cTGLVys1ijPTfY 7e5mjslfa/Fm2CUbiVzm15kEPRD6y/2YIeKVoXBYR8jV0mOiF7f11VrBuuiS6tKA X6/3aY3THuzhaeF5I1E0JfSZ8wJHqk2Kyg37wFcKv33DGdWLApKhvL9WuGGZx+31 Vwo8E9BSnsFtO/J4WPCluLVvV9cCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSbaqbs I+yeZHJadaCxt4kp3PG/kzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzIzNjk5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJADM4DANBgkqhkiG9w0BAQsFAAOCAQEALUCQsDEiPVKHpOmkS/sN ReX1HPCFxlQlKC74lmXeuIgXv6gbVmtovR0aMW39i9nKkipW0+wLI+RN9GqNvLyS yaqHJ8/4rOkY72CEov6YMU41B9zB8jyCbwHDWCVO1Lp4Wucq/bI8AfzrglN/tRus HyNeyyMNIXzKrTojvgdnhpPkI3oTMpvALGvYzfXgfJjBI+aJMRPEStP7bUvVNiS+ lilH6BoDIfUHG2sraHJWQjR7yE2rTanEh4Lzo26PHe7nS0MEpERiDcBxmVbC9HIg oPUj/olv2u4fuP+Hh1pvSU9bm0563VC9zeJhBJdbtJd0KYOwmW8wAI9V4a+6bU73 Tw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:52 2025 by rpki-client