$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23947.roa File: AS23947.roa (raw, json) Hash identifier: 1y3pNvr2gmttP5gkNdKSISLGfvHu5eetB85vOQ08M/0= Subject key identifier: 3A:EA:25:67:9F:4D:86:98:8D:B3:85:84:68:54:F7:4C:97:41:B4:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 01592917C98590B5A9C9333794124F600207F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23947.roa Signing time: Sat 26 Jul 2025 09:00:00 +0000 ROA not before: Sat 26 Jul 2025 08:55:00 +0000 ROA not after: Sat 25 Jul 2026 09:00:00 +0000 asID: 23947 IP address blocks: 103.129.216.0/22 maxlen: 24 103.154.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:29:17:c9:85:90:b5:a9:c9:33:37:94:12:4f:60:02:07:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 26 08:55:00 2025 GMT Not After : Jul 25 09:00:00 2026 GMT Subject: CN=3AEA25679F4D86988DB385846854F74C9741B459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:87:f5:c2:82:cc:8d:27:09:be:7d:90:b7: b4:35:77:62:13:b4:ce:84:2f:8a:7e:91:26:62:1a: c8:4c:2d:95:b0:a1:85:7e:55:72:b2:64:9c:1a:0a: b8:ad:b1:05:e2:5b:96:25:a3:aa:c0:3e:bd:e9:52: 65:1a:56:5e:3a:98:5a:17:c1:b0:8f:b7:cc:4b:65: bf:99:da:d1:d5:08:bd:39:b1:3a:b0:07:6f:8d:ad: a5:3b:d2:00:83:57:dd:b9:3e:34:a1:5c:04:1b:17: b1:1c:cb:79:d8:14:71:6b:d8:78:0f:c4:bf:44:90: b0:83:e8:32:49:44:d8:7e:73:b6:29:42:43:e9:bf: ea:cc:43:1f:5e:2d:27:2a:32:d3:6d:0f:52:70:f8: 00:c9:39:61:28:0d:4b:7e:b0:4a:75:a1:8a:00:c7: 30:a9:da:94:50:39:cd:51:ae:51:86:f3:40:f5:c9: 12:72:4c:7f:bf:59:0e:b0:f4:8d:76:43:f4:24:35: 9f:d7:54:b9:97:d9:f2:28:6f:18:ad:01:78:a2:1b: 19:ed:e1:39:b1:f7:ed:60:a2:7e:89:48:64:b8:3b: 7a:77:83:9d:02:ac:91:52:e3:36:76:b9:42:d5:a1: ef:36:ab:22:ae:6e:6f:ea:1b:58:d6:18:bb:a4:96: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EA:25:67:9F:4D:86:98:8D:B3:85:84:68:54:F7:4C:97:41:B4:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS23947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.216.0/22 103.154.136.0/24 Signature Algorithm: sha256WithRSAEncryption 11:e7:d4:57:0f:fa:38:24:12:db:22:6d:55:43:f4:9e:83:29: 52:d8:a9:00:bb:41:9e:05:30:87:dc:c3:72:4f:4a:ca:5d:d5: 98:7b:c7:c3:11:96:49:be:f1:de:00:e7:d7:44:03:7f:34:bd: 3c:33:f7:8c:23:9e:22:12:99:83:3f:ce:cd:db:60:0d:1d:a1: c8:70:ab:79:a4:61:fb:96:17:a7:ea:40:7e:0e:c6:9d:b0:a0: 8c:01:06:f4:92:03:b9:17:d3:73:a9:d0:03:22:70:2a:b3:6e: 35:cc:ee:a4:42:90:20:03:7e:c1:f3:45:6e:00:a3:ad:d8:47: 83:95:b1:2f:9e:90:59:e6:4e:18:64:27:ad:88:86:7b:77:3a: ee:b6:cf:8f:0a:43:98:53:21:54:53:df:87:ba:31:93:6f:7a: 7d:ac:b2:a3:3a:84:dc:d2:de:23:f0:18:12:29:d9:1c:f7:25: 36:5c:d1:02:57:65:b3:67:db:70:11:3f:25:bb:3f:35:a5:a4: c3:06:cf:8f:0c:f4:e8:48:19:bf:5e:61:24:1d:57:85:72:bb: a8:7c:2a:f7:ab:f9:fe:10:a2:ac:d1:42:22:29:fd:5b:dd:0b: ca:84:80:b6:45:ce:91:a9:ff:64:99:b0:b1:d9:66:f1:d4:f7: f9:ba:a2:61 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgITAVkpF8mFkLWpyTM3lBJPYAIH+DANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwNzI2MDg1NTAwWhcN MjYwNzI1MDkwMDAwWjAzMTEwLwYDVQQDEygzQUVBMjU2NzlGNEQ4Njk4OERCMzg1 ODQ2ODU0Rjc0Qzk3NDFCNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3+H9cKCzI0nCb59kLe0NXdiE7TOhC+KfpEmYhrITC2VsKGFflVysmScGgq4 rbEF4luWJaOqwD696VJlGlZeOphaF8Gwj7fMS2W/mdrR1Qi9ObE6sAdvja2lO9IA g1fduT40oVwEGxexHMt52BRxa9h4D8S/RJCwg+gySUTYfnO2KUJD6b/qzEMfXi0n KjLTbQ9ScPgAyTlhKA1LfrBKdaGKAMcwqdqUUDnNUa5RhvNA9ckSckx/v1kOsPSN dkP0JDWf11S5l9nyKG8YrQF4ohsZ7eE5sfftYKJ+iUhkuDt6d4OdAqyRUuM2drlC 1aHvNqsirm5v6htY1hi7pJYwywIDAQABo4IB1TCCAdEwHQYDVR0OBBYEFDrqJWef TYaYjbOFhGhU90yXQbRZMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwUwYIKwYBBQUHAQsERzBFMEMGCCsGAQUFBzALhjdyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMjM5NDcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAJngdgDBABnmogwDQYJKoZIhvcNAQELBQADggEBABHn1FcP+jgkEtsi bVVD9J6DKVLYqQC7QZ4FMIfcw3JPSspd1Zh7x8MRlkm+8d4A59dEA380vTwz94wj niISmYM/zs3bYA0dochwq3mkYfuWF6fqQH4Oxp2woIwBBvSSA7kX03Op0AMicCqz bjXM7qRCkCADfsHzRW4Ao63YR4OVsS+ekFnmThhkJ62Ihnt3Ou62z48KQ5hTIVRT 34e6MZNven2ssqM6hNzS3iPwGBIp2Rz3JTZc0QJXZbNn23ARPyW7PzWlpMMGz48M 9OhIGb9eYSQdV4Vyu6h8Kver+f4QoqzRQiIp/VvdC8qEgLZFzpGp/2SZsLHZZvHU 9/m6omE= -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:43 2025 by rpki-client