$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS23951.roa File: AS23951.roa (raw, json) Hash identifier: nbeHlIrMOFXZ8fzJ9TqcigSfNqvkr17rmfPansfSC8w= Subject key identifier: 10:87:19:D4:42:D7:6B:F8:1A:3F:49:08:66:2F:08:BA:05:ED:16:1F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7045CC8DDEE22D26E44CB2A62EE1FA1F74DCF3BD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23951.roa Signing time: Thu 29 Oct 2026 02:45:32 +0000 ROA not before: Thu 29 Oct 2026 02:40:32 +0000 ROA not after: Thu 28 Oct 2027 02:45:32 +0000 asID: 23951 IP address blocks: 103.137.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:45:cc:8d:de:e2:2d:26:e4:4c:b2:a6:2e:e1:fa:1f:74:dc:f3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 29 02:40:32 2026 GMT Not After : Oct 28 02:45:32 2027 GMT Subject: CN=108719D442D76BF81A3F4908662F08BA05ED161F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:2b:47:ce:bf:77:2d:4d:2f:99:8d:f9:98: 45:ba:c1:eb:af:bc:51:3d:d1:8d:cc:f5:55:b1:31: 54:8c:51:55:a6:10:83:88:4a:9f:b4:20:6a:c2:0c: 95:cc:98:de:1a:da:45:d3:69:7c:dd:dc:67:ad:e0: e4:5b:57:cb:84:44:c0:59:0d:88:38:52:79:de:d0: 19:88:19:1e:48:4a:61:d9:54:f8:88:90:16:4a:c2: 04:1e:ce:7e:fa:ed:42:8d:6b:d7:b6:76:90:4b:8d: 1f:81:c8:d7:93:c6:17:4a:10:31:00:7f:2b:7f:e5: ad:a5:92:48:bd:22:22:50:24:41:a0:b8:6a:87:53: f2:e9:24:38:96:bb:a6:d3:c6:a6:5a:48:0f:20:e2: 28:5c:56:4e:57:45:ef:84:09:5d:59:1f:4c:18:80: 3d:7f:e0:c8:a8:cc:86:aa:5b:d0:30:2f:56:53:63: ce:43:67:b7:f8:3f:dd:e9:d3:da:ba:36:9e:d5:4a: fb:58:ef:c2:7d:04:65:e3:5d:56:32:0a:a5:d2:a2: fd:c0:f9:b5:c6:8d:f7:a6:48:2b:6a:da:59:75:0e: 5a:4d:46:70:dc:e4:da:6b:2f:96:09:46:63:8c:bb: 87:e1:f9:53:c0:26:da:59:f9:c7:e5:a9:8d:cb:e6: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:19:D4:42:D7:6B:F8:1A:3F:49:08:66:2F:08:BA:05:ED:16:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS23951.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.254.0/23 Signature Algorithm: sha256WithRSAEncryption 17:6b:98:0a:c8:34:9c:22:3b:2f:c0:6d:a9:20:4e:bc:e8:c9: 97:dc:c6:bc:8a:80:95:cc:43:3a:9e:20:95:88:ec:45:91:3d: e5:37:82:3d:86:e4:71:1c:37:27:67:e2:55:7f:3c:02:f3:b1: 5c:dc:96:e1:92:b9:2d:94:52:28:70:71:15:2f:a0:e0:30:15: 98:f3:23:6a:0f:f5:87:74:4f:b5:1f:ab:a4:69:81:47:0f:0a: ae:50:f5:0b:1b:20:7c:13:37:0d:43:05:72:cc:2b:70:b1:c2: c9:fd:b7:1d:46:91:90:b5:d7:6e:d8:bc:33:09:15:03:f9:b8: f0:b9:6e:c4:8f:d0:78:e6:83:2c:29:c3:4c:14:05:6c:88:f4: a5:87:c1:6e:bd:f4:ec:88:1b:c4:93:56:74:a4:af:43:9d:ce: 61:dd:10:cb:3d:01:ce:d3:03:9e:bc:74:27:16:54:c7:b2:4a: 0a:43:ea:1b:cb:16:75:2f:1b:0f:89:28:18:18:be:21:12:e2: 24:55:98:da:6a:12:d0:a0:f2:10:d9:75:66:d3:31:f9:cd:95: dd:30:d3:3a:6c:86:6b:86:f2:24:48:d9:6b:9e:88:28:df:a0: ba:0c:1c:5a:fb:45:33:1b:a6:09:95:b3:61:d4:f7:0e:59:40: 0f:40:3b:97 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUcEXMjd7iLSbkTLKmLuH6H3Tc870wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyOTAyNDAzMloX DTI3MTAyODAyNDUzMlowMzExMC8GA1UEAxMoMTA4NzE5RDQ0MkQ3NkJGODFBM0Y0 OTA4NjYyRjA4QkEwNUVEMTYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgCK0fOv3ctTS+ZjfmYRbrB66+8UT3Rjcz1VbExVIxRVaYQg4hKn7QgasIM lcyY3hraRdNpfN3cZ63g5FtXy4REwFkNiDhSed7QGYgZHkhKYdlU+IiQFkrCBB7O fvrtQo1r17Z2kEuNH4HI15PGF0oQMQB/K3/lraWSSL0iIlAkQaC4aodT8ukkOJa7 ptPGplpIDyDiKFxWTldF74QJXVkfTBiAPX/gyKjMhqpb0DAvVlNjzkNnt/g/3enT 2ro2ntVK+1jvwn0EZeNdVjIKpdKi/cD5tcaN96ZIK2raWXUOWk1GcNzk2msvlglG Y4y7h+H5U8Am2ln5x+WpjcvmsPMCAwEAAaOCAcswggHHMB0GA1UdDgQWBBQQhxnU Qtdr+Bo/SQhmLwi6Be0WHzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjM5NTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnif4wDQYJKoZIhvcNAQELBQADggEBABdrmArINJwiOy/AbakgTrzoyZfc xryKgJXMQzqeIJWI7EWRPeU3gj2G5HEcNydn4lV/PALzsVzcluGSuS2UUihwcRUv oOAwFZjzI2oP9Yd0T7Ufq6RpgUcPCq5Q9QsbIHwTNw1DBXLMK3Cxwsn9tx1GkZC1 127YvDMJFQP5uPC5bsSP0Hjmgywpw0wUBWyI9KWHwW699OyIG8STVnSkr0OdzmHd EMs9Ac7TA568dCcWVMeySgpD6hvLFnUvGw+JKBgYviES4iRVmNpqEtCg8hDZdWbT MfnNld0w0zpshmuG8iRI2WueiCjfoLoMHFr7RTMbpgmVs2HU9w5ZQA9AO5c= -----END CERTIFICATE-----Generated at Mon Nov 9 17:32:37 2026 by rpki-client