$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa File: AS63865.roa (raw, json) Hash identifier: lnUJix1Wl21sp6k6oI4vXL7I6Rc7wmAnvsm0q0hBjyA= Subject key identifier: 1D:0B:C4:D5:DB:F0:D9:98:40:FA:90:F4:6F:8B:E4:31:09:01:F2:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7EF4C6501FFB9D563115802F5D891A379E29B5D7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa Signing time: Wed 21 Oct 2026 03:48:05 +0000 ROA not before: Wed 21 Oct 2026 03:43:05 +0000 ROA not after: Wed 20 Oct 2027 03:48:05 +0000 asID: 63865 IP address blocks: 2001:df7:2e40::/48 maxlen: 48 2001:df7:9fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 15:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f4:c6:50:1f:fb:9d:56:31:15:80:2f:5d:89:1a:37:9e:29:b5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 21 03:43:05 2026 GMT Not After : Oct 20 03:48:05 2027 GMT Subject: CN=1D0BC4D5DBF0D99840FA90F46F8BE4310901F203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:27:30:b2:10:9d:f4:6a:0d:9f:d4:60:81: 3e:f6:62:f4:c4:91:05:4e:a3:dc:1f:7c:99:03:35: 98:22:01:bc:55:de:3d:51:b9:4b:75:67:62:15:c5: c5:6d:2f:e9:d6:ca:df:59:0f:4b:04:9d:87:2b:05: c8:54:25:7c:b5:73:ee:d2:1f:ad:f4:e1:a5:39:ca: 9d:47:6e:9b:78:8a:f8:79:9b:a5:b9:84:85:e3:07: 31:e2:13:5f:5f:e7:64:24:08:a1:49:7c:f2:db:fa: c5:77:c7:12:e6:85:80:ab:80:24:ce:84:0b:3d:97: 5f:4c:9f:40:72:b6:29:5d:27:e3:32:86:b6:81:6e: 8f:d2:26:36:02:ef:c5:f5:72:0b:cb:b8:2d:34:13: a7:71:72:46:9e:01:91:19:b1:66:e1:30:d0:ff:e4: be:39:c4:33:d6:e2:3a:12:0a:5f:c2:43:1f:e8:db: d5:23:b3:40:6d:23:f9:80:b9:d4:5d:17:95:5c:5f: b9:bd:6e:1a:96:83:3b:64:c1:bb:e4:80:53:82:92: e9:81:2b:eb:a6:50:6e:47:06:95:7c:82:1e:2d:19: 1d:97:21:80:b7:9d:e9:54:ce:16:67:19:05:98:ed: ea:4d:56:71:d4:d6:8f:9c:37:de:09:6c:eb:dd:4d: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:C4:D5:DB:F0:D9:98:40:FA:90:F4:6F:8B:E4:31:09:01:F2:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:2e40::/48 2001:df7:9fc0::/48 Signature Algorithm: sha256WithRSAEncryption 78:8e:d2:33:4b:1a:e1:e2:b5:60:b7:53:9e:2f:87:bd:85:c7: 3a:e0:78:ad:81:dd:7b:9a:89:aa:b3:0f:a5:1c:57:47:6e:20: d9:1d:ec:69:2e:6d:97:69:9d:f5:0c:c1:7b:d3:fc:c0:e8:91: f8:a0:31:e0:60:3c:a6:91:e2:ea:a3:82:1d:6a:00:a8:06:5c: f5:53:c4:73:cb:9d:e1:f8:b7:16:57:7e:95:c5:9a:ae:e5:6f: 04:aa:53:ae:82:b1:fa:5e:aa:20:16:b1:c8:ff:85:dc:b4:fb: 78:52:af:de:d9:b0:8e:5d:24:b9:d5:6a:03:2e:5a:06:43:64: 6b:70:38:80:02:ef:7e:1f:f0:b3:44:a9:31:72:29:9b:ce:8d: a7:6c:b1:5c:21:cd:aa:f4:5e:d4:d8:94:98:ea:8f:b0:85:fe: b9:80:a9:3b:25:c3:54:19:c4:62:47:91:72:b1:f3:f8:6a:7c: 7b:86:ad:91:ac:16:80:9f:5a:14:3b:04:ff:6b:70:5a:55:22: 38:69:96:88:91:cf:5b:58:b5:89:82:72:e8:61:99:4e:4d:1d: 63:fd:b7:a2:94:4f:7b:b2:a4:19:8b:95:2b:21:c9:70:d7:95: 45:b4:39:ab:ca:56:d6:4b:67:b3:89:f3:89:08:93:ad:fb:f8: 34:c1:10:62 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUfvTGUB/7nVYxFYAvXYkaN54ptdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMTAzNDMwNVoX DTI3MTAyMDAzNDgwNVowMzExMC8GA1UEAxMoMUQwQkM0RDVEQkYwRDk5ODQwRkE5 MEY0NkY4QkU0MzEwOTAxRjIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKRJzCyEJ30ag2f1GCBPvZi9MSRBU6j3B98mQM1mCIBvFXePVG5S3VnYhXF xW0v6dbK31kPSwSdhysFyFQlfLVz7tIfrfThpTnKnUdum3iK+HmbpbmEheMHMeIT X1/nZCQIoUl88tv6xXfHEuaFgKuAJM6ECz2XX0yfQHK2KV0n4zKGtoFuj9ImNgLv xfVyC8u4LTQTp3FyRp4BkRmxZuEw0P/kvjnEM9biOhIKX8JDH+jb1SOzQG0j+YC5 1F0XlVxfub1uGpaDO2TBu+SAU4KS6YEr66ZQbkcGlXyCHi0ZHZchgLed6VTOFmcZ BZjt6k1WcdTWj5w33gls691NddcCAwEAAaOCAdcwggHTMB0GA1UdDgQWBBQdC8TV 2/DZmED6kPRvi+QxCQHyAzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjM4NjUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgAC MBIDBwAgAQ33LkADBwAgAQ33n8AwDQYJKoZIhvcNAQELBQADggEBAHiO0jNLGuHi tWC3U54vh72FxzrgeK2B3XuaiaqzD6UcV0duINkd7GkubZdpnfUMwXvT/MDokfig MeBgPKaR4uqjgh1qAKgGXPVTxHPLneH4txZXfpXFmq7lbwSqU66CsfpeqiAWscj/ hdy0+3hSr97ZsI5dJLnVagMuWgZDZGtwOIAC734f8LNEqTFyKZvOjadssVwhzar0 XtTYlJjqj7CF/rmAqTslw1QZxGJHkXKx8/hqfHuGrZGsFoCfWhQ7BP9rcFpVIjhp loiRz1tYtYmCcuhhmU5NHWP9t6KUT3uypBmLlSshyXDXlUW0OavKVtZLZ7OJ84kI k637+DTBEGI= -----END CERTIFICATE-----Generated at Thu Nov 5 19:09:30 2026 by rpki-client