$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45325.roa File: AS45325.roa (raw, json) Hash identifier: sOrL0ckrPYvnaGKwskjGFydEpZ4NZAPVhaQT1FufD8o= Subject key identifier: D2:25:2A:62:C8:EC:B6:39:E5:9D:F1:67:22:F4:73:B7:92:32:A8:81 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 086AADF385AC8B77309247CF1C6769A153F6C20C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45325.roa Signing time: Wed 18 Mar 2026 04:30:33 +0000 ROA not before: Wed 18 Mar 2026 04:25:33 +0000 ROA not after: Wed 17 Mar 2027 04:30:33 +0000 asID: 45325 IP address blocks: 103.3.68.0/23 maxlen: 24 103.146.182.0/24 maxlen: 24 103.151.140.0/24 maxlen: 24 103.151.141.0/24 maxlen: 24 2001:df7:880::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:ad:f3:85:ac:8b:77:30:92:47:cf:1c:67:69:a1:53:f6:c2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 18 04:25:33 2026 GMT Not After : Mar 17 04:30:33 2027 GMT Subject: CN=D2252A62C8ECB639E59DF16722F473B79232A881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:5f:b6:c3:83:1e:d7:cb:ac:4c:c4:b9:3e: af:fd:a5:87:31:5b:87:ce:c4:e1:88:fd:c0:aa:ff: d8:7a:c1:88:39:d7:04:e8:3c:1c:76:e9:46:a0:0b: 83:86:04:4d:ad:f6:d3:78:16:46:27:06:08:72:cc: ba:6e:06:e4:fb:e3:e9:65:56:5c:96:5f:85:4b:0a: 7a:b3:d8:e8:b4:b6:9a:c6:b6:73:96:05:f0:0e:e6: cb:34:00:df:d9:c4:35:0d:c1:58:d0:46:a6:74:e5: 4c:17:9f:03:d0:b7:f3:e9:d1:5e:8a:d6:7a:90:d7: 62:3c:02:75:b2:63:12:4a:11:1b:2a:9f:7a:9e:c7: 87:14:a8:5c:7b:f2:3e:eb:dd:49:c8:95:b8:5c:68: 33:36:f3:51:f3:c6:6a:2d:ca:ae:94:c0:52:f4:a6: 32:3a:4a:c5:dd:e4:af:22:9a:d2:ff:43:5f:1e:6d: f5:2e:95:e8:aa:c4:19:00:0e:89:8d:76:98:0a:e0: c9:bd:00:73:95:eb:92:9a:6e:67:2b:ff:e3:35:35: 32:49:8d:91:2d:00:88:63:c8:c4:a7:a8:a9:61:f6: 3a:1c:dc:cd:34:6f:f2:3f:6a:86:2d:78:1b:b3:17: 90:2c:ed:e4:0b:2f:5e:a4:32:c1:e3:b2:f0:e3:a0: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:2A:62:C8:EC:B6:39:E5:9D:F1:67:22:F4:73:B7:92:32:A8:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.68.0/23 103.146.182.0/24 103.151.140.0/23 IPv6: 2001:df7:880::/48 Signature Algorithm: sha256WithRSAEncryption 4c:ff:b4:0d:00:8f:45:51:36:fe:3a:a3:01:3b:68:ed:e4:1b: 64:46:b6:0c:d2:3c:a2:5a:5c:9f:d2:0b:ba:7a:bd:e2:65:ca: 03:09:28:19:b9:6e:a5:11:06:a9:df:31:6d:d7:e6:c8:0b:79: d5:e7:4a:c0:44:cf:11:c6:b4:d1:a4:ab:ee:10:a4:bb:a1:9e: 3a:62:55:6e:02:02:9c:52:08:ba:dc:61:c0:69:9c:c1:18:d4: e4:ac:3f:1a:3b:28:5a:be:60:00:73:52:0d:f0:ae:aa:fd:eb: 8b:d4:a0:7a:fb:70:b3:32:aa:b3:8e:79:6b:a8:3f:18:6b:b7: 96:1f:c2:19:23:24:61:13:0c:14:aa:ff:dc:1e:8a:af:74:6e: 16:3a:04:6c:8c:a4:8d:e6:01:b0:e5:76:54:68:15:4c:92:c7: 4a:68:f6:a6:74:70:84:7d:95:3e:9e:bc:d7:38:da:6b:e9:9f: 46:28:84:eb:8b:ec:a6:3b:e4:9f:89:52:bc:b8:a9:a3:46:d7: 1d:29:63:23:23:e8:80:1c:ef:54:95:e1:7f:c3:d5:af:83:30: 0c:db:99:41:ec:1b:fb:8d:05:18:c1:a6:31:d5:32:28:5f:cb: ee:ac:21:5b:6e:b0:ca:bd:32:af:c0:46:8c:73:c6:a2:40:10: 5b:c6:4a:17 -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgIUCGqt84Wsi3cwkkfPHGdpoVP2wgwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxODA0MjUzM1oX DTI3MDMxNzA0MzAzM1owMzExMC8GA1UEAxMoRDIyNTJBNjJDOEVDQjYzOUU1OURG MTY3MjJGNDczQjc5MjMyQTg4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKhQX7bDgx7Xy6xMxLk+r/2lhzFbh87E4Yj9wKr/2HrBiDnXBOg8HHbpRqAL g4YETa3203gWRicGCHLMum4G5Pvj6WVWXJZfhUsKerPY6LS2msa2c5YF8A7myzQA 39nENQ3BWNBGpnTlTBefA9C38+nRXorWepDXYjwCdbJjEkoRGyqfep7HhxSoXHvy PuvdSciVuFxoMzbzUfPGai3KrpTAUvSmMjpKxd3kryKa0v9DXx5t9S6V6KrEGQAO iY12mArgyb0Ac5XrkppuZyv/4zU1MkmNkS0AiGPIxKeoqWH2OhzczTRv8j9qhi14 G7MXkCzt5AsvXqQyweOy8OOgXPsCAwEAAaOCAewwggHoMB0GA1UdDgQWBBTSJSpi yOy2OeWd8Wci9HO3kjKogTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MzI1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZwNEAwQAZ5K2AwQBZ5eMMA8EAgACMAkDBwAgAQ33CIAwDQYJKoZI hvcNAQELBQADggEBAEz/tA0Aj0VRNv46owE7aO3kG2RGtgzSPKJaXJ/SC7p6veJl ygMJKBm5bqURBqnfMW3X5sgLedXnSsBEzxHGtNGkq+4QpLuhnjpiVW4CApxSCLrc YcBpnMEY1OSsPxo7KFq+YABzUg3wrqr964vUoHr7cLMyqrOOeWuoPxhrt5Yfwhkj JGETDBSq/9weiq90bhY6BGyMpI3mAbDldlRoFUySx0po9qZ0cIR9lT6evNc42mvp n0YohOuL7KY75J+JUry4qaNG1x0pYyMj6IAc71SV4X/D1a+DMAzbmUHsG/uNBRjB pjHVMihfy+6sIVtusMq9Mq/ARoxzxqJAEFvGShc= -----END CERTIFICATE-----Generated at Thu Mar 19 08:15:41 2026 by rpki-client