$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS46023.roa File: AS46023.roa (raw, json) Hash identifier: mSW1zL+9x7NwxvAJYOqN0WMuydpyAIaDnh+sjUnDBqA= Subject key identifier: E2:7A:D6:8E:63:0D:06:84:53:35:34:67:3A:D9:E0:B1:0B:46:80:84 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17F211608241216A957D07A69C84EAF8A3688752 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46023.roa Signing time: Tue 07 Jul 2026 03:03:34 +0000 ROA not before: Tue 07 Jul 2026 02:58:34 +0000 ROA not after: Tue 06 Jul 2027 03:03:34 +0000 asID: 46023 IP address blocks: 43.252.8.0/22 maxlen: 24 103.24.104.0/22 maxlen: 24 175.106.8.0/21 maxlen: 24 2406:b900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 09:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f2:11:60:82:41:21:6a:95:7d:07:a6:9c:84:ea:f8:a3:68:87:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 7 02:58:34 2026 GMT Not After : Jul 6 03:03:34 2027 GMT Subject: CN=E27AD68E630D0684533534673AD9E0B10B468084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:d9:87:8e:54:5c:02:28:7a:e1:ca:a7:73: 72:1f:35:40:89:08:2d:e3:05:5e:46:12:84:12:51: 23:fc:22:89:84:6c:89:1d:8b:67:b6:4e:74:0a:f9: ae:45:61:d3:18:a2:b8:8b:89:c4:23:fb:e5:31:21: 5a:cb:77:52:79:2b:30:ab:1e:46:bf:89:b7:86:5e: ea:3f:60:44:22:c1:4d:79:ad:dc:35:8f:e0:90:94: 27:c7:4c:aa:0d:87:de:7b:d9:c6:45:0c:31:03:cc: 9d:8c:cc:44:64:78:39:09:bb:ba:fd:00:26:d9:b7: 44:ef:2d:b9:6c:50:d9:f4:c4:3f:38:fc:90:d3:71: ed:eb:d7:46:f0:58:39:59:35:f5:ff:b8:5d:60:56: 8d:b1:3f:6f:34:8e:5f:1c:0e:84:1f:3b:5d:4b:ef: 27:98:82:04:63:3a:62:0c:e8:11:66:a0:d2:ce:0d: d8:68:01:67:89:3b:9a:f3:e2:2d:ee:01:cf:49:21: 71:b2:80:4b:a9:2c:ce:96:d8:71:6d:5f:9c:fb:db: 4a:67:2a:01:a9:b6:04:83:dc:15:c4:1d:d3:47:1c: 00:db:43:16:69:a7:05:32:1d:ae:4f:c2:63:b8:f8: 35:a5:02:51:59:17:62:04:54:cd:ec:e3:ac:ca:7c: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7A:D6:8E:63:0D:06:84:53:35:34:67:3A:D9:E0:B1:0B:46:80:84 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.8.0/22 103.24.104.0/22 175.106.8.0/21 IPv6: 2406:b900::/32 Signature Algorithm: sha256WithRSAEncryption 2f:8d:64:38:96:da:74:5e:bc:cf:b1:ed:a3:22:bd:02:0b:87: ef:fc:f0:cf:ef:78:88:65:2b:a6:eb:59:5d:34:32:40:28:9b: 60:7a:0b:7b:84:bd:8f:3f:b0:49:71:d7:e8:62:1c:91:dc:15: 5a:96:2c:59:93:af:8a:c6:e2:81:87:6c:e1:03:42:33:b3:2e: 60:e2:fd:0b:9b:13:7c:1c:96:36:73:a4:95:71:55:b4:47:e9: 74:bf:47:1a:1c:6e:22:d4:c7:31:65:71:f5:e7:db:6f:89:8f: 78:af:4e:86:cd:5c:91:ea:76:ca:7b:d4:ae:07:a1:ef:f8:2c: 9d:bb:eb:29:14:ba:e6:96:b6:08:09:4b:41:e3:58:24:ae:5a: de:62:44:cf:56:42:ff:cc:da:62:bc:6c:79:15:c8:32:ee:07: 43:7e:fb:16:b8:ca:03:78:b5:dc:16:c6:e6:68:53:cb:aa:74: a6:a9:dc:80:8a:07:35:c5:c3:ce:a3:bf:8c:43:1b:b4:54:60: 72:66:8f:81:d8:6a:ec:73:8a:8f:6e:53:17:54:6d:da:ed:65: 46:a8:7e:39:9c:4b:dc:4d:c7:da:89:4f:93:55:9b:1b:48:48: 33:ee:4a:7b:25:4f:3e:b3:8c:89:77:0c:79:09:7d:6f:c7:9e: 09:32:88:7d -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUF/IRYIJBIWqVfQemnITq+KNoh1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcwNzAyNTgzNFoX DTI3MDcwNjAzMDMzNFowMzExMC8GA1UEAxMoRTI3QUQ2OEU2MzBEMDY4NDUzMzUz NDY3M0FEOUUwQjEwQjQ2ODA4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLC2YeOVFwCKHrhyqdzch81QIkILeMFXkYShBJRI/wiiYRsiR2LZ7ZOdAr5 rkVh0xiiuIuJxCP75TEhWst3UnkrMKseRr+Jt4Ze6j9gRCLBTXmt3DWP4JCUJ8dM qg2H3nvZxkUMMQPMnYzMRGR4OQm7uv0AJtm3RO8tuWxQ2fTEPzj8kNNx7evXRvBY OVk19f+4XWBWjbE/bzSOXxwOhB87XUvvJ5iCBGM6YgzoEWag0s4N2GgBZ4k7mvPi Le4Bz0khcbKAS6kszpbYcW1fnPvbSmcqAam2BIPcFcQd00ccANtDFmmnBTIdrk/C Y7j4NaUCUVkXYgRUzezjrMp84m8CAwEAAaOCAeYwggHiMB0GA1UdDgQWBBTietaO Yw0GhFM1NGc62eCxC0aAhDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDYwMjMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgAB MBIDBAIr/AgDBAJnGGgDBAOvaggwDQQCAAIwBwMFACQGuQAwDQYJKoZIhvcNAQEL BQADggEBAC+NZDiW2nRevM+x7aMivQILh+/88M/veIhlK6brWV00MkAom2B6C3uE vY8/sElx1+hiHJHcFVqWLFmTr4rG4oGHbOEDQjOzLmDi/QubE3wcljZzpJVxVbRH 6XS/RxocbiLUxzFlcfXn22+Jj3ivTobNXJHqdsp71K4Hoe/4LJ276ykUuuaWtggJ S0HjWCSuWt5iRM9WQv/M2mK8bHkVyDLuB0N++xa4ygN4tdwWxuZoU8uqdKap3ICK BzXFw86jv4xDG7RUYHJmj4HYauxzio9uUxdUbdrtZUaofjmcS9xNx9qJT5NVmxtI SDPuSnslTz6zjIl3DHkJfW/HngkyiH0= -----END CERTIFICATE-----Generated at Mon Jul 20 19:05:29 2026 by rpki-client