$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45298.roa File: AS45298.roa (raw, json) Hash identifier: uIM1ccTXgmOrNA2b7JWZg6by+73K+yzZfCjAgO1uNYQ= Subject key identifier: 62:40:5D:3C:B5:09:86:E1:4F:E3:A0:05:DC:49:43:43:D7:53:DC:F1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1DF1ACAAA30EA793B3A05A381AC5EF8265298371 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45298.roa Signing time: Sat 02 May 2026 21:16:00 +0000 ROA not before: Sat 02 May 2026 21:11:00 +0000 ROA not after: Sat 01 May 2027 21:16:00 +0000 asID: 45298 IP address blocks: 103.228.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f1:ac:aa:a3:0e:a7:93:b3:a0:5a:38:1a:c5:ef:82:65:29:83:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:00 2026 GMT Not After : May 1 21:16:00 2027 GMT Subject: CN=62405D3CB50986E14FE3A005DC494343D753DCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:68:eb:28:db:8c:2a:03:b9:85:b6:c8:6d: e9:60:b0:6a:c4:8d:c2:c3:76:4f:1f:e8:02:02:95: 0f:39:61:90:ee:ef:8b:9d:a0:e1:fd:52:ab:e9:4a: db:68:df:4e:7b:55:38:b5:e1:f0:26:8d:aa:6d:12: f1:1d:22:1b:a6:56:c2:b5:ac:78:59:71:4d:ca:ca: f4:55:b7:aa:0b:49:97:aa:b0:bc:77:68:8a:13:f8: 61:fd:d1:7e:76:2b:96:03:79:02:83:60:5d:2f:b5: 84:8a:30:8b:e2:aa:bc:da:a4:70:4a:a0:af:bb:10: 5a:ca:81:88:44:55:09:76:aa:70:74:53:39:f6:e7: 28:8a:6e:7e:8a:85:e6:66:e7:90:03:2e:90:8b:8e: 1a:5f:ff:02:2a:ce:e7:84:13:17:d8:2f:e9:7b:80: 6b:8c:59:db:ea:74:b1:c4:2f:40:67:30:cd:d1:8e: 0c:e3:a8:3c:59:5b:b8:54:36:49:c2:87:bb:81:17: 36:c9:e0:4d:11:c1:23:e6:66:44:79:c3:fb:7c:28: 04:b3:a1:8d:22:fa:90:52:fc:2d:e0:0e:d7:9d:00: 3e:37:cf:59:0c:2c:a2:d5:95:84:a9:96:a8:3c:01: f2:0f:a3:a4:70:cb:cb:28:37:14:4b:87:34:bf:71: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:5D:3C:B5:09:86:E1:4F:E3:A0:05:DC:49:43:43:D7:53:DC:F1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.8.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:dd:5a:fa:76:e4:51:f6:74:79:ee:ae:aa:3a:16:50:4d:80: 22:87:6c:bb:c6:b7:66:6d:aa:27:63:0e:6a:e8:d6:76:95:50: 72:98:b3:e7:39:21:49:72:3c:bd:7b:e0:fa:fb:26:b9:c7:24: 79:07:c0:a8:61:a0:01:9f:37:52:2a:66:d0:5b:09:17:07:85: d6:a6:e8:1c:ce:35:89:2b:20:0f:75:a2:9a:ea:9c:49:de:d1: 85:ce:1b:19:c3:3b:78:a6:5e:64:d3:e9:b2:80:b9:e1:08:08: f1:62:9b:12:8a:d9:7f:50:70:29:3d:c1:24:62:52:a9:08:89: a9:bd:38:7d:a1:39:b3:73:f2:8a:8f:e5:73:a7:13:01:ae:e3: db:58:82:02:ef:cf:4a:19:e0:67:62:42:6b:fc:19:7e:c7:3c: 68:c2:fb:4f:11:00:de:44:16:70:74:a2:47:7b:b7:16:51:00: 6e:5b:2d:ef:ad:64:70:54:dc:55:f0:31:96:05:80:a7:f9:69: 61:f7:d0:a9:67:ef:f8:d7:f2:0f:36:6e:f6:41:59:b4:04:41: fe:20:12:f2:5d:c7:a0:e9:71:8b:b9:6d:92:0e:31:bf:43:ed: 73:c7:ad:55:97:f3:12:72:e7:34:af:0c:7e:c7:c3:21:ce:f0: 04:b2:a3:41 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUHfGsqqMOp5OzoFo4GsXvgmUpg3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTEwMFoX DTI3MDUwMTIxMTYwMFowMzExMC8GA1UEAxMoNjI0MDVEM0NCNTA5ODZFMTRGRTNB MDA1REM0OTQzNDNENzUzRENGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzmaOso24wqA7mFtsht6WCwasSNwsN2Tx/oAgKVDzlhkO7vi52g4f1Sq+lK 22jfTntVOLXh8CaNqm0S8R0iG6ZWwrWseFlxTcrK9FW3qgtJl6qwvHdoihP4Yf3R fnYrlgN5AoNgXS+1hIowi+KqvNqkcEqgr7sQWsqBiERVCXaqcHRTOfbnKIpufoqF 5mbnkAMukIuOGl//AirO54QTF9gv6XuAa4xZ2+p0scQvQGcwzdGODOOoPFlbuFQ2 ScKHu4EXNsngTRHBI+ZmRHnD+3woBLOhjSL6kFL8LeAO150APjfPWQwsotWVhKmW qDwB8g+jpHDLyyg3FEuHNL9x8VMCAwEAAaOCAcswggHHMB0GA1UdDgQWBBRiQF08 tQmG4U/joAXcSUND11Pc8TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDUyOTgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABn5AgwDQYJKoZIhvcNAQELBQADggEBACrdWvp25FH2dHnurqo6FlBNgCKH bLvGt2ZtqidjDmro1naVUHKYs+c5IUlyPL174Pr7JrnHJHkHwKhhoAGfN1IqZtBb CRcHhdam6BzONYkrIA91oprqnEne0YXOGxnDO3imXmTT6bKAueEICPFimxKK2X9Q cCk9wSRiUqkIiam9OH2hObNz8oqP5XOnEwGu49tYggLvz0oZ4GdiQmv8GX7HPGjC +08RAN5EFnB0okd7txZRAG5bLe+tZHBU3FXwMZYFgKf5aWH30Kln7/jX8g82bvZB WbQEQf4gEvJdx6DpcYu5bZIOMb9D7XPHrVWX8xJy5zSvDH7HwyHO8ASyo0E= -----END CERTIFICATE-----Generated at Sun May 3 01:44:05 2026 by rpki-client