$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45724.roa File: AS45724.roa (raw, json) Hash identifier: 89QIJESzGHTYps5np8W8ZqVNc8Y1NPhagXxDcYRtIYM= Subject key identifier: 42:FC:E9:F1:34:8F:F9:B2:4A:85:34:09:A6:1E:40:66:C0:78:20:5E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3843A217703F4FCB3F40B817DCC7928FA9D0EEEE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45724.roa Signing time: Sat 02 May 2026 21:36:40 +0000 ROA not before: Sat 02 May 2026 21:31:40 +0000 ROA not after: Sat 01 May 2027 21:36:40 +0000 asID: 45724 IP address blocks: 2407:e5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:43:a2:17:70:3f:4f:cb:3f:40:b8:17:dc:c7:92:8f:a9:d0:ee:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:40 2026 GMT Not After : May 1 21:36:40 2027 GMT Subject: CN=42FCE9F1348FF9B24A853409A61E4066C078205E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:64:5c:2d:4e:c5:30:d1:4b:ad:1f:d5:e7:36: 38:09:3b:a3:db:a4:be:26:26:b9:d6:c6:d2:23:a0: e0:55:97:5b:d1:9a:59:46:5b:79:76:c7:8a:4f:2c: 8e:08:24:78:34:8b:74:d0:ba:88:95:a4:2a:90:82: 28:cd:00:65:34:10:77:12:fc:41:1a:0c:c7:d9:19: 6d:12:ad:71:a4:c0:e7:41:48:97:06:62:80:68:47: 35:a5:22:b6:b1:fb:a4:41:44:6d:8b:f3:ec:45:d9: 39:29:3c:4b:be:3b:23:5b:e0:b5:a3:c7:b5:e3:75: 5f:28:1e:46:e3:31:44:a4:7a:83:38:ed:50:a3:50: f8:13:fc:17:f6:60:ad:f6:58:9e:a4:12:c0:df:2c: 06:70:96:2d:3d:e6:d2:da:57:cc:0f:03:d7:f0:8d: a8:e2:7b:b6:26:d0:fd:16:3a:37:21:0d:ea:1e:0c: 99:b7:a6:ba:ca:fc:35:be:5a:1a:f5:b7:50:01:b1: 7f:ad:d6:3e:4f:fe:b2:0b:85:76:37:39:04:40:6c: 93:3c:c5:17:ec:3c:0d:25:7f:a3:7f:3c:de:41:02: 27:9e:f0:16:81:e5:12:81:ad:7c:95:99:37:c4:bb: e8:9b:52:02:09:e6:b1:a2:b3:b5:86:23:8f:b3:a4: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FC:E9:F1:34:8F:F9:B2:4A:85:34:09:A6:1E:40:66:C0:78:20:5E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45724.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:e5c0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:fa:44:62:c7:38:78:c5:21:c3:eb:74:0e:a4:d9:ed:c2:91: 38:98:22:96:0a:26:9b:a3:b7:38:38:d4:d8:70:f5:cb:30:59: 31:4a:49:7e:b6:3d:91:a8:5d:9c:6b:d8:a4:eb:4d:d1:ad:24: ec:d0:3e:ac:3c:37:ad:ef:e9:4b:45:8d:0f:76:18:12:0a:0e: 99:f8:b3:9e:9a:68:bd:35:76:bd:8d:26:56:f0:fa:d6:2a:50: c9:fe:4e:6a:71:8f:9a:9c:c3:9e:e4:89:91:4d:41:6a:68:7b: cd:14:0d:26:1f:98:dd:3b:e5:09:89:d5:6d:06:53:9a:1e:4f: 61:4a:06:a7:cf:1b:f6:38:bc:51:db:4d:c6:ec:8f:30:7f:f6: 02:9a:21:0d:6f:16:2f:87:9a:4c:da:a1:e6:f4:1e:c3:0f:e8: 08:14:29:5e:04:51:ef:51:f7:97:e3:8b:7a:32:62:c5:49:c8: b2:98:3c:82:e7:94:f0:fb:7c:73:d0:b4:a4:f7:63:16:6d:0a: da:3a:f9:90:ae:b3:b8:11:5a:6f:67:bc:39:72:ea:97:61:c7: 82:4d:b1:11:a5:43:85:09:3f:4e:7d:0a:f9:2f:08:1d:42:23: c9:33:00:51:4e:c7:dd:41:1e:53:fc:88:3a:b0:18:b1:93:52: e7:bd:c6:2b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOEOiF3A/T8s/QLgX3MeSj6nQ7u4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzE0MFoX DTI3MDUwMTIxMzY0MFowMzExMC8GA1UEAxMoNDJGQ0U5RjEzNDhGRjlCMjRBODUz NDA5QTYxRTQwNjZDMDc4MjA1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxkXC1OxTDRS60f1ec2OAk7o9ukviYmudbG0iOg4FWXW9GaWUZbeXbHik8s jggkeDSLdNC6iJWkKpCCKM0AZTQQdxL8QRoMx9kZbRKtcaTA50FIlwZigGhHNaUi trH7pEFEbYvz7EXZOSk8S747I1vgtaPHteN1XygeRuMxRKR6gzjtUKNQ+BP8F/Zg rfZYnqQSwN8sBnCWLT3m0tpXzA8D1/CNqOJ7tibQ/RY6NyEN6h4Mmbemusr8Nb5a GvW3UAGxf63WPk/+sguFdjc5BEBskzzFF+w8DSV/o3883kECJ57wFoHlEoGtfJWZ N8S76JtSAgnmsaKztYYjj7OkFgsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRC/Onx NI/5skqFNAmmHkBmwHggXjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDU3MjQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB+XAMA0GCSqGSIb3DQEBCwUAA4IBAQA8+kRixzh4xSHD63QOpNntwpE4 mCKWCiabo7c4ONTYcPXLMFkxSkl+tj2RqF2ca9ik603RrSTs0D6sPDet7+lLRY0P dhgSCg6Z+LOemmi9NXa9jSZW8PrWKlDJ/k5qcY+anMOe5ImRTUFqaHvNFA0mH5jd O+UJidVtBlOaHk9hSganzxv2OLxR203G7I8wf/YCmiENbxYvh5pM2qHm9B7DD+gI FCleBFHvUfeX44t6MmLFSciymDyC55Tw+3xz0LSk92MWbQraOvmQrrO4EVpvZ7w5 cuqXYceCTbERpUOFCT9OfQr5LwgdQiPJMwBRTsfdQR5T/Ig6sBixk1LnvcYr -----END CERTIFICATE-----Generated at Sun May 3 00:41:11 2026 by rpki-client