$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45735.roa File: AS45735.roa (raw, json) Hash identifier: Q5TouT5NJkKm6lyV7NbCm5I+O5Lu1AD4KYq4FJ2f4H4= Subject key identifier: 15:92:AE:71:3F:52:EB:0D:4B:5C:27:8A:A2:29:34:23:79:48:58:89 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C6D1916C5B42354EC2821749F4478344D390FAA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45735.roa Signing time: Sat 02 May 2026 21:35:04 +0000 ROA not before: Sat 02 May 2026 21:30:04 +0000 ROA not after: Sat 01 May 2027 21:35:04 +0000 asID: 45735 IP address blocks: 103.151.162.0/23 maxlen: 24 2406:1b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6d:19:16:c5:b4:23:54:ec:28:21:74:9f:44:78:34:4d:39:0f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:04 2026 GMT Not After : May 1 21:35:04 2027 GMT Subject: CN=1592AE713F52EB0D4B5C278AA229342379485889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:c9:ae:c1:91:46:c8:71:5b:46:6c:db:55: b1:e0:9c:6c:da:5b:a4:95:c5:ec:95:71:57:98:55: af:89:ae:64:4d:7b:ad:37:d6:ee:21:8e:f0:1b:d5: 32:db:e8:67:60:03:15:a2:6d:45:3a:af:84:40:09: f7:a9:0a:1e:4d:0a:eb:81:01:00:a2:42:06:51:35: be:56:24:a6:c8:a9:77:3a:62:02:08:4b:71:86:67: 6b:6a:d9:e3:cd:ff:69:1a:b3:f1:ce:4e:4b:8c:9c: b2:50:30:7f:6a:fb:b1:15:9c:43:b0:13:dc:47:dd: 5e:a7:83:ac:f4:92:67:7e:0a:5f:0f:03:09:d3:5c: 5a:06:bc:a3:aa:42:2e:58:a8:0e:94:ec:28:3b:9f: 43:52:01:3e:13:ba:d1:cb:6c:83:f0:9d:15:9e:7d: b8:c8:dc:4a:fa:38:0d:f7:f8:04:bf:45:cb:1d:f4: e6:0e:2e:54:de:81:56:31:c2:9e:5e:27:c4:62:14: e9:6d:03:cd:f6:e5:f7:3c:39:a8:65:81:1e:2c:2a: 86:61:da:59:80:df:1e:0b:03:af:f0:e7:5d:31:ae: a9:d9:f6:07:70:d0:29:d6:47:4e:5a:21:8c:75:49: 74:fc:e7:98:17:ed:72:5a:e4:e7:0a:f4:b5:0e:79: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:AE:71:3F:52:EB:0D:4B:5C:27:8A:A2:29:34:23:79:48:58:89 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.162.0/23 IPv6: 2406:1b40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:90:b9:44:83:91:af:38:10:30:6e:d6:e7:90:3c:9f:53:f4: 7c:26:ec:75:de:03:55:ec:98:75:e2:38:b8:b3:ac:4c:da:13: 6a:ae:12:e2:12:0d:95:0c:4a:76:8a:ed:64:ac:7f:09:8a:25: 20:90:8e:45:d6:03:b0:1e:a2:c4:6a:dd:f8:24:45:2f:9d:29: 02:66:14:f8:5e:3d:0c:71:09:76:e9:fb:39:d3:19:55:4e:ef: fa:6d:1e:e7:13:16:ec:77:ec:4b:4e:71:5d:2d:da:95:fd:24: c6:f0:40:3f:c6:a1:7b:32:33:5a:7a:31:f3:24:57:3b:1f:25: 33:4e:ad:c8:53:3c:07:3c:d9:a6:97:9b:b8:54:38:26:41:b8: fe:df:a2:19:45:6f:45:2f:17:57:f3:bf:fb:64:06:26:03:cf: d5:b7:4a:77:71:2f:c4:99:51:f5:e8:e6:5a:39:f5:b0:17:59: 8a:df:ab:07:89:07:25:51:3e:96:66:b5:da:76:69:59:eb:b9: 10:37:3c:ee:57:47:46:ca:f6:d7:cf:f5:7f:d5:d9:08:94:9b: 42:d8:8c:cc:61:c6:d0:e4:4b:b1:73:ea:54:83:95:99:52:c0: 80:3a:2a:67:7c:fa:a2:a6:5b:3d:f0:39:e5:e0:47:12:47:67: fb:5f:ea:15 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUfG0ZFsW0I1TsKCF0n0R4NE05D6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzAwNFoX DTI3MDUwMTIxMzUwNFowMzExMC8GA1UEAxMoMTU5MkFFNzEzRjUyRUIwRDRCNUMy NzhBQTIyOTM0MjM3OTQ4NTg4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtTya7BkUbIcVtGbNtVseCcbNpbpJXF7JVxV5hVr4muZE17rTfW7iGO8BvV MtvoZ2ADFaJtRTqvhEAJ96kKHk0K64EBAKJCBlE1vlYkpsipdzpiAghLcYZna2rZ 483/aRqz8c5OS4ycslAwf2r7sRWcQ7AT3EfdXqeDrPSSZ34KXw8DCdNcWga8o6pC LlioDpTsKDufQ1IBPhO60ctsg/CdFZ59uMjcSvo4Dff4BL9Fyx305g4uVN6BVjHC nl4nxGIU6W0Dzfbl9zw5qGWBHiwqhmHaWYDfHgsDr/DnXTGuqdn2B3DQKdZHTloh jHVJdPznmBftclrk5wr0tQ55Q50CAwEAAaOCAdowggHWMB0GA1UdDgQWBBQVkq5x P1LrDUtcJ4qiKTQjeUhYiTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDU3MzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgAB MAYDBAFnl6IwDQQCAAIwBwMFACQGG0AwDQYJKoZIhvcNAQELBQADggEBAF6QuUSD ka84EDBu1ueQPJ9T9Hwm7HXeA1XsmHXiOLizrEzaE2quEuISDZUMSnaK7WSsfwmK JSCQjkXWA7AeosRq3fgkRS+dKQJmFPhePQxxCXbp+znTGVVO7/ptHucTFux37EtO cV0t2pX9JMbwQD/GoXsyM1p6MfMkVzsfJTNOrchTPAc82aaXm7hUOCZBuP7fohlF b0UvF1fzv/tkBiYDz9W3SndxL8SZUfXo5lo59bAXWYrfqweJByVRPpZmtdp2aVnr uRA3PO5XR0bK9tfP9X/V2QiUm0LYjMxhxtDkS7Fz6lSDlZlSwIA6Kmd8+qKmWz3w OeXgRxJHZ/tf6hU= -----END CERTIFICATE-----Generated at Sun May 3 00:40:31 2026 by rpki-client