$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS46059.roa File: AS46059.roa (raw, json) Hash identifier: 8iswieq2OHwKa8echR2EHYoVYrB95kC7sc7ivkHTPy4= Subject key identifier: 3F:DF:8E:D3:11:CB:F0:6B:31:20:23:38:09:B3:D7:CC:E2:AD:01:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3491253A949FD4587B61D67C3ECA489683D9CF35 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46059.roa Signing time: Sat 02 May 2026 21:34:59 +0000 ROA not before: Sat 02 May 2026 21:29:59 +0000 ROA not after: Sat 01 May 2027 21:34:59 +0000 asID: 46059 IP address blocks: 103.208.94.0/23 maxlen: 24 202.52.137.0/24 maxlen: 24 2405:c240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:91:25:3a:94:9f:d4:58:7b:61:d6:7c:3e:ca:48:96:83:d9:cf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:29:59 2026 GMT Not After : May 1 21:34:59 2027 GMT Subject: CN=3FDF8ED311CBF06B3120233809B3D7CCE2AD016D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:57:57:32:77:f1:27:91:95:fa:54:b7:8a: 3b:13:6c:20:a4:4d:38:f4:89:6c:7a:ef:dc:a6:37: 84:28:1e:94:3c:78:d8:ae:be:43:14:ff:58:cc:7e: b6:30:1d:16:68:26:18:fa:a7:6b:c3:bf:7b:9a:6e: ed:8f:78:7f:98:f1:69:83:84:d7:d5:30:ea:e6:11: 67:3d:ae:d4:86:e0:d3:55:95:ff:79:fd:f0:6b:16: 18:2e:df:ac:cd:21:9c:c8:91:7a:38:27:ea:80:4a: f4:39:46:55:e9:22:73:f8:c8:b4:a8:a9:07:c1:c7: 88:7e:0a:69:41:05:b7:af:5f:c8:ef:b8:eb:b0:15: a9:66:3c:ec:36:60:9f:ac:bd:08:66:7d:16:3f:79: 13:96:23:a6:5a:cc:b5:25:b1:6c:23:98:ed:fc:c2: db:92:5c:f0:9c:92:24:56:45:fb:c4:f9:cd:3f:72: 31:dd:29:1d:57:ca:38:12:47:a1:5f:56:50:65:29: db:4d:d5:74:c0:e0:55:c7:f9:f8:64:0a:26:ed:b8: 75:e4:09:5a:37:0d:43:d2:ce:7e:19:25:a8:4c:f3: 36:d5:32:f1:fe:c3:0a:fc:39:e0:f9:58:ad:e2:3e: 99:ac:9e:96:25:83:05:a5:80:ca:b9:29:de:aa:60: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DF:8E:D3:11:CB:F0:6B:31:20:23:38:09:B3:D7:CC:E2:AD:01:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.94.0/23 202.52.137.0/24 IPv6: 2405:c240::/32 Signature Algorithm: sha256WithRSAEncryption 09:a5:ad:51:31:db:31:62:da:8c:75:6e:b3:51:fe:9f:d4:23: ab:43:28:c7:4a:3b:93:6c:e1:24:d9:1d:85:8f:ab:b4:a5:64: 2a:bb:b3:d1:e3:be:f7:48:9a:47:31:da:87:73:70:b5:ac:cd: 2a:f4:e8:a1:59:01:e8:69:5a:fa:25:b9:96:be:bc:c6:52:ff: 03:47:33:c8:8b:1a:48:96:f6:c5:f5:f3:ae:d2:70:7b:cf:c6: e5:e8:70:dd:62:48:d4:9b:6a:9f:69:83:60:4d:9c:cc:21:d4: 0d:fe:2d:51:9a:a9:61:5e:3a:80:b5:05:c2:01:ae:2c:bf:13: a7:ce:0b:3f:af:17:8e:49:1a:ac:ab:ed:bb:6b:a8:92:b2:fb: 2e:6b:2e:6a:43:98:ba:d1:80:56:bd:9b:23:ad:31:6b:f9:fd: 6c:04:81:e5:a6:64:09:ea:47:42:0d:29:a5:58:c6:9c:54:5d: e2:b2:e9:bd:32:55:c7:2e:a6:0a:f5:49:45:68:89:e4:78:be: 18:82:e6:af:41:0a:eb:73:fd:0c:e5:65:95:ce:be:04:11:38: 60:59:46:62:67:f8:09:a8:14:a7:b4:56:2b:4a:3c:78:27:71: f5:c1:57:c3:11:2e:d8:a9:4e:62:a0:37:e4:fe:d6:0d:2d:a3: d9:91:97:37 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUNJElOpSf1Fh7YdZ8PspIloPZzzUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjk1OVoX DTI3MDUwMTIxMzQ1OVowMzExMC8GA1UEAxMoM0ZERjhFRDMxMUNCRjA2QjMxMjAy MzM4MDlCM0Q3Q0NFMkFEMDE2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaUV1cyd/EnkZX6VLeKOxNsIKRNOPSJbHrv3KY3hCgelDx42K6+QxT/WMx+ tjAdFmgmGPqna8O/e5pu7Y94f5jxaYOE19Uw6uYRZz2u1Ibg01WV/3n98GsWGC7f rM0hnMiRejgn6oBK9DlGVekic/jItKipB8HHiH4KaUEFt69fyO+467AVqWY87DZg n6y9CGZ9Fj95E5YjplrMtSWxbCOY7fzC25Jc8JySJFZF+8T5zT9yMd0pHVfKOBJH oV9WUGUp203VdMDgVcf5+GQKJu24deQJWjcNQ9LOfhklqEzzNtUy8f7DCvw54PlY reI+mayeliWDBaWAyrkp3qpgNT8CAwEAAaOCAeAwggHcMB0GA1UdDgQWBBQ/347T EcvwazEgIzgJs9fM4q0BbTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDYwNTkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgAB MAwDBAFn0F4DBADKNIkwDQQCAAIwBwMFACQFwkAwDQYJKoZIhvcNAQELBQADggEB AAmlrVEx2zFi2ox1brNR/p/UI6tDKMdKO5Ns4STZHYWPq7SlZCq7s9HjvvdImkcx 2odzcLWszSr06KFZAehpWvoluZa+vMZS/wNHM8iLGkiW9sX1867ScHvPxuXocN1i SNSbap9pg2BNnMwh1A3+LVGaqWFeOoC1BcIBriy/E6fOCz+vF45JGqyr7btrqJKy +y5rLmpDmLrRgFa9myOtMWv5/WwEgeWmZAnqR0INKaVYxpxUXeKy6b0yVccupgr1 SUVoieR4vhiC5q9BCutz/QzlZZXOvgQROGBZRmJn+AmoFKe0VitKPHgncfXBV8MR LtipTmKgN+T+1g0to9mRlzc= -----END CERTIFICATE-----Generated at Sun May 3 00:40:20 2026 by rpki-client