$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa File: AS64300.roa (raw, json) Hash identifier: cb3A10OdkDBKnh4wDLAZySZPdhUe8q1S9ylWr15k+Gc= Subject key identifier: 36:7E:B1:06:3D:92:2C:34:CF:74:D6:77:18:EE:49:E6:4D:41:60:A1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70AB5FEF58C5B46011375AEF511085F2CF34128B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa Signing time: Sat 02 May 2026 21:19:23 +0000 ROA not before: Sat 02 May 2026 21:14:23 +0000 ROA not after: Sat 01 May 2027 21:19:23 +0000 asID: 64300 IP address blocks: 103.13.204.0/23 maxlen: 24 103.18.232.0/23 maxlen: 24 103.46.8.0/23 maxlen: 24 103.67.46.0/23 maxlen: 24 163.61.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ab:5f:ef:58:c5:b4:60:11:37:5a:ef:51:10:85:f2:cf:34:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:14:23 2026 GMT Not After : May 1 21:19:23 2027 GMT Subject: CN=367EB1063D922C34CF74D67718EE49E64D4160A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:e6:66:c3:fd:58:1f:19:f3:48:f9:05:4b: 50:60:46:2c:45:24:95:5e:47:b0:20:46:fb:ce:bf: f4:a5:00:78:e5:4b:1b:94:da:12:3c:07:17:db:30: 93:50:bb:fa:d1:7c:77:c6:9c:aa:f9:63:73:e8:9d: 35:27:98:1a:9f:e4:40:ad:7d:e9:d7:ea:81:d5:c5: 23:a0:9c:1a:ff:f0:e3:ab:49:d3:70:0a:a7:f9:f1: 61:a7:84:a2:05:37:af:fd:ab:89:be:86:76:5f:6b: 37:1e:bd:a8:39:26:21:0f:a0:36:d8:a1:a4:76:dd: fb:36:4e:ea:72:ce:a3:9e:c1:fe:52:c4:b4:e8:91: 22:e3:8d:15:88:78:32:e7:e6:73:f9:e8:95:04:c2: f2:f6:72:d0:89:d7:2d:70:8e:6e:db:25:5d:38:bd: 9e:11:c5:e9:f8:35:92:8b:44:4e:f1:86:88:2f:bc: fa:04:e7:e3:ac:cd:e4:a7:70:1d:00:0e:6a:4b:b0: eb:a8:f6:06:8b:6b:f0:b8:28:6a:4e:41:7f:5a:18: b8:37:35:e8:5e:09:94:16:c4:6c:2c:df:62:8f:d3: 66:6c:77:dc:b4:04:0e:2c:a5:71:2c:80:77:13:c9: 23:dd:1c:b8:eb:51:77:0b:e9:84:95:48:99:b0:31: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7E:B1:06:3D:92:2C:34:CF:74:D6:77:18:EE:49:E6:4D:41:60:A1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS64300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/23 103.18.232.0/23 103.46.8.0/23 103.67.46.0/23 163.61.225.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4a:e1:01:3e:b2:4a:1e:54:52:40:b7:f5:ce:91:93:cf:0d: 1e:ed:56:2f:0c:ae:32:c7:c7:36:2d:68:84:21:9a:ae:cc:6d: 43:e7:d2:9d:a8:63:c1:01:f1:b3:26:f2:0c:de:27:95:78:d4: bd:8f:e0:0f:9d:1b:08:ac:ca:c6:62:09:78:73:8f:b2:85:3f: 04:bd:e1:a5:d6:af:99:60:eb:d4:a6:5e:28:d6:52:87:1d:97: 0b:a5:db:f3:76:04:fe:ee:e8:c9:3e:da:f4:be:ec:8f:7c:e3: e0:af:63:f3:de:41:dc:90:13:9a:d7:cc:25:cc:bd:a0:c0:21: 1a:02:20:df:65:b4:8f:76:61:71:bc:1b:d9:39:87:0a:5b:0f: 36:04:db:51:52:7d:69:c9:d5:7a:16:bd:b6:3f:ff:bc:ac:d3: 84:1e:26:dc:e5:98:57:85:c8:cf:c7:65:fb:aa:6f:ab:95:17: b9:3f:ba:4b:2d:eb:29:40:b9:7e:2a:d3:a7:24:80:91:5c:04: ed:86:f3:e5:93:5a:a1:0d:af:76:cc:c6:1d:98:a5:c8:e9:a1: d1:c0:48:fb:76:8d:8f:39:05:bd:19:c8:3c:ff:7f:93:32:f8: 82:b7:4c:f5:ec:56:b6:0d:52:6b:02:f3:a9:df:90:bf:04:2b: a2:f6:16:85 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUcKtf71jFtGARN1rvURCF8s80EoswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTQyM1oX DTI3MDUwMTIxMTkyM1owMzExMC8GA1UEAxMoMzY3RUIxMDYzRDkyMkMzNENGNzRE Njc3MThFRTQ5RTY0RDQxNjBBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI5M5mbD/VgfGfNI+QVLUGBGLEUklV5HsCBG+86/9KUAeOVLG5TaEjwHF9sw k1C7+tF8d8acqvljc+idNSeYGp/kQK196dfqgdXFI6CcGv/w46tJ03AKp/nxYaeE ogU3r/2rib6Gdl9rNx69qDkmIQ+gNtihpHbd+zZO6nLOo57B/lLEtOiRIuONFYh4 Mufmc/nolQTC8vZy0InXLXCObtslXTi9nhHF6fg1kotETvGGiC+8+gTn46zN5Kdw HQAOakuw66j2Botr8Lgoak5Bf1oYuDc16F4JlBbEbCzfYo/TZmx33LQEDiylcSyA dxPJI90cuOtRdwvphJVImbAxYtMCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQ2frEG PZIsNM901ncY7knmTUFgoTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNjQzMDAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgAB MB4DBAFnDcwDBAFnEugDBAFnLggDBAFnQy4DBACjPeEwDQYJKoZIhvcNAQELBQAD ggEBAKBK4QE+skoeVFJAt/XOkZPPDR7tVi8MrjLHxzYtaIQhmq7MbUPn0p2oY8EB 8bMm8gzeJ5V41L2P4A+dGwisysZiCXhzj7KFPwS94aXWr5lg69SmXijWUocdlwul 2/N2BP7u6Mk+2vS+7I984+CvY/PeQdyQE5rXzCXMvaDAIRoCIN9ltI92YXG8G9k5 hwpbDzYE21FSfWnJ1XoWvbY//7ys04QeJtzlmFeFyM/HZfuqb6uVF7k/ukst6ylA uX4q06ckgJFcBO2G8+WTWqENr3bMxh2YpcjpodHASPt2jY85Bb0ZyDz/f5My+IK3 TPXsVrYNUmsC86nfkL8EK6L2FoU= -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client