$ rpki-client -vvf rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa File: AS45727.roa (raw, json) Hash identifier: JWbgX1M1q+71PRDBOd57Nlx5oFlmJNwWVtzgl8TYURE= Subject key identifier: 99:C5:E9:0E:7F:7F:4E:53:43:3F:70:ED:9A:02:94:E4:D6:8C:9C:F4 Certificate issuer: /CN=6D508CF79A65F098AC311FE1079E8840C240F1E0 Certificate serial: 225C9248B6F4CEB630CF52A1668820C55061ACCE Authority key identifier: 6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa Signing time: Fri 26 Jun 2026 03:23:11 +0000 ROA not before: Fri 26 Jun 2026 03:18:11 +0000 ROA not after: Fri 25 Jun 2027 03:23:11 +0000 asID: 45727 IP address blocks: 103.10.66.0/24 maxlen: 24 116.206.10.0/24 maxlen: 24 116.206.11.0/24 maxlen: 24 116.206.12.0/24 maxlen: 24 116.206.13.0/24 maxlen: 24 116.206.28.0/24 maxlen: 24 116.206.29.0/24 maxlen: 24 116.206.34.0/24 maxlen: 24 180.214.232.0/24 maxlen: 24 180.214.233.0/24 maxlen: 24 180.214.234.0/24 maxlen: 24 202.67.40.0/24 maxlen: 24 202.67.41.0/24 maxlen: 24 223.255.225.0/24 maxlen: 24 223.255.229.0/24 maxlen: 24 223.255.230.0/24 maxlen: 24 2400:8b00:100::/44 maxlen: 44 2400:8b00:110::/44 maxlen: 44 2400:8b00:120::/44 maxlen: 44 2400:8b00:130::/44 maxlen: 44 2400:8b00:200::/44 maxlen: 44 2400:8b00:210::/44 maxlen: 44 2400:8b00:220::/44 maxlen: 44 2400:8b00:230::/44 maxlen: 44 2400:8b00:800::/44 maxlen: 44 2400:8b00:810::/44 maxlen: 44 2400:8b00:820::/44 maxlen: 44 2400:8b00:830::/44 maxlen: 44 2400:8b00:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5c:92:48:b6:f4:ce:b6:30:cf:52:a1:66:88:20:c5:50:61:ac:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D508CF79A65F098AC311FE1079E8840C240F1E0 Validity Not Before: Jun 26 03:18:11 2026 GMT Not After : Jun 25 03:23:11 2027 GMT Subject: CN=99C5E90E7F7F4E53433F70ED9A0294E4D68C9CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a0:45:e5:c5:e3:93:50:f0:fe:03:07:0b:bf: cd:ea:1e:fd:85:75:7b:d0:09:63:83:3c:00:9e:68: 7e:71:18:de:b1:32:c6:c2:c9:c1:c4:3d:31:57:96: cf:ae:6d:7a:14:a4:54:d6:46:c7:95:ad:db:53:11: 79:cb:3e:6d:a8:38:48:71:1f:bc:91:cb:b4:ed:fc: 8c:9f:24:dd:ad:36:55:a5:61:f8:73:50:8f:9e:ce: 2c:b4:73:bc:60:40:c0:7b:e8:a1:da:90:2e:2b:6b: 7b:d6:d0:22:02:a9:91:f5:2a:0c:06:92:77:4e:69: e3:e5:f4:48:3d:26:5d:fd:72:37:7c:53:c8:17:62: 57:de:12:d3:28:1a:7d:d7:30:69:89:b2:d7:c4:8a: 98:9a:c7:72:3a:e5:2f:d7:e2:a0:0b:1f:ea:66:15: 03:aa:4e:2c:7c:83:6c:bc:a9:1b:ba:b9:e6:14:94: 1a:16:86:13:1f:19:7b:bf:4a:ac:63:cb:f2:15:44: 45:43:75:25:d7:f7:c2:f4:45:bc:2e:33:0e:40:a9: 1a:5a:9b:05:e7:a0:fe:86:be:89:98:d6:96:8f:00: d0:3f:2b:b5:3b:fc:e8:7c:e7:ad:ad:37:0f:80:26: 48:5a:0a:76:8b:12:7d:b2:9a:95:18:81:cc:97:f4: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:E9:0E:7F:7F:4E:53:43:3F:70:ED:9A:02:94:E4:D6:8C:9C:F4 X509v3 Authority Key Identifier: keyid:6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/AS45727.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.66.0/24 116.206.10.0-116.206.13.255 116.206.28.0/23 116.206.34.0/24 180.214.232.0-180.214.234.255 202.67.40.0/23 223.255.225.0/24 223.255.229.0-223.255.230.255 IPv6: 2400:8b00:100::/42 2400:8b00:200::/42 2400:8b00:800::/42 2400:8b00:1000::/44 Signature Algorithm: sha256WithRSAEncryption a5:70:44:48:a5:d3:e1:dc:c1:b9:6d:5f:e2:92:dd:12:a0:1b: 69:a6:6a:a9:76:1c:c5:ac:a5:55:04:8f:e1:b1:76:00:49:82: 72:1f:ce:95:4c:45:f3:bd:0d:a7:54:be:ce:ba:32:aa:15:df: a5:97:bf:84:5a:be:a3:5a:7a:2b:16:43:30:99:42:2c:b1:e9: 4c:a5:2c:66:05:c8:40:ea:e9:34:17:de:68:1c:02:e8:9b:7d: 39:90:ff:f5:81:ee:c4:f2:91:64:0a:cb:94:4b:42:4f:15:ec: 05:09:e5:e2:c5:3d:cc:73:44:a6:0b:9d:84:7a:19:3d:09:1e: cd:d6:a5:d4:64:fd:1c:74:2f:cf:1e:08:07:74:97:9f:0d:d9: 75:12:f6:4e:1b:09:ed:1c:1a:72:95:2e:17:a8:76:02:05:dc: 84:33:58:8f:ee:96:ba:c9:15:b3:51:ff:2d:41:c7:f9:1b:85: a9:c9:16:00:98:33:80:e8:bb:b2:a3:2b:74:20:f7:cd:32:41: fd:da:2d:12:07:e9:35:dc:b0:f2:c5:af:e7:f7:2b:c7:a1:9c: 7d:4d:dc:09:00:3d:a9:ca:62:f2:28:11:a1:e5:41:a1:1e:45: c1:51:a0:8a:8f:5e:be:fb:b5:87:f4:03:63:65:94:e5:ab:63: d5:08:b3:cb -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUIlySSLb0zrYwz1KhZoggxVBhrM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ1MDhDRjc5QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBD MjQwRjFFMDAeFw0yNjA2MjYwMzE4MTFaFw0yNzA2MjUwMzIzMTFaMDMxMTAvBgNV BAMTKDk5QzVFOTBFN0Y3RjRFNTM0MzNGNzBFRDlBMDI5NEU0RDY4QzlDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqoEXlxeOTUPD+AwcLv83qHv2F dXvQCWODPACeaH5xGN6xMsbCycHEPTFXls+ubXoUpFTWRseVrdtTEXnLPm2oOEhx H7yRy7Tt/IyfJN2tNlWlYfhzUI+eziy0c7xgQMB76KHakC4ra3vW0CICqZH1KgwG kndOaePl9Eg9Jl39cjd8U8gXYlfeEtMoGn3XMGmJstfEipiax3I65S/X4qALH+pm FQOqTix8g2y8qRu6ueYUlBoWhhMfGXu/Sqxjy/IVREVDdSXX98L0RbwuMw5AqRpa mwXnoP6GvomY1paPANA/K7U7/Oh8562tNw+AJkhaCnaLEn2ympUYgcyX9BXlAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUmcXpDn9/TlNDP3DtmgKU5NaMnPQwHwYDVR0j BBgwFoAUbVCM95pl8JisMR/hB56IQMJA8eAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWVjNmVlZjktNzEzYy00ZTZiLWIyYmMtNGMwNDUyODkwMzQ1LzAvNkQ1MDhDRjc5 QTY1RjA5OEFDMzExRkUxMDc5RTg4NDBDMjQwRjFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDUwOENGNzlBNjVGMDk4QUMzMTFGRTEwNzlFODg0MEMyNDBG MUUwLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBr aS1yc3luYy5pZG5pYy5uZXQvcmVwby9lZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00 YzA0NTI4OTAzNDUvMC9BUzQ1NzI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwTgQCAAEwSAMEAGcKQjAMAwQBdM4KAwQB dM4MAwQBdM4cAwQAdM4iMAwDBAO01ugDBAC01uoDBAHKQygDBADf/+EwDAMEAN// 5QMEAN//5jAqBAIAAjAkAwcGJACLAAEAAwcGJACLAAIAAwcGJACLAAgAAwcEJACL ABAAMA0GCSqGSIb3DQEBCwUAA4IBAQClcERIpdPh3MG5bV/ikt0SoBtppmqpdhzF rKVVBI/hsXYASYJyH86VTEXzvQ2nVL7OujKqFd+ll7+EWr6jWnorFkMwmUIsselM pSxmBchA6uk0F95oHALom305kP/1ge7E8pFkCsuUS0JPFewFCeXixT3Mc0SmC52E ehk9CR7N1qXUZP0cdC/PHggHdJefDdl1EvZOGwntHBpylS4XqHYCBdyEM1iP7pa6 yRWzUf8tQcf5G4WpyRYAmDOA6Luyoyt0IPfNMkH92i0SB+k13LDyxa/n9yvHoZx9 TdwJAD2pymLyKBGh5UGhHkXBUaCKj16++7WH9ANjZZTlq2PVCLPL -----END CERTIFICATE-----Generated at Mon Jul 13 13:47:55 2026 by rpki-client