$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45304.roa File: AS45304.roa (raw, json) Hash identifier: PACGvctYhWOQ9lKVfxKB/2uhKKGKmn/D/kkJXtbPPhM= Subject key identifier: 1F:F4:1B:64:C9:3A:FB:F2:0B:E4:7C:B9:E2:AD:CE:4C:7B:03:FF:EF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7645BD5F17584E8DC817658713322733D5DF1883 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45304.roa Signing time: Fri 27 Jun 2025 08:00:22 +0000 ROA not before: Fri 27 Jun 2025 07:55:22 +0000 ROA not after: Fri 26 Jun 2026 08:00:22 +0000 asID: 45304 IP address blocks: 203.189.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:45:bd:5f:17:58:4e:8d:c8:17:65:87:13:32:27:33:d5:df:18:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 07:55:22 2025 GMT Not After : Jun 26 08:00:22 2026 GMT Subject: CN=1FF41B64C93AFBF20BE47CB9E2ADCE4C7B03FFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:6b:c2:90:59:25:7d:9b:56:d8:bb:32:70: 2e:74:2e:9a:1a:4b:2a:ce:bb:59:49:eb:4d:1a:e0: 66:eb:53:e4:02:5b:d9:2e:ef:5e:c2:07:de:e8:70: 37:af:27:a5:28:f2:f4:29:20:04:85:e1:fd:f9:a3: 64:3f:73:99:01:f2:43:45:60:fe:fb:4b:d5:e1:fb: 1c:42:b4:af:cb:7e:b0:f5:28:ea:28:64:02:3b:27: 3a:ff:16:10:21:9c:65:9b:29:2d:0a:2e:16:ad:4f: 40:ff:59:07:6f:5c:5e:3d:5a:bb:47:c6:c4:43:1a: 6a:92:78:10:eb:71:8c:a7:d4:80:af:71:19:66:d3: 83:9d:dc:d3:3f:9e:90:f9:c5:5f:ff:4a:52:c2:41: d7:28:58:7e:89:94:d9:76:4c:59:fa:68:ae:6a:e7: 1d:4c:1d:c2:f4:c8:24:60:58:c7:3e:ff:2d:e4:95: 82:64:10:ce:18:a0:36:58:d0:ce:66:a3:4b:ba:37: ae:68:5b:82:d2:69:5f:81:7b:55:b6:aa:46:cf:20: 51:6e:c8:99:58:c4:43:bb:f3:16:51:77:c0:0e:c8: c0:6c:8f:98:08:68:c3:fa:5f:a2:6b:7f:51:26:aa: b5:5b:38:c6:69:0b:7c:27:80:c8:83:47:7f:19:df: 08:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:1B:64:C9:3A:FB:F2:0B:E4:7C:B9:E2:AD:CE:4C:7B:03:FF:EF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.189.120.0/22 Signature Algorithm: sha256WithRSAEncryption 82:bb:c4:b4:a5:b2:72:59:12:f7:fa:3e:9e:bd:1f:64:f1:16: 47:4f:7a:25:fd:24:63:92:e8:7c:f5:71:14:f7:64:85:8e:59: 40:b3:22:ba:18:44:fe:2b:53:9b:d6:c3:40:40:4c:9d:51:a6: b5:97:24:6f:7d:ba:20:d0:14:fc:f6:8e:72:d3:9c:7b:df:f7: 3f:74:b3:25:bd:fc:18:48:0a:92:ca:32:95:5b:d1:9a:de:ce: ec:68:02:ab:f5:df:e3:32:fe:e3:31:9d:5b:f8:e5:ce:45:f9: 44:65:c4:04:f4:21:31:6b:2e:1a:e7:52:ac:07:6c:97:24:f5: 03:4e:04:02:b1:1d:ec:53:25:42:1b:40:4b:eb:34:2f:06:70: 59:5f:cc:59:63:53:91:c0:7d:af:56:b8:82:04:2d:a5:d9:66: a1:e5:6f:73:55:82:20:10:34:fa:dd:e8:02:d6:5e:b4:5f:5a: f3:d9:19:16:ff:f2:2b:d6:dc:e0:54:4b:55:17:7d:36:55:bc: b3:4e:dd:fe:2d:3f:a8:b2:3f:52:7d:cb:9f:07:75:7a:f1:9f: df:09:9a:b3:7f:36:c2:31:9a:1a:15:65:34:bc:05:25:d9:9c: 22:5c:1b:4a:0f:09:26:36:c9:67:68:76:06:cd:6a:af:e0:9b: 54:f2:a4:3a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdkW9XxdYTo3IF2WHEzInM9XfGIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyNzA3NTUyMloX DTI2MDYyNjA4MDAyMlowMzExMC8GA1UEAxMoMUZGNDFCNjRDOTNBRkJGMjBCRTQ3 Q0I5RTJBRENFNEM3QjAzRkZFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMu2a8KQWSV9m1bYuzJwLnQumhpLKs67WUnrTRrgZutT5AJb2S7vXsIH3uhw N68npSjy9CkgBIXh/fmjZD9zmQHyQ0Vg/vtL1eH7HEK0r8t+sPUo6ihkAjsnOv8W ECGcZZspLQouFq1PQP9ZB29cXj1au0fGxEMaapJ4EOtxjKfUgK9xGWbTg53c0z+e kPnFX/9KUsJB1yhYfomU2XZMWfpormrnHUwdwvTIJGBYxz7/LeSVgmQQzhigNljQ zmajS7o3rmhbgtJpX4F7VbaqRs8gUW7ImVjEQ7vzFlF3wA7IwGyPmAhow/pfomt/ USaqtVs4xmkLfCeAyINHfxnfCIECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQf9Btk yTr78gvkfLnirc5MewP/7zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzQ1MzA0LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCy714MA0GCSqGSIb3DQEBCwUAA4IBAQCCu8S0pbJyWRL3+j6evR9k 8RZHT3ol/SRjkuh89XEU92SFjllAsyK6GET+K1Ob1sNAQEydUaa1lyRvfbog0BT8 9o5y05x73/c/dLMlvfwYSAqSyjKVW9Ga3s7saAKr9d/jMv7jMZ1b+OXORflEZcQE 9CExay4a51KsB2yXJPUDTgQCsR3sUyVCG0BL6zQvBnBZX8xZY1ORwH2vVriCBC2l 2Wah5W9zVYIgEDT63egC1l60X1rz2RkW//Ir1tzgVEtVF302VbyzTt3+LT+osj9S fcufB3V68Z/fCZqzfzbCMZoaFWU0vAUl2ZwiXBtKDwkmNslnaHYGzWqv4JtU8qQ6 -----END CERTIFICATE-----Generated at Sun Jun 29 12:10:18 2025 by rpki-client