
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
File: AS45700.roa (raw, json)
Hash identifier: 4gylyPRrLCVxqv8jBeq1Y73wjMNwCZgjrx7f+jJHRfU=
Subject key identifier: F9:3F:25:D5:30:45:8C:EA:DB:E8:1A:4C:06:09:97:EC:11:CF:12:5B
Certificate issuer: /CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Certificate serial: 49207358238ABB9A7141DE82DB49A553432D8127
Authority key identifier: AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
Signing time: Sun 03 May 2026 02:23:31 +0000
ROA not before: Sun 03 May 2026 02:18:31 +0000
ROA not after: Sun 02 May 2027 02:23:31 +0000
asID: 45700
IP address blocks: 119.11.204.0/23 maxlen: 23
119.11.204.0/24 maxlen: 24
119.11.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:20:73:58:23:8a:bb:9a:71:41:de:82:db:49:a5:53:43:2d:81:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABFE6B3197147312EC1FAE05A252A3964E9BB235
Validity
Not Before: May 3 02:18:31 2026 GMT
Not After : May 2 02:23:31 2027 GMT
Subject: CN=F93F25D530458CEADBE81A4C060997EC11CF125B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:42:c1:a3:0c:6f:fd:c1:31:cc:be:36:11:
31:9b:e5:c2:45:fb:6c:48:6a:27:f3:9e:08:6a:dd:
8c:b6:8a:8d:7e:53:ea:be:8f:b7:6f:b3:44:87:51:
33:3c:e5:de:38:ca:34:20:0c:64:5c:dd:1e:24:b4:
a6:02:ba:ef:e2:bc:4f:74:e0:73:cd:e6:7a:c7:05:
9e:72:e6:ca:23:cf:9c:ce:81:eb:79:96:ea:1d:86:
46:56:e4:ef:46:b0:cc:39:55:c1:c4:cd:74:07:95:
10:48:d7:2d:6a:1e:ad:45:87:1f:2d:56:66:24:d5:
bf:f4:57:cc:44:43:1a:1e:5e:56:96:0f:71:eb:be:
7f:eb:7d:05:52:c6:7b:26:22:b1:0c:1f:28:5c:c3:
66:37:47:77:cb:21:f0:c7:d3:f7:9c:81:e0:69:6d:
ce:c6:21:df:eb:ab:3a:6d:b2:db:ea:d0:13:43:2c:
9b:88:1a:69:71:22:fb:04:41:70:be:fa:31:c3:0b:
f5:cf:f2:a4:62:c3:2f:4d:a8:96:01:e5:cc:6a:0f:
8a:62:3f:5c:d6:65:79:0e:5f:b1:93:6b:4f:ff:6a:
c5:1e:5d:03:5b:87:ac:ef:7b:d1:f4:3b:c3:08:f0:
1c:dd:0f:50:0e:45:9b:b9:6c:41:7e:51:7e:61:c7:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:25:D5:30:45:8C:EA:DB:E8:1A:4C:06:09:97:EC:11:CF:12:5B
X509v3 Authority Key Identifier:
keyid:AB:FE:6B:31:97:14:73:12:EC:1F:AE:05:A2:52:A3:96:4E:9B:B2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/ABFE6B3197147312EC1FAE05A252A3964E9BB235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ABFE6B3197147312EC1FAE05A252A3964E9BB235.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS45700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.204.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:84:43:de:43:c5:0d:14:e8:61:2a:16:77:ba:09:23:83:0a:
d8:fe:19:58:5e:2c:49:b5:40:0f:65:bc:43:79:5e:99:9c:7f:
78:84:e5:ff:e5:4d:d3:e2:79:cc:d2:76:aa:a0:35:7c:4c:8f:
a3:03:31:ef:2e:3a:3b:22:58:93:2e:e3:a9:56:8b:7c:8c:37:
4f:07:10:d6:35:8f:86:47:ef:b7:45:3f:7c:a7:d0:80:d1:f8:
04:d1:24:ad:9d:45:cc:0b:a6:58:de:e9:07:17:26:87:fc:a1:
62:b4:d3:dd:96:53:80:12:cd:ae:84:8f:bf:18:b4:05:4d:5b:
4b:b5:25:87:6d:7e:0d:32:0b:85:f9:43:67:54:e3:21:28:a6:
9d:53:8e:b1:5e:dc:13:db:db:04:a4:aa:4c:a7:a3:80:8a:3f:
0c:72:21:b7:b9:a7:64:14:5f:72:1d:86:bb:eb:63:40:76:c8:
e5:56:eb:63:3e:9c:d1:80:65:28:79:92:8f:51:d6:79:39:5b:
a3:75:08:06:2e:04:b0:6a:c9:41:5b:5f:f3:42:fe:ce:ec:47:
15:b6:fe:dc:84:9c:24:e9:bd:b9:e3:f2:bf:3a:ba:4a:16:ef:
f1:e4:cb:1a:c9:99:8b:c1:a6:be:b1:9d:98:d6:a8:cf:e7:f5:
9d:23:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:47 2026 by rpki-client