$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45720.roa File: AS45720.roa (raw, json) Hash identifier: j6iJGUyLeuDHBXIMdAUEwge7Th1IkA/n/iKTzwdpcoA= Subject key identifier: CB:14:E7:15:3E:C9:60:87:51:84:22:9E:8A:89:32:AF:34:B8:19:72 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76E3979F69381C5AF97934469BC27B6F43052D7E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45720.roa Signing time: Thu 16 Jul 2026 09:30:56 +0000 ROA not before: Thu 16 Jul 2026 09:25:56 +0000 ROA not after: Thu 15 Jul 2027 09:30:56 +0000 asID: 45720 IP address blocks: 103.236.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:97:9f:69:38:1c:5a:f9:79:34:46:9b:c2:7b:6f:43:05:2d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 16 09:25:56 2026 GMT Not After : Jul 15 09:30:56 2027 GMT Subject: CN=CB14E7153EC960875184229E8A8932AF34B81972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:85:39:b6:ea:c1:09:d0:7a:03:df:c1:a8: e6:aa:c6:7f:d2:2e:ea:ba:d4:69:0e:b2:80:bf:bb: 10:06:af:5d:b5:83:28:de:f9:8d:08:dc:fd:fc:53: 72:97:1b:74:1e:0e:cc:57:04:6f:b3:cc:a1:51:06: 23:d7:f7:d7:4b:ed:6a:9d:06:e0:39:02:07:d1:74: 5b:15:97:31:91:51:a5:d4:b1:d8:3d:61:ac:f8:a1: 65:8b:ca:b0:12:f5:fa:94:11:76:35:db:5c:0b:dd: 87:24:d3:13:ad:be:9f:33:0e:48:3e:e6:cc:89:85: ce:b0:19:48:e4:5b:60:65:52:91:8e:56:12:cc:da: ba:85:7c:03:b1:a4:a3:af:3e:55:8f:9a:d0:87:cd: 36:06:4a:48:1d:da:a7:cf:55:48:5c:23:1e:75:64: ac:55:b0:58:d0:db:8c:8c:1f:29:c5:55:6e:63:dd: 00:46:af:95:2a:ad:c8:f2:d0:70:04:a7:12:8a:24: 99:28:53:ef:76:21:0d:19:55:95:23:6b:eb:1f:da: 45:0b:5b:40:8e:37:4d:45:86:ed:0f:2a:4b:25:ca: a6:5e:b9:3b:90:3b:5a:f5:2a:ec:24:c3:ee:41:1a: a9:d3:1b:ae:62:c4:de:aa:c3:ea:3a:df:d2:db:7f: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:14:E7:15:3E:C9:60:87:51:84:22:9E:8A:89:32:AF:34:B8:19:72 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45720.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.160.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:33:a1:c3:75:ed:0c:d9:fe:d7:e4:15:f8:0c:04:cf:ce:10: 05:0d:43:de:e8:51:99:85:1e:14:40:df:42:8c:d1:af:c3:fc: 00:17:20:17:1d:1b:d2:e7:dc:70:5d:6a:ad:18:74:92:55:0b: 62:df:62:14:01:e7:70:9a:46:fb:dd:37:ce:66:98:e0:9c:45: da:09:fe:4c:ab:87:00:19:40:91:61:06:1d:6e:23:48:a7:82: 09:dc:3a:0c:de:e9:bc:b9:a5:45:60:03:b1:aa:07:0c:59:7b: 2e:fd:9a:df:bf:4d:86:77:af:09:82:20:05:8f:a8:66:73:72: e1:56:2f:3c:7d:69:4f:d1:29:99:ac:4a:48:69:eb:42:b7:01: b9:b7:fe:98:0c:38:9c:31:b5:2e:0a:6d:72:af:bc:48:9c:98: 0d:ee:b5:30:9d:51:a2:3c:3b:c5:7d:ff:98:43:37:1f:4b:bd: 05:2d:f0:ec:6f:3f:b0:06:e6:43:fc:32:ba:3d:7f:67:d1:62: 9b:be:6c:09:79:d9:46:ad:2b:ea:b4:8e:c6:85:aa:49:e9:9a: ae:a1:02:ae:1a:5e:a3:5f:c5:41:76:fc:24:c5:43:45:8a:8d: bd:8e:58:3c:5d:a8:15:e4:7f:62:51:21:51:39:c4:3e:39:41: 49:77:49:17 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUduOXn2k4HFr5eTRGm8J7b0MFLX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcxNjA5MjU1NloX DTI3MDcxNTA5MzA1NlowMzExMC8GA1UEAxMoQ0IxNEU3MTUzRUM5NjA4NzUxODQy MjlFOEE4OTMyQUYzNEI4MTk3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTVhTm26sEJ0HoD38Go5qrGf9Iu6rrUaQ6ygL+7EAavXbWDKN75jQjc/fxT cpcbdB4OzFcEb7PMoVEGI9f310vtap0G4DkCB9F0WxWXMZFRpdSx2D1hrPihZYvK sBL1+pQRdjXbXAvdhyTTE62+nzMOSD7mzImFzrAZSORbYGVSkY5WEszauoV8A7Gk o68+VY+a0IfNNgZKSB3ap89VSFwjHnVkrFWwWNDbjIwfKcVVbmPdAEavlSqtyPLQ cASnEookmShT73YhDRlVlSNr6x/aRQtbQI43TUWG7Q8qSyXKpl65O5A7WvUq7CTD 7kEaqdMbrmLE3qrD6jrf0tt/H/UCAwEAAaOCAcswggHHMB0GA1UdDgQWBBTLFOcV Pslgh1GEIp6KiTKvNLgZcjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDU3MjAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFn7KAwDQYJKoZIhvcNAQELBQADggEBAHwzocN17QzZ/tfkFfgMBM/OEAUN Q97oUZmFHhRA30KM0a/D/AAXIBcdG9Ln3HBdaq0YdJJVC2LfYhQB53CaRvvdN85m mOCcRdoJ/kyrhwAZQJFhBh1uI0inggncOgze6by5pUVgA7GqBwxZey79mt+/TYZ3 rwmCIAWPqGZzcuFWLzx9aU/RKZmsSkhp60K3Abm3/pgMOJwxtS4KbXKvvEicmA3u tTCdUaI8O8V9/5hDNx9LvQUt8OxvP7AG5kP8Mro9f2fRYpu+bAl52UatK+q0jsaF qknpmq6hAq4aXqNfxUF2/CTFQ0WKjb2OWDxdqBXkf2JRIVE5xD45QUl3SRc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:29 2026 by rpki-client