$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS46054.roa File: AS46054.roa (raw, json) Hash identifier: hPtrHokrj+Q2GYmTWUPnp68qgmYiJL1mOrN4Y9Bhq7g= Subject key identifier: 8D:CF:92:25:02:D4:25:A7:7E:D5:6E:0E:62:A1:E4:2F:4E:21:56:F2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 09A40834088BB1BFE6A3E2007A8CD3F769D8354C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46054.roa Signing time: Thu 23 Jul 2026 03:29:57 +0000 ROA not before: Thu 23 Jul 2026 03:24:57 +0000 ROA not after: Thu 22 Jul 2027 03:29:57 +0000 asID: 46054 IP address blocks: 2402:66e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:08:34:08:8b:b1:bf:e6:a3:e2:00:7a:8c:d3:f7:69:d8:35:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 23 03:24:57 2026 GMT Not After : Jul 22 03:29:57 2027 GMT Subject: CN=8DCF922502D425A77ED56E0E62A1E42F4E2156F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:0a:d9:d1:57:52:4c:70:cd:24:5e:11:b4: 49:b3:9d:ac:e1:d0:41:db:4d:d0:3c:5a:88:ea:f1: eb:4c:e7:97:6f:84:3e:dc:3a:b7:8a:b7:72:e1:40: cd:fe:9f:1b:3c:0a:17:64:fd:1f:14:37:c9:88:ed: 2f:64:9a:3c:82:64:e0:8d:81:9e:e9:89:5b:aa:18: 8b:90:2d:4c:90:a4:bf:7c:50:01:f8:94:36:a3:4a: fe:8a:6a:ca:56:d8:df:5b:3c:ca:01:b7:78:c9:1c: 5d:31:19:37:f0:89:77:6f:1e:b9:65:61:f3:a4:40: 65:44:03:ee:5e:94:36:df:63:d4:06:62:92:38:1c: b1:0b:e2:ca:49:a4:74:3d:dd:ca:06:64:e9:cb:ee: c7:58:bb:43:e5:d0:2f:74:12:31:9c:b6:61:f8:60: d0:7a:ee:fc:bc:6b:bc:f2:6e:5c:28:02:d0:a9:c5: 04:5e:8a:02:a3:29:e0:3a:43:87:8a:8b:82:19:c1: f0:bc:3a:36:f9:16:bc:e5:03:a9:20:82:94:01:84: 96:42:74:6a:81:56:9b:45:81:d0:2b:3f:a9:8a:33: e2:6d:a5:b1:a0:c0:ed:74:f7:04:f3:b8:1e:27:35: cc:6d:72:30:0f:5f:21:99:b3:e3:ed:23:9a:58:93: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CF:92:25:02:D4:25:A7:7E:D5:6E:0E:62:A1:E4:2F:4E:21:56:F2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS46054.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:66e0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:65:8b:2d:b7:9a:97:b3:7f:fb:01:8d:f0:32:61:bc:bb:c1: 93:f9:b8:ab:c6:30:5a:3f:50:96:30:a8:dd:bd:c5:a6:f7:a7: df:99:90:70:72:c9:cd:f2:2a:5c:90:2a:1f:2d:42:78:97:c8: 8b:13:4b:14:39:70:64:04:3d:d4:3e:1b:e3:93:a0:e7:d9:7b: 1d:b7:70:f6:e4:aa:fa:a8:6c:14:91:cf:6f:f7:b8:d6:dc:c7: 6b:b8:be:e7:ca:69:cd:01:88:bf:5a:59:ec:08:fc:63:1e:7d: f5:e6:b0:38:cb:cb:05:3a:c2:94:87:dd:d9:80:2e:a1:28:38: 26:86:67:2a:72:8c:f5:fa:cb:f7:ab:86:5c:e5:1b:78:ea:37: dc:f4:6d:20:f3:63:50:d9:41:8b:25:97:48:79:cf:a1:0f:9a: f9:03:ed:09:a9:e7:d9:e9:4e:e6:5a:cc:b5:38:84:de:ef:a9: ed:6c:84:a6:d2:7b:fa:25:84:f5:69:b2:73:50:cf:1d:38:00: 1d:f5:48:7a:ee:07:d7:25:cf:ad:32:6f:89:37:ef:b2:c9:c8: 00:2c:59:68:54:bc:a7:76:ec:91:48:66:d8:9d:06:b0:dd:f8: 96:ff:fe:7f:ef:19:67:42:7f:18:e9:84:a8:c9:91:bd:a4:f9: 6b:4e:71:c4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCaQINAiLsb/mo+IAeozT92nYNUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyMzAzMjQ1N1oX DTI3MDcyMjAzMjk1N1owMzExMC8GA1UEAxMoOERDRjkyMjUwMkQ0MjVBNzdFRDU2 RTBFNjJBMUU0MkY0RTIxNTZGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvgCtnRV1JMcM0kXhG0SbOdrOHQQdtN0DxaiOrx60znl2+EPtw6t4q3cuFA zf6fGzwKF2T9HxQ3yYjtL2SaPIJk4I2BnumJW6oYi5AtTJCkv3xQAfiUNqNK/opq ylbY31s8ygG3eMkcXTEZN/CJd28euWVh86RAZUQD7l6UNt9j1AZikjgcsQviykmk dD3dygZk6cvux1i7Q+XQL3QSMZy2Yfhg0Hru/LxrvPJuXCgC0KnFBF6KAqMp4DpD h4qLghnB8Lw6NvkWvOUDqSCClAGElkJ0aoFWm0WB0Cs/qYoz4m2lsaDA7XT3BPO4 Hic1zG1yMA9fIZmz4+0jmliTxT0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSNz5Il AtQlp37Vbg5ioeQvTiFW8jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDYwNTQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAmbgMA0GCSqGSIb3DQEBCwUAA4IBAQBeZYstt5qXs3/7AY3wMmG8u8GT +birxjBaP1CWMKjdvcWm96ffmZBwcsnN8ipckCofLUJ4l8iLE0sUOXBkBD3UPhvj k6Dn2Xsdt3D25Kr6qGwUkc9v97jW3MdruL7nymnNAYi/WlnsCPxjHn315rA4y8sF OsKUh93ZgC6hKDgmhmcqcoz1+sv3q4Zc5Rt46jfc9G0g82NQ2UGLJZdIec+hD5r5 A+0JqefZ6U7mWsy1OITe76ntbISm0nv6JYT1abJzUM8dOAAd9Uh67gfXJc+tMm+J N++yycgALFloVLynduyRSGbYnQaw3fiW//5/7xlnQn8Y6YSoyZG9pPlrTnHE -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:08 2026 by rpki-client