$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa File: AS64300.roa (raw, json) Hash identifier: I4tDjBbbTe3v7dWSLn6VjgUXepJYjMk/v9JZcW1h4Fw= Subject key identifier: B5:AB:E0:34:E2:D1:81:7A:06:95:19:1C:C7:93:70:EF:13:3C:AC:75 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5773377E165933ACAF310FB4366E044F8223D83A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa Signing time: Tue 27 Jan 2026 09:09:49 +0000 ROA not before: Tue 27 Jan 2026 09:04:49 +0000 ROA not after: Tue 26 Jan 2027 09:09:49 +0000 asID: 64300 IP address blocks: 103.13.204.0/23 maxlen: 24 103.18.232.0/23 maxlen: 24 103.46.8.0/23 maxlen: 24 103.67.46.0/23 maxlen: 24 163.61.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:73:37:7e:16:59:33:ac:af:31:0f:b4:36:6e:04:4f:82:23:d8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 27 09:04:49 2026 GMT Not After : Jan 26 09:09:49 2027 GMT Subject: CN=B5ABE034E2D1817A0695191CC79370EF133CAC75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:d7:ce:88:b3:c7:d6:f5:31:ff:e4:91:4e: 64:04:6e:fa:41:3b:b0:2c:f4:98:13:68:6b:f8:ac: 43:38:bb:e5:88:f1:fe:f4:ab:72:8c:31:1a:a3:40: b5:aa:73:b0:df:50:7c:a2:03:61:17:6d:30:81:42: e0:41:ba:b2:a5:3f:98:e9:7b:9d:89:9f:e2:58:c2: 76:b0:4a:a4:b1:22:02:e9:20:55:1f:d2:70:4d:82: fc:bc:bb:dd:21:cd:c5:75:e8:fc:94:dd:4b:cd:df: ce:18:50:eb:fc:13:62:93:50:73:56:74:56:9b:73: 7d:3c:ec:a7:73:61:34:25:d4:72:43:fa:3e:a1:04: 4f:44:84:c1:a5:4e:00:d5:87:78:b9:d9:af:53:d4: a1:d3:a4:9c:c8:6a:a2:08:ec:c4:81:81:1f:3a:6d: f4:5d:fd:08:17:8b:46:0e:87:df:5b:b6:a8:4d:56: 85:75:9c:a9:f3:ad:03:22:e9:7b:e0:37:db:01:cb: 6e:d9:4c:6f:d2:e4:4d:d3:e2:ca:7f:ec:8f:31:58: 33:a8:cb:86:cc:5b:be:7c:82:95:03:7f:df:e1:e2: 12:2a:e2:a1:4b:8b:e1:b1:2e:4f:90:95:66:37:b9: bb:ca:46:ed:be:12:5b:cb:b8:aa:91:da:ae:de:69: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AB:E0:34:E2:D1:81:7A:06:95:19:1C:C7:93:70:EF:13:3C:AC:75 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/23 103.18.232.0/23 103.46.8.0/23 103.67.46.0/23 163.61.225.0/24 Signature Algorithm: sha256WithRSAEncryption 17:6a:bf:27:76:d9:eb:bc:33:b9:36:24:c3:14:d9:86:48:5b: e2:ac:27:01:f3:ec:64:d6:45:de:f0:48:1c:d6:67:8f:d5:d7: 8f:ee:f7:78:01:34:44:16:5e:d6:10:20:bd:94:3f:9e:b1:91: f9:de:45:a1:e1:e5:ae:01:b9:49:ae:47:86:05:61:b0:5e:3f: d0:cc:47:f0:aa:c6:2d:4a:a5:6b:86:28:d8:b3:21:72:1d:f0: 11:ee:aa:7e:75:9e:6f:b2:34:87:36:98:e8:1d:e2:24:cf:e9: d3:91:6a:bb:6d:29:41:c4:9e:9e:ee:2f:01:fe:16:1e:04:c8: dc:0b:94:e0:20:97:fe:5a:f3:f4:95:e4:6f:bd:87:32:80:5c: 98:85:41:d4:b1:24:fd:4f:62:86:1e:b1:98:e8:17:b1:45:34: f1:0f:31:95:69:a3:96:b3:41:e1:ff:fc:3b:60:e4:38:e6:df: 42:70:47:76:89:07:af:57:6f:e6:f8:90:d1:65:e8:5d:d6:8e: 89:f1:55:5c:46:ff:b5:cd:e1:3f:56:7f:16:eb:3f:2a:06:bf: 0a:e7:2b:4f:68:94:24:07:ca:73:76:b4:f8:8d:cb:96:31:23: 3e:ce:a2:07:c1:67:41:00:6e:61:04:c1:63:01:60:37:79:96: bf:29:37:e0 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUV3M3fhZZM6yvMQ+0Nm4ET4Ij2DowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyNzA5MDQ0OVoX DTI3MDEyNjA5MDk0OVowMzExMC8GA1UEAxMoQjVBQkUwMzRFMkQxODE3QTA2OTUx OTFDQzc5MzcwRUYxMzNDQUM3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbI186Is8fW9TH/5JFOZARu+kE7sCz0mBNoa/isQzi75Yjx/vSrcowxGqNA tapzsN9QfKIDYRdtMIFC4EG6sqU/mOl7nYmf4ljCdrBKpLEiAukgVR/ScE2C/Ly7 3SHNxXXo/JTdS83fzhhQ6/wTYpNQc1Z0VptzfTzsp3NhNCXUckP6PqEET0SEwaVO ANWHeLnZr1PUodOknMhqogjsxIGBHzpt9F39CBeLRg6H31u2qE1WhXWcqfOtAyLp e+A32wHLbtlMb9LkTdPiyn/sjzFYM6jLhsxbvnyClQN/3+HiEirioUuL4bEuT5CV Zje5u8pG7b4SW8u4qpHart5puaECAwEAAaOCAecwggHjMB0GA1UdDgQWBBS1q+A0 4tGBegaVGRzHk3DvEzysdTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzY0MzAwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBZw3MAwQBZxLoAwQBZy4IAwQBZ0MuAwQAoz3hMA0GCSqGSIb3DQEB CwUAA4IBAQAXar8ndtnrvDO5NiTDFNmGSFvirCcB8+xk1kXe8Egc1meP1deP7vd4 ATREFl7WECC9lD+esZH53kWh4eWuAblJrkeGBWGwXj/QzEfwqsYtSqVrhijYsyFy HfAR7qp+dZ5vsjSHNpjoHeIkz+nTkWq7bSlBxJ6e7i8B/hYeBMjcC5TgIJf+WvP0 leRvvYcygFyYhUHUsST9T2KGHrGY6BexRTTxDzGVaaOWs0Hh//w7YOQ45t9CcEd2 iQevV2/m+JDRZehd1o6J8VVcRv+1zeE/Vn8W6z8qBr8K5ytPaJQkB8pzdrT4jcuW MSM+zqIHwWdBAG5hBMFjAWA3eZa/KTfg -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:12 2026 by rpki-client