$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa File: AS64300.roa (raw, json) Hash identifier: xv4GWclQN0lEmdjt4dDQ7b8LDWjk78HU8J5Mvw3EPH4= Subject key identifier: 5C:63:A8:A7:6F:E1:74:29:9C:6D:EE:99:D4:79:AA:C7:C9:68:A9:92 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55227F54B501505A905D16A002A5321A3FBCCC63 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa Signing time: Thu 10 Jul 2025 08:00:00 +0000 ROA not before: Thu 10 Jul 2025 07:55:00 +0000 ROA not after: Thu 09 Jul 2026 08:00:00 +0000 asID: 64300 IP address blocks: 103.13.204.0/23 maxlen: 24 103.18.232.0/23 maxlen: 24 103.46.8.0/23 maxlen: 24 103.67.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:22:7f:54:b5:01:50:5a:90:5d:16:a0:02:a5:32:1a:3f:bc:cc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 10 07:55:00 2025 GMT Not After : Jul 9 08:00:00 2026 GMT Subject: CN=5C63A8A76FE174299C6DEE99D479AAC7C968A992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a2:ab:e4:1c:21:1e:c4:6f:df:fd:f3:1e:7e: b3:92:68:e3:cf:2d:d0:3d:4e:ff:e5:a8:21:bd:7a: 6a:22:19:91:bf:ff:7d:ca:64:66:8d:2b:9e:99:cd: 71:da:62:a4:f4:2c:d9:1c:bc:69:c8:36:f4:c7:04: 21:3e:d6:e0:7b:da:2a:4b:0f:3f:bb:72:7d:21:31: c2:5b:5a:4c:42:73:e8:64:c6:9b:a1:50:10:e8:a0: 67:a2:9d:69:47:c4:95:fb:ce:10:6e:08:dd:38:ff: 3d:ec:44:cf:7e:12:d8:c5:18:0f:a5:de:9e:df:eb: f8:52:5f:13:40:c6:de:22:bd:24:a5:15:a9:a6:e8: 7c:d9:1f:f2:ef:28:8e:d5:78:05:a6:c9:d2:5a:f0: 3f:3d:e4:be:3e:d1:43:05:fd:a5:fc:bb:f8:f6:bd: 27:e2:a3:00:e4:aa:a7:9b:c4:55:81:d5:a9:3f:99: 27:71:2d:b4:2f:28:57:42:bf:19:41:86:8d:f7:0b: d8:da:d7:d2:fd:8d:1f:f5:fc:75:de:25:a4:ee:d7: c3:60:7f:3f:6a:e8:92:7b:c6:2d:31:db:b7:3c:e0: 3d:cf:18:e5:2e:8a:6a:ea:f4:ac:0c:ff:b6:1e:8b: 54:b3:4b:d8:d7:37:85:a0:82:8f:ec:33:59:31:32: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:A8:A7:6F:E1:74:29:9C:6D:EE:99:D4:79:AA:C7:C9:68:A9:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS64300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/23 103.18.232.0/23 103.46.8.0/23 103.67.46.0/23 Signature Algorithm: sha256WithRSAEncryption 12:f7:0c:a8:8b:c5:cc:42:07:8c:59:48:08:be:bb:bf:3f:4f: 5a:83:1c:ad:be:7c:d6:00:66:04:c2:90:b9:85:ed:89:12:b1: ca:32:c9:b7:a2:6d:27:3a:b3:f9:95:63:52:9a:58:dc:f5:88: 55:11:58:b7:ac:c1:ff:30:5b:25:3e:5a:e3:c3:e7:86:9f:ac: b0:17:c4:94:5c:a7:40:ea:32:8b:6c:5e:62:61:85:54:3a:0d: e9:9c:fd:aa:4c:48:60:46:1b:f1:f5:49:87:1a:cc:85:32:2b: a3:80:89:d8:64:83:1b:1d:93:af:cb:aa:f1:e1:bb:03:c5:6f: 65:f6:53:41:2d:93:10:50:7f:a0:a3:44:68:71:38:4b:09:d5: 15:6d:e5:59:69:e6:a6:09:26:d7:15:6b:bb:a5:0b:41:5a:3f: 7b:21:a7:0d:02:e7:a7:53:78:8d:49:65:4c:da:de:b9:8d:65: ae:9e:01:9b:e3:b1:bc:52:e4:b0:2b:43:e3:b3:88:a3:ac:85: 29:5e:3f:33:ca:48:53:54:0d:93:10:e7:37:02:d8:bb:9b:96: 15:7b:84:7c:45:2e:e0:e6:f7:5c:b4:34:39:c6:26:54:61:e0: e7:d0:4f:23:1f:db:6a:09:c6:d0:16:b0:da:e1:eb:16:f0:b0: 6d:0b:ba:da -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUVSJ/VLUBUFqQXRagAqUyGj+8zGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMDA3NTUwMFoX DTI2MDcwOTA4MDAwMFowMzExMC8GA1UEAxMoNUM2M0E4QTc2RkUxNzQyOTlDNkRF RTk5RDQ3OUFBQzdDOTY4QTk5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2iq+QcIR7Eb9/98x5+s5Jo488t0D1O/+WoIb16aiIZkb//fcpkZo0rnpnN cdpipPQs2Ry8acg29McEIT7W4HvaKksPP7tyfSExwltaTEJz6GTGm6FQEOigZ6Kd aUfElfvOEG4I3Tj/PexEz34S2MUYD6Xent/r+FJfE0DG3iK9JKUVqabofNkf8u8o jtV4BabJ0lrwPz3kvj7RQwX9pfy7+Pa9J+KjAOSqp5vEVYHVqT+ZJ3EttC8oV0K/ GUGGjfcL2NrX0v2NH/X8dd4lpO7Xw2B/P2roknvGLTHbtzzgPc8Y5S6Kaur0rAz/ th6LVLNL2Nc3haCCj+wzWTEyAwcCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRcY6in b+F0KZxt7pnUearHyWipkjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzY0MzAwLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBZw3MAwQBZxLoAwQBZy4IAwQBZ0MuMA0GCSqGSIb3DQEBCwUAA4IB AQAS9wyoi8XMQgeMWUgIvru/P09agxytvnzWAGYEwpC5he2JErHKMsm3om0nOrP5 lWNSmljc9YhVEVi3rMH/MFslPlrjw+eGn6ywF8SUXKdA6jKLbF5iYYVUOg3pnP2q TEhgRhvx9UmHGsyFMiujgInYZIMbHZOvy6rx4bsDxW9l9lNBLZMQUH+go0RocThL CdUVbeVZaeamCSbXFWu7pQtBWj97IacNAuenU3iNSWVM2t65jWWungGb47G8UuSw K0Pjs4ijrIUpXj8zykhTVA2TEOc3Ati7m5YVe4R8RS7g5vdctDQ5xiZUYeDn0E8j H9tqCcbQFrDa4esW8LBtC7ra -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:40 2025 by rpki-client