$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS45146.roa File: AS45146.roa (raw, json) Hash identifier: z0YAmcbjWQrc9Q/E9BIm5iqblUPDyJ5A5CH1hQPTKwI= Subject key identifier: F7:EA:E8:21:A4:F1:6D:27:B0:92:0A:DE:8E:8E:55:E8:00:62:6A:DF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75B4D16558C2DC1DBD7FAB13F4C51D0CACB7A317 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45146.roa Signing time: Thu 15 Oct 2026 04:49:56 +0000 ROA not before: Thu 15 Oct 2026 04:44:56 +0000 ROA not after: Thu 14 Oct 2027 04:49:56 +0000 asID: 45146 IP address blocks: 2407:c200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:d1:65:58:c2:dc:1d:bd:7f:ab:13:f4:c5:1d:0c:ac:b7:a3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 15 04:44:56 2026 GMT Not After : Oct 14 04:49:56 2027 GMT Subject: CN=F7EAE821A4F16D27B0920ADE8E8E55E800626ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:00:59:f0:c2:fe:3c:96:8f:b1:0f:f0:d9:64: 19:59:e6:f4:83:40:06:a9:c8:83:68:34:27:ea:9f: be:40:a1:a8:84:67:94:56:8c:be:16:4c:ac:69:b2: 8f:7e:5d:1a:e6:f4:02:35:e6:59:4e:97:47:b3:be: 74:10:3e:86:32:ec:8e:4f:1e:5e:ff:56:a5:d3:90: 52:60:c9:5a:9d:b6:21:7b:4a:0f:03:19:1f:3d:be: 5f:1f:68:69:a5:58:8e:7c:f3:10:10:83:85:53:84: 79:c8:e2:68:e1:6d:16:d8:7d:ca:ac:89:bc:18:d0: a8:b0:ea:61:43:6c:69:c4:06:8a:72:19:ee:b5:27: 8e:b8:5b:4f:5c:b9:bd:5c:b7:be:44:62:f1:40:df: 9c:be:85:0d:68:98:41:bc:ac:33:0f:59:83:b1:b4: fc:95:1f:cb:3c:27:6a:9c:95:ba:39:b2:40:1a:27: 00:f0:5f:4b:bf:75:bc:59:81:ff:8d:03:db:10:63: 89:84:8c:43:1a:04:d5:ad:a6:93:ed:cc:20:94:11: 9b:4b:ea:d5:dd:6b:95:08:4c:7b:ac:f1:06:ab:ae: 0a:21:04:62:a6:2b:85:30:5f:ee:31:30:03:98:9d: 9d:2a:4d:c5:00:27:75:29:09:dc:da:c6:97:b5:b5: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EA:E8:21:A4:F1:6D:27:B0:92:0A:DE:8E:8E:55:E8:00:62:6A:DF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS45146.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:c200::/32 Signature Algorithm: sha256WithRSAEncryption 1c:ec:38:b5:b8:cf:ed:04:5b:78:e1:e6:75:20:ac:e4:2e:4d: 83:db:90:20:93:2c:b2:6f:6d:fc:ec:5c:40:e9:88:b3:d4:62: f9:ee:e9:4a:ec:90:0f:4f:d4:d0:50:72:10:48:b7:45:f8:a7: 31:d4:db:5d:60:ac:5b:c7:7d:97:2c:0b:22:74:af:be:a2:7b: 3b:bd:ac:50:6d:d1:6e:5a:64:34:58:68:72:9d:97:8e:18:b3: 73:d2:48:23:d7:19:f9:34:15:2f:c2:23:8d:c9:c7:e6:aa:0f: 5d:31:e5:07:3c:55:46:05:aa:e9:f3:93:76:31:7a:25:76:c4: fd:98:94:e7:d0:c6:25:d3:2b:0a:f5:bf:8d:0c:c3:5f:22:96: 2a:5c:40:a7:0c:84:22:4b:bb:34:04:d6:5b:29:0a:1a:6a:20: b7:36:89:08:90:f2:a7:9b:cd:d5:4d:24:e5:34:32:40:68:35: 63:a1:3d:3e:82:19:89:4f:fd:fd:ef:21:27:22:3b:c2:c1:eb: ce:64:da:5c:0b:9f:c2:60:7f:b2:14:78:e7:c5:b8:33:17:ef: 46:cf:d9:c9:b5:fe:5c:e1:11:b8:9c:3a:3b:47:ed:2f:2e:ef: 3a:45:04:04:e8:3b:a8:e4:1c:f3:b6:71:47:e3:1d:29:cd:9d: d3:66:32:6f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdbTRZVjC3B29f6sT9MUdDKy3oxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxNTA0NDQ1NloX DTI3MTAxNDA0NDk1NlowMzExMC8GA1UEAxMoRjdFQUU4MjFBNEYxNkQyN0IwOTIw QURFOEU4RTU1RTgwMDYyNkFERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4AWfDC/jyWj7EP8NlkGVnm9INABqnIg2g0J+qfvkChqIRnlFaMvhZMrGmy j35dGub0AjXmWU6XR7O+dBA+hjLsjk8eXv9WpdOQUmDJWp22IXtKDwMZHz2+Xx9o aaVYjnzzEBCDhVOEecjiaOFtFth9yqyJvBjQqLDqYUNsacQGinIZ7rUnjrhbT1y5 vVy3vkRi8UDfnL6FDWiYQbysMw9Zg7G0/JUfyzwnapyVujmyQBonAPBfS791vFmB /40D2xBjiYSMQxoE1a2mk+3MIJQRm0vq1d1rlQhMe6zxBquuCiEEYqYrhTBf7jEw A5idnSpNxQAndSkJ3NrGl7W1mE0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT36ugh pPFtJ7CSCt6OjlXoAGJq3zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNDUxNDYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB8IAMA0GCSqGSIb3DQEBCwUAA4IBAQAc7Di1uM/tBFt44eZ1IKzkLk2D 25Agkyyyb2387FxA6Yiz1GL57ulK7JAPT9TQUHIQSLdF+Kcx1NtdYKxbx32XLAsi dK++ons7vaxQbdFuWmQ0WGhynZeOGLNz0kgj1xn5NBUvwiONycfmqg9dMeUHPFVG Barp85N2MXoldsT9mJTn0MYl0ysK9b+NDMNfIpYqXECnDIQiS7s0BNZbKQoaaiC3 NokIkPKnm83VTSTlNDJAaDVjoT0+ghmJT/397yEnIjvCwevOZNpcC5/CYH+yFHjn xbgzF+9Gz9nJtf5c4RG4nDo7R+0vLu86RQQE6Duo5BzztnFH4x0pzZ3TZjJv -----END CERTIFICATE-----Generated at Mon Nov 9 13:59:59 2026 by rpki-client