$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS136841.roa File: AS136841.roa (raw, json) Hash identifier: +s4YCMVV7CwjMicDFMrbaKJEV7UuHEfdj2CDEJo4Gjk= Subject key identifier: F4:B7:A5:44:42:F3:09:7A:71:F7:E0:E3:E5:1F:8D:17:33:E6:C8:9E Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2E925A9C66C3185A8F56E31068C98205A9AEAAF7 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136841.roa Signing time: Tue 23 Jun 2026 09:16:14 +0000 ROA not before: Tue 23 Jun 2026 09:11:14 +0000 ROA not after: Tue 22 Jun 2027 09:16:14 +0000 asID: 136841 IP address blocks: 67.216.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:92:5a:9c:66:c3:18:5a:8f:56:e3:10:68:c9:82:05:a9:ae:aa:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 23 09:11:14 2026 GMT Not After : Jun 22 09:16:14 2027 GMT Subject: CN=F4B7A54442F3097A71F7E0E3E51F8D1733E6C89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:e8:ce:4b:b4:33:2a:e8:59:6c:9a:7b:07: 9c:55:8a:f9:be:1e:80:60:f0:24:c6:2b:50:ab:e2: 23:6e:ef:57:24:9f:b2:8d:43:66:3a:69:ce:bf:22: 9f:f6:7d:ca:ee:10:45:f6:b7:2b:0c:00:a6:88:24: 2f:6c:9d:96:bc:bd:eb:ec:ea:ae:68:47:76:c9:70: f0:56:32:d7:f4:bc:09:2e:82:f7:81:39:b0:52:05: 3b:4b:79:81:d5:cc:df:83:29:47:5b:82:57:05:cc: 7e:c9:1e:69:15:8a:f0:26:d5:7a:cd:59:b7:b7:c2: bc:10:a8:a8:3e:0d:0d:fc:d6:83:b8:42:de:3f:47: c7:e6:07:19:e1:04:28:e8:ef:8e:91:25:25:6a:e9: 20:5f:22:cb:4c:e6:56:0f:eb:10:69:9b:f8:ee:c9: 78:79:4b:62:42:0d:6e:3a:92:44:1c:8e:0a:3d:97: 03:3d:8a:54:c6:7d:23:a3:45:e6:bd:a1:73:d2:0d: 5f:b6:71:40:b1:53:d8:ef:f2:46:61:ea:8d:16:13: d1:60:fd:66:62:5c:a0:69:ab:bf:95:4e:50:e9:9f: 9a:2a:6f:cb:8e:de:bd:ad:ba:4b:c8:19:04:00:e8: cc:7c:25:f1:34:19:22:b7:a0:e8:71:2a:7c:68:7e: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:A5:44:42:F3:09:7A:71:F7:E0:E3:E5:1F:8D:17:33:E6:C8:9E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.216.24.0/22 Signature Algorithm: sha256WithRSAEncryption a4:7c:f6:de:db:27:0a:96:a3:b6:fb:a5:d0:cb:f8:e3:34:dc: de:f0:df:ce:30:58:4c:e0:55:c7:90:62:91:58:d3:9b:e9:08: 0e:ac:99:3c:5f:8e:0e:0d:ad:ea:90:62:46:38:c9:4e:c0:fa: 4c:8c:ee:48:8c:80:2d:ae:c4:41:6c:05:89:66:e6:76:35:5f: cd:0c:86:ca:88:a0:66:80:51:5a:da:cb:a2:2d:5b:db:fc:33: 02:d5:bf:c4:f0:69:c5:00:08:9f:44:e1:f7:8a:0a:59:55:b7: 10:a3:b8:cb:8f:fc:83:e2:e6:2c:2b:d7:a3:e1:f3:ec:dd:c5: 70:cf:c7:b2:2c:2d:44:8d:6d:88:9c:13:16:9c:a6:1c:77:fc: 65:da:b9:a4:63:4f:15:32:f4:e0:e7:78:38:d0:6b:24:5a:08: 34:dd:1d:fa:8b:99:f2:10:a7:d3:fa:9f:d0:b2:7f:ae:85:11: 2d:85:c6:38:46:d7:5a:f8:3c:9d:93:ba:45:52:8a:7d:65:c2: 62:87:3f:d7:a5:ca:c2:16:d9:f6:fe:be:bd:18:be:48:8a:fd: 6e:57:8d:d9:a8:2d:aa:2e:65:d4:09:ad:79:17:b1:70:88:2d: d1:d7:bd:c3:58:fb:35:ef:6d:e2:09:21:fa:99:cc:ca:49:b8: 24:93:fe:ae -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULpJanGbDGFqPVuMQaMmCBamuqvcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyMzA5MTExNFoX DTI3MDYyMjA5MTYxNFowMzExMC8GA1UEAxMoRjRCN0E1NDQ0MkYzMDk3QTcxRjdF MEUzRTUxRjhEMTczM0U2Qzg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOr6M5LtDMq6FlsmnsHnFWK+b4egGDwJMYrUKviI27vVySfso1DZjppzr8i n/Z9yu4QRfa3KwwApogkL2ydlry96+zqrmhHdslw8FYy1/S8CS6C94E5sFIFO0t5 gdXM34MpR1uCVwXMfskeaRWK8CbVes1Zt7fCvBCoqD4NDfzWg7hC3j9Hx+YHGeEE KOjvjpElJWrpIF8iy0zmVg/rEGmb+O7JeHlLYkINbjqSRByOCj2XAz2KVMZ9I6NF 5r2hc9INX7ZxQLFT2O/yRmHqjRYT0WD9ZmJcoGmrv5VOUOmfmipvy47eva26S8gZ BADozHwl8TQZIreg6HEqfGh+WAsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT0t6VE QvMJenH34OPlH40XM+bInjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM2ODQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCQ9gYMA0GCSqGSIb3DQEBCwUAA4IBAQCkfPbe2ycKlqO2+6XQy/jjNNze 8N/OMFhM4FXHkGKRWNOb6QgOrJk8X44ODa3qkGJGOMlOwPpMjO5IjIAtrsRBbAWJ ZuZ2NV/NDIbKiKBmgFFa2suiLVvb/DMC1b/E8GnFAAifROH3igpZVbcQo7jLj/yD 4uYsK9ej4fPs3cVwz8eyLC1EjW2InBMWnKYcd/xl2rmkY08VMvTg53g40GskWgg0 3R36i5nyEKfT+p/Qsn+uhREthcY4Rtda+Dydk7pFUop9ZcJihz/XpcrCFtn2/r69 GL5Iiv1uV43ZqC2qLmXUCa15F7FwiC3R173DWPs1723iCSH6mczKSbgkk/6u -----END CERTIFICATE-----Generated at Sun Jul 19 11:45:33 2026 by rpki-client