$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137055.roa File: AS137055.roa (raw, json) Hash identifier: itB3MbeveRQt9uEIM95y+AfItsZOEIqjkz93jxgrxto= Subject key identifier: D5:C8:CA:B1:A2:DB:F7:95:42:D5:0F:A6:35:FD:5B:7E:8B:D3:C5:A1 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6419AA558538424981F26C42E26042A538F0F45A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137055.roa Signing time: Mon 02 Nov 2026 03:46:49 +0000 ROA not before: Mon 02 Nov 2026 03:41:49 +0000 ROA not after: Mon 01 Nov 2027 03:46:49 +0000 asID: 137055 IP address blocks: 160.236.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:19:aa:55:85:38:42:49:81:f2:6c:42:e2:60:42:a5:38:f0:f4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Nov 2 03:41:49 2026 GMT Not After : Nov 1 03:46:49 2027 GMT Subject: CN=D5C8CAB1A2DBF79542D50FA635FD5B7E8BD3C5A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:5a:d2:3f:9c:c7:16:2f:4a:c4:ee:70:d4: 3e:b5:5e:73:ac:27:b2:a0:2c:2f:5c:3c:aa:c4:3d: bd:6e:16:bb:fc:4b:cd:06:ba:11:23:75:bd:94:d3: 8b:17:85:14:e5:84:6a:be:2f:a2:be:e0:9c:69:e5: 45:28:c6:ae:e4:bc:0e:0d:6a:99:63:84:93:25:d4: 95:5a:22:2a:63:ac:80:a0:27:63:f7:d4:66:7c:f2: d6:6b:23:e1:23:8a:04:3d:36:fa:6f:7e:97:26:17: 6c:92:58:44:17:fc:e3:c3:85:3b:c7:27:f6:f8:77: 6a:7a:7c:0b:65:fe:a6:39:d1:6d:62:36:76:bf:d8: 50:3c:c7:5a:54:2a:1b:1f:97:cb:56:36:e9:54:f1: 7b:a6:a2:ee:73:38:df:f8:ff:b3:0d:04:65:e0:5b: 17:5e:0a:a7:d9:b9:70:72:4a:a3:d7:60:f7:8c:18: eb:be:a4:e4:eb:0d:5b:69:c0:f3:01:62:2c:ae:f1: 0e:2a:49:6c:a3:61:a4:ba:34:58:6e:af:c3:86:1e: 9f:cf:aa:85:e0:e6:28:8e:74:34:c5:bb:f3:0f:5d: 39:44:c9:2e:ab:03:c6:38:ad:e4:ee:56:0c:4c:3d: 05:35:3f:cd:54:db:18:29:22:a3:61:d8:59:93:2e: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C8:CA:B1:A2:DB:F7:95:42:D5:0F:A6:35:FD:5B:7E:8B:D3:C5:A1 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137055.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.122.0/24 Signature Algorithm: sha256WithRSAEncryption ad:45:c1:64:d1:a4:2f:4d:dc:72:0b:54:a3:24:84:3d:47:c8: 22:1c:d9:8d:87:59:3f:e6:7c:3d:d5:d6:a6:54:35:1c:35:e5: ad:54:59:26:48:0f:47:00:bd:ea:01:7c:ad:50:82:8f:a6:76: 61:2f:3a:7a:24:79:da:c0:b9:0d:d7:ee:5b:db:b8:0c:ac:b6: 36:3c:c3:df:a8:aa:55:e7:3a:7f:ce:a3:8e:a7:8b:dc:60:de: f9:22:d0:03:4b:13:1e:0b:d8:da:2c:e5:34:51:87:f1:4f:a5: 76:3b:ff:11:ab:2c:94:15:3c:fe:75:be:8d:71:88:83:24:a9: 99:a3:9e:43:30:51:d8:27:d7:26:41:bf:ef:3a:b7:b1:cf:08: 8d:98:67:28:ac:65:fb:55:51:5b:7b:83:7a:fa:76:63:16:22: 7c:49:43:4f:12:f0:b7:ab:4c:11:37:bb:e3:be:dc:97:c4:28: 0d:d7:eb:b8:a4:f5:37:f1:53:ef:fb:1b:62:15:0e:fc:08:99: 49:86:99:6b:c2:21:c0:b9:f7:5a:df:b6:f5:48:ea:da:91:09: 7b:06:fb:0a:d7:99:de:01:d5:67:7e:58:61:32:c2:72:8e:00: ed:16:45:fe:89:cd:82:bc:aa:dd:16:f2:70:a3:14:6d:c4:fa: 0a:35:1d:5a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZBmqVYU4QkmB8mxC4mBCpTjw9FowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTEwMjAzNDE0OVoX DTI3MTEwMTAzNDY0OVowMzExMC8GA1UEAxMoRDVDOENBQjFBMkRCRjc5NTQyRDUw RkE2MzVGRDVCN0U4QkQzQzVBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJodWtI/nMcWL0rE7nDUPrVec6wnsqAsL1w8qsQ9vW4Wu/xLzQa6ESN1vZTT ixeFFOWEar4vor7gnGnlRSjGruS8Dg1qmWOEkyXUlVoiKmOsgKAnY/fUZnzy1msj 4SOKBD02+m9+lyYXbJJYRBf848OFO8cn9vh3anp8C2X+pjnRbWI2dr/YUDzHWlQq Gx+Xy1Y26VTxe6ai7nM43/j/sw0EZeBbF14Kp9m5cHJKo9dg94wY676k5OsNW2nA 8wFiLK7xDipJbKNhpLo0WG6vw4Yen8+qheDmKI50NMW78w9dOUTJLqsDxjit5O5W DEw9BTU/zVTbGCkio2HYWZMuPdMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTVyMqx otv3lULVD6Y1/Vt+i9PFoTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3MDU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOx6MA0GCSqGSIb3DQEBCwUAA4IBAQCtRcFk0aQvTdxyC1SjJIQ9R8gi HNmNh1k/5nw91damVDUcNeWtVFkmSA9HAL3qAXytUIKPpnZhLzp6JHnawLkN1+5b 27gMrLY2PMPfqKpV5zp/zqOOp4vcYN75ItADSxMeC9jaLOU0UYfxT6V2O/8RqyyU FTz+db6NcYiDJKmZo55DMFHYJ9cmQb/vOrexzwiNmGcorGX7VVFbe4N6+nZjFiJ8 SUNPEvC3q0wRN7vjvtyXxCgN1+u4pPU38VPv+xtiFQ78CJlJhplrwiHAufda37b1 SOrakQl7BvsK15neAdVnflhhMsJyjgDtFkX+ic2CvKrdFvJwoxRtxPoKNR1a -----END CERTIFICATE-----Generated at Mon Nov 2 08:25:57 2026 by rpki-client