$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134640.roa File: AS134640.roa (raw, json) Hash identifier: DxRpVxycY6GhTSrySBR6E6fKhtyC9VgMd2cnOPEGZ1Q= Subject key identifier: 93:E7:6C:F8:DC:4F:83:7D:26:CE:4B:4F:55:D7:AE:B0:B4:D4:53:E8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E18EE1D77EF44F2D29D6CA525BAE566391E6135 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134640.roa Signing time: Mon 18 May 2026 03:47:45 +0000 ROA not before: Mon 18 May 2026 03:42:45 +0000 ROA not after: Mon 17 May 2027 03:47:45 +0000 asID: 134640 IP address blocks: 114.199.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:18:ee:1d:77:ef:44:f2:d2:9d:6c:a5:25:ba:e5:66:39:1e:61:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 18 03:42:45 2026 GMT Not After : May 17 03:47:45 2027 GMT Subject: CN=93E76CF8DC4F837D26CE4B4F55D7AEB0B4D453E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8b:54:a2:22:e6:c4:47:1d:e5:08:91:d5:ff: 4f:35:16:42:2f:a5:6d:91:5f:7c:2b:7d:90:aa:2b: c4:35:89:75:a9:fe:18:53:1f:06:6a:d4:86:b6:e4: 77:ca:a6:c0:ab:d3:6e:e7:f8:0e:4d:7f:6e:03:21: 00:92:77:cd:e5:6c:f1:63:48:57:f5:75:83:0d:3f: 67:d8:b5:f2:4a:60:da:cd:6e:1a:51:55:41:50:3a: ee:f7:18:4c:7c:26:d8:b2:62:98:93:b6:59:00:d3: 75:c4:15:1f:df:a3:31:26:ed:ef:4c:0d:0d:47:a0: 6a:b3:f9:47:07:db:2d:23:e8:df:a4:12:60:f3:d1: 4f:fd:3b:63:bf:33:1c:a3:75:15:d5:2e:8e:a1:71: 9d:76:a5:02:c5:a5:bd:7b:d3:0a:92:c9:5a:be:8a: 47:a6:db:23:e4:dd:20:b5:7d:89:88:ba:06:d9:42: c2:ba:58:7c:53:79:1d:ca:cc:2f:0e:86:e3:b8:7e: 0e:0c:88:c7:9d:c0:aa:64:ed:6b:71:62:bc:c6:45: 21:c2:c0:cd:b5:5c:ac:cb:ca:7d:9a:28:e6:f6:89: f5:84:aa:ab:ca:fd:38:46:dc:95:94:50:ca:ec:b2: d4:39:ce:05:c5:94:97:55:00:18:46:65:16:fb:82: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E7:6C:F8:DC:4F:83:7D:26:CE:4B:4F:55:D7:AE:B0:B4:D4:53:E8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.80.0/24 Signature Algorithm: sha256WithRSAEncryption 24:5e:4f:75:72:b1:42:04:19:7b:c1:b0:3f:e0:24:37:5a:45: 43:ad:a6:30:ea:49:db:45:00:12:15:bc:f9:8d:0f:5f:50:fe: 75:94:39:7c:a4:63:cd:3b:09:de:89:7d:a0:e3:e1:a3:18:8a: e8:cf:5b:96:36:52:ef:3e:58:a7:88:7e:82:a1:c7:71:15:54: 63:55:c5:9e:e5:38:d9:ff:0c:c4:58:c7:66:bd:92:c2:28:6a: 0d:fd:9c:0a:b7:1d:39:1e:7b:e6:f4:ad:50:15:b4:cb:b1:32: 01:88:ba:f6:8f:10:2b:94:83:e5:8a:4d:d3:ae:1f:30:78:e3: c5:34:35:ea:35:de:5b:f6:5c:d2:5a:5b:35:f5:1f:d8:ec:ab: 60:32:ef:16:ee:76:2b:f9:9d:a9:08:4b:46:5e:86:6f:2e:f3: 00:6b:85:2c:b6:e4:f9:11:65:1b:50:7e:70:0f:d9:ef:14:c4: fe:b5:83:b2:ad:6e:d0:7f:b6:29:6a:cc:0e:99:54:7f:58:ca: ac:fc:6b:86:63:37:ab:f0:41:b5:b0:99:fb:43:1b:32:f5:16: 2e:c5:82:23:c1:52:7f:21:e9:37:a2:b7:c9:29:58:d2:68:e5: 8f:26:ab:0f:87:be:23:e3:fb:8d:fe:17:41:6f:0d:1c:32:1a: a8:f6:e6:5c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbhjuHXfvRPLSnWylJbrlZjkeYTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUxODAzNDI0NVoX DTI3MDUxNzAzNDc0NVowMzExMC8GA1UEAxMoOTNFNzZDRjhEQzRGODM3RDI2Q0U0 QjRGNTVEN0FFQjBCNEQ0NTNFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPmLVKIi5sRHHeUIkdX/TzUWQi+lbZFffCt9kKorxDWJdan+GFMfBmrUhrbk d8qmwKvTbuf4Dk1/bgMhAJJ3zeVs8WNIV/V1gw0/Z9i18kpg2s1uGlFVQVA67vcY THwm2LJimJO2WQDTdcQVH9+jMSbt70wNDUegarP5RwfbLSPo36QSYPPRT/07Y78z HKN1FdUujqFxnXalAsWlvXvTCpLJWr6KR6bbI+TdILV9iYi6BtlCwrpYfFN5HcrM Lw6G47h+DgyIx53AqmTta3FivMZFIcLAzbVcrMvKfZoo5vaJ9YSqq8r9OEbclZRQ yuyy1DnOBcWUl1UAGEZlFvuCc5sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBST52z4 3E+DfSbOS09V166wtNRT6DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjQwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAcsdQMA0GCSqGSIb3DQEBCwUAA4IBAQAkXk91crFCBBl7wbA/4CQ3WkVD raYw6knbRQASFbz5jQ9fUP51lDl8pGPNOwneiX2g4+GjGIroz1uWNlLvPliniH6C ocdxFVRjVcWe5TjZ/wzEWMdmvZLCKGoN/ZwKtx05Hnvm9K1QFbTLsTIBiLr2jxAr lIPlik3Trh8weOPFNDXqNd5b9lzSWls19R/Y7KtgMu8W7nYr+Z2pCEtGXoZvLvMA a4UstuT5EWUbUH5wD9nvFMT+tYOyrW7Qf7YpaswOmVR/WMqs/GuGYzer8EG1sJn7 Qxsy9RYuxYIjwVJ/Iek3orfJKVjSaOWPJqsPh74j4/uN/hdBbw0cMhqo9uZc -----END CERTIFICATE-----Generated at Wed Jun 3 03:31:50 2026 by rpki-client