$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135659.roa File: AS135659.roa (raw, json) Hash identifier: u2qy3JITdJSO9pzgAuoJnglKSWnBplPrJf48MvTSS5w= Subject key identifier: 9F:12:D9:78:64:E0:D4:36:62:7C:B2:6A:F8:2D:6F:3C:D3:22:43:9F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 405921BA71EBAE9BDF4127A24EE262F57124E728 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135659.roa Signing time: Fri 29 Aug 2025 02:41:12 +0000 ROA not before: Fri 29 Aug 2025 02:36:12 +0000 ROA not after: Fri 28 Aug 2026 02:41:12 +0000 asID: 135659 IP address blocks: 2001:df4:c6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 04:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:59:21:ba:71:eb:ae:9b:df:41:27:a2:4e:e2:62:f5:71:24:e7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 02:36:12 2025 GMT Not After : Aug 28 02:41:12 2026 GMT Subject: CN=9F12D97864E0D436627CB26AF82D6F3CD322439F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:a5:ed:27:ce:ac:47:6f:63:bf:90:50:fd: 8f:2a:b5:09:53:bf:29:70:f1:7f:a2:d2:f3:05:da: 86:2d:2f:94:43:22:59:c3:86:56:1d:ea:54:fd:d4: 32:c6:61:51:a2:e8:79:5d:b3:5d:00:70:c6:4a:b5: 26:70:85:62:f3:73:e1:83:3f:0f:9a:62:e8:76:a4: da:ea:4e:0b:9f:68:26:f0:25:d5:d0:d2:28:e1:6f: 04:66:62:9c:32:10:d3:aa:6d:33:1a:35:99:6e:4a: e5:46:99:1e:e9:d7:6f:2f:9f:c2:2d:20:73:3f:b5: 62:8b:22:ff:62:5e:35:43:cc:a5:6c:56:56:f0:f0: c4:87:05:06:76:7c:66:6f:2b:56:b9:4a:b4:b4:4d: 81:69:f3:9d:22:8f:58:6e:78:54:27:44:0c:7b:13: a8:c8:2b:8e:e8:bb:f1:3c:f1:26:19:9a:33:70:8c: 34:5b:1b:3e:7d:d1:51:0e:18:79:a4:e9:7d:73:ca: aa:88:3a:a6:73:7f:6e:03:34:53:53:26:91:1b:c9: 97:56:ea:a4:d6:b6:ba:60:c7:05:a9:c8:2f:47:e8: 05:33:03:5f:d2:c5:f6:67:ca:07:6f:db:99:1f:84: 92:cc:9c:42:15:0d:89:c1:34:2d:a0:2d:b0:43:6f: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:12:D9:78:64:E0:D4:36:62:7C:B2:6A:F8:2D:6F:3C:D3:22:43:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:c6c0::/48 Signature Algorithm: sha256WithRSAEncryption 6e:15:c5:6e:48:42:ac:b5:62:6d:5f:5f:03:48:ac:5f:00:05: 57:3e:2d:f4:16:af:bd:be:19:ee:1e:8e:50:a4:6a:e5:60:94: 6b:c4:f9:f0:2b:13:70:0f:59:54:cd:7d:77:56:9b:e7:c5:6a: b3:92:54:e4:a2:04:00:a1:f2:89:fe:04:03:df:fd:74:46:ea: d0:f5:01:4e:84:05:c5:ec:54:f1:08:4e:79:bd:48:87:97:13: 95:9c:fa:54:30:33:7f:62:ea:9a:25:e2:75:c4:60:f5:86:69: d8:33:11:e3:4a:30:e9:8c:91:4e:61:52:e0:d3:c4:71:ca:e2: 04:3a:23:21:07:cb:bb:0d:a5:25:42:eb:a8:50:7d:3c:02:d5: 6e:15:2b:44:cd:d4:8c:43:fb:67:95:17:9e:ef:ba:ff:76:20: a0:28:b6:d1:e9:9c:01:64:16:3d:18:66:27:7d:e6:10:88:f9: a8:6f:54:e0:d7:c7:14:51:ad:8a:f4:c1:7b:6a:f2:d2:06:d1: ce:9b:40:9f:85:48:6e:da:ed:19:ec:77:61:ff:b0:fb:ee:02: f7:e9:9c:ea:82:92:70:9f:0b:95:df:5a:40:a9:93:c3:6f:da: 94:4e:b9:66:78:20:d4:c5:d1:66:7b:63:4b:6d:b4:1c:31:ce: 86:75:f1:b8 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUQFkhunHrrpvfQSeiTuJi9XEk5ygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyOTAyMzYxMloX DTI2MDgyODAyNDExMlowMzExMC8GA1UEAxMoOUYxMkQ5Nzg2NEUwRDQzNjYyN0NC MjZBRjgyRDZGM0NEMzIyNDM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeJpe0nzqxHb2O/kFD9jyq1CVO/KXDxf6LS8wXahi0vlEMiWcOGVh3qVP3U MsZhUaLoeV2zXQBwxkq1JnCFYvNz4YM/D5pi6Hak2upOC59oJvAl1dDSKOFvBGZi nDIQ06ptMxo1mW5K5UaZHunXby+fwi0gcz+1Yosi/2JeNUPMpWxWVvDwxIcFBnZ8 Zm8rVrlKtLRNgWnznSKPWG54VCdEDHsTqMgrjui78TzxJhmaM3CMNFsbPn3RUQ4Y eaTpfXPKqog6pnN/bgM0U1MmkRvJl1bqpNa2umDHBanIL0foBTMDX9LF9mfKB2/b mR+EksycQhUNicE0LaAtsENvz8sCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSfEtl4 ZODUNmJ8smr4LW880yJDnzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTY1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfTGwDANBgkqhkiG9w0BAQsFAAOCAQEAbhXFbkhCrLVibV9f A0isXwAFVz4t9Bavvb4Z7h6OUKRq5WCUa8T58CsTcA9ZVM19d1ab58Vqs5JU5KIE AKHyif4EA9/9dEbq0PUBToQFxexU8QhOeb1Ih5cTlZz6VDAzf2LqmiXidcRg9YZp 2DMR40ow6YyRTmFS4NPEccriBDojIQfLuw2lJULrqFB9PALVbhUrRM3UjEP7Z5UX nu+6/3YgoCi20emcAWQWPRhmJ33mEIj5qG9U4NfHFFGtivTBe2ry0gbRzptAn4VI btrtGex3Yf+w++4C9+mc6oKScJ8Lld9aQKmTw2/alE65Zngg1MXRZntjS220HDHO hnXxuA== -----END CERTIFICATE-----Generated at Tue Oct 28 03:58:51 2025 by rpki-client