$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS131769.roa File: AS131769.roa (raw, json) Hash identifier: TKN0URLSHx1+E+qTuOtVjy/2902wMEXUEffC8g/KLbQ= Subject key identifier: 8C:04:08:14:1E:7C:BA:70:34:DC:3C:51:2F:11:FC:1C:5F:41:0A:4E Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 39F11D0F40F68E829E6E545170B38A904AEB6861 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS131769.roa Signing time: Sat 02 May 2026 09:23:52 +0000 ROA not before: Sat 02 May 2026 09:18:52 +0000 ROA not after: Sat 01 May 2027 09:23:52 +0000 asID: 131769 IP address blocks: 160.22.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f1:1d:0f:40:f6:8e:82:9e:6e:54:51:70:b3:8a:90:4a:eb:68:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:52 2026 GMT Not After : May 1 09:23:52 2027 GMT Subject: CN=8C0408141E7CBA7034DC3C512F11FC1C5F410A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:7e:5d:84:99:cc:93:0b:66:7e:16:01:12: dd:90:b1:8f:30:19:fa:32:f9:bc:b0:bf:d5:c2:9f: c7:bc:3e:9d:39:3a:fa:57:01:fc:d9:6e:32:b8:4a: 80:6c:ad:4c:8a:b9:27:ff:26:b9:66:2c:bf:17:0a: 92:b4:f0:1f:b0:1e:ed:e4:75:16:f2:2c:cf:9d:67: c3:1f:4d:a4:c6:69:b9:46:fc:41:07:47:2d:46:b5: 59:92:a4:e2:5f:55:52:47:00:f3:9a:e7:59:54:65: 54:a3:f5:a8:ad:b5:9c:eb:f8:65:4b:e9:20:75:4a: 31:79:2e:eb:3b:31:b9:c5:64:70:52:d5:67:6f:70: cb:d3:b8:11:79:14:95:cd:0e:88:ac:80:d0:d1:2b: 1b:8f:1d:19:1d:80:c7:b7:e9:3a:35:dc:4f:32:91: c9:8e:ad:64:54:74:c1:d6:54:b0:d3:4b:56:31:6f: f1:7c:f7:b8:10:13:32:b8:a1:9b:8e:f0:ec:91:7a: 54:9f:e9:f4:dc:b5:d0:24:2c:49:d3:72:c0:bd:d2: de:fc:dc:f7:28:e5:64:8a:25:c4:7f:25:34:bf:c9: e5:51:ba:a9:b8:72:99:89:91:cc:de:98:1a:e0:a2: 46:db:36:11:93:90:b5:0d:64:9e:65:02:78:71:fb: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:08:14:1E:7C:BA:70:34:DC:3C:51:2F:11:FC:1C:5F:41:0A:4E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS131769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.177.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:76:2f:3d:f5:b6:b3:8c:49:69:7e:66:7a:29:21:cf:bc:55: 5c:d4:03:80:36:d9:f9:c9:87:75:0a:f0:17:7f:0d:be:e9:e5: e2:7e:85:f6:0a:d9:f3:35:28:b7:4a:c0:58:47:b4:49:fa:d2: 91:62:5c:c5:d3:a8:a7:fb:8b:e7:aa:57:d1:22:7f:de:cc:fa: e3:64:5e:3f:a5:fe:83:f4:0d:2a:69:78:70:af:8f:bc:d1:af: 62:68:72:a4:2b:f4:9e:ff:55:57:a1:7e:61:49:34:b2:ae:53: 2b:55:6c:30:bb:8f:ab:94:27:f9:ab:ad:fa:70:f9:8c:e0:fa: 44:e6:23:46:8f:ef:a2:ef:7e:dd:6f:ab:36:ac:14:be:94:48: 4e:a7:f1:d4:3c:23:fd:14:aa:b2:8e:04:38:65:61:70:5a:03: d2:96:d9:25:3d:64:51:03:96:e2:c7:0c:1c:82:f0:8d:31:79: c7:07:d0:a8:01:1d:6e:dc:43:ea:1b:0d:3a:59:cd:5a:7e:2e: 96:6d:ff:27:a8:8f:16:da:70:6a:f5:e7:74:a4:29:7d:7e:66: 85:67:6b:47:e8:dd:5a:48:ab:8e:be:b2:fe:85:7c:54:3c:a9: 84:37:03:24:5b:1b:8d:cb:32:80:ec:e7:ef:70:7e:b3:d3:fb: b2:d0:de:d6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOfEdD0D2joKeblRRcLOKkErraGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTg1MloX DTI3MDUwMTA5MjM1MlowMzExMC8GA1UEAxMoOEMwNDA4MTQxRTdDQkE3MDM0REMz QzUxMkYxMUZDMUM1RjQxMEE0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJELfl2EmcyTC2Z+FgES3ZCxjzAZ+jL5vLC/1cKfx7w+nTk6+lcB/NluMrhK gGytTIq5J/8muWYsvxcKkrTwH7Ae7eR1FvIsz51nwx9NpMZpuUb8QQdHLUa1WZKk 4l9VUkcA85rnWVRlVKP1qK21nOv4ZUvpIHVKMXku6zsxucVkcFLVZ29wy9O4EXkU lc0OiKyA0NErG48dGR2Ax7fpOjXcTzKRyY6tZFR0wdZUsNNLVjFv8Xz3uBATMrih m47w7JF6VJ/p9Ny10CQsSdNywL3S3vzc9yjlZIolxH8lNL/J5VG6qbhymYmRzN6Y GuCiRts2EZOQtQ1knmUCeHH7KDkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSMBAgU Hny6cDTcPFEvEfwcX0EKTjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTMxNzY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoBaxMA0GCSqGSIb3DQEBCwUAA4IBAQBvdi899bazjElpfmZ6KSHPvFVc 1AOANtn5yYd1CvAXfw2+6eXifoX2CtnzNSi3SsBYR7RJ+tKRYlzF06in+4vnqlfR In/ezPrjZF4/pf6D9A0qaXhwr4+80a9iaHKkK/Se/1VXoX5hSTSyrlMrVWwwu4+r lCf5q636cPmM4PpE5iNGj++i737db6s2rBS+lEhOp/HUPCP9FKqyjgQ4ZWFwWgPS ltklPWRRA5bixwwcgvCNMXnHB9CoAR1u3EPqGw06Wc1afi6Wbf8nqI8W2nBq9ed0 pCl9fmaFZ2tH6N1aSKuOvrL+hXxUPKmENwMkWxuNyzKA7OfvcH6z0/uy0N7W -----END CERTIFICATE-----Generated at Sat May 2 21:05:16 2026 by rpki-client