$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS132050.roa File: AS132050.roa (raw, json) Hash identifier: MXTnEeXzK5vNJo0uHgQTvKPG0l1LG+/wVDCp50inpMg= Subject key identifier: 7D:5D:B6:B6:C4:18:D6:9A:2F:D7:AF:65:E5:D7:03:0B:25:28:04:16 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4E6C08AF259FEB60765BBEE357F8142E0DB2B6F9 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS132050.roa Signing time: Mon 24 Aug 2026 02:44:12 +0000 ROA not before: Mon 24 Aug 2026 02:39:12 +0000 ROA not after: Mon 23 Aug 2027 02:44:12 +0000 asID: 132050 IP address blocks: 160.236.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6c:08:af:25:9f:eb:60:76:5b:be:e3:57:f8:14:2e:0d:b2:b6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 24 02:39:12 2026 GMT Not After : Aug 23 02:44:12 2027 GMT Subject: CN=7D5DB6B6C418D69A2FD7AF65E5D7030B25280416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:e5:9f:0d:40:34:61:cb:06:c6:db:7c:ea: 99:5a:41:0f:c8:87:61:93:9e:0a:26:0d:d1:53:d0: cb:00:02:2a:7b:b0:8d:5b:e0:cd:ac:fc:00:1b:33: e8:65:cf:54:d5:c9:17:ba:de:8b:3f:3e:25:42:52: 2b:e9:68:69:d3:e6:e8:31:84:2b:d6:5e:c1:43:f8: 8e:d1:3f:58:aa:a1:4b:2d:a5:bf:bd:c2:4b:f1:a0: ac:82:c0:4a:87:92:f2:07:fc:62:72:d4:ea:2b:22: d0:bc:3b:15:7a:63:91:40:b8:bf:84:9d:41:e0:ba: e4:9f:07:de:77:63:9a:ca:c5:91:cc:ef:14:cc:0e: c8:35:75:6d:c6:c4:8b:26:d8:86:4e:68:28:f6:a6: a3:5f:fa:15:af:dc:56:59:03:5c:31:89:ff:1c:8e: 7c:ee:e6:53:3d:a3:b3:ce:94:39:7a:8c:99:40:97: f3:dc:00:48:8f:7a:68:46:1e:26:45:c0:a3:95:10: 43:7a:97:fc:4d:a9:2b:2a:e6:09:6d:fd:b8:0a:d7: ef:18:f8:27:cb:96:ad:f7:9d:3c:76:9f:b9:74:57: 12:6c:68:b0:0f:b8:ab:82:06:82:d2:6c:95:3d:ef: 40:4d:33:7d:f6:66:e5:f2:a0:aa:83:88:4b:25:30: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5D:B6:B6:C4:18:D6:9A:2F:D7:AF:65:E5:D7:03:0B:25:28:04:16 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS132050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.88.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d3:1a:b0:4d:10:4e:51:2a:b9:04:18:9c:32:c7:f1:40:cb: 7f:29:a1:6f:a9:4a:f5:27:49:04:c6:b5:5f:4c:44:93:5c:fe: 81:dd:85:a1:ca:26:bf:53:d6:e3:90:2f:52:11:9b:f7:47:43: 90:69:6d:21:1e:7a:f6:07:72:da:46:23:89:b3:81:1c:b4:57: fb:8d:90:24:3e:2c:b6:a4:c8:80:73:a1:08:80:a9:ec:4c:64: 79:be:46:d6:99:54:5c:5a:2f:d5:4d:7a:7d:c2:fe:37:44:c9: ff:0d:f4:53:bc:de:ef:a0:e4:b8:ba:ee:bb:ee:97:59:90:e6: 11:1c:73:9d:b9:f7:4b:4a:ff:42:70:80:ee:32:50:ca:75:57: 0e:25:e5:a2:f1:ae:51:0b:61:7a:c9:7e:99:26:38:57:cd:01: 9a:29:a6:f5:c5:44:b1:22:64:e3:19:df:24:ac:ea:2c:9a:98: e3:24:4c:d1:b9:d0:b3:ff:f7:02:2d:10:cb:7b:f4:84:65:03: b6:96:f3:59:20:61:5d:c5:c3:95:fa:6f:f3:2a:28:22:01:71: e0:b6:ae:f4:54:d4:fb:90:4b:50:e4:af:ed:1d:eb:7a:ce:52: 03:63:b7:89:23:3c:27:87:34:75:29:a0:e8:c2:a3:33:dd:c1: e8:09:ef:41 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUTmwIryWf62B2W77jV/gULg2ytvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgyNDAyMzkxMloX DTI3MDgyMzAyNDQxMlowMzExMC8GA1UEAxMoN0Q1REI2QjZDNDE4RDY5QTJGRDdB RjY1RTVENzAzMEIyNTI4MDQxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJQf5Z8NQDRhywbG23zqmVpBD8iHYZOeCiYN0VPQywACKnuwjVvgzaz8ABsz 6GXPVNXJF7reiz8+JUJSK+loadPm6DGEK9ZewUP4jtE/WKqhSy2lv73CS/GgrILA SoeS8gf8YnLU6isi0Lw7FXpjkUC4v4SdQeC65J8H3ndjmsrFkczvFMwOyDV1bcbE iybYhk5oKPamo1/6Fa/cVlkDXDGJ/xyOfO7mUz2js86UOXqMmUCX89wASI96aEYe JkXAo5UQQ3qX/E2pKyrmCW39uArX7xj4J8uWrfedPHafuXRXEmxosA+4q4IGgtJs lT3vQE0zffZm5fKgqoOISyUwAh0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR9Xba2 xBjWmi/Xr2Xl1wMLJSgEFjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTMyMDUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOxYMA0GCSqGSIb3DQEBCwUAA4IBAQAx0xqwTRBOUSq5BBicMsfxQMt/ KaFvqUr1J0kExrVfTESTXP6B3YWhyia/U9bjkC9SEZv3R0OQaW0hHnr2B3LaRiOJ s4EctFf7jZAkPiy2pMiAc6EIgKnsTGR5vkbWmVRcWi/VTXp9wv43RMn/DfRTvN7v oOS4uu677pdZkOYRHHOdufdLSv9CcIDuMlDKdVcOJeWi8a5RC2F6yX6ZJjhXzQGa Kab1xUSxImTjGd8krOosmpjjJEzRudCz//cCLRDLe/SEZQO2lvNZIGFdxcOV+m/z KigiAXHgtq70VNT7kEtQ5K/tHet6zlIDY7eJIzwnhzR1KaDowqMz3cHoCe9B -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:33 2026 by rpki-client