$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS133579.roa File: AS133579.roa (raw, json) Hash identifier: Ub5kwjQuvBCwG2/V1fWXU6o9wGMq2lVuZwLvoe+3ud8= Subject key identifier: 4F:04:38:A1:49:92:CB:C3:49:D4:C3:13:73:A7:65:05:BD:9D:19:2D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4B465FFBF2D25323732C5722F92C2ACF12087D72 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS133579.roa Signing time: Sat 02 May 2026 09:25:05 +0000 ROA not before: Sat 02 May 2026 09:20:05 +0000 ROA not after: Sat 01 May 2027 09:25:05 +0000 asID: 133579 IP address blocks: 165.101.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:46:5f:fb:f2:d2:53:23:73:2c:57:22:f9:2c:2a:cf:12:08:7d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:05 2026 GMT Not After : May 1 09:25:05 2027 GMT Subject: CN=4F0438A14992CBC349D4C31373A76505BD9D192D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:e4:5f:ba:a7:ec:bc:b6:ce:42:c4:73:67: 96:0c:0d:ff:aa:0c:6c:c6:d5:c1:ff:03:2c:3b:40: 63:ee:d9:32:ea:3e:f6:be:f7:47:25:c0:24:3c:b9: 08:6c:40:f3:6e:4d:40:46:aa:51:18:85:16:98:a4: d9:32:d4:fe:43:a0:fa:95:98:a7:04:6a:f8:98:43: 3b:8a:67:93:dd:9b:1b:8f:48:b6:90:09:b0:0a:f5: c6:52:af:f1:d4:7f:b5:d2:24:fa:15:1d:85:17:8f: f1:33:61:86:55:63:db:56:dd:f5:cc:14:62:cb:3e: 2b:1a:c4:d4:35:43:86:e7:7c:bd:6d:e1:2a:4d:27: 74:04:df:31:23:45:2e:66:d3:94:12:5a:e4:4d:10: e8:1a:c5:d5:6e:e3:8b:9b:b7:e8:73:2f:bc:a1:e4: 2a:24:2e:98:62:d0:ba:b1:09:35:0b:0d:35:71:70: 57:6d:92:36:7b:3d:da:70:21:b7:78:a0:ef:c2:c6: aa:a6:a4:7f:db:50:83:62:2f:fc:fc:bb:e0:3e:60: 8c:a9:04:28:3c:6c:d8:16:b0:75:6a:38:fa:5b:8b: 09:9f:69:13:87:6a:0a:78:0e:d6:04:8d:34:11:9b: c5:a0:d5:4f:34:04:ed:5b:53:bf:32:56:8d:a7:00: 8e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:38:A1:49:92:CB:C3:49:D4:C3:13:73:A7:65:05:BD:9D:19:2D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS133579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.162.0/24 Signature Algorithm: sha256WithRSAEncryption 92:cf:44:5e:15:aa:bd:af:33:7e:5e:7f:ac:a6:36:72:9a:28: b3:39:9c:6c:e0:97:eb:73:a5:81:96:16:1e:f1:5f:66:40:fe: 75:07:97:15:76:76:da:62:15:7e:b3:13:6a:87:1f:88:6e:64: b0:2d:b4:6b:9c:12:97:ad:73:bc:3c:20:bf:c8:ae:e5:83:0d: d9:1b:8d:53:a4:55:18:19:3c:09:7d:3b:12:24:85:94:f1:22: cf:bc:83:bf:a0:b6:b3:06:25:83:31:67:52:78:1b:07:67:98: a3:1b:42:dc:d8:ab:a5:1a:fe:85:57:10:70:2f:fa:f7:c8:53: 93:f9:18:79:82:38:ed:ff:88:10:4d:38:cf:4b:02:e0:c2:57: 97:66:e0:8e:88:7d:be:11:b7:2a:1c:94:80:87:64:05:93:c9: 11:86:60:13:fd:6e:74:d4:80:5d:53:03:e1:f9:8a:9b:ac:c3: 70:f5:78:8b:c1:2b:56:da:48:87:30:54:ba:71:34:05:7a:92: 91:07:77:cd:42:85:7f:cc:ff:20:ec:54:99:e4:ab:13:2a:30: d6:64:d9:21:e3:91:55:c4:78:75:e6:4b:af:4b:50:d3:b4:f7: 86:b7:15:cf:c3:a5:7f:c6:45:31:6d:f0:4f:ae:03:52:da:dc: 24:4d:bd:02 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUS0Zf+/LSUyNzLFci+SwqzxIIfXIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwNVoX DTI3MDUwMTA5MjUwNVowMzExMC8GA1UEAxMoNEYwNDM4QTE0OTkyQ0JDMzQ5RDRD MzEzNzNBNzY1MDVCRDlEMTkyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJx5F+6p+y8ts5CxHNnlgwN/6oMbMbVwf8DLDtAY+7ZMuo+9r73RyXAJDy5 CGxA825NQEaqURiFFpik2TLU/kOg+pWYpwRq+JhDO4pnk92bG49ItpAJsAr1xlKv 8dR/tdIk+hUdhReP8TNhhlVj21bd9cwUYss+KxrE1DVDhud8vW3hKk0ndATfMSNF LmbTlBJa5E0Q6BrF1W7ji5u36HMvvKHkKiQumGLQurEJNQsNNXFwV22SNns92nAh t3ig78LGqqakf9tQg2Iv/Py74D5gjKkEKDxs2BawdWo4+luLCZ9pE4dqCngO1gSN NBGbxaDVTzQE7VtTvzJWjacAjscCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRPBDih SZLLw0nUwxNzp2UFvZ0ZLTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTMzNTc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQApWWiMA0GCSqGSIb3DQEBCwUAA4IBAQCSz0ReFaq9rzN+Xn+spjZymiiz OZxs4Jfrc6WBlhYe8V9mQP51B5cVdnbaYhV+sxNqhx+IbmSwLbRrnBKXrXO8PCC/ yK7lgw3ZG41TpFUYGTwJfTsSJIWU8SLPvIO/oLazBiWDMWdSeBsHZ5ijG0Lc2Kul Gv6FVxBwL/r3yFOT+Rh5gjjt/4gQTTjPSwLgwleXZuCOiH2+EbcqHJSAh2QFk8kR hmAT/W501IBdUwPh+YqbrMNw9XiLwStW2kiHMFS6cTQFepKRB3fNQoV/zP8g7FSZ 5KsTKjDWZNkh45FVxHh15kuvS1DTtPeGtxXPw6V/xkUxbfBPrgNS2twkTb0C -----END CERTIFICATE-----Generated at Sat May 2 21:05:02 2026 by rpki-client