$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS133817.roa File: AS133817.roa (raw, json) Hash identifier: dbuU7iiVT9Ijhik/wZ6u53uS6WMhuMYWzm+xFT/DoWk= Subject key identifier: 7D:4B:2F:9C:E5:8D:E6:52:BD:F5:6B:16:27:39:07:B7:71:60:18:BA Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6EA60F92C9B9C6BC716A0B2D9A4F8482337E233D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS133817.roa Signing time: Sat 02 May 2026 18:11:09 +0000 ROA not before: Sat 02 May 2026 18:06:09 +0000 ROA not after: Sat 01 May 2027 18:11:09 +0000 asID: 133817 IP address blocks: 157.20.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a6:0f:92:c9:b9:c6:bc:71:6a:0b:2d:9a:4f:84:82:33:7e:23:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 18:06:09 2026 GMT Not After : May 1 18:11:09 2027 GMT Subject: CN=7D4B2F9CE58DE652BDF56B16273907B7716018BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:7e:5b:e8:ef:43:ac:7c:d7:0a:60:b9:a3: 18:c1:2e:69:49:f0:2d:96:59:d8:6a:c2:8e:a6:ff: ba:0f:6a:61:48:8c:a8:dd:49:b3:ba:7b:09:5a:46: 01:df:0b:35:b5:29:37:80:9e:51:5d:70:f9:e8:43: e9:2e:ae:e2:e2:1d:77:46:89:52:0c:bb:ab:b2:e7: 76:e4:9c:38:ca:38:04:9c:28:61:9d:41:cb:44:79: ad:12:7d:4d:52:6d:53:6e:d7:17:17:bb:39:02:f7: da:07:a3:96:b6:69:76:a5:f9:52:1b:85:75:2b:03: ef:6c:6a:23:cb:45:b2:22:dc:33:d5:47:96:6b:3e: 53:d7:ea:03:0d:d9:ab:d5:39:ff:4d:d3:d3:6f:92: 38:ae:8a:29:8d:b8:d7:72:b6:ea:28:fb:ff:2a:6a: fe:9c:07:0c:b0:77:86:fb:c2:22:48:e2:c6:31:09: 39:bf:76:1e:b5:69:e8:40:ec:8d:de:3d:d2:4f:1f: 22:16:00:6a:78:9f:35:5a:2c:5f:88:97:93:84:47: 37:f0:74:4d:d4:ab:1f:39:f5:c4:d9:4a:e5:4b:80: 98:c0:fe:fd:a1:f6:76:81:6c:e8:fb:2a:8d:43:84: cb:88:4d:55:7b:0b:21:d5:e4:af:5f:d9:c7:15:c9: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4B:2F:9C:E5:8D:E6:52:BD:F5:6B:16:27:39:07:B7:71:60:18:BA X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS133817.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.189.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:22:ad:97:2e:ca:04:4a:9c:e6:5a:14:fa:15:d8:a0:c4:e7: 1d:23:9e:b2:9d:35:f5:72:f1:b2:c1:dd:be:9a:08:e6:6e:fa: b9:8f:44:37:5f:50:81:22:82:42:6e:1b:9d:d7:18:b2:95:ec: 72:50:70:52:8a:51:bc:4a:e9:61:7f:35:4e:ad:96:52:b2:0e: c2:ef:5e:48:6f:08:af:7a:d0:e5:65:41:2d:06:31:ad:02:61: 45:ba:c3:a0:0f:d2:d5:a7:45:ff:c5:94:8f:90:62:e0:da:bf: 70:e7:ab:a0:18:72:70:23:f2:10:2a:b4:be:bf:27:60:54:c0: d8:a3:a1:da:91:73:d3:32:9b:fb:36:96:28:ab:af:df:d0:c6: 0c:59:ab:ea:e1:ab:c0:57:aa:3e:1e:f7:d2:61:fc:6f:c5:6c: 16:fd:8b:e9:e7:15:c6:5f:f3:62:3f:25:da:d3:10:6b:65:d8: c2:52:e1:e9:62:cb:eb:74:d9:55:fc:6c:aa:04:e0:37:f9:95: d3:08:50:57:8d:0e:ff:45:92:c2:ad:90:07:96:a9:82:c3:a6: 19:74:93:ed:d6:cd:24:01:3d:ec:6d:4f:2d:53:7b:b3:85:9c: f1:5c:ff:ce:9e:95:89:33:7f:2b:a6:90:ec:04:d9:be:d0:ff: 45:2a:b7:27 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbqYPksm5xrxxagstmk+EgjN+Iz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjE4MDYwOVoX DTI3MDUwMTE4MTEwOVowMzExMC8GA1UEAxMoN0Q0QjJGOUNFNThERTY1MkJERjU2 QjE2MjczOTA3Qjc3MTYwMThCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN17flvo70OsfNcKYLmjGMEuaUnwLZZZ2GrCjqb/ug9qYUiMqN1Js7p7CVpG Ad8LNbUpN4CeUV1w+ehD6S6u4uIdd0aJUgy7q7LnduScOMo4BJwoYZ1By0R5rRJ9 TVJtU27XFxe7OQL32gejlrZpdqX5UhuFdSsD72xqI8tFsiLcM9VHlms+U9fqAw3Z q9U5/03T02+SOK6KKY2413K26ij7/ypq/pwHDLB3hvvCIkjixjEJOb92HrVp6EDs jd490k8fIhYAanifNVosX4iXk4RHN/B0TdSrHzn1xNlK5UuAmMD+/aH2doFs6Psq jUOEy4hNVXsLIdXkr1/ZxxXJXpsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR9Sy+c 5Y3mUr31axYnOQe3cWAYujAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTMzODE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnRS9MA0GCSqGSIb3DQEBCwUAA4IBAQANIq2XLsoESpzmWhT6FdigxOcd I56ynTX1cvGywd2+mgjmbvq5j0Q3X1CBIoJCbhud1xiylexyUHBSilG8SulhfzVO rZZSsg7C715IbwivetDlZUEtBjGtAmFFusOgD9LVp0X/xZSPkGLg2r9w56ugGHJw I/IQKrS+vydgVMDYo6HakXPTMpv7NpYoq6/f0MYMWavq4avAV6o+HvfSYfxvxWwW /Yvp5xXGX/NiPyXa0xBrZdjCUuHpYsvrdNlV/GyqBOA3+ZXTCFBXjQ7/RZLCrZAH lqmCw6YZdJPt1s0kAT3sbU8tU3uzhZzxXP/OnpWJM38rppDsBNm+0P9FKrcn -----END CERTIFICATE-----Generated at Sat May 2 21:05:39 2026 by rpki-client