$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS134091.roa File: AS134091.roa (raw, json) Hash identifier: GC0gi/PUUti/+IJ+OPWk0YS/J6XRRgw5mbbBNl2FLlA= Subject key identifier: CD:91:8B:13:37:FA:D3:D2:86:4D:55:C6:07:5E:80:E0:70:0E:17:45 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7C1DE625530D1EBDA930867C692AF338AAD5A411 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134091.roa Signing time: Fri 31 Jul 2026 04:24:21 +0000 ROA not before: Fri 31 Jul 2026 04:19:21 +0000 ROA not after: Fri 30 Jul 2027 04:24:21 +0000 asID: 134091 IP address blocks: 160.236.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1d:e6:25:53:0d:1e:bd:a9:30:86:7c:69:2a:f3:38:aa:d5:a4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 31 04:19:21 2026 GMT Not After : Jul 30 04:24:21 2027 GMT Subject: CN=CD918B1337FAD3D2864D55C6075E80E0700E1745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c7:0d:ef:7d:cb:6d:5b:ae:e3:2d:3c:70:94: 5a:43:db:3b:54:de:7f:8f:4e:c8:4f:19:f8:e5:64: 4a:77:19:88:62:32:9f:da:a7:b5:54:90:5b:3a:cb: f8:e4:bd:00:b6:35:89:29:71:c0:0d:e1:d0:30:c8: 05:8f:24:9c:58:82:df:20:e7:cd:2e:fd:e5:72:63: 8d:6a:20:7c:52:dc:a9:60:2c:ad:31:26:b8:3c:bc: 4e:20:3d:53:b0:76:37:d7:cf:de:1e:f8:9e:ba:22: 43:bd:ab:5a:5b:54:4c:b8:49:2e:ac:b2:20:42:8b: 69:11:ec:79:54:56:8f:59:93:20:05:8c:5f:42:69: b8:ee:d9:9f:7b:52:d4:b2:31:21:84:0f:2a:a6:35: 5c:a1:60:d9:18:df:10:19:91:09:7c:1f:d2:00:2b: 2c:e4:c3:cc:c5:75:72:f9:78:fd:3e:59:38:33:85: 71:e8:87:2a:f2:76:b7:93:89:6f:0e:92:29:88:a5: 94:07:47:c8:b1:b2:47:3c:6c:1d:a3:09:3b:38:43: 1f:cf:05:ab:8c:86:90:ef:83:6f:b5:8f:16:c1:61: db:1c:8d:d9:90:dc:d7:e9:b3:a8:af:d8:4d:09:b8: 7a:07:33:13:77:38:03:11:5a:5f:ed:93:e4:9c:c4: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:91:8B:13:37:FA:D3:D2:86:4D:55:C6:07:5E:80:E0:70:0E:17:45 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.138.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:77:b9:19:13:d6:b0:9f:4c:76:bd:ad:a9:7d:17:71:15:2a: c4:ba:ff:62:3f:d3:c5:bf:49:21:19:a3:7a:e6:b6:6a:5f:ee: 3e:28:c9:11:fa:36:4a:4b:27:10:86:ee:e2:4b:48:7b:03:6c: a8:1d:08:2d:8a:59:d2:6a:db:df:9d:c5:92:f9:f2:51:c8:2d: b2:a1:90:40:8c:b1:62:63:12:65:3f:a1:0f:57:84:d2:7b:4b: 3a:d6:70:0d:aa:e9:ff:c1:93:79:43:df:47:7d:77:ee:8c:ef: 9d:f9:06:67:b4:61:ba:17:84:b8:f6:43:20:86:96:87:fa:15: d8:f0:cf:21:1c:f8:01:9e:92:04:b5:8f:d8:2d:83:ff:12:16: 85:ec:32:fc:db:3d:01:b7:88:3d:78:c8:ca:f2:94:ea:93:f4: 0c:d3:9f:98:9e:6d:02:24:e2:68:2a:44:46:bd:fd:c5:c6:25: be:3d:03:f7:03:b1:86:25:26:3a:1a:78:6d:9a:b1:d9:09:ee: 4d:8a:09:d4:c0:7a:e0:4a:12:2a:c2:61:85:b4:fc:c4:06:fb: 3a:d9:43:2d:76:7d:9d:b6:31:f2:8a:d0:10:80:36:bf:67:29: b9:e9:b6:23:d6:6f:fe:0a:71:4e:66:77:23:13:7c:6b:2d:dc: 5c:42:56:e4 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfB3mJVMNHr2pMIZ8aSrzOKrVpBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDczMTA0MTkyMVoX DTI3MDczMDA0MjQyMVowMzExMC8GA1UEAxMoQ0Q5MThCMTMzN0ZBRDNEMjg2NEQ1 NUM2MDc1RTgwRTA3MDBFMTc0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJDHDe99y21bruMtPHCUWkPbO1Tef49OyE8Z+OVkSncZiGIyn9qntVSQWzrL +OS9ALY1iSlxwA3h0DDIBY8knFiC3yDnzS795XJjjWogfFLcqWAsrTEmuDy8TiA9 U7B2N9fP3h74nroiQ72rWltUTLhJLqyyIEKLaRHseVRWj1mTIAWMX0JpuO7Zn3tS 1LIxIYQPKqY1XKFg2RjfEBmRCXwf0gArLOTDzMV1cvl4/T5ZODOFceiHKvJ2t5OJ bw6SKYillAdHyLGyRzxsHaMJOzhDH88Fq4yGkO+Db7WPFsFh2xyN2ZDc1+mzqK/Y TQm4egczE3c4AxFaX+2T5JzE5OUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTNkYsT N/rT0oZNVcYHXoDgcA4XRTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM0MDkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBoOyKMA0GCSqGSIb3DQEBCwUAA4IBAQBKd7kZE9awn0x2va2pfRdxFSrE uv9iP9PFv0khGaN65rZqX+4+KMkR+jZKSycQhu7iS0h7A2yoHQgtilnSatvfncWS +fJRyC2yoZBAjLFiYxJlP6EPV4TSe0s61nANqun/wZN5Q99HfXfujO+d+QZntGG6 F4S49kMghpaH+hXY8M8hHPgBnpIEtY/YLYP/EhaF7DL82z0Bt4g9eMjK8pTqk/QM 05+Ynm0CJOJoKkRGvf3FxiW+PQP3A7GGJSY6GnhtmrHZCe5NignUwHrgShIqwmGF tPzEBvs62UMtdn2dtjHyitAQgDa/Zym56bYj1m/+CnFOZncjE3xrLdxcQlbk -----END CERTIFICATE-----Generated at Sun Aug 2 16:57:07 2026 by rpki-client