$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS134129.roa File: AS134129.roa (raw, json) Hash identifier: 5VRnMyWnpjgTWllq7Ph66NCNVyGOsB6GNVa+uyoo+lA= Subject key identifier: C5:57:0E:92:18:69:AC:2E:1E:B7:3A:C2:97:97:6A:B6:2E:A9:68:C9 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7B60A518051EDCB4BD6B035EA7AACAC16AB5FD95 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134129.roa Signing time: Sat 02 May 2026 09:24:59 +0000 ROA not before: Sat 02 May 2026 09:19:59 +0000 ROA not after: Sat 01 May 2027 09:24:59 +0000 asID: 134129 IP address blocks: 165.99.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:60:a5:18:05:1e:dc:b4:bd:6b:03:5e:a7:aa:ca:c1:6a:b5:fd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:59 2026 GMT Not After : May 1 09:24:59 2027 GMT Subject: CN=C5570E921869AC2E1EB73AC297976AB62EA968C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:2c:e4:d7:57:95:0d:23:66:60:c8:d2:f4: ae:92:17:f5:40:37:13:c9:69:ba:5d:a4:54:22:db: 93:80:ac:fc:e0:10:2f:ad:35:8c:d1:64:90:49:53: c7:2e:1e:78:36:65:3f:f7:8a:f6:30:8e:d3:a5:24: a0:02:b0:2b:c8:24:72:92:7e:36:ed:32:60:35:8a: ed:d5:7a:93:fc:14:34:77:f8:57:ae:ca:47:2c:38: 17:9d:19:c2:52:d3:51:29:df:a6:ac:63:99:46:bb: d9:1f:3b:7f:0d:00:e3:c3:7e:9f:77:fe:7d:d7:52: f5:e5:23:10:cf:3e:09:6a:ea:26:98:1d:7e:6f:25: d5:32:5f:c2:a8:44:b8:6f:9a:aa:b4:6b:97:14:92: 54:5b:79:58:70:6c:03:f2:ec:bb:cb:92:8b:61:ef: 58:68:81:44:eb:7a:3e:e0:50:af:ec:59:f4:5d:40: 45:98:52:9a:fc:a2:d4:23:57:22:c8:e8:fc:9d:79: c6:44:4b:6e:f8:88:76:8e:02:da:c5:f1:fb:53:1d: 7f:67:88:4d:d9:8f:b0:a3:86:ee:1d:b1:7e:5a:c7: 07:c4:3b:12:a5:0d:60:44:49:22:64:93:35:de:e1: 9c:d1:0b:74:4e:0a:f4:59:11:c0:c7:e4:be:61:82: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:0E:92:18:69:AC:2E:1E:B7:3A:C2:97:97:6A:B6:2E:A9:68:C9 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.192.0/23 Signature Algorithm: sha256WithRSAEncryption 94:db:5c:e5:f4:16:02:36:ca:8e:86:4e:96:79:e9:2f:59:da: 94:6d:23:0b:5b:03:09:23:8a:60:65:a9:0e:5d:c2:d0:76:75: 6d:da:47:98:f0:27:65:80:fe:f5:66:21:51:8a:94:f5:8b:1f: 8a:e1:02:b7:76:94:1e:1a:6b:92:f7:98:4e:2c:0b:a3:43:30: 22:4f:8e:27:e1:f7:a3:d4:c0:e3:d6:dc:6e:6e:53:73:a2:89: 06:75:71:c7:64:96:16:b2:25:0a:8d:13:dc:c1:9a:ce:74:73: 96:b8:f1:0a:3d:76:2c:5a:74:76:52:7c:d4:c5:e3:de:79:00: f1:ea:99:20:a5:bb:21:4a:d8:ff:01:39:2c:d1:5f:68:c9:9b: 93:2e:2e:3d:94:ca:64:e3:33:f5:6a:12:b9:91:a5:52:45:cd: e1:9a:2f:17:f7:36:c6:c9:fa:3c:60:f2:df:84:3b:86:79:89: 20:b7:4e:da:2b:fd:e2:8e:8b:c5:03:25:5d:2c:6c:19:13:7d: 47:0e:86:cd:cc:16:25:fd:39:42:c5:3b:23:52:00:3d:86:28: 88:4c:a6:93:a5:c1:bd:a4:b2:4a:78:33:a2:70:63:67:cc:7a: 8f:78:72:2f:97:80:0b:88:f6:84:d2:a4:ba:89:46:2e:61:56: 59:24:48:45 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUe2ClGAUe3LS9awNep6rKwWq1/ZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTk1OVoX DTI3MDUwMTA5MjQ1OVowMzExMC8GA1UEAxMoQzU1NzBFOTIxODY5QUMyRTFFQjcz QUMyOTc5NzZBQjYyRUE5NjhDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4iLOTXV5UNI2ZgyNL0rpIX9UA3E8lpul2kVCLbk4Cs/OAQL601jNFkkElT xy4eeDZlP/eK9jCO06UkoAKwK8gkcpJ+Nu0yYDWK7dV6k/wUNHf4V67KRyw4F50Z wlLTUSnfpqxjmUa72R87fw0A48N+n3f+fddS9eUjEM8+CWrqJpgdfm8l1TJfwqhE uG+aqrRrlxSSVFt5WHBsA/Lsu8uSi2HvWGiBROt6PuBQr+xZ9F1ARZhSmvyi1CNX Isjo/J15xkRLbviIdo4C2sXx+1Mdf2eITdmPsKOG7h2xflrHB8Q7EqUNYERJImST Nd7hnNELdE4K9FkRwMfkvmGCnn8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTFVw6S GGmsLh63OsKXl2q2LqloyTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM0MTI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBpWPAMA0GCSqGSIb3DQEBCwUAA4IBAQCU21zl9BYCNsqOhk6WeekvWdqU bSMLWwMJI4pgZakOXcLQdnVt2keY8CdlgP71ZiFRipT1ix+K4QK3dpQeGmuS95hO LAujQzAiT44n4fej1MDj1txublNzookGdXHHZJYWsiUKjRPcwZrOdHOWuPEKPXYs WnR2UnzUxePeeQDx6pkgpbshStj/ATks0V9oyZuTLi49lMpk4zP1ahK5kaVSRc3h mi8X9zbGyfo8YPLfhDuGeYkgt07aK/3ijovFAyVdLGwZE31HDobNzBYl/TlCxTsj UgA9hiiITKaTpcG9pLJKeDOicGNnzHqPeHIvl4ALiPaE0qS6iUYuYVZZJEhF -----END CERTIFICATE-----Generated at Sat May 2 21:05:07 2026 by rpki-client