$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS134526.roa File: AS134526.roa (raw, json) Hash identifier: ainFFunqYbsqciygr5W4AONcppm9lruDNHEOHn3bDpM= Subject key identifier: 34:98:E0:AB:3D:FA:9D:51:47:A4:1E:30:B4:1C:E0:52:10:8E:2A:A2 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 623E411B6926A001A5F5EBA09AD6B051CE267EEF Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134526.roa Signing time: Sat 02 May 2026 09:25:16 +0000 ROA not before: Sat 02 May 2026 09:20:16 +0000 ROA not after: Sat 01 May 2027 09:25:16 +0000 asID: 134526 IP address blocks: 165.101.24.0/23 maxlen: 23 165.101.24.0/24 maxlen: 24 165.101.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3e:41:1b:69:26:a0:01:a5:f5:eb:a0:9a:d6:b0:51:ce:26:7e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:16 2026 GMT Not After : May 1 09:25:16 2027 GMT Subject: CN=3498E0AB3DFA9D5147A41E30B41CE052108E2AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:4e:52:06:01:4f:88:bc:51:01:28:f7:a8: f1:ee:f8:b9:aa:8b:d7:3f:c2:6b:95:c9:e1:f6:78: a8:83:87:6e:f9:07:e3:e7:67:27:bd:40:73:59:8f: 20:63:a3:ea:4b:39:83:3a:8b:72:90:d7:a2:ae:cb: 7c:57:17:e4:57:89:b7:2e:56:c2:b2:a4:f0:9d:a8: f5:73:96:14:2c:5c:0c:c1:62:ab:75:bf:28:9f:88: 29:7c:60:5c:0e:e2:ae:07:21:46:5e:15:0f:94:b6: 1b:44:57:13:5f:8f:0f:16:ea:85:12:ec:7b:5f:9f: 5e:28:86:29:17:82:27:02:18:20:69:d1:9e:83:f6: 15:6e:40:05:aa:29:d0:70:85:f1:07:70:39:13:11: 48:dc:f5:fe:34:27:f5:62:d4:ac:10:b1:a9:37:f8: eb:89:ed:c8:e7:ed:a8:f2:77:ce:70:63:e3:60:47: 36:c3:d6:2a:29:eb:c6:77:d9:94:57:08:05:73:5a: 5b:03:74:85:3c:dc:d6:b2:1a:9d:dd:36:9e:a8:58: 69:d1:f9:0e:a3:3d:12:ce:dd:f7:c7:5f:85:89:5b: 3d:a9:45:3e:b3:1c:15:a4:bd:6c:b0:8d:b8:a1:c3: bf:e2:27:f5:e2:44:52:b7:df:ff:fb:b0:4d:26:9c: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:98:E0:AB:3D:FA:9D:51:47:A4:1E:30:B4:1C:E0:52:10:8E:2A:A2 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134526.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.24.0/23 Signature Algorithm: sha256WithRSAEncryption 34:d7:91:57:d9:b9:29:3f:d6:8b:44:b5:34:9f:de:75:41:c2: 1a:ef:34:dc:1e:7a:0f:ff:6e:d5:01:72:9a:e4:d1:49:b4:91: f1:26:8f:8b:aa:17:95:a2:91:5e:e4:b7:8c:0a:9a:ec:33:64: 46:6c:34:95:24:09:9f:88:e6:cb:6e:b2:25:fc:aa:a5:f5:ab: e9:af:f5:e6:20:83:97:50:1c:35:d4:71:ed:a9:2f:3b:3f:99: 75:50:7d:36:73:52:74:ce:26:e8:08:0e:fc:b0:92:ae:ba:b9: 62:97:4a:d7:d4:83:0e:12:1f:5a:0e:f5:c6:91:1f:a3:b2:05: c0:7f:a7:18:37:24:58:6a:32:49:b7:8a:78:0f:7e:cc:47:52: 06:38:54:72:c4:fd:46:c3:bb:4c:12:f8:32:b2:f0:14:67:7d: b4:bf:98:70:6d:c0:f9:ff:2b:7a:cd:d3:74:b3:df:23:c7:8d: 44:aa:4e:57:0a:c9:36:b3:f8:e3:14:3d:e2:fa:5a:3b:98:b5: 61:b3:35:c7:a7:60:18:86:d8:41:31:fe:bf:05:07:a0:50:01: df:b7:12:bd:7a:a9:16:c7:61:e5:69:55:92:f4:bb:d8:d0:e8: 49:bf:d2:d1:00:ec:ee:24:4a:45:e1:0c:a1:0f:54:0f:fb:06: dc:60:ca:90 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYj5BG2kmoAGl9eugmtawUc4mfu8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAxNloX DTI3MDUwMTA5MjUxNlowMzExMC8GA1UEAxMoMzQ5OEUwQUIzREZBOUQ1MTQ3QTQx RTMwQjQxQ0UwNTIxMDhFMkFBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvnTlIGAU+IvFEBKPeo8e74uaqL1z/Ca5XJ4fZ4qIOHbvkH4+dnJ71Ac1mP IGOj6ks5gzqLcpDXoq7LfFcX5FeJty5WwrKk8J2o9XOWFCxcDMFiq3W/KJ+IKXxg XA7irgchRl4VD5S2G0RXE1+PDxbqhRLse1+fXiiGKReCJwIYIGnRnoP2FW5ABaop 0HCF8QdwORMRSNz1/jQn9WLUrBCxqTf464ntyOftqPJ3znBj42BHNsPWKinrxnfZ lFcIBXNaWwN0hTzc1rIand02nqhYadH5DqM9Es7d98dfhYlbPalFPrMcFaS9bLCN uKHDv+In9eJEUrff//uwTSacHGsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ0mOCr PfqdUUekHjC0HOBSEI4qojAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM0NTI2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBpWUYMA0GCSqGSIb3DQEBCwUAA4IBAQA015FX2bkpP9aLRLU0n951QcIa 7zTcHnoP/27VAXKa5NFJtJHxJo+LqheVopFe5LeMCprsM2RGbDSVJAmfiObLbrIl /Kql9avpr/XmIIOXUBw11HHtqS87P5l1UH02c1J0ziboCA78sJKuurlil0rX1IMO Eh9aDvXGkR+jsgXAf6cYNyRYajJJt4p4D37MR1IGOFRyxP1Gw7tMEvgysvAUZ320 v5hwbcD5/yt6zdN0s98jx41Eqk5XCsk2s/jjFD3i+lo7mLVhszXHp2AYhthBMf6/ BQegUAHftxK9eqkWx2HlaVWS9LvY0OhJv9LRAOzuJEpF4QyhD1QP+wbcYMqQ -----END CERTIFICATE-----Generated at Sat May 2 21:05:06 2026 by rpki-client