$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS134776.roa File: AS134776.roa (raw, json) Hash identifier: 0ZLZIDqdeFCo7tpGnebf7LtnLB//BPrjfmttggyBHIo= Subject key identifier: A3:E5:6E:1C:9D:87:6B:88:11:CA:60:88:7E:BB:7F:26:53:E4:7C:35 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0CCE935CCC9B3CD8EE2863E688581BEAE315D6AD Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134776.roa Signing time: Tue 04 Aug 2026 04:58:51 +0000 ROA not before: Tue 04 Aug 2026 04:53:51 +0000 ROA not after: Tue 03 Aug 2027 04:58:51 +0000 asID: 134776 IP address blocks: 160.236.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ce:93:5c:cc:9b:3c:d8:ee:28:63:e6:88:58:1b:ea:e3:15:d6:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 4 04:53:51 2026 GMT Not After : Aug 3 04:58:51 2027 GMT Subject: CN=A3E56E1C9D876B8811CA60887EBB7F2653E47C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:12:4d:3a:38:13:76:b1:0a:8c:28:fc:30: 75:47:5f:6d:27:49:ee:ec:32:01:4a:0b:b1:3b:d5: c5:5e:79:ad:67:eb:9b:08:1c:c7:8d:bc:bf:ae:65: 99:e8:8f:cb:bb:0f:a3:e4:87:a7:6e:6b:63:9c:42: be:57:c0:23:05:9d:5c:08:3a:e0:4c:5a:50:6b:b1: b7:5d:d3:54:6d:a7:4e:4a:69:21:e4:05:56:1f:54: 91:09:bc:44:24:d2:15:d9:7c:98:30:2f:a4:80:e7: 7f:9a:bc:98:aa:73:66:58:8a:30:d9:b3:8c:47:e1: 4a:64:09:c8:5d:a7:21:bd:3e:04:59:65:ae:31:fe: a2:ec:4d:b4:af:8d:ba:4a:00:37:41:28:4c:f2:80: f7:19:6a:df:4c:6c:e8:90:ad:f7:54:71:48:30:5a: c9:0a:e2:17:ba:24:db:1a:0c:13:32:91:46:a9:58: 77:89:9b:01:4f:97:63:20:e9:83:ae:92:5a:3d:8b: ca:60:68:8e:e6:65:68:91:58:b4:69:11:9c:8c:ad: a4:e9:0d:29:22:62:60:48:e9:6f:ce:36:35:aa:8e: 9a:ca:e2:c7:36:ca:2a:35:d0:b6:8e:e6:b8:b1:de: 19:08:c4:33:d8:36:e4:1e:90:17:22:a1:4c:09:18: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:6E:1C:9D:87:6B:88:11:CA:60:88:7E:BB:7F:26:53:E4:7C:35 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS134776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.106.0/24 Signature Algorithm: sha256WithRSAEncryption 38:97:1f:51:bb:c5:20:33:13:c1:a2:da:a2:62:eb:4c:18:50: 18:59:6b:83:0b:55:12:3d:94:e1:e0:1f:d5:89:cf:f3:ff:2a: c5:e6:c1:b1:02:6d:03:cc:b3:b4:4b:bd:01:3e:95:9c:91:a8: 20:96:df:f9:68:06:71:4a:d4:1d:bf:cd:90:f0:5b:2e:11:90: af:98:b9:7c:8c:2c:e3:9e:cc:57:58:1a:6b:8b:7f:8c:45:c9: 1c:f4:ce:f4:f0:ed:57:e6:ff:40:bc:10:1b:0a:3b:0d:0e:72: 08:15:cd:72:ea:f3:36:08:a5:3b:0a:1e:79:2d:73:a4:f1:b6: 73:c6:41:48:d4:df:db:7b:8d:c3:20:43:91:dd:27:0d:44:9a: 18:53:af:82:32:07:f4:2c:22:c0:81:2e:f9:a1:03:49:14:5c: a9:6a:5d:df:8a:45:69:36:e6:99:81:d1:2e:81:0f:c5:db:49: 7b:34:7e:40:75:4f:6f:e8:34:d8:c6:f0:72:fd:fa:68:f9:b1: e9:3e:97:fd:03:46:d0:4a:c5:18:5a:4a:dc:62:c6:b4:18:97: 92:e8:fd:f6:3a:02:c5:00:49:b1:a6:14:ea:b8:c7:4d:a0:c8: ee:67:58:2c:9c:34:b8:f8:f0:d3:d4:a3:8b:50:99:a0:34:78: 92:45:a4:a2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDM6TXMybPNjuKGPmiFgb6uMV1q0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNDA0NTM1MVoX DTI3MDgwMzA0NTg1MVowMzExMC8GA1UEAxMoQTNFNTZFMUM5RDg3NkI4ODExQ0E2 MDg4N0VCQjdGMjY1M0U0N0MzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIPEk06OBN2sQqMKPwwdUdfbSdJ7uwyAUoLsTvVxV55rWfrmwgcx428v65l meiPy7sPo+SHp25rY5xCvlfAIwWdXAg64ExaUGuxt13TVG2nTkppIeQFVh9UkQm8 RCTSFdl8mDAvpIDnf5q8mKpzZliKMNmzjEfhSmQJyF2nIb0+BFllrjH+ouxNtK+N ukoAN0EoTPKA9xlq30xs6JCt91RxSDBayQriF7ok2xoMEzKRRqlYd4mbAU+XYyDp g66SWj2LymBojuZlaJFYtGkRnIytpOkNKSJiYEjpb842NaqOmsrixzbKKjXQto7m uLHeGQjEM9g25B6QFyKhTAkYd3MCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSj5W4c nYdriBHKYIh+u38mU+R8NTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM0Nzc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOxqMA0GCSqGSIb3DQEBCwUAA4IBAQA4lx9Ru8UgMxPBotqiYutMGFAY WWuDC1USPZTh4B/Vic/z/yrF5sGxAm0DzLO0S70BPpWckagglt/5aAZxStQdv82Q 8FsuEZCvmLl8jCzjnsxXWBpri3+MRckc9M708O1X5v9AvBAbCjsNDnIIFc1y6vM2 CKU7Ch55LXOk8bZzxkFI1N/be43DIEOR3ScNRJoYU6+CMgf0LCLAgS75oQNJFFyp al3fikVpNuaZgdEugQ/F20l7NH5AdU9v6DTYxvBy/fpo+bHpPpf9A0bQSsUYWkrc Ysa0GJeS6P32OgLFAEmxphTquMdNoMjuZ1gsnDS4+PDT1KOLUJmgNHiSRaSi -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:35 2026 by rpki-client