$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS136052.roa File: AS136052.roa (raw, json) Hash identifier: mo/msM+ZYuRddF3AIi2lq/yuMwhugGRumoEG3Im2uJ0= Subject key identifier: 87:98:15:7A:E7:46:93:11:36:3E:AE:C4:6D:E6:F8:ED:43:5D:29:6D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 167FE70B731340C238604DC82B752B2A85A0985A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136052.roa Signing time: Sat 02 May 2026 12:42:25 +0000 ROA not before: Sat 02 May 2026 12:37:25 +0000 ROA not after: Sat 01 May 2027 12:42:25 +0000 asID: 136052 IP address blocks: 157.10.160.0/23 maxlen: 24 157.10.252.0/24 maxlen: 24 157.10.253.0/24 maxlen: 24 157.20.96.0/23 maxlen: 24 157.20.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7f:e7:0b:73:13:40:c2:38:60:4d:c8:2b:75:2b:2a:85:a0:98:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 12:37:25 2026 GMT Not After : May 1 12:42:25 2027 GMT Subject: CN=8798157AE7469311363EAEC46DE6F8ED435D296D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:56:c9:b5:73:0a:2e:02:f1:46:94:dc:a3: 03:56:93:3f:f9:26:e5:30:ce:bb:f5:33:ad:88:17: 4e:43:77:b3:05:61:77:fc:3c:49:5f:dc:fd:91:c8: cf:7d:4c:7b:5c:72:be:33:18:32:0b:2e:d2:c8:12: bc:be:d5:7b:6d:97:9e:8f:c3:dd:7d:54:37:de:9a: d9:18:69:8f:0f:8c:ee:e0:13:13:c3:3d:c9:a0:a9: 8b:a5:a6:48:ca:b5:51:a9:5f:82:b6:af:0e:01:e1: 4b:2f:e1:2e:96:6d:f3:36:81:b3:73:42:31:71:9b: 2e:de:2f:76:9a:5c:61:75:a2:3b:6b:eb:67:f1:b8: dd:15:64:44:83:80:48:07:5e:56:3a:17:58:09:20: b6:db:95:66:a3:c1:2c:38:9f:07:24:88:91:06:e0: c8:c8:aa:74:25:26:c9:86:5b:ff:32:32:87:96:7c: 3a:d6:c7:1c:1f:e9:d9:84:c3:69:9a:c3:ce:11:dd: ed:27:8c:e7:03:05:20:52:0c:73:c6:c4:5e:6c:10: 75:28:84:97:29:85:23:35:99:a2:16:8b:61:19:5e: 7a:01:4a:c8:36:f9:0d:4b:c3:1c:b3:02:43:40:7c: 9c:4c:15:af:f6:08:b4:f9:e4:4c:cb:8c:8b:0c:dc: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:98:15:7A:E7:46:93:11:36:3E:AE:C4:6D:E6:F8:ED:43:5D:29:6D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136052.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.160.0/23 157.10.252.0/23 157.20.96.0/23 157.20.154.0/23 Signature Algorithm: sha256WithRSAEncryption 59:3d:0f:ee:de:6f:8c:3e:5e:46:9d:f0:6f:90:b4:09:f0:36: 81:cb:cc:eb:45:9c:e7:d0:a6:d7:da:c7:b1:27:52:ad:ee:9d: 92:ec:9c:70:ea:66:cf:27:f0:4b:2a:ad:f5:37:7e:21:23:54: 24:81:d4:27:de:4f:19:87:82:37:86:f5:84:2c:a6:b9:1b:2a: 3f:f4:a7:d7:ce:41:e6:35:8c:1f:4a:4b:88:b3:60:20:8b:a1: 8d:d4:7b:46:11:76:6e:a5:c1:ec:8d:3b:8a:17:e5:f8:80:74: 9c:95:a6:d3:4a:41:50:13:59:ba:90:84:9b:0f:dd:60:c5:e2: cc:c5:96:50:24:d6:84:68:23:84:de:f2:15:3b:3d:de:b3:1d: 2c:8f:eb:5b:8d:3f:82:d0:7d:b2:4f:ee:12:9d:8b:41:0d:f7: 6c:77:13:cc:ca:67:b7:f6:84:9d:81:ca:c8:ea:31:80:f5:8d: f6:d7:c7:eb:9e:f0:06:8c:12:8f:fc:7e:49:41:40:c6:6d:1a: a7:66:72:51:29:0e:86:0f:eb:f8:17:b7:b4:9f:b3:57:b3:d6: db:b9:bd:95:6f:bd:96:0e:12:d2:91:2a:07:be:7c:96:c2:2f: 69:5e:99:61:0a:de:b2:7b:ef:1c:87:2c:70:fe:25:5f:45:75: 95:24:07:95 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUFn/nC3MTQMI4YE3IK3UrKoWgmFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjEyMzcyNVoX DTI3MDUwMTEyNDIyNVowMzExMC8GA1UEAxMoODc5ODE1N0FFNzQ2OTMxMTM2M0VB RUM0NkRFNkY4RUQ0MzVEMjk2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnMVsm1cwouAvFGlNyjA1aTP/km5TDOu/UzrYgXTkN3swVhd/w8SV/c/ZHI z31Me1xyvjMYMgsu0sgSvL7Ve22Xno/D3X1UN96a2Rhpjw+M7uATE8M9yaCpi6Wm SMq1UalfgravDgHhSy/hLpZt8zaBs3NCMXGbLt4vdppcYXWiO2vrZ/G43RVkRIOA SAdeVjoXWAkgttuVZqPBLDifBySIkQbgyMiqdCUmyYZb/zIyh5Z8OtbHHB/p2YTD aZrDzhHd7SeM5wMFIFIMc8bEXmwQdSiElymFIzWZohaLYRleegFKyDb5DUvDHLMC Q0B8nEwVr/YItPnkTMuMiwzcbxUCAwEAAaOCAd4wggHaMB0GA1UdDgQWBBSHmBV6 50aTETY+rsRt5vjtQ10pbTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM2MDUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIA ATAYAwQBnQqgAwQBnQr8AwQBnRRgAwQBnRSaMA0GCSqGSIb3DQEBCwUAA4IBAQBZ PQ/u3m+MPl5GnfBvkLQJ8DaBy8zrRZzn0KbX2sexJ1Kt7p2S7Jxw6mbPJ/BLKq31 N34hI1QkgdQn3k8Zh4I3hvWELKa5Gyo/9KfXzkHmNYwfSkuIs2Agi6GN1HtGEXZu pcHsjTuKF+X4gHSclabTSkFQE1m6kISbD91gxeLMxZZQJNaEaCOE3vIVOz3esx0s j+tbjT+C0H2yT+4SnYtBDfdsdxPMyme39oSdgcrI6jGA9Y3218frnvAGjBKP/H5J QUDGbRqnZnJRKQ6GD+v4F7e0n7NXs9bbub2Vb72WDhLSkSoHvnyWwi9pXplhCt6y e+8chyxw/iVfRXWVJAeV -----END CERTIFICATE-----Generated at Sat May 2 21:05:17 2026 by rpki-client