$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS136054.roa File: AS136054.roa (raw, json) Hash identifier: zcj8NXPip9EXgM/0PfgA6sX2Xrl1dMY5ODjOtXUGggo= Subject key identifier: 89:73:4D:CD:1C:CC:5D:BA:E8:CE:47:45:2A:48:A7:3A:A2:C1:AB:40 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 1D72C0140AAF409F4F00EE37B36A56357CF0BA0A Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136054.roa Signing time: Fri 25 Sep 2026 09:33:09 +0000 ROA not before: Fri 25 Sep 2026 09:28:09 +0000 ROA not after: Fri 24 Sep 2027 09:33:09 +0000 asID: 136054 IP address blocks: 144.79.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:72:c0:14:0a:af:40:9f:4f:00:ee:37:b3:6a:56:35:7c:f0:ba:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 25 09:28:09 2026 GMT Not After : Sep 24 09:33:09 2027 GMT Subject: CN=89734DCD1CCC5DBAE8CE47452A48A73AA2C1AB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:68:f4:84:b3:1e:c4:5d:d0:c4:63:ba:d7: 25:08:07:0c:12:60:a8:e2:cc:a7:85:5d:b2:5b:ac: e9:5e:2b:ec:10:e7:64:37:e5:22:e5:48:22:5c:17: cd:69:c2:53:46:62:76:86:06:10:35:e0:15:23:9c: 3d:02:31:11:91:6b:37:00:d8:d3:76:a9:48:25:9e: 51:25:49:57:a5:44:09:68:5a:c2:e5:a2:a6:dc:cb: ed:fd:b1:be:4a:ce:25:21:12:0e:04:73:42:ab:1a: 80:f3:d4:36:0e:2d:3a:cd:34:fb:71:51:7a:48:10: 9c:43:73:2a:46:6e:69:16:c1:85:0c:ca:8b:88:d8: e2:24:aa:18:19:b0:62:21:38:9d:e2:e2:84:9d:c7: 48:8f:f7:ab:c7:98:84:41:21:e5:40:75:f9:d6:fb: 29:2f:ae:f0:6a:aa:b6:18:50:d8:86:f2:e5:13:32: 6d:d8:42:aa:d6:c0:d0:89:2a:83:ed:fd:be:bf:0b: 1a:c5:3e:01:f4:30:f2:81:f5:c8:3d:75:32:a3:74: f3:cd:7d:e3:18:2c:29:b5:50:4f:8b:05:60:04:6c: d2:9e:05:9c:3d:f0:fe:ba:e0:67:aa:1c:9e:75:5b: f3:3b:29:7d:a5:73:d6:3e:b1:4d:33:d8:b9:17:9c: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:4D:CD:1C:CC:5D:BA:E8:CE:47:45:2A:48:A7:3A:A2:C1:AB:40 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136054.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.243.0/24 Signature Algorithm: sha256WithRSAEncryption 11:c1:11:18:05:68:93:d0:52:dc:6b:35:ef:ec:f2:a6:b4:d6: cf:5b:bc:6d:dc:e5:cd:b1:f1:a5:d1:30:f3:19:71:62:7d:cd: 0c:0c:8a:e2:1b:6b:82:75:dd:57:f1:89:dd:4d:29:6a:a2:eb: 0f:fd:d3:8c:fc:d6:0e:36:54:f2:2d:26:3e:28:b3:84:62:fd: 39:6b:9f:52:20:68:30:21:71:15:d8:72:13:d1:af:fa:c9:ac: c8:0a:24:ff:98:ee:74:e9:83:0d:82:bb:13:6c:bf:5e:25:14: 0f:53:6f:a6:59:24:1d:6a:54:47:d8:fb:25:0c:07:ff:bf:f1: d2:dd:7d:48:b3:e2:fe:ea:6d:c4:9c:fb:dc:b6:ff:70:e6:3b: bf:b5:68:7d:74:9f:1f:f7:6d:3b:1c:cc:4b:e4:09:d5:d4:ad: 14:58:85:70:bf:38:f4:ef:59:38:df:98:60:33:65:98:04:e2: 53:b1:f9:aa:57:ca:9c:6a:1f:dd:b4:cd:e3:da:a0:db:eb:31: 4f:d6:86:c4:72:ea:80:84:b7:55:d2:6e:58:7e:f4:ac:97:6f: d1:d0:d9:9e:09:63:7f:90:29:7b:fa:e3:bd:b6:08:88:c0:18: 9b:c1:89:c7:e2:a5:c9:90:33:9d:fc:0f:04:45:8b:18:45:94: 81:26:61:e6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHXLAFAqvQJ9PAO43s2pWNXzwugowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyNTA5MjgwOVoX DTI3MDkyNDA5MzMwOVowMzExMC8GA1UEAxMoODk3MzREQ0QxQ0NDNURCQUU4Q0U0 NzQ1MkE0OEE3M0FBMkMxQUI0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrhaPSEsx7EXdDEY7rXJQgHDBJgqOLMp4Vdslus6V4r7BDnZDflIuVIIlwX zWnCU0ZidoYGEDXgFSOcPQIxEZFrNwDY03apSCWeUSVJV6VECWhawuWiptzL7f2x vkrOJSESDgRzQqsagPPUNg4tOs00+3FRekgQnENzKkZuaRbBhQzKi4jY4iSqGBmw YiE4neLihJ3HSI/3q8eYhEEh5UB1+db7KS+u8GqqthhQ2Iby5RMybdhCqtbA0Ikq g+39vr8LGsU+AfQw8oH1yD11MqN088194xgsKbVQT4sFYARs0p4FnD3w/rrgZ6oc nnVb8zspfaVz1j6xTTPYuReckqkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSJc03N HMxduujOR0UqSKc6osGrQDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM2MDU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE/zMA0GCSqGSIb3DQEBCwUAA4IBAQARwREYBWiT0FLcazXv7PKmtNbP W7xt3OXNsfGl0TDzGXFifc0MDIriG2uCdd1X8YndTSlqousP/dOM/NYONlTyLSY+ KLOEYv05a59SIGgwIXEV2HIT0a/6yazICiT/mO506YMNgrsTbL9eJRQPU2+mWSQd alRH2PslDAf/v/HS3X1Is+L+6m3EnPvctv9w5ju/tWh9dJ8f9207HMxL5AnV1K0U WIVwvzj071k435hgM2WYBOJTsfmqV8qcah/dtM3j2qDb6zFP1obEcuqAhLdV0m5Y fvSsl2/R0NmeCWN/kCl7+uO9tgiIwBibwYnH4qXJkDOd/A8ERYsYRZSBJmHm -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:01 2026 by rpki-client