$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS136414.roa File: AS136414.roa (raw, json) Hash identifier: DeSALLf9tBIirT5GA0rj7cVlxxBqZcf/aXYjKZqVV5Q= Subject key identifier: AD:41:DB:40:E0:25:BC:0C:A4:7D:96:2C:2D:30:04:1A:06:F6:1C:11 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 34250AEF6012FA89EB151C33E4BFA3A2F36947ED Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136414.roa Signing time: Tue 15 Sep 2026 08:08:07 +0000 ROA not before: Tue 15 Sep 2026 08:03:07 +0000 ROA not after: Tue 14 Sep 2027 08:08:07 +0000 asID: 136414 IP address blocks: 160.236.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:25:0a:ef:60:12:fa:89:eb:15:1c:33:e4:bf:a3:a2:f3:69:47:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 15 08:03:07 2026 GMT Not After : Sep 14 08:08:07 2027 GMT Subject: CN=AD41DB40E025BC0CA47D962C2D30041A06F61C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:9a:f0:51:cb:4e:f8:d7:fb:be:73:d9:39: f9:9b:4d:52:98:a1:1a:37:23:8f:d3:a6:fc:eb:6c: 48:e6:39:42:03:7b:e8:a3:a3:28:12:79:b8:56:a7: 13:c6:a0:3f:e2:0d:6b:77:3e:e9:3e:c5:0d:ea:35: f8:fa:5b:9c:d9:c8:c7:e2:53:c8:e4:f6:31:9e:39: 1d:80:76:10:63:77:d3:69:dd:d7:f0:2a:f7:ee:ac: a9:ac:13:6e:7d:eb:f8:c8:60:cb:bc:c4:bf:f6:b6: 58:33:f9:9a:c8:9c:81:62:8d:cc:eb:b4:a7:12:7c: d4:28:14:cd:56:9b:8d:a9:38:dd:ef:f7:fd:0b:f2: cb:c4:af:5c:bd:4d:46:e9:ad:7d:48:f1:33:e7:4a: 27:36:5a:0f:69:18:47:f7:e3:29:42:64:cd:ec:35: d0:bf:5d:1d:30:43:04:b5:05:33:7f:7f:21:cf:5c: 3c:a8:aa:51:9d:48:fb:d0:ca:9d:92:14:a2:e0:45: da:9d:96:3e:66:41:5a:de:2a:e4:f1:e1:4f:54:cd: b3:57:99:50:13:73:78:72:2f:0a:17:8c:f1:55:a1: d1:f4:59:bb:ae:5d:9d:d7:f8:08:32:99:b4:63:09: 71:f0:32:55:20:52:5b:9e:cc:da:a7:6a:1e:93:eb: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:DB:40:E0:25:BC:0C:A4:7D:96:2C:2D:30:04:1A:06:F6:1C:11 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136414.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.26.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:8a:23:f8:2c:89:58:66:98:de:90:50:50:c3:e3:1e:ba:78: f5:6e:7b:b8:df:3f:79:ad:5b:1b:2a:38:fd:7d:08:5c:34:a3: 3a:e5:aa:15:07:25:6b:25:de:5d:d6:e0:e4:46:40:b8:64:1b: a2:84:c4:eb:24:71:99:e8:e7:9b:58:ff:c6:72:44:c5:e6:56: 60:6c:fe:f8:7b:09:c4:2e:72:bb:19:e8:24:9f:e2:50:48:51: 5d:5a:ff:7d:e7:e4:c4:1a:20:d5:7c:de:df:ae:12:49:03:d3: da:15:1d:f5:f5:63:88:8e:47:00:b3:ad:ec:47:39:49:62:a3: b5:4f:6b:a3:63:7c:1c:89:3d:74:01:c0:26:05:a3:d8:15:c6: 72:ce:82:27:bc:e1:41:aa:5f:29:be:e4:a0:16:fd:98:8f:8b: 88:8f:e9:21:4f:d5:2d:53:76:1c:66:d0:88:cb:c6:d7:b9:69: 45:f3:f3:f6:ca:37:3f:14:15:73:08:70:2a:a9:5b:be:d1:53: e4:26:3c:2a:e6:27:01:bf:13:18:fd:1e:44:34:25:4c:ad:b3: da:6c:6b:5c:ca:f3:22:99:ef:bc:8f:06:87:5a:e7:85:db:9e: f7:bc:b3:27:3b:4e:c5:6c:ad:05:9f:01:c9:fa:ef:c2:b2:15: 62:11:45:48 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNCUK72AS+onrFRwz5L+jovNpR+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkxNTA4MDMwN1oX DTI3MDkxNDA4MDgwN1owMzExMC8GA1UEAxMoQUQ0MURCNDBFMDI1QkMwQ0E0N0Q5 NjJDMkQzMDA0MUEwNkY2MUMxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM/mvBRy0741/u+c9k5+ZtNUpihGjcjj9Om/OtsSOY5QgN76KOjKBJ5uFan E8agP+INa3c+6T7FDeo1+PpbnNnIx+JTyOT2MZ45HYB2EGN302nd1/Aq9+6sqawT bn3r+Mhgy7zEv/a2WDP5msicgWKNzOu0pxJ81CgUzVabjak43e/3/Qvyy8SvXL1N RumtfUjxM+dKJzZaD2kYR/fjKUJkzew10L9dHTBDBLUFM39/Ic9cPKiqUZ1I+9DK nZIUouBF2p2WPmZBWt4q5PHhT1TNs1eZUBNzeHIvCheM8VWh0fRZu65dndf4CDKZ tGMJcfAyVSBSW57M2qdqHpPr3psCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBStQdtA 4CW8DKR9liwtMAQaBvYcETAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM2NDE0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwaMA0GCSqGSIb3DQEBCwUAA4IBAQAbiiP4LIlYZpjekFBQw+Meunj1 bnu43z95rVsbKjj9fQhcNKM65aoVByVrJd5d1uDkRkC4ZBuihMTrJHGZ6OebWP/G ckTF5lZgbP74ewnELnK7Gegkn+JQSFFdWv995+TEGiDVfN7frhJJA9PaFR319WOI jkcAs63sRzlJYqO1T2ujY3wciT10AcAmBaPYFcZyzoInvOFBql8pvuSgFv2Yj4uI j+khT9UtU3YcZtCIy8bXuWlF8/P2yjc/FBVzCHAqqVu+0VPkJjwq5icBvxMY/R5E NCVMrbPabGtcyvMime+8jwaHWueF2573vLMnO07FbK0FnwHJ+u/CshViEUVI -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:48 2026 by rpki-client