$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137378.roa File: AS137378.roa (raw, json) Hash identifier: UNcM2Q/Yj0l7VCkFI6O4Fa0OsVGVdkYl8kFz4sl9PTM= Subject key identifier: 8F:F7:08:4E:34:C8:67:4E:89:94:3F:93:D4:62:70:FE:D4:F6:21:E4 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 69F3A59FF96260013A0A4C89590277B64409EDD0 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137378.roa Signing time: Tue 15 Sep 2026 22:58:25 +0000 ROA not before: Tue 15 Sep 2026 22:53:25 +0000 ROA not after: Tue 14 Sep 2027 22:58:25 +0000 asID: 137378 IP address blocks: 162.4.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f3:a5:9f:f9:62:60:01:3a:0a:4c:89:59:02:77:b6:44:09:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 15 22:53:25 2026 GMT Not After : Sep 14 22:58:25 2027 GMT Subject: CN=8FF7084E34C8674E89943F93D46270FED4F621E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:58:fb:0a:92:e3:e9:cb:83:c7:c7:1f:60: 78:3c:32:86:f0:0e:99:7c:43:88:97:b2:1a:9c:fb: 07:4f:cb:57:3a:ba:40:a3:76:e7:60:9e:e6:f3:19: ce:8f:e8:34:cb:01:a9:1f:07:b5:f2:6f:55:fb:00: 62:6e:11:79:ca:ec:9e:3c:6d:37:97:14:86:d0:04: dc:93:31:c4:ff:fa:01:71:35:b6:82:11:ba:33:cb: b3:79:53:56:54:ba:60:64:52:33:26:69:7a:02:a6: 97:f4:33:72:45:cb:91:29:a7:65:64:b4:81:79:8c: 55:74:df:a0:9f:b4:1e:ed:cb:0e:d8:17:43:eb:e3: 68:c4:1f:bf:dc:41:da:7e:12:df:65:f3:00:00:40: ba:1b:2c:b4:43:08:27:fb:1b:b3:38:a8:5e:9c:59: d6:d0:7f:d6:cb:3d:ab:6a:4e:1e:4d:15:2d:8b:f7: d3:69:ca:68:9a:79:da:e7:98:80:d4:06:3b:38:6a: 58:93:5e:99:2a:c2:22:db:7b:f0:dd:84:0b:4c:e9: 0f:aa:e0:3e:ca:28:cb:1a:28:aa:b1:29:aa:42:44: 7b:20:9e:dc:ea:ee:a5:03:3a:31:ec:0d:c8:4d:48: ce:2b:39:e3:3d:5a:87:7e:1d:73:91:6d:36:2d:55: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:08:4E:34:C8:67:4E:89:94:3F:93:D4:62:70:FE:D4:F6:21:E4 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137378.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.159.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ab:ca:1e:59:c8:f2:70:80:4e:93:7f:43:ee:e4:ca:46:9c: 09:8b:41:d8:76:91:db:41:9a:1d:23:18:3e:85:81:74:f0:a9: 18:e0:69:05:f9:8b:af:bb:52:2f:40:7c:93:54:74:66:e5:1a: 09:52:d7:30:20:e3:ae:4f:5b:9a:ad:91:26:c6:34:f1:62:f8: 88:79:86:a1:8b:89:6a:cf:54:6c:1f:78:fe:77:15:f6:bf:4b: fb:03:b2:70:87:13:63:da:dc:e6:d3:f0:1f:61:20:0a:84:c3: c4:e3:d2:a6:74:f2:24:b0:78:f9:53:48:0f:75:f8:b0:6a:7c: 49:43:fd:f9:66:ba:46:dc:db:e8:f6:97:56:39:e8:66:a8:2b: 51:d6:de:76:37:8c:f1:24:7a:bb:0c:3c:f8:5f:e4:d2:3a:65: 88:50:ad:87:f7:bb:83:1c:25:3a:06:ae:25:f4:4e:b6:e8:dc: e7:63:16:42:a2:77:69:fe:58:a8:ed:e9:a6:0f:ec:36:b0:90: c0:6a:2b:72:a3:03:c1:41:ba:69:f3:ff:b6:23:c8:95:8b:92: f8:4b:d9:af:8c:04:97:47:9f:6e:02:9c:07:a8:5a:70:b2:66: b3:bd:e1:a9:12:91:10:e6:fa:3e:c0:15:20:4f:f5:aa:3e:ac: 25:fa:a9:f6 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUafOln/liYAE6CkyJWQJ3tkQJ7dAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkxNTIyNTMyNVoX DTI3MDkxNDIyNTgyNVowMzExMC8GA1UEAxMoOEZGNzA4NEUzNEM4Njc0RTg5OTQz RjkzRDQ2MjcwRkVENEY2MjFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvpWPsKkuPpy4PHxx9geDwyhvAOmXxDiJeyGpz7B0/LVzq6QKN252Ce5vMZ zo/oNMsBqR8HtfJvVfsAYm4RecrsnjxtN5cUhtAE3JMxxP/6AXE1toIRujPLs3lT VlS6YGRSMyZpegKml/QzckXLkSmnZWS0gXmMVXTfoJ+0Hu3LDtgXQ+vjaMQfv9xB 2n4S32XzAABAuhsstEMIJ/sbszioXpxZ1tB/1ss9q2pOHk0VLYv302nKaJp52ueY gNQGOzhqWJNemSrCItt78N2EC0zpD6rgPsooyxooqrEpqkJEeyCe3OrupQM6MewN yE1Izis54z1ah34dc5FtNi1VmvECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSP9whO NMhnTomUP5PUYnD+1PYh5DAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3Mzc4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogSfMA0GCSqGSIb3DQEBCwUAA4IBAQCtq8oeWcjycIBOk39D7uTKRpwJ i0HYdpHbQZodIxg+hYF08KkY4GkF+Yuvu1IvQHyTVHRm5RoJUtcwIOOuT1uarZEm xjTxYviIeYahi4lqz1RsH3j+dxX2v0v7A7JwhxNj2tzm0/AfYSAKhMPE49KmdPIk sHj5U0gPdfiwanxJQ/35ZrpG3Nvo9pdWOehmqCtR1t52N4zxJHq7DDz4X+TSOmWI UK2H97uDHCU6Bq4l9E626NznYxZCondp/lio7emmD+w2sJDAaityowPBQbpp8/+2 I8iVi5L4S9mvjASXR59uApwHqFpwsmazveGpEpEQ5vo+wBUgT/WqPqwl+qn2 -----END CERTIFICATE-----Generated at Thu Sep 17 12:16:47 2026 by rpki-client