$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137496.roa File: AS137496.roa (raw, json) Hash identifier: In1vZN1GSzVnsnIJMik2+pG6a0F2cuap1++Dc8QGtLs= Subject key identifier: 37:2C:FB:E3:E6:70:41:A8:ED:20:1D:D7:5A:33:AC:E5:96:89:B0:24 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 5592DA29A5974204E14C71B66636691E3C2A4468 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137496.roa Signing time: Mon 03 Aug 2026 06:14:04 +0000 ROA not before: Mon 03 Aug 2026 06:09:04 +0000 ROA not after: Mon 02 Aug 2027 06:14:04 +0000 asID: 137496 IP address blocks: 160.236.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:92:da:29:a5:97:42:04:e1:4c:71:b6:66:36:69:1e:3c:2a:44:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 3 06:09:04 2026 GMT Not After : Aug 2 06:14:04 2027 GMT Subject: CN=372CFBE3E67041A8ED201DD75A33ACE59689B024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ef:a3:d0:7b:f7:89:2d:ed:fe:0c:36:9e:4e: 87:d0:38:c1:b7:6c:39:f5:09:e7:5c:32:9f:1d:d5: 0b:fe:9a:91:59:5c:0d:57:e0:82:a5:64:65:e7:b3: e4:cd:c6:8b:d3:d8:58:d1:b2:3e:79:ea:c7:da:be: ec:6e:81:eb:96:c5:38:31:0e:44:a6:bd:d0:44:c3: 6b:d2:91:20:0d:07:10:92:7e:e3:74:da:ac:38:99: 92:d4:b8:81:94:4d:b0:17:70:37:a4:16:63:c7:fa: 8e:c7:05:06:cb:63:8e:99:7a:e7:b8:73:f6:dc:ed: 9a:fe:38:3e:4d:ed:80:4c:30:f4:18:cd:4e:5f:49: f0:fd:68:58:d2:34:7a:36:11:42:bb:b1:81:f9:7c: 4d:79:b8:22:1d:e0:5e:da:ec:75:f2:e2:8f:b4:af: 5d:71:a7:cd:f6:fe:1c:89:84:40:37:06:72:37:ea: a8:01:40:ab:19:f3:f1:be:6c:13:93:3f:f6:2d:e6: 0b:1a:8d:95:ca:d0:2d:e2:30:80:94:3d:f6:9b:04: c5:2e:07:7d:38:da:72:4b:74:8f:05:f2:70:99:43: 6a:35:15:86:38:6f:07:9f:31:d7:69:00:d6:1e:ea: 47:d9:34:fb:c2:f2:34:ea:62:94:fe:10:b5:b6:8b: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:FB:E3:E6:70:41:A8:ED:20:1D:D7:5A:33:AC:E5:96:89:B0:24 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.129.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:5a:2a:91:ea:a9:a7:6f:e2:4c:e3:c6:c5:e4:16:9e:61:a0: 0b:3e:11:21:24:66:14:e8:d2:16:c0:19:0b:a5:ef:5c:e1:33: e0:4b:f7:ae:da:f1:f2:61:60:78:2b:e3:2c:c9:4d:4e:8d:5c: 74:f5:70:8d:21:0b:cc:66:05:cd:50:67:db:54:a0:e0:37:a9: bb:99:68:f7:a5:67:6c:a6:f4:40:8f:cf:9c:ba:b2:d7:e5:14: 6e:49:c2:4b:78:9f:d3:7c:d6:84:d8:54:1c:fb:0f:e6:c5:9a: 7e:26:df:2f:d7:1e:8b:7f:59:4c:73:d5:56:77:f0:29:b5:fe: 4e:e1:1f:fc:d5:94:a8:98:3a:6b:3f:01:b9:a6:c8:8d:c5:d7: e5:3c:6e:dc:fb:19:96:68:4e:ad:fd:68:95:59:ef:cd:72:1f: 70:d6:9e:99:73:e2:75:6b:74:0b:81:f5:7f:d6:00:4f:db:94: 87:22:35:cb:d0:1f:2f:87:ac:be:5b:ed:06:c1:5f:9e:9d:75: c1:3a:00:1e:f7:18:07:a5:48:39:98:91:0e:4e:21:42:42:8a: 56:17:b5:b3:a3:e8:e9:c0:98:76:a2:d8:49:c5:19:e1:75:df: b9:2c:39:96:56:e7:99:35:2f:2b:b2:87:af:45:43:1e:b8:df: db:2d:6b:4e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVZLaKaWXQgThTHG2ZjZpHjwqRGgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwMzA2MDkwNFoX DTI3MDgwMjA2MTQwNFowMzExMC8GA1UEAxMoMzcyQ0ZCRTNFNjcwNDFBOEVEMjAx REQ3NUEzM0FDRTU5Njg5QjAyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOfvo9B794kt7f4MNp5Oh9A4wbdsOfUJ51wynx3VC/6akVlcDVfggqVkZeez 5M3Gi9PYWNGyPnnqx9q+7G6B65bFODEORKa90ETDa9KRIA0HEJJ+43TarDiZktS4 gZRNsBdwN6QWY8f6jscFBstjjpl657hz9tztmv44Pk3tgEww9BjNTl9J8P1oWNI0 ejYRQruxgfl8TXm4Ih3gXtrsdfLij7SvXXGnzfb+HImEQDcGcjfqqAFAqxnz8b5s E5M/9i3mCxqNlcrQLeIwgJQ99psExS4HfTjackt0jwXycJlDajUVhjhvB58x12kA 1h7qR9k0+8LyNOpilP4QtbaLZhkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ3LPvj 5nBBqO0gHddaM6zllomwJDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3NDk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOyBMA0GCSqGSIb3DQEBCwUAA4IBAQBfWiqR6qmnb+JM48bF5BaeYaAL PhEhJGYU6NIWwBkLpe9c4TPgS/eu2vHyYWB4K+MsyU1OjVx09XCNIQvMZgXNUGfb VKDgN6m7mWj3pWdspvRAj8+curLX5RRuScJLeJ/TfNaE2FQc+w/mxZp+Jt8v1x6L f1lMc9VWd/Aptf5O4R/81ZSomDprPwG5psiNxdflPG7c+xmWaE6t/WiVWe/Nch9w 1p6Zc+J1a3QLgfV/1gBP25SHIjXL0B8vh6y+W+0GwV+enXXBOgAe9xgHpUg5mJEO TiFCQopWF7Wzo+jpwJh2othJxRnhdd+5LDmWVueZNS8rsoevRUMeuN/bLWtO -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:33 2026 by rpki-client