$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS137874.roa File: AS137874.roa (raw, json) Hash identifier: ZU+ypZd7Aq4Gpahp+cRddGFKdYCLMuhl8jqtD94H5Oc= Subject key identifier: E3:C5:18:A5:10:DE:C7:5E:AC:6A:DF:D1:5B:D3:23:B8:17:80:45:4D Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4B6CAE0F2B32A7F69F111644729CB67AC79DB96F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137874.roa Signing time: Fri 07 Aug 2026 04:25:08 +0000 ROA not before: Fri 07 Aug 2026 04:20:08 +0000 ROA not after: Fri 06 Aug 2027 04:25:08 +0000 asID: 137874 IP address blocks: 160.236.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6c:ae:0f:2b:32:a7:f6:9f:11:16:44:72:9c:b6:7a:c7:9d:b9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 7 04:20:08 2026 GMT Not After : Aug 6 04:25:08 2027 GMT Subject: CN=E3C518A510DEC75EAC6ADFD15BD323B81780454D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:9b:ea:c3:fa:84:ec:dd:b3:b3:4b:0b:88: 10:b3:37:60:fb:ac:9d:ca:38:c3:2c:25:94:ef:fc: 26:0f:51:eb:f6:e8:e5:39:c2:cf:71:5b:43:80:da: c7:72:d8:f6:91:fa:72:76:74:74:89:58:dd:18:cf: ee:4d:2b:55:06:3e:c5:08:1c:02:41:01:7b:87:d1: 1a:43:8a:a1:5a:cc:fa:1b:f6:c5:68:64:fc:d9:92: b1:b8:51:52:7e:9d:45:4c:e4:e9:f4:7f:40:1e:9a: a9:b7:75:24:17:d9:d1:a6:9a:83:49:7d:ef:2f:5e: 30:06:85:52:e0:1c:40:a2:44:6a:d3:c7:99:eb:12: 0c:7c:eb:0d:a7:2b:70:52:2e:ac:bb:b4:4a:e9:ac: 1e:5d:02:6c:f7:4a:4b:9d:ae:26:08:fd:fb:e0:09: b2:79:1c:88:47:fe:ad:c9:fb:b0:7b:09:2e:eb:3b: 41:7a:75:f5:10:f2:8b:dd:70:cc:12:48:e2:eb:09: 8d:54:06:9c:40:3c:1e:db:1a:bd:25:de:41:35:13: 19:1b:11:19:5a:da:11:74:e6:f1:5c:75:5c:f9:3b: b4:ee:52:51:a4:44:9e:29:2e:69:71:88:87:80:11: 6b:6c:67:b6:4b:bd:54:85:bc:84:33:ca:db:9d:4b: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C5:18:A5:10:DE:C7:5E:AC:6A:DF:D1:5B:D3:23:B8:17:80:45:4D X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS137874.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:69:87:06:3b:b6:6c:7e:2e:91:68:f7:17:a5:6c:8c:f3:a7: 74:dd:8e:ff:15:4c:77:a7:72:6c:31:c1:79:23:8b:94:20:7d: 46:0d:0e:3b:34:b1:ba:be:28:6c:42:f2:75:24:90:80:0c:f6: 0c:69:f4:02:be:2d:ce:42:7a:d2:6b:39:a6:0e:3e:f8:a4:0c: 4e:15:cb:83:88:a0:9d:6e:5e:f5:88:eb:a7:67:5c:6f:55:4b: 0a:77:07:53:c8:c7:97:c5:b0:ae:c6:cf:5e:43:2c:d4:78:ee: d8:e4:8b:4d:b9:ad:f2:ec:5f:a7:0e:62:83:83:b3:a2:4d:be: e6:5b:be:98:6c:c2:ef:9f:96:f4:f0:a1:6d:a2:ac:bb:c8:d7: 7e:3d:a7:24:e8:30:7b:8c:7f:3d:3c:f9:e7:db:ca:1b:08:3f: b5:87:70:6d:e0:1e:c8:d6:43:25:e6:64:78:5b:af:57:86:93: 8f:bb:fd:d5:39:0e:33:f7:35:37:a9:e4:e5:1f:d5:5d:78:49: c3:d3:74:2d:a5:f9:ca:2e:27:fe:9e:31:15:58:8f:11:1f:b8: e8:d1:ae:24:00:f9:e8:e8:18:4c:dd:7a:96:2c:9a:05:7b:58: 5b:f5:a7:49:83:9a:b4:23:2f:c7:aa:5f:f1:19:76:48:8e:32: fe:bc:b0:9d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUS2yuDysyp/afERZEcpy2eseduW8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgwNzA0MjAwOFoX DTI3MDgwNjA0MjUwOFowMzExMC8GA1UEAxMoRTNDNTE4QTUxMERFQzc1RUFDNkFE RkQxNUJEMzIzQjgxNzgwNDU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVSm+rD+oTs3bOzSwuIELM3YPusnco4wywllO/8Jg9R6/bo5TnCz3FbQ4Da x3LY9pH6cnZ0dIlY3RjP7k0rVQY+xQgcAkEBe4fRGkOKoVrM+hv2xWhk/NmSsbhR Un6dRUzk6fR/QB6aqbd1JBfZ0aaag0l97y9eMAaFUuAcQKJEatPHmesSDHzrDacr cFIurLu0SumsHl0CbPdKS52uJgj9++AJsnkciEf+rcn7sHsJLus7QXp19RDyi91w zBJI4usJjVQGnEA8HtsavSXeQTUTGRsRGVraEXTm8Vx1XPk7tO5SUaREnikuaXGI h4ARa2xntku9VIW8hDPK251LCmkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTjxRil EN7HXqxq39Fb0yO4F4BFTTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM3ODc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzkMA0GCSqGSIb3DQEBCwUAA4IBAQCKaYcGO7Zsfi6RaPcXpWyM86d0 3Y7/FUx3p3JsMcF5I4uUIH1GDQ47NLG6vihsQvJ1JJCADPYMafQCvi3OQnrSazmm Dj74pAxOFcuDiKCdbl71iOunZ1xvVUsKdwdTyMeXxbCuxs9eQyzUeO7Y5ItNua3y 7F+nDmKDg7OiTb7mW76YbMLvn5b08KFtoqy7yNd+Pack6DB7jH89PPnn28obCD+1 h3Bt4B7I1kMl5mR4W69XhpOPu/3VOQ4z9zU3qeTlH9VdeEnD03QtpfnKLif+njEV WI8RH7jo0a4kAPno6BhM3XqWLJoFe1hb9adJg5q0Iy/Hql/xGXZIjjL+vLCd -----END CERTIFICATE-----Generated at Thu Sep 17 07:26:32 2026 by rpki-client