$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS13111.roa File: AS13111.roa (raw, json) Hash identifier: DZR+qziz4zobEEeXeP8kj31RrqnvsFMMdeAREbPD1ng= Subject key identifier: 66:18:EE:CC:70:A1:DF:EF:34:E5:D1:7A:78:AF:45:8F:E7:C7:73:8A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 130105591111DB8D77D22950889F6AD864E8541E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS13111.roa Signing time: Sat 02 May 2026 12:47:37 +0000 ROA not before: Sat 02 May 2026 12:42:37 +0000 ROA not after: Sat 01 May 2027 12:47:37 +0000 asID: 13111 IP address blocks: 119.235.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:01:05:59:11:11:db:8d:77:d2:29:50:88:9f:6a:d8:64:e8:54:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 12:42:37 2026 GMT Not After : May 1 12:47:37 2027 GMT Subject: CN=6618EECC70A1DFEF34E5D17A78AF458FE7C7738A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:a8:4f:54:3a:d8:a3:63:f8:01:54:84:de: ca:fa:a3:f8:9c:e9:1e:3f:7f:f7:45:20:5a:48:80: ee:37:17:27:ff:45:42:ba:ff:53:28:41:b3:b0:9a: 47:35:82:0b:34:55:25:a3:2b:31:21:ff:f5:50:5e: 76:ad:61:ee:22:60:f7:b3:29:08:06:3b:b6:b2:65: be:27:7f:95:9e:ed:fa:90:ab:f7:11:42:df:f2:4c: eb:e1:87:8c:00:a6:d0:8a:3f:00:75:17:c0:c2:ce: a9:66:7c:e5:31:8a:de:cb:34:10:e4:47:4a:b3:02: 44:96:65:f5:8c:35:8f:a6:46:a4:24:71:e4:db:c4: bc:0d:e3:68:56:7f:bf:3d:1e:43:46:0f:1e:5f:5f: ae:f8:71:e1:ea:56:3a:f5:d0:84:07:5a:21:91:d0: 6c:67:94:02:73:f8:d6:e8:bc:33:8c:eb:8c:16:64: 47:07:0b:f2:df:5b:ef:df:1b:82:d2:19:f6:0a:f9: d1:91:df:d2:05:11:78:d3:fa:8c:5f:f2:d9:ed:a2: 84:a4:78:dd:69:8b:38:a3:c3:f1:b3:4d:c9:fa:e1: 65:34:d2:fa:2d:25:60:21:d0:0c:d4:84:44:aa:a7: c4:e1:7a:ce:03:52:a3:53:4e:36:39:68:a2:72:63: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:18:EE:CC:70:A1:DF:EF:34:E5:D1:7A:78:AF:45:8F:E7:C7:73:8A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS13111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.209.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:34:26:71:75:b5:eb:fa:73:6c:17:ef:85:9f:86:3a:56:88: 18:eb:24:fc:fd:eb:54:e3:3e:d1:2b:0f:b9:c2:e9:0a:86:dc: 0f:ce:d8:6b:7a:ac:af:73:38:9a:93:b5:d8:2f:12:43:58:09: bf:f3:49:45:f2:89:63:2c:c0:78:b3:26:c1:75:64:b0:6b:3a: 2a:93:87:81:37:73:17:81:f7:0a:b6:9d:ff:e0:cf:37:00:24: ee:72:fb:7d:49:f2:86:1b:6b:0e:98:b7:97:ea:39:2f:f2:88: a9:ee:6e:6e:f5:19:d3:ae:19:d8:0d:e4:cb:4b:17:bb:00:7d: 43:c7:1a:4c:e5:4c:95:01:ad:7a:12:0b:a0:de:fd:38:89:29: 8a:5a:d5:66:d0:95:5a:4c:4e:73:fb:ee:4c:96:ca:02:7d:ae: bf:39:8d:bd:26:36:44:38:68:0c:b6:0d:5c:fb:b3:8e:e5:f9: d0:64:ac:1d:6b:50:31:d7:84:0c:c4:0f:30:99:22:06:c3:a4: c4:40:c3:9e:c5:e8:27:85:3a:4d:26:9d:79:d3:58:20:5c:b4: b6:14:06:a8:3a:51:8a:11:df:1f:99:b2:f8:4c:53:65:5e:83: 8c:3f:94:5a:41:f5:9a:8c:b0:a3:db:90:9c:bb:91:ec:d5:6c: 63:b6:c2:5c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUEwEFWRER24130ilQiJ9q2GToVB4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjEyNDIzN1oX DTI3MDUwMTEyNDczN1owMzExMC8GA1UEAxMoNjYxOEVFQ0M3MEExREZFRjM0RTVE MTdBNzhBRjQ1OEZFN0M3NzM4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjWqE9UOtijY/gBVITeyvqj+JzpHj9/90UgWkiA7jcXJ/9FQrr/UyhBs7Ca RzWCCzRVJaMrMSH/9VBedq1h7iJg97MpCAY7trJlvid/lZ7t+pCr9xFC3/JM6+GH jACm0Io/AHUXwMLOqWZ85TGK3ss0EORHSrMCRJZl9Yw1j6ZGpCRx5NvEvA3jaFZ/ vz0eQ0YPHl9frvhx4epWOvXQhAdaIZHQbGeUAnP41ui8M4zrjBZkRwcL8t9b798b gtIZ9gr50ZHf0gUReNP6jF/y2e2ihKR43WmLOKPD8bNNyfrhZTTS+i0lYCHQDNSE RKqnxOF6zgNSo1NONjloonJj2R8CAwEAAaOCAcswggHHMB0GA1UdDgQWBBRmGO7M cKHf7zTl0Xp4r0WP58dzijAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxMTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB369EwDQYJKoZIhvcNAQELBQADggEBAB80JnF1tev6c2wX74WfhjpWiBjr JPz961TjPtErD7nC6QqG3A/O2Gt6rK9zOJqTtdgvEkNYCb/zSUXyiWMswHizJsF1 ZLBrOiqTh4E3cxeB9wq2nf/gzzcAJO5y+31J8oYbaw6Yt5fqOS/yiKnubm71GdOu GdgN5MtLF7sAfUPHGkzlTJUBrXoSC6De/TiJKYpa1WbQlVpMTnP77kyWygJ9rr85 jb0mNkQ4aAy2DVz7s47l+dBkrB1rUDHXhAzEDzCZIgbDpMRAw57F6CeFOk0mnXnT WCBctLYUBqg6UYoR3x+ZsvhMU2Veg4w/lFpB9ZqMsKPbkJy7kezVbGO2wlw= -----END CERTIFICATE-----Generated at Sun May 3 00:40:29 2026 by rpki-client