$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131205.roa File: AS131205.roa (raw, json) Hash identifier: Kvlf361k/xmnt8pnBHRtGfJn6P3N/l4w+7ie2TrD0uQ= Subject key identifier: 1C:36:AB:46:6E:BD:E8:E9:A5:6D:2E:E1:BE:3F:D5:C9:35:2C:8E:9C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 304898F47928450941E697F41DA8CEA802E3A014 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131205.roa Signing time: Wed 12 Aug 2026 06:37:24 +0000 ROA not before: Wed 12 Aug 2026 06:32:24 +0000 ROA not after: Wed 11 Aug 2027 06:37:24 +0000 asID: 131205 IP address blocks: 45.249.180.0/23 maxlen: 24 2001:df7:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:48:98:f4:79:28:45:09:41:e6:97:f4:1d:a8:ce:a8:02:e3:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 12 06:32:24 2026 GMT Not After : Aug 11 06:37:24 2027 GMT Subject: CN=1C36AB466EBDE8E9A56D2EE1BE3FD5C9352C8E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:82:3c:01:49:9d:cb:69:72:23:ee:7f:f2: 58:0d:ab:9e:a2:ba:36:5f:77:8d:01:9b:53:56:5b: 0b:90:89:45:e2:65:59:db:5f:8e:5e:f0:80:57:5e: cc:84:c3:65:4e:dc:d4:65:6a:e5:91:f1:f5:ae:a8: 23:e5:81:24:9f:9b:06:9d:6d:19:73:ec:08:b0:ce: 04:ab:aa:de:3c:3c:ee:92:eb:a4:7d:58:2a:80:a2: f6:d1:02:24:20:7a:f4:6c:ea:86:c7:eb:f5:2a:1f: 01:4f:93:f3:b3:94:8d:15:17:c5:15:5a:66:3c:81: c0:7d:21:f0:fb:c2:9d:64:f4:ed:c2:e7:98:38:cc: 68:a6:53:a5:bc:24:02:c6:7d:d2:2c:6a:29:27:55: 16:9f:da:77:a1:73:b5:e1:75:b8:72:83:52:0d:26: 1c:ce:9c:28:a6:0c:91:83:d5:63:f3:15:49:3d:c9: 67:1d:78:77:7c:43:d3:04:96:17:8e:a8:28:0f:a6: f7:5f:2b:85:ed:81:e5:ef:ad:f2:c9:15:47:09:d1: ac:2a:a2:b7:df:21:d5:8d:01:3a:50:2f:a3:da:ad: 2d:76:ba:d1:e9:78:a4:e9:c5:37:ba:25:8b:57:2d: 70:56:eb:9a:5a:7c:8a:75:c9:90:cf:c4:82:f8:f0: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:36:AB:46:6E:BD:E8:E9:A5:6D:2E:E1:BE:3F:D5:C9:35:2C:8E:9C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131205.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.180.0/23 IPv6: 2001:df7:5940::/48 Signature Algorithm: sha256WithRSAEncryption 7d:c3:5f:8b:dd:fc:aa:4c:33:50:4d:60:60:b1:4b:6e:aa:4e: 5e:f8:a1:4c:da:5e:1b:ad:3a:82:3a:f2:f9:d7:05:5e:1e:be: 14:ae:59:14:84:73:63:41:df:9c:5e:bc:4a:f5:0e:ca:50:53: 60:42:31:8e:e2:3f:65:4e:a0:46:10:44:bf:9f:19:1f:07:d3: 43:a3:10:61:20:20:8d:32:1f:ae:c0:37:66:6b:fb:cb:53:e1: 40:ca:ab:da:07:be:96:cd:7f:ba:d0:87:de:40:98:32:93:74: 17:2d:ca:65:82:77:22:43:f9:08:d5:e2:0c:c3:05:6f:0f:57: e8:ec:bb:d6:5e:63:a5:1a:dd:2a:51:c4:9f:92:c9:2d:c0:41: 67:50:de:a9:8e:b0:10:a8:0c:d2:83:99:69:04:85:04:0a:03: df:1c:59:7f:60:cf:f6:22:a7:db:2c:43:b7:7f:0c:7d:5d:79: 0c:0b:e8:81:77:33:d4:aa:08:df:a1:50:de:06:15:85:7a:81: c7:94:5d:7a:74:50:15:fe:08:60:a3:51:f8:77:1c:95:d1:62: 1d:8f:91:b1:29:fb:12:82:1c:ca:99:ea:7c:33:11:ec:f0:7f: 52:63:b1:39:ac:51:2f:4f:e5:31:72:32:f9:fb:98:f7:54:d4: 8a:3c:dd:15 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMEiY9HkoRQlB5pf0HajOqALjoBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxMjA2MzIyNFoX DTI3MDgxMTA2MzcyNFowMzExMC8GA1UEAxMoMUMzNkFCNDY2RUJERThFOUE1NkQy RUUxQkUzRkQ1QzkzNTJDOEU5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZ9gjwBSZ3LaXIj7n/yWA2rnqK6Nl93jQGbU1ZbC5CJReJlWdtfjl7wgFde zITDZU7c1GVq5ZHx9a6oI+WBJJ+bBp1tGXPsCLDOBKuq3jw87pLrpH1YKoCi9tEC JCB69Gzqhsfr9SofAU+T87OUjRUXxRVaZjyBwH0h8PvCnWT07cLnmDjMaKZTpbwk AsZ90ixqKSdVFp/ad6FzteF1uHKDUg0mHM6cKKYMkYPVY/MVST3JZx14d3xD0wSW F46oKA+m918rhe2B5e+t8skVRwnRrCqit98h1Y0BOlAvo9qtLXa60el4pOnFN7ol i1ctcFbrmlp8inXJkM/Egvjwj/cCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQcNqtG br3o6aVtLuG+P9XJNSyOnDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxMjA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBLfm0MA8EAgACMAkDBwAgAQ33WUAwDQYJKoZIhvcNAQELBQADggEBAH3D X4vd/KpMM1BNYGCxS26qTl74oUzaXhutOoI68vnXBV4evhSuWRSEc2NB35xevEr1 DspQU2BCMY7iP2VOoEYQRL+fGR8H00OjEGEgII0yH67AN2Zr+8tT4UDKq9oHvpbN f7rQh95AmDKTdBctymWCdyJD+QjV4gzDBW8PV+jsu9ZeY6Ua3SpRxJ+SyS3AQWdQ 3qmOsBCoDNKDmWkEhQQKA98cWX9gz/Yip9ssQ7d/DH1deQwL6IF3M9SqCN+hUN4G FYV6gceUXXp0UBX+CGCjUfh3HJXRYh2PkbEp+xKCHMqZ6nwzEezwf1JjsTmsUS9P 5TFyMvn7mPdU1Io83RU= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:23 2026 by rpki-client