$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131704.roa File: AS131704.roa (raw, json) Hash identifier: +5WIOESDZTO04bajh7l44d+DVYxfStANyIsi3T50Q2w= Subject key identifier: F2:73:A7:A1:9B:3E:60:F7:8E:39:C3:80:B7:EF:D2:0A:DA:E7:45:65 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37CB91EB8EE094CC34588C20690D350BB32C97CC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131704.roa Signing time: Sat 02 May 2026 09:22:18 +0000 ROA not before: Sat 02 May 2026 09:17:18 +0000 ROA not after: Sat 01 May 2027 09:22:18 +0000 asID: 131704 IP address blocks: 119.2.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cb:91:eb:8e:e0:94:cc:34:58:8c:20:69:0d:35:0b:b3:2c:97:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:18 2026 GMT Not After : May 1 09:22:18 2027 GMT Subject: CN=F273A7A19B3E60F78E39C380B7EFD20ADAE74565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:b7:3a:2d:2b:c6:0e:2d:0d:5e:00:ea:ef: 07:0a:3d:c3:71:41:cb:52:cf:cf:17:83:5a:e8:df: b4:69:03:f0:e5:31:bf:35:75:cb:9c:4a:e1:b1:a2: ad:9a:3e:83:f1:1c:f2:e1:7d:95:16:22:0f:6b:2e: be:f7:02:7e:7d:55:03:ac:c1:13:08:21:d7:ca:e3: 00:44:29:a9:54:7a:49:7f:e7:13:44:e5:b9:04:61: f6:a4:80:01:8a:b1:f5:68:af:80:d8:75:23:ea:22: a6:32:aa:9d:9b:31:0a:40:73:f2:de:ba:18:90:43: 48:7e:5b:4e:a1:fa:f8:f7:0d:6c:ef:03:89:48:95: 52:ec:92:40:9a:94:b1:17:af:49:f8:02:ac:ad:b7: 40:3b:7a:b2:74:4a:f4:ab:54:d1:86:7d:86:f3:02: e4:01:e4:0d:74:53:8b:ec:13:7b:67:c2:aa:34:0d: 8e:ea:41:f8:f4:89:f2:81:af:da:06:7b:19:18:a4: 21:3c:ac:2d:34:f1:d4:3a:0e:a5:2b:36:a5:07:d4: 32:24:c2:ee:9a:78:c3:a1:4a:83:78:18:f9:67:6e: 9c:ea:21:ac:dc:69:88:14:7a:d9:a5:da:0b:e2:37: f5:da:aa:5c:c5:a7:0f:ee:2b:26:eb:ff:ac:6f:eb: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:A7:A1:9B:3E:60:F7:8E:39:C3:80:B7:EF:D2:0A:DA:E7:45:65 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.2.64.0/19 Signature Algorithm: sha256WithRSAEncryption 7f:93:4f:c7:66:90:e9:41:dd:89:19:e0:ed:47:19:fe:de:f5: 74:a2:54:26:b1:9a:24:2c:cd:98:5c:d1:b7:8f:5b:9b:4a:05: 6c:f1:b7:11:56:c7:45:43:76:75:7c:c3:6c:6d:89:cb:0c:7b: a5:b4:be:af:87:a0:dc:ac:00:8b:f5:43:7b:56:78:2e:73:91: e3:be:69:34:bc:a6:4c:23:30:50:23:2a:16:2f:4b:43:e6:93: 96:96:94:73:05:17:fd:b3:af:67:27:bb:db:5e:33:f0:29:0f: 46:a1:91:78:d2:ae:08:2d:a9:13:0b:56:ef:f2:dc:fe:17:66: 01:58:ba:f3:d3:87:3a:76:c0:5b:05:a8:55:80:1b:71:77:3f: 43:1e:ee:a3:fb:26:22:68:1a:ab:a1:d3:4c:ee:39:44:8c:a7: a2:f3:9f:41:34:82:ee:64:28:e5:63:57:2f:4a:12:78:c8:18: 38:99:fd:6b:7c:2f:dd:ed:a1:06:12:0c:6a:6e:67:41:2f:3b: 2f:82:47:ef:c7:c1:d2:5d:d9:2c:62:aa:f7:91:60:29:8b:3d: 97:b0:ec:32:07:f9:74:69:cb:d3:50:1f:ba:72:bb:90:dd:82: b5:03:ad:e3:f1:47:55:0f:31:1b:c2:39:b8:3d:27:21:7b:04: b7:72:4d:7c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUN8uR647glMw0WIwgaQ01C7Msl8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcxOFoX DTI3MDUwMTA5MjIxOFowMzExMC8GA1UEAxMoRjI3M0E3QTE5QjNFNjBGNzhFMzlD MzgwQjdFRkQyMEFEQUU3NDU2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEitzotK8YOLQ1eAOrvBwo9w3FBy1LPzxeDWujftGkD8OUxvzV1y5xK4bGi rZo+g/Ec8uF9lRYiD2suvvcCfn1VA6zBEwgh18rjAEQpqVR6SX/nE0TluQRh9qSA AYqx9WivgNh1I+oipjKqnZsxCkBz8t66GJBDSH5bTqH6+PcNbO8DiUiVUuySQJqU sRevSfgCrK23QDt6snRK9KtU0YZ9hvMC5AHkDXRTi+wTe2fCqjQNjupB+PSJ8oGv 2gZ7GRikITysLTTx1DoOpSs2pQfUMiTC7pp4w6FKg3gY+WdunOohrNxpiBR62aXa C+I39dqqXMWnD+4rJuv/rG/rxDcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTyc6eh mz5g9445w4C379IK2udFZTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxNzA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQFdwJAMA0GCSqGSIb3DQEBCwUAA4IBAQB/k0/HZpDpQd2JGeDtRxn+3vV0 olQmsZokLM2YXNG3j1ubSgVs8bcRVsdFQ3Z1fMNsbYnLDHultL6vh6DcrACL9UN7 Vnguc5Hjvmk0vKZMIzBQIyoWL0tD5pOWlpRzBRf9s69nJ7vbXjPwKQ9GoZF40q4I LakTC1bv8tz+F2YBWLrz04c6dsBbBahVgBtxdz9DHu6j+yYiaBqrodNM7jlEjKei 859BNILuZCjlY1cvShJ4yBg4mf1rfC/d7aEGEgxqbmdBLzsvgkfvx8HSXdksYqr3 kWApiz2XsOwyB/l0acvTUB+6cruQ3YK1A63j8UdVDzEbwjm4PSchewS3ck18 -----END CERTIFICATE-----Generated at Sun May 3 01:44:42 2026 by rpki-client