$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131775.roa File: AS131775.roa (raw, json) Hash identifier: QN+5ICJS/ICHJAnZD6P3tnYxhd7tA2ERp9eHEta4/6Y= Subject key identifier: 5C:14:8E:EB:34:D1:0F:AF:5D:B8:20:44:2B:02:6B:37:64:DF:3E:5D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4F2BE418FB36B7952F3772C0470D5D88B8C6440E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131775.roa Signing time: Sat 02 May 2026 21:36:13 +0000 ROA not before: Sat 02 May 2026 21:31:13 +0000 ROA not after: Sat 01 May 2027 21:36:13 +0000 asID: 131775 IP address blocks: 163.227.124.0/24 maxlen: 24 2001:df5:6940::/48 maxlen: 48 2406:f040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2b:e4:18:fb:36:b7:95:2f:37:72:c0:47:0d:5d:88:b8:c6:44:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:13 2026 GMT Not After : May 1 21:36:13 2027 GMT Subject: CN=5C148EEB34D10FAF5DB820442B026B3764DF3E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fe:25:06:95:a8:ae:85:d3:9f:c6:b0:91:75: 7a:96:09:2d:6a:b7:e8:41:0a:74:40:28:bb:27:3d: ed:bd:af:d7:0c:80:dc:67:23:7f:94:ea:06:ee:3e: b9:10:9c:8c:49:af:42:78:51:bc:a7:77:aa:31:db: d2:42:1a:72:b6:09:b3:b7:5d:86:97:37:b0:93:90: 4e:7e:74:e0:d8:ea:6b:b2:4c:a0:6c:04:92:44:57: 79:4d:8e:52:66:6d:5b:55:19:07:06:fa:53:04:6b: 92:af:80:43:43:a2:dc:8e:59:da:41:2a:18:38:74: 9d:2c:36:ee:42:1e:2f:bb:6a:ce:81:1b:50:df:14: 13:ae:30:b8:8b:b5:08:e1:03:cd:43:f0:59:e6:be: 05:b9:e1:bb:44:bd:ee:c4:8f:a5:ff:40:32:fb:f5: 05:a0:c0:f8:49:1f:e3:86:9c:14:f2:27:75:86:42: 7d:dd:fa:8c:eb:35:76:d9:46:e8:00:37:bd:aa:3b: 8a:4e:d2:d9:7d:1a:96:77:b4:4b:d0:21:1c:bb:b7: 16:b8:c4:0a:b6:b4:45:6c:f3:df:f4:4b:15:c5:74: 57:cb:a9:61:6e:d4:55:81:d0:b0:38:e6:27:59:63: 06:14:74:01:41:01:97:26:1d:1e:5d:d5:02:e5:4c: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:8E:EB:34:D1:0F:AF:5D:B8:20:44:2B:02:6B:37:64:DF:3E:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.124.0/24 IPv6: 2001:df5:6940::/48 2406:f040::/32 Signature Algorithm: sha256WithRSAEncryption 1c:ab:22:de:93:d4:50:df:bb:fa:43:35:e5:49:e6:6c:04:d8: 9e:ab:50:b3:d0:6b:96:15:5d:d8:28:d0:17:a2:65:45:d1:dd: be:be:1e:60:7e:ea:11:03:c1:b2:b5:fd:cf:43:ef:34:aa:44: 66:8b:f8:0c:94:4c:db:a0:9b:e0:d6:c4:bf:7d:69:2a:71:9e: d2:bb:1c:5b:1e:1f:b4:ff:ed:65:f2:f0:46:fe:42:43:7d:e6: c9:36:13:45:eb:2f:8f:90:18:46:21:88:d1:e0:49:a3:a6:c7: 38:6f:38:c9:ab:aa:77:ab:b5:8c:aa:64:58:ab:39:3c:63:e0: 29:bc:6b:e1:08:4b:6b:ae:38:44:5d:84:a1:95:d7:17:87:5f: 60:62:f7:b1:fa:7a:fe:27:62:26:c0:ea:94:ce:cf:36:a5:bf: b2:df:cc:ce:d1:30:8e:d8:b5:e8:5c:6e:b1:9d:ce:3b:a3:46: ff:57:f6:29:ca:41:36:ba:28:1d:2a:f9:8b:cb:bb:9b:76:d1: c8:3d:6f:18:ae:9a:1e:03:24:8b:fd:02:0b:16:5b:12:64:39: 24:41:28:02:ba:59:42:10:b1:e7:c0:95:1d:ff:18:0d:b0:0b: 3a:2e:bf:00:a7:6a:b5:ff:19:11:6f:5b:ab:18:ef:98:6a:8c: c2:46:10:8f -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUTyvkGPs2t5UvN3LARw1diLjGRA4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzExM1oX DTI3MDUwMTIxMzYxM1owMzExMC8GA1UEAxMoNUMxNDhFRUIzNEQxMEZBRjVEQjgy MDQ0MkIwMjZCMzc2NERGM0U1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOf+JQaVqK6F05/GsJF1epYJLWq36EEKdEAouyc97b2v1wyA3Gcjf5TqBu4+ uRCcjEmvQnhRvKd3qjHb0kIacrYJs7ddhpc3sJOQTn504Njqa7JMoGwEkkRXeU2O UmZtW1UZBwb6UwRrkq+AQ0Oi3I5Z2kEqGDh0nSw27kIeL7tqzoEbUN8UE64wuIu1 COEDzUPwWea+Bbnhu0S97sSPpf9AMvv1BaDA+Ekf44acFPIndYZCfd36jOs1dtlG 6AA3vao7ik7S2X0alne0S9AhHLu3FrjECra0RWzz3/RLFcV0V8upYW7UVYHQsDjm J1ljBhR0AUEBlyYdHl3VAuVMZLECAwEAAaOCAeQwggHgMB0GA1UdDgQWBBRcFI7r NNEPr124IEQrAms3ZN8+XTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxNzc1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIA ATAGAwQAo+N8MBYEAgACMBADBwAgAQ31aUADBQAkBvBAMA0GCSqGSIb3DQEBCwUA A4IBAQAcqyLek9RQ37v6QzXlSeZsBNieq1Cz0GuWFV3YKNAXomVF0d2+vh5gfuoR A8Gytf3PQ+80qkRmi/gMlEzboJvg1sS/fWkqcZ7SuxxbHh+0/+1l8vBG/kJDfebJ NhNF6y+PkBhGIYjR4Emjpsc4bzjJq6p3q7WMqmRYqzk8Y+ApvGvhCEtrrjhEXYSh ldcXh19gYvex+nr+J2ImwOqUzs82pb+y38zO0TCO2LXoXG6xnc47o0b/V/YpykE2 uigdKvmLy7ubdtHIPW8YrpoeAySL/QILFlsSZDkkQSgCullCELHnwJUd/xgNsAs6 Lr8Ap2q1/xkRb1urGO+YaozCRhCP -----END CERTIFICATE-----Generated at Sun May 3 01:44:41 2026 by rpki-client