$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131784.roa File: AS131784.roa (raw, json) Hash identifier: q36M3Qbv92cNF28AGbVLEatdXLUfQJMkLoVdhG8wpQI= Subject key identifier: 5E:78:B9:41:BD:20:92:84:15:59:DE:9A:09:0D:97:F7:23:B1:33:F7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 581767AFA173AEE881CDC98D7982A879D7D47BF9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131784.roa Signing time: Sat 02 May 2026 09:26:01 +0000 ROA not before: Sat 02 May 2026 09:21:01 +0000 ROA not after: Sat 01 May 2027 09:26:01 +0000 asID: 131784 IP address blocks: 103.17.164.0/24 maxlen: 24 2001:df4:7100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:17:67:af:a1:73:ae:e8:81:cd:c9:8d:79:82:a8:79:d7:d4:7b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:01 2026 GMT Not After : May 1 09:26:01 2027 GMT Subject: CN=5E78B941BD2092841559DE9A090D97F723B133F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:fd:0c:6b:99:01:43:42:0f:99:b8:50:79: c9:f0:d7:80:6e:78:ea:86:2b:9f:4f:21:47:e0:94: f4:b5:fb:2b:10:7a:c9:3d:3d:f1:8b:96:73:fd:1e: 1e:61:52:c8:f3:01:c4:fa:f2:3e:50:92:91:22:c2: d8:ba:b1:03:7d:4a:19:d7:37:75:26:16:de:f1:0f: 30:d8:28:7b:f6:a4:e3:e0:5b:bf:da:7d:67:b4:db: bc:fb:89:89:68:57:9e:7d:75:8b:f7:d7:ae:f7:ee: 27:04:b5:e3:da:1b:b5:2c:22:cf:13:70:9c:a8:b7: 7e:6e:15:22:e1:76:a4:9e:eb:cd:2e:81:a7:d6:7e: c8:40:06:eb:56:4a:eb:54:ba:cd:92:ee:5d:3e:8b: 60:c2:cb:c6:d0:07:1e:aa:5e:8a:06:17:bd:f1:68: c7:1d:05:34:5d:78:cb:4b:f5:c4:e5:1d:80:87:59: 98:d1:15:0d:57:60:ee:4b:5c:3a:76:49:77:36:c2: d9:21:68:2a:b6:88:54:54:02:7b:e1:1b:b6:fc:eb: 35:84:1a:4a:e4:52:f2:a1:94:0e:af:41:30:54:5b: 7c:7d:2f:d2:aa:be:bf:ba:94:f1:d6:3e:0a:58:4d: 88:aa:68:a3:80:11:31:37:83:1d:a9:06:81:58:4a: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:B9:41:BD:20:92:84:15:59:DE:9A:09:0D:97:F7:23:B1:33:F7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131784.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.164.0/24 IPv6: 2001:df4:7100::/48 Signature Algorithm: sha256WithRSAEncryption 63:6a:b1:f6:d2:4b:c6:1d:eb:a9:a1:ba:cf:eb:f3:f4:f2:48: fc:f3:f3:c0:93:48:a8:b3:86:66:a8:66:7b:f3:36:cb:37:bb: be:e2:f6:55:ee:65:94:58:b1:41:bc:9f:17:be:68:c4:eb:10: 31:0a:24:43:05:0a:f8:02:34:0d:ad:6d:69:af:87:7a:49:49: 54:3f:a7:b4:4e:93:74:e8:30:4c:aa:71:50:9b:3e:38:20:d1: e3:ac:f0:7b:75:72:3a:d2:b8:80:c3:8d:22:08:5e:21:0c:2b: e2:bb:75:ce:b0:54:6e:69:18:bc:06:29:8c:3d:8c:04:6d:0f: e7:47:2e:23:bb:08:e0:7e:e1:a2:41:85:f1:db:73:41:a3:93: c4:60:1a:b8:6a:06:bc:fd:7a:50:5e:78:20:7d:2f:81:1a:cc: f1:52:dc:20:7f:c9:ed:f8:75:2b:b6:d9:20:23:8f:e4:e0:4c: 7b:df:fa:42:38:e0:8b:71:91:bd:d1:a6:2b:77:fb:d4:58:c3: 96:c8:ef:c2:4a:88:24:f8:24:10:41:cb:9b:b8:8e:47:7b:64: 4e:15:1c:36:d2:45:7f:88:22:0b:94:3b:c5:7d:10:6f:e4:87: ad:97:a2:fd:9e:9f:7f:7f:2c:56:79:59:4c:6a:d0:7b:e7:c9: e2:09:e0:ef -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWBdnr6FzruiBzcmNeYKoedfUe/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEwMVoX DTI3MDUwMTA5MjYwMVowMzExMC8GA1UEAxMoNUU3OEI5NDFCRDIwOTI4NDE1NTlE RTlBMDkwRDk3RjcyM0IxMzNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCg/QxrmQFDQg+ZuFB5yfDXgG546oYrn08hR+CU9LX7KxB6yT098YuWc/0e HmFSyPMBxPryPlCSkSLC2LqxA31KGdc3dSYW3vEPMNgoe/ak4+Bbv9p9Z7TbvPuJ iWhXnn11i/fXrvfuJwS149obtSwizxNwnKi3fm4VIuF2pJ7rzS6Bp9Z+yEAG61ZK 61S6zZLuXT6LYMLLxtAHHqpeigYXvfFoxx0FNF14y0v1xOUdgIdZmNEVDVdg7ktc OnZJdzbC2SFoKraIVFQCe+EbtvzrNYQaSuRS8qGUDq9BMFRbfH0v0qq+v7qU8dY+ ClhNiKpoo4ARMTeDHakGgVhKQ98CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBReeLlB vSCShBVZ3poJDZf3I7Ez9zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxNzg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZxGkMA8EAgACMAkDBwAgAQ30cQAwDQYJKoZIhvcNAQELBQADggEBAGNq sfbSS8Yd66mhus/r8/TySPzz88CTSKizhmaoZnvzNss3u77i9lXuZZRYsUG8nxe+ aMTrEDEKJEMFCvgCNA2tbWmvh3pJSVQ/p7ROk3ToMEyqcVCbPjgg0eOs8Ht1cjrS uIDDjSIIXiEMK+K7dc6wVG5pGLwGKYw9jARtD+dHLiO7COB+4aJBhfHbc0Gjk8Rg GrhqBrz9elBeeCB9L4EazPFS3CB/ye34dSu22SAjj+TgTHvf+kI44Itxkb3Rpit3 +9RYw5bI78JKiCT4JBBBy5u4jkd7ZE4VHDbSRX+IIguUO8V9EG/kh62Xov2en39/ LFZ5WUxq0HvnyeIJ4O8= -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client