$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS132163.roa File: AS132163.roa (raw, json) Hash identifier: LDltgbwLwcYwfkFtSv/MARIJkMuFuYw0DpT6b7d4zi8= Subject key identifier: 8D:B9:1C:76:65:94:51:A8:CC:CB:E2:C5:74:5A:4B:D2:87:1D:66:01 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 676EB8A37274318F1546931D2009A7CDCA2794DD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132163.roa Signing time: Tue 08 Sep 2026 09:10:17 +0000 ROA not before: Tue 08 Sep 2026 09:05:17 +0000 ROA not after: Tue 07 Sep 2027 09:10:17 +0000 asID: 132163 IP address blocks: 163.52.101.0/24 maxlen: 24 2001:df7:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6e:b8:a3:72:74:31:8f:15:46:93:1d:20:09:a7:cd:ca:27:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 8 09:05:17 2026 GMT Not After : Sep 7 09:10:17 2027 GMT Subject: CN=8DB91C76659451A8CCCBE2C5745A4BD2871D6601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:ce:71:5b:b1:a8:85:11:65:d8:6b:fe:3e: 84:b0:bb:19:a5:46:c8:e0:5e:a5:a2:e7:c3:10:dc: 7b:81:c5:3a:d6:95:e5:cb:0c:c4:3e:ca:71:b3:cc: 05:1a:00:48:0e:fd:f8:72:0d:f7:55:f1:9a:85:ee: 6d:7d:42:ff:db:23:aa:ba:04:ec:6e:ec:96:9e:aa: 08:36:ff:3a:ff:e1:77:90:a6:bd:82:01:3c:bb:97: 60:aa:f9:f6:0d:27:ea:c7:01:ec:40:f9:a5:b4:96: 2d:37:bd:8c:62:85:70:dc:f8:74:dc:89:0a:1a:23: 6b:80:6a:c3:4e:c8:fb:f2:f7:5c:b4:31:65:e8:d7: 42:72:ab:5d:e3:be:e2:00:47:c0:dc:48:23:9d:b5: 16:f4:84:43:4a:ee:0f:b5:51:52:83:19:0a:9a:0f: bc:b7:0b:33:df:4a:3e:bb:3c:b3:21:6e:95:ea:43: 46:1f:ca:46:33:41:2d:ef:d5:71:e1:67:5d:47:32: 8e:b6:5b:27:b5:f2:c4:8c:38:19:15:52:6e:9d:35: 8e:ab:04:91:25:89:7a:ad:06:6c:b7:61:f5:ad:55: 7f:2a:9b:cf:39:50:1b:eb:01:7e:18:58:88:74:57: ef:3e:4a:6c:e7:b1:40:74:04:2b:f4:cb:df:8c:bd: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B9:1C:76:65:94:51:A8:CC:CB:E2:C5:74:5A:4B:D2:87:1D:66:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132163.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.101.0/24 IPv6: 2001:df7:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 88:21:10:98:04:78:fc:d7:28:d0:6b:c8:41:b3:09:d0:9e:80: 4a:cc:7e:94:09:24:b6:bd:be:30:ad:9b:4a:3f:92:3e:61:60: fd:63:80:3b:56:a4:a2:36:13:d8:00:a3:c9:3a:a0:9b:32:c7: b7:21:5b:05:9c:4f:dc:fe:c2:2a:6d:0b:3b:f2:31:9f:6f:22: f0:27:4f:74:5e:bb:5e:30:5a:ae:e7:a9:22:70:21:43:e8:8d: b3:5f:51:01:e3:32:10:21:5e:00:6a:62:ae:60:24:26:3a:df: fb:6f:e6:02:88:9c:89:14:45:a7:32:26:00:6f:34:85:43:24: 5c:df:0b:4b:6a:0f:d6:b6:45:29:66:f3:69:f0:a2:5b:8b:ae: 40:0a:0b:5d:d2:69:37:94:3f:5f:55:ac:8d:c2:11:47:64:c9: a9:61:24:ca:04:dd:8a:6f:4e:ea:93:e0:0f:2d:5d:ce:1a:05: 4d:81:5a:7d:56:a7:dc:ba:25:07:9e:1a:7d:e3:a2:f0:95:83: 22:7c:02:80:3e:bc:ea:52:a8:89:7c:76:3d:aa:0e:4c:ad:12: 48:df:95:25:48:ba:96:f6:68:14:d6:54:27:74:d5:a1:3d:e0: 69:06:92:51:1a:f1:ec:9d:b6:f3:d5:ed:e8:61:b8:88:63:83: b3:36:22:f7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZ264o3J0MY8VRpMdIAmnzconlN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwODA5MDUxN1oX DTI3MDkwNzA5MTAxN1owMzExMC8GA1UEAxMoOERCOTFDNzY2NTk0NTFBOENDQ0JF MkM1NzQ1QTRCRDI4NzFENjYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8qznFbsaiFEWXYa/4+hLC7GaVGyOBepaLnwxDce4HFOtaV5csMxD7KcbPM BRoASA79+HIN91XxmoXubX1C/9sjqroE7G7slp6qCDb/Ov/hd5CmvYIBPLuXYKr5 9g0n6scB7ED5pbSWLTe9jGKFcNz4dNyJChoja4Bqw07I+/L3XLQxZejXQnKrXeO+ 4gBHwNxII521FvSEQ0ruD7VRUoMZCpoPvLcLM99KPrs8syFulepDRh/KRjNBLe/V ceFnXUcyjrZbJ7XyxIw4GRVSbp01jqsEkSWJeq0GbLdh9a1VfyqbzzlQG+sBfhhY iHRX7z5KbOexQHQEK/TL34y9GoECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSNuRx2 ZZRRqMzL4sV0WkvShx1mATAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMyMTYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozRlMA8EAgACMAkDBwAgAQ33cMAwDQYJKoZIhvcNAQELBQADggEBAIgh EJgEePzXKNBryEGzCdCegErMfpQJJLa9vjCtm0o/kj5hYP1jgDtWpKI2E9gAo8k6 oJsyx7chWwWcT9z+wiptCzvyMZ9vIvAnT3Reu14wWq7nqSJwIUPojbNfUQHjMhAh XgBqYq5gJCY63/tv5gKInIkURacyJgBvNIVDJFzfC0tqD9a2RSlm82nwoluLrkAK C13SaTeUP19VrI3CEUdkyalhJMoE3YpvTuqT4A8tXc4aBU2BWn1Wp9y6JQeeGn3j ovCVgyJ8AoA+vOpSqIl8dj2qDkytEkjflSVIupb2aBTWVCd01aE94GkGklEa8eyd tvPV7ehhuIhjg7M2Ivc= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:48 2026 by rpki-client