$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS132230.roa File: AS132230.roa (raw, json) Hash identifier: 7GMTC7LRFX0+BM+kkiqlPhMFE3C7XP1trOE45v5OoEE= Subject key identifier: 88:9D:61:A2:A8:21:64:82:7B:0A:EE:E6:ED:2A:4B:0B:DE:0B:B5:84 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1ACF0367F576C574F4BB01130B058215BEF20E54 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132230.roa Signing time: Sun 04 Oct 2026 00:31:27 +0000 ROA not before: Sun 04 Oct 2026 00:26:27 +0000 ROA not after: Sun 03 Oct 2027 00:31:27 +0000 asID: 132230 IP address blocks: 103.149.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:03:67:f5:76:c5:74:f4:bb:01:13:0b:05:82:15:be:f2:0e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 4 00:26:27 2026 GMT Not After : Oct 3 00:31:27 2027 GMT Subject: CN=889D61A2A82164827B0AEEE6ED2A4B0BDE0BB584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:a5:56:8d:0a:1b:6f:14:51:56:bb:b9:86: a4:0d:fa:67:72:e7:ce:52:27:ef:e3:af:28:53:de: db:10:14:ac:51:76:95:bd:7c:da:c3:b3:63:d1:20: 2f:a5:1a:c7:31:d4:f4:10:cb:14:80:81:95:09:5d: e1:e9:96:f9:ff:67:20:5b:36:2c:97:e3:d8:bf:51: 2f:43:03:ed:ee:6a:c8:7f:09:37:e3:26:bd:1a:ef: 9e:90:f1:af:2e:dd:1f:1c:46:82:a3:7a:d3:e9:50: 8d:10:16:65:01:62:f9:e2:66:d7:e1:65:c1:30:ca: 3a:2d:89:c1:5a:a7:40:2b:ec:e1:c5:fc:4a:cd:0e: 77:bb:7a:f1:e4:a2:ae:d4:ea:96:ff:b5:e5:ba:f9: 12:62:e4:ba:1b:f6:7f:d8:b8:c9:e4:78:01:ae:21: e2:a5:34:1b:48:1f:04:67:4e:07:4c:4b:8f:7e:b9: a1:df:d9:3f:c9:12:4b:99:9f:ca:ff:2d:e4:3a:97: 15:46:7c:97:c5:5f:a4:70:86:37:61:c7:62:ed:fb: b8:96:93:80:3e:61:e1:38:a2:b8:66:44:b4:fc:a8: 9d:f6:23:24:8f:93:11:6d:2e:a9:7e:0b:17:52:8b: ee:54:10:ce:e0:2e:9b:ad:9c:78:69:93:95:71:50: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9D:61:A2:A8:21:64:82:7B:0A:EE:E6:ED:2A:4B:0B:DE:0B:B5:84 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.54.0/23 Signature Algorithm: sha256WithRSAEncryption 18:0d:33:ee:cc:4a:d6:b5:84:1f:c9:c0:f0:5e:2e:2b:cc:d9: 8f:f1:1d:1f:90:d4:f7:34:74:78:a3:c2:d5:b3:0b:c4:56:51: a4:33:0d:eb:a0:72:04:3f:af:f6:35:92:dc:10:3f:c2:80:f8: 7f:ec:d7:77:12:6b:22:e9:5c:66:3f:27:8c:00:d4:1b:b7:03: 48:0b:fc:93:fe:a8:04:7f:9b:98:00:b1:14:7f:ee:0f:51:b4: 73:e3:1f:f0:8b:d7:c0:da:52:96:53:e1:c5:fa:60:5d:18:5f: 2d:29:63:ff:22:21:70:b7:75:3a:44:08:70:0c:da:e8:58:17: e4:f9:e9:97:86:9d:d3:e7:cd:5a:a3:30:52:f5:eb:b5:ea:f0: ed:ba:95:b5:87:e0:fc:4e:8e:31:ef:53:5b:3c:3c:08:77:4a: c4:d0:ab:09:8f:39:75:b2:63:ee:f6:42:48:9d:6b:a9:3a:ef: 10:53:82:b7:43:ec:79:3a:43:96:ee:9a:66:89:51:09:d7:d1: a6:b6:3b:86:2b:5e:4a:73:01:6c:98:86:20:1f:a4:53:52:d3: d1:32:78:2b:e9:dd:0b:48:7c:37:7f:4c:3e:0b:36:03:50:df: 79:0a:ee:68:0a:73:04:7c:59:f2:d7:c9:fe:c1:cd:38:0f:6e: bf:6b:b1:f5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGs8DZ/V2xXT0uwETCwWCFb7yDlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNDAwMjYyN1oX DTI3MTAwMzAwMzEyN1owMzExMC8GA1UEAxMoODg5RDYxQTJBODIxNjQ4MjdCMEFF RUU2RUQyQTRCMEJERTBCQjU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+lpVaNChtvFFFWu7mGpA36Z3LnzlIn7+OvKFPe2xAUrFF2lb182sOzY9Eg L6UaxzHU9BDLFICBlQld4emW+f9nIFs2LJfj2L9RL0MD7e5qyH8JN+MmvRrvnpDx ry7dHxxGgqN60+lQjRAWZQFi+eJm1+FlwTDKOi2JwVqnQCvs4cX8Ss0Od7t68eSi rtTqlv+15br5EmLkuhv2f9i4yeR4Aa4h4qU0G0gfBGdOB0xLj365od/ZP8kSS5mf yv8t5DqXFUZ8l8VfpHCGN2HHYu37uJaTgD5h4TiiuGZEtPyonfYjJI+TEW0uqX4L F1KL7lQQzuAum62ceGmTlXFQ85UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSInWGi qCFkgnsK7ubtKksL3gu1hDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMyMjMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5U2MA0GCSqGSIb3DQEBCwUAA4IBAQAYDTPuzErWtYQfycDwXi4rzNmP 8R0fkNT3NHR4o8LVswvEVlGkMw3roHIEP6/2NZLcED/CgPh/7Nd3Emsi6VxmPyeM ANQbtwNIC/yT/qgEf5uYALEUf+4PUbRz4x/wi9fA2lKWU+HF+mBdGF8tKWP/IiFw t3U6RAhwDNroWBfk+emXhp3T581aozBS9eu16vDtupW1h+D8To4x71NbPDwId0rE 0KsJjzl1smPu9kJInWupOu8QU4K3Q+x5OkOW7ppmiVEJ19GmtjuGK15KcwFsmIYg H6RTUtPRMngr6d0LSHw3f0w+CzYDUN95Cu5oCnMEfFny18n+wc04D26/a7H1 -----END CERTIFICATE-----Generated at Sat Oct 24 07:09:59 2026 by rpki-client