$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS132412.roa File: AS132412.roa (raw, json) Hash identifier: BSm+iyv4M74Nds7CbMB/nn2WQ5fEeUZ9rvGGAg71GN8= Subject key identifier: FE:7A:A5:8B:00:6A:1D:DF:23:F7:63:D0:44:7A:55:AE:34:8D:5B:83 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0F45345EAB307AA67B569F3823AE4604F9021C91 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132412.roa Signing time: Fri 11 Sep 2026 07:49:38 +0000 ROA not before: Fri 11 Sep 2026 07:44:38 +0000 ROA not after: Fri 10 Sep 2027 07:49:38 +0000 asID: 132412 IP address blocks: 163.52.106.0/24 maxlen: 24 2001:df7:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:45:34:5e:ab:30:7a:a6:7b:56:9f:38:23:ae:46:04:f9:02:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 11 07:44:38 2026 GMT Not After : Sep 10 07:49:38 2027 GMT Subject: CN=FE7AA58B006A1DDF23F763D0447A55AE348D5B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:a4:db:41:d9:5d:d5:93:6b:7e:3c:b2:59: 87:a6:4c:d3:46:a6:c7:e1:5c:4e:a5:57:84:03:ac: c6:48:d3:5b:ad:43:86:3c:4f:a5:c3:a3:e5:ea:78: 3f:b4:70:76:02:b8:f4:44:e7:84:d5:14:52:6b:44: 57:16:b1:14:d8:45:ae:a6:ca:e5:d2:b8:55:d7:25: 20:74:64:23:9f:57:c9:86:8e:52:2d:fe:f7:94:01: 45:f4:92:42:55:61:16:58:82:9a:ec:88:db:68:ad: 19:7b:60:5a:f8:14:4a:bb:69:62:ac:17:fc:cf:fd: 30:71:1b:b2:03:eb:91:79:52:56:42:25:da:2f:46: 43:fd:cb:a4:5f:e1:c4:f5:c3:ab:53:4f:76:e5:96: b4:65:c6:2f:f6:bf:43:a5:e3:27:9b:64:09:c0:7b: c5:4f:72:64:e5:1d:45:c3:14:55:d9:e9:28:32:77: 69:3a:dc:c8:51:84:21:4a:c3:8e:71:d3:bb:b1:65: 60:d5:21:7d:49:24:f1:8f:d0:27:8c:a6:03:a7:b6: 74:f2:bf:38:66:41:88:2f:cc:53:56:d6:d8:dd:2e: 8e:31:45:ae:5e:78:cf:a6:c1:7b:c1:7e:eb:52:3d: 52:36:3f:1d:cd:31:5b:cc:5e:72:fd:e6:a6:f9:92: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:A5:8B:00:6A:1D:DF:23:F7:63:D0:44:7A:55:AE:34:8D:5B:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS132412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.106.0/24 IPv6: 2001:df7:7140::/48 Signature Algorithm: sha256WithRSAEncryption 65:74:06:8c:f0:e4:19:1c:4b:2b:4a:04:3c:bf:29:90:93:29: 5b:19:8f:a3:83:39:f0:06:8b:2f:fd:b2:42:e0:7b:32:94:14: 76:a7:33:26:59:d5:a9:3a:36:e4:43:09:2a:1e:9e:50:67:e3: d9:68:7d:c4:0f:0c:bf:e0:ee:64:22:b7:4d:9d:2f:0d:e1:be: 52:47:70:c4:b1:06:50:5e:e8:93:1d:21:4c:4b:c9:0e:5a:6e: 5c:f8:49:88:a9:fa:7e:67:5e:4b:02:fc:e5:e0:41:01:a9:ac: 27:92:52:b1:c5:cd:bd:4d:21:4d:a7:10:a2:2f:b9:e4:ad:ec: 9f:e5:35:7f:67:12:93:76:90:d0:85:d2:c2:e1:0d:f9:8e:33: f8:52:ae:c1:84:2b:86:a4:5f:ad:4f:4b:f7:ac:7a:5e:3f:af: 29:27:72:65:8e:0e:26:fb:f8:5e:a3:78:e4:c8:51:2e:c2:6d: d3:a6:82:05:ad:3c:59:0f:d4:ce:26:3f:77:cd:84:9c:14:c1: 1b:44:50:0e:db:73:8b:14:44:da:08:d1:fd:18:ac:b6:e8:0b: 80:c4:60:72:73:ac:b8:f2:47:af:cf:77:80:fb:78:43:8b:52: 48:f4:54:b2:6e:e3:c2:3d:af:0d:e4:29:1d:44:94:fa:23:92: a8:d5:cc:d9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUD0U0XqsweqZ7Vp84I65GBPkCHJEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMTA3NDQzOFoX DTI3MDkxMDA3NDkzOFowMzExMC8GA1UEAxMoRkU3QUE1OEIwMDZBMURERjIzRjc2 M0QwNDQ3QTU1QUUzNDhENUI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZppNtB2V3Vk2t+PLJZh6ZM00amx+FcTqVXhAOsxkjTW61DhjxPpcOj5ep4 P7RwdgK49ETnhNUUUmtEVxaxFNhFrqbK5dK4VdclIHRkI59XyYaOUi3+95QBRfSS QlVhFliCmuyI22itGXtgWvgUSrtpYqwX/M/9MHEbsgPrkXlSVkIl2i9GQ/3LpF/h xPXDq1NPduWWtGXGL/a/Q6XjJ5tkCcB7xU9yZOUdRcMUVdnpKDJ3aTrcyFGEIUrD jnHTu7FlYNUhfUkk8Y/QJ4ymA6e2dPK/OGZBiC/MU1bW2N0ujjFFrl54z6bBe8F+ 61I9UjY/Hc0xW8xecv3mpvmSz8sCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT+eqWL AGod3yP3Y9BEelWuNI1bgzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMyNDEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozRqMA8EAgACMAkDBwAgAQ33cUAwDQYJKoZIhvcNAQELBQADggEBAGV0 Bozw5BkcSytKBDy/KZCTKVsZj6ODOfAGiy/9skLgezKUFHanMyZZ1ak6NuRDCSoe nlBn49lofcQPDL/g7mQit02dLw3hvlJHcMSxBlBe6JMdIUxLyQ5ablz4SYip+n5n XksC/OXgQQGprCeSUrHFzb1NIU2nEKIvueSt7J/lNX9nEpN2kNCF0sLhDfmOM/hS rsGEK4akX61PS/esel4/rykncmWODib7+F6jeOTIUS7CbdOmggWtPFkP1M4mP3fN hJwUwRtEUA7bc4sURNoI0f0YrLboC4DEYHJzrLjyR6/Pd4D7eEOLUkj0VLJu48I9 rw3kKR1ElPojkqjVzNk= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:30 2026 by rpki-client