$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa File: AS133095.roa (raw, json) Hash identifier: LRENknLSG73gq+iOeZFOlMemd0H7AiIgK9sHafXqlww= Subject key identifier: C5:C7:ED:B7:8B:07:6E:F4:47:FD:E5:DD:B8:CF:BD:85:88:CC:8C:E1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37E0974B729A5A1FAFBD7AFC58A0579F53C7BC8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa Signing time: Thu 20 Aug 2026 02:28:29 +0000 ROA not before: Thu 20 Aug 2026 02:23:29 +0000 ROA not after: Thu 19 Aug 2027 02:28:29 +0000 asID: 133095 IP address blocks: 103.61.226.0/23 maxlen: 24 202.57.24.0/23 maxlen: 24 2001:df7:2140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e0:97:4b:72:9a:5a:1f:af:bd:7a:fc:58:a0:57:9f:53:c7:bc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 20 02:23:29 2026 GMT Not After : Aug 19 02:28:29 2027 GMT Subject: CN=C5C7EDB78B076EF447FDE5DDB8CFBD8588CC8CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:b2:47:08:f2:13:b3:34:cb:a4:d6:19:87: e8:1d:ab:9f:12:f6:1b:3f:52:5d:cd:27:38:e6:3e: 50:b3:4a:2a:1c:17:31:37:67:36:73:46:ea:ab:03: 3d:4d:cc:7a:f3:35:72:cb:27:a3:80:12:de:f2:8e: 3d:11:91:73:43:dc:2e:a1:ea:56:14:fc:15:73:c2: a6:c8:ed:9e:c9:5f:9d:12:86:20:0f:24:21:35:56: 9a:55:88:9f:e4:21:11:18:30:de:2d:1b:63:33:27: 99:0c:de:1b:f1:c2:b3:93:56:f6:a6:51:1a:f0:db: 26:65:ac:65:33:cd:4e:4b:fe:b9:74:d3:1b:13:a1: 43:9b:8b:41:e5:f3:66:d3:3c:20:01:92:53:e6:d0: 32:14:de:f7:ca:70:31:3c:a6:69:03:5e:b0:73:ac: 1e:13:53:5d:96:9c:05:d4:76:e7:d5:d5:b2:47:ca: 41:ed:20:6f:16:76:e1:e8:6b:5d:87:e3:8f:36:63: cc:8f:d8:7c:35:f7:ba:39:c8:a8:eb:92:f3:ca:ea: 13:af:60:e9:45:cd:96:93:24:f1:dc:0d:39:05:b3: f8:a8:a1:de:63:df:8e:36:e6:85:fb:5b:5b:52:37: 2b:5e:28:60:ee:33:e8:b0:9a:dc:59:60:46:f5:9c: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:ED:B7:8B:07:6E:F4:47:FD:E5:DD:B8:CF:BD:85:88:CC:8C:E1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.61.226.0/23 202.57.24.0/23 IPv6: 2001:df7:2140::/48 Signature Algorithm: sha256WithRSAEncryption 5d:b5:fe:f8:fe:70:04:c8:b1:01:27:c5:d9:14:93:49:ef:1c: 4b:7f:af:24:af:48:76:dd:d0:5f:43:59:3e:14:56:ad:66:13: 79:8f:25:0f:2a:97:d6:52:e7:f2:96:07:48:71:ee:87:aa:32: c9:47:26:17:6d:44:e3:21:7a:c3:f4:0e:95:ea:56:2d:19:b4: fb:73:85:5c:47:6c:62:02:0b:ed:75:2b:88:51:fe:bb:0d:e4: f9:d3:02:2c:80:18:36:8a:c2:f5:10:b6:7e:9a:b5:97:24:4b: 60:fa:12:bd:00:90:a2:76:d4:0c:8b:d4:bd:92:f5:e1:5c:20: e2:04:98:d6:20:a3:e6:9b:6b:fb:1b:32:e2:e2:16:0e:5f:c1: 0a:25:25:76:dc:e0:ae:06:18:1e:28:47:fa:f0:8d:6e:0b:d4: 48:33:cd:a1:02:69:4e:9c:48:9f:ce:d0:1d:30:da:c5:aa:29: f2:9c:fb:6e:78:d3:d4:d7:cd:b0:df:36:e3:cb:03:20:59:50: 9e:d6:3b:03:3f:5f:e6:81:76:9e:ae:06:7a:19:b7:12:b9:1a: d4:45:d1:20:e3:2b:88:2b:f9:00:82:0f:d4:cd:07:c6:3c:4d: 65:44:fb:eb:5b:52:a1:b4:98:ac:74:51:29:b8:25:45:f7:2b: a5:30:de:44 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUN+CXS3KaWh+vvXr8WKBXn1PHvI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgyMDAyMjMyOVoX DTI3MDgxOTAyMjgyOVowMzExMC8GA1UEAxMoQzVDN0VEQjc4QjA3NkVGNDQ3RkRF NUREQjhDRkJEODU4OENDOENFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANiJskcI8hOzNMuk1hmH6B2rnxL2Gz9SXc0nOOY+ULNKKhwXMTdnNnNG6qsD PU3MevM1cssno4AS3vKOPRGRc0PcLqHqVhT8FXPCpsjtnslfnRKGIA8kITVWmlWI n+QhERgw3i0bYzMnmQzeG/HCs5NW9qZRGvDbJmWsZTPNTkv+uXTTGxOhQ5uLQeXz ZtM8IAGSU+bQMhTe98pwMTymaQNesHOsHhNTXZacBdR259XVskfKQe0gbxZ24ehr XYfjjzZjzI/YfDX3ujnIqOuS88rqE69g6UXNlpMk8dwNOQWz+Kih3mPfjjbmhftb W1I3K14oYO4z6LCa3FlgRvWcsIUCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBTFx+23 iwdu9Ef95d24z72FiMyM4TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMDk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBZz3iAwQByjkYMA8EAgACMAkDBwAgAQ33IUAwDQYJKoZIhvcNAQELBQAD ggEBAF21/vj+cATIsQEnxdkUk0nvHEt/rySvSHbd0F9DWT4UVq1mE3mPJQ8ql9ZS 5/KWB0hx7oeqMslHJhdtROMhesP0DpXqVi0ZtPtzhVxHbGICC+11K4hR/rsN5PnT AiyAGDaKwvUQtn6atZckS2D6Er0AkKJ21AyL1L2S9eFcIOIEmNYgo+aba/sbMuLi Fg5fwQolJXbc4K4GGB4oR/rwjW4L1EgzzaECaU6cSJ/O0B0w2sWqKfKc+25409TX zbDfNuPLAyBZUJ7WOwM/X+aBdp6uBnoZtxK5GtRF0SDjK4gr+QCCD9TNB8Y8TWVE ++tbUqG0mKx0USm4JUX3K6Uw3kQ= -----END CERTIFICATE-----Generated at Thu Sep 17 06:29:21 2026 by rpki-client