$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa File: AS133337.roa (raw, json) Hash identifier: H/KyJbk+AveeXizfJTODYJ38OgnSAFzn9Q6eW8hWfiU= Subject key identifier: 49:71:BB:5F:6B:E9:A5:5B:5E:52:A3:34:AA:21:25:60:3A:B2:E8:E9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6E2F3D192BECD0D7E9CD7A91245267381BC6C74D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa Signing time: Sat 02 May 2026 08:37:19 +0000 ROA not before: Sat 02 May 2026 08:32:19 +0000 ROA not after: Sat 01 May 2027 08:37:19 +0000 asID: 133337 IP address blocks: 103.174.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2f:3d:19:2b:ec:d0:d7:e9:cd:7a:91:24:52:67:38:1b:c6:c7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:19 2026 GMT Not After : May 1 08:37:19 2027 GMT Subject: CN=4971BB5F6BE9A55B5E52A334AA2125603AB2E8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:d6:40:91:f3:2a:5a:bf:41:50:c1:54:50: 76:85:ee:97:b7:03:e3:7b:f5:d6:79:dd:60:96:f8: 6a:1f:d0:fd:25:2d:ee:4b:ee:e6:ed:3a:b8:e1:53: 01:31:94:48:39:1b:db:1c:25:d9:1c:96:3e:65:68: 9e:9e:42:0d:8d:15:ef:9f:6d:b6:e9:65:a0:d4:89: b0:2e:ec:fb:38:ae:73:d7:4d:09:59:8e:1a:27:88: ec:bd:f7:1c:c0:78:31:ef:b0:4c:81:31:d6:e6:cb: 7d:c8:37:c8:d0:b2:bb:ff:51:14:6f:f9:c0:42:16: f7:c2:26:7e:be:9c:67:fc:24:0a:76:9f:71:55:a4: 88:a6:d1:6e:9f:3a:59:63:b2:26:64:b4:69:37:12: 59:73:07:ae:a5:08:66:7b:bd:d5:1e:11:df:c6:db: 31:4d:ca:bf:d8:3d:59:0b:1c:ed:d1:20:c0:12:21: 39:10:57:6f:b8:e6:d6:e9:98:e9:0a:57:cf:a5:c1: 48:ab:9b:eb:96:7a:d6:88:20:a1:b5:76:19:c8:03: e7:b4:30:6f:be:9b:4c:ba:1b:9e:b6:63:23:13:6e: fd:47:c0:d7:66:8d:65:1f:e2:56:a6:94:d2:f2:93: cd:56:1d:54:70:c8:2b:b7:e6:0b:c8:ac:bf:bc:5b: d7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:BB:5F:6B:E9:A5:5B:5E:52:A3:34:AA:21:25:60:3A:B2:E8:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.67.0/24 Signature Algorithm: sha256WithRSAEncryption 90:16:e6:d4:8f:2f:86:4b:e8:3f:4d:0f:bc:d7:6f:b6:ec:81: ca:44:cd:08:e4:19:09:d5:ce:86:8a:e7:06:88:fb:ce:ed:56: 08:10:f9:3c:f1:f0:1b:e8:87:56:2e:83:cb:19:81:86:d3:3c: ff:5e:69:d8:44:8f:b6:5a:01:9a:6e:19:c8:bf:2d:0e:f5:63: 10:1c:c3:2c:8e:f8:0d:8a:cd:8b:22:52:2c:0a:19:15:7d:11: 5d:c7:41:3f:4d:30:f5:25:30:38:5d:d8:fc:51:63:d7:4f:ed: da:46:8d:b8:ee:eb:85:d9:22:8d:af:1b:fe:10:96:43:ce:29: c4:2d:1e:74:90:93:9f:ba:82:66:23:64:53:c1:16:26:88:55: d3:93:de:f1:44:b4:34:aa:2e:b2:da:e9:6f:43:75:6f:01:ea: d7:17:7b:16:bd:fb:82:e1:2d:09:b0:ab:b8:d0:fa:98:0a:e3: cf:8e:0c:45:2d:79:4c:ed:d1:26:a5:37:76:72:b2:07:90:f0: 78:a8:94:12:fd:5c:10:e2:bf:22:c6:4f:9f:25:94:c5:2d:41: 09:f2:f0:93:76:e9:f4:17:6c:10:50:2a:21:43:1b:07:8e:2e: d0:be:78:e7:b8:f6:12:4c:69:82:e3:8a:21:6b:fb:96:f0:2f: 3e:fd:05:83 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbi89GSvs0NfpzXqRJFJnOBvGx00wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxOVoX DTI3MDUwMTA4MzcxOVowMzExMC8GA1UEAxMoNDk3MUJCNUY2QkU5QTU1QjVFNTJB MzM0QUEyMTI1NjAzQUIyRThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQH1kCR8ypav0FQwVRQdoXul7cD43v11nndYJb4ah/Q/SUt7kvu5u06uOFT ATGUSDkb2xwl2RyWPmVonp5CDY0V759ttulloNSJsC7s+ziuc9dNCVmOGieI7L33 HMB4Me+wTIEx1ubLfcg3yNCyu/9RFG/5wEIW98Imfr6cZ/wkCnafcVWkiKbRbp86 WWOyJmS0aTcSWXMHrqUIZnu91R4R38bbMU3Kv9g9WQsc7dEgwBIhORBXb7jm1umY 6QpXz6XBSKub65Z61oggobV2GcgD57Qwb76bTLobnrZjIxNu/UfA12aNZR/iVqaU 0vKTzVYdVHDIK7fmC8isv7xb1ycCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRJcbtf a+mlW15SozSqISVgOrLo6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ65DMA0GCSqGSIb3DQEBCwUAA4IBAQCQFubUjy+GS+g/TQ+812+27IHK RM0I5BkJ1c6GiucGiPvO7VYIEPk88fAb6IdWLoPLGYGG0zz/XmnYRI+2WgGabhnI vy0O9WMQHMMsjvgNis2LIlIsChkVfRFdx0E/TTD1JTA4Xdj8UWPXT+3aRo247uuF 2SKNrxv+EJZDzinELR50kJOfuoJmI2RTwRYmiFXTk97xRLQ0qi6y2ulvQ3VvAerX F3sWvfuC4S0JsKu40PqYCuPPjgxFLXlM7dEmpTd2crIHkPB4qJQS/VwQ4r8ixk+f JZTFLUEJ8vCTdun0F2wQUCohQxsHji7QvnjnuPYSTGmC44oha/uW8C8+/QWD -----END CERTIFICATE-----Generated at Sun May 3 01:44:04 2026 by rpki-client