$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133355.roa File: AS133355.roa (raw, json) Hash identifier: QzQgR7MvR7KIRy73XdtBgnB7hIr0aI8wrMr8IUnkKps= Subject key identifier: 89:EC:AB:7A:EC:09:B6:5E:7F:0E:00:A0:4F:A0:B4:DF:20:37:39:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 360062993E02026D36FA5129B1E2EEB77F340501 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133355.roa Signing time: Sat 02 May 2026 09:21:11 +0000 ROA not before: Sat 02 May 2026 09:16:11 +0000 ROA not after: Sat 01 May 2027 09:21:11 +0000 asID: 133355 IP address blocks: 103.209.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:00:62:99:3e:02:02:6d:36:fa:51:29:b1:e2:ee:b7:7f:34:05:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:11 2026 GMT Not After : May 1 09:21:11 2027 GMT Subject: CN=89ECAB7AEC09B65E7F0E00A04FA0B4DF20373969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:cb:8f:45:71:92:6f:d9:fd:64:37:fa:6d: f0:67:b2:aa:9d:89:e2:c9:d6:63:82:ce:9b:6b:fb: e5:08:28:c1:02:ac:6f:23:46:e1:05:15:b1:3a:84: a4:6c:c1:71:de:e6:6f:08:a8:80:55:ac:54:c5:63: 75:31:6d:a7:fe:39:a8:1f:f9:0a:4f:42:53:c6:cf: 79:19:8b:5a:5b:b8:77:18:e1:58:9c:4a:68:e6:64: 2c:f9:da:8a:97:56:5f:a4:10:4d:e9:b4:93:e1:00: 8a:47:06:08:ea:8b:fe:d5:75:99:cc:66:52:12:cd: 20:a3:bb:b2:a1:20:df:8b:92:23:47:1b:31:df:ad: fa:8d:ed:90:c5:9d:d5:02:af:ac:ad:7d:27:b6:e2: fe:11:e7:69:32:50:93:ee:c9:c9:d5:c0:64:20:79: 55:d8:d8:73:be:6f:91:a2:47:78:ef:36:5d:5c:85: 16:c0:a6:08:da:c8:cb:e6:da:de:59:74:56:ed:e2: cf:6b:45:33:4c:f2:9d:36:b3:ec:5e:74:36:2f:2f: 53:1f:2d:35:cd:1c:04:e8:5d:dd:2f:8b:34:52:65: 69:dc:1f:c6:bd:5b:ef:61:29:a7:b2:52:ba:4b:82: 46:59:23:14:78:35:04:1b:ab:96:a7:ff:67:8f:f2: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EC:AB:7A:EC:09:B6:5E:7F:0E:00:A0:4F:A0:B4:DF:20:37:39:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.131.0/24 Signature Algorithm: sha256WithRSAEncryption 49:85:48:8b:9b:58:0a:6a:dd:31:0c:eb:0d:23:a6:b2:a8:2d: be:13:e9:66:e2:90:ad:15:2d:28:95:59:49:15:cf:28:ee:23: f2:43:6e:95:83:b8:42:34:50:53:d0:68:f5:f4:db:dd:11:dd: 1c:b7:f2:b7:32:a8:3d:74:ae:fb:4c:bd:c8:8f:08:d9:03:5a: fa:93:78:73:e6:41:43:d2:16:a4:ac:de:fd:c7:8b:4f:16:b0: 93:3d:8a:e5:3e:32:ff:c0:6c:62:35:b6:0b:60:ff:fc:47:dc: 9c:81:03:d7:34:f1:fc:c8:f1:1d:dc:eb:47:33:c0:dd:55:9f: 57:df:26:41:e9:7a:fb:04:03:82:1e:c3:c1:25:41:38:2e:7e: 6f:65:c9:36:4c:9a:cf:24:ab:fa:30:ba:84:32:a7:e3:c4:92: 59:8b:55:68:3b:32:7d:25:f4:a7:49:43:be:67:95:70:6b:0a: c1:31:d3:30:eb:04:fa:76:be:f3:5f:7a:4a:ff:fc:27:0f:6a: 56:85:58:00:60:70:54:a4:d1:62:dd:9c:55:cb:21:59:11:1f: 5b:84:d1:2a:cc:fb:da:1d:6c:c4:a7:04:e1:00:09:fd:93:e5: 01:73:64:e0:d5:0f:4b:3b:ad:9d:2f:d3:03:c3:19:06:0e:3b: 93:ad:09:32 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUNgBimT4CAm02+lEpseLut380BQEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYxMVoX DTI3MDUwMTA5MjExMVowMzExMC8GA1UEAxMoODlFQ0FCN0FFQzA5QjY1RTdGMEUw MEEwNEZBMEI0REYyMDM3Mzk2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWKy49FcZJv2f1kN/pt8Geyqp2J4snWY4LOm2v75QgowQKsbyNG4QUVsTqE pGzBcd7mbwiogFWsVMVjdTFtp/45qB/5Ck9CU8bPeRmLWlu4dxjhWJxKaOZkLPna ipdWX6QQTem0k+EAikcGCOqL/tV1mcxmUhLNIKO7sqEg34uSI0cbMd+t+o3tkMWd 1QKvrK19J7bi/hHnaTJQk+7JydXAZCB5VdjYc75vkaJHeO82XVyFFsCmCNrIy+ba 3ll0Vu3iz2tFM0zynTaz7F50Ni8vUx8tNc0cBOhd3S+LNFJladwfxr1b72Epp7JS ukuCRlkjFHg1BBurlqf/Z4/yoDMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSJ7Kt6 7Am2Xn8OAKBPoLTfIDc5aTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMzU1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ9GDMA0GCSqGSIb3DQEBCwUAA4IBAQBJhUiLm1gKat0xDOsNI6ayqC2+ E+lm4pCtFS0olVlJFc8o7iPyQ26Vg7hCNFBT0Gj19NvdEd0ct/K3Mqg9dK77TL3I jwjZA1r6k3hz5kFD0hakrN79x4tPFrCTPYrlPjL/wGxiNbYLYP/8R9ycgQPXNPH8 yPEd3OtHM8DdVZ9X3yZB6Xr7BAOCHsPBJUE4Ln5vZck2TJrPJKv6MLqEMqfjxJJZ i1VoOzJ9JfSnSUO+Z5VwawrBMdMw6wT6dr7zX3pK//wnD2pWhVgAYHBUpNFi3ZxV yyFZER9bhNEqzPvaHWzEpwThAAn9k+UBc2Tg1Q9LO62dL9MDwxkGDjuTrQky -----END CERTIFICATE-----Generated at Sun May 3 01:44:01 2026 by rpki-client