$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133360.roa File: AS133360.roa (raw, json) Hash identifier: WR3v0YAAMQNfW5Y3el/0L/4jt1HcZM4yWOnhY4rnHRo= Subject key identifier: 04:D4:F0:36:A1:9A:97:DD:61:68:A0:2F:CB:B2:91:67:BC:98:C5:E0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 57904E64794A7954A04EA24B8D483CBA0678EF71 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133360.roa Signing time: Sat 02 May 2026 17:30:35 +0000 ROA not before: Sat 02 May 2026 17:25:35 +0000 ROA not after: Sat 01 May 2027 17:30:35 +0000 asID: 133360 IP address blocks: 103.31.109.0/24 maxlen: 24 103.36.8.0/22 maxlen: 24 103.185.43.0/24 maxlen: 24 2400:5f20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:90:4e:64:79:4a:79:54:a0:4e:a2:4b:8d:48:3c:ba:06:78:ef:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 17:25:35 2026 GMT Not After : May 1 17:30:35 2027 GMT Subject: CN=04D4F036A19A97DD6168A02FCBB29167BC98C5E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:db:de:97:5a:25:74:d1:36:72:4a:c5:e1: 4c:11:25:6c:e9:49:b1:e4:4e:59:5e:b5:52:40:40: 72:36:5a:d3:1f:bb:91:d8:54:59:be:ec:42:86:6c: e4:3b:1a:65:9a:4f:e2:3c:17:41:dd:bb:22:9f:08: 42:3e:f1:f2:8a:29:a3:a2:f1:32:0f:26:92:b4:87: 44:3d:0f:1b:c0:b1:21:40:20:c2:95:24:84:fa:dd: 46:f9:69:f0:14:58:65:f3:0b:aa:c6:45:12:66:e4: dc:4a:0d:26:f6:92:2f:4f:f3:14:f7:3c:95:1e:3e: da:6f:45:84:da:65:85:93:2d:a7:d2:7b:23:31:46: 04:5f:c8:6c:53:da:7d:57:8e:59:13:f8:cd:4e:38: ca:d5:52:a2:3c:27:cd:d6:f7:b8:24:9d:f3:8f:a9: 13:79:b7:9a:7b:d3:ef:2c:5c:78:9a:64:43:12:53: 81:06:71:c6:72:57:dd:18:1c:8f:c5:2b:fe:99:0e: 19:ed:7c:64:91:7b:c3:6d:77:e9:8e:c9:9c:5e:ef: 62:69:53:f9:7b:a0:01:26:20:9d:2f:e6:e5:ad:3b: 47:3d:61:c3:a9:cd:f7:fd:cf:b3:be:df:f9:e9:a4: 35:3a:62:a6:fa:bf:c2:4b:64:9d:5f:da:61:bb:79: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D4:F0:36:A1:9A:97:DD:61:68:A0:2F:CB:B2:91:67:BC:98:C5:E0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133360.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.109.0/24 103.36.8.0/22 103.185.43.0/24 IPv6: 2400:5f20::/32 Signature Algorithm: sha256WithRSAEncryption 77:2d:aa:18:1d:ef:c1:76:e7:b4:7c:48:37:f5:3c:ce:9f:44: 2f:25:76:f2:e3:c5:39:a9:ee:0a:15:88:8b:91:5a:6b:a1:45: dc:b2:da:23:2b:0b:a7:35:c3:1d:5f:bb:8d:5c:48:f0:42:76: 95:b5:14:2b:05:1e:0e:1a:7d:82:c5:c8:b7:de:6d:2d:25:df: 5f:1e:66:26:9d:af:b8:67:bf:db:27:84:e3:99:55:b3:14:bf: e5:09:03:5c:08:38:1d:b9:10:15:4a:b9:50:1a:5a:c2:0d:1c: df:c0:2d:1d:33:32:ed:e6:04:14:8f:7e:39:9e:3a:67:32:69: 43:d9:aa:a9:c8:c6:8b:36:4b:8f:07:7e:d8:98:73:f4:7d:08: bd:74:34:76:94:5c:87:4b:08:54:0c:4a:aa:0b:95:2d:a7:e1: f2:6a:74:26:f8:95:20:3f:6b:8d:b0:4d:e9:92:c1:27:a1:6c: d4:37:d4:17:ff:ed:76:6e:7b:50:38:65:ad:b8:83:f6:b8:c6: 0e:3c:8d:05:09:de:b0:d0:ad:bc:75:ff:7f:46:dd:62:6c:23: 60:1f:af:82:86:6d:56:23:b8:5e:43:83:90:2e:f4:d4:0f:75: e4:44:70:a0:2b:db:63:fc:14:72:b6:42:49:d2:a2:90:08:4d: 88:51:97:30 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUV5BOZHlKeVSgTqJLjUg8ugZ473EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjE3MjUzNVoX DTI3MDUwMTE3MzAzNVowMzExMC8GA1UEAxMoMDRENEYwMzZBMTlBOTdERDYxNjhB MDJGQ0JCMjkxNjdCQzk4QzVFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEQ296XWiV00TZySsXhTBElbOlJseROWV61UkBAcjZa0x+7kdhUWb7sQoZs 5DsaZZpP4jwXQd27Ip8IQj7x8oopo6LxMg8mkrSHRD0PG8CxIUAgwpUkhPrdRvlp 8BRYZfMLqsZFEmbk3EoNJvaSL0/zFPc8lR4+2m9FhNplhZMtp9J7IzFGBF/IbFPa fVeOWRP4zU44ytVSojwnzdb3uCSd84+pE3m3mnvT7yxceJpkQxJTgQZxxnJX3Rgc j8Ur/pkOGe18ZJF7w2136Y7JnF7vYmlT+XugASYgnS/m5a07Rz1hw6nN9/3Ps77f +emkNTpipvq/wktknV/aYbt5iQUCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQE1PA2 oZqX3WFooC/LspFnvJjF4DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMzYwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQAZx9tAwQCZyQIAwQAZ7krMA0EAgACMAcDBQAkAF8gMA0GCSqGSIb3DQEB CwUAA4IBAQB3LaoYHe/Bdue0fEg39TzOn0QvJXby48U5qe4KFYiLkVproUXcstoj KwunNcMdX7uNXEjwQnaVtRQrBR4OGn2Cxci33m0tJd9fHmYmna+4Z7/bJ4TjmVWz FL/lCQNcCDgduRAVSrlQGlrCDRzfwC0dMzLt5gQUj345njpnMmlD2aqpyMaLNkuP B37YmHP0fQi9dDR2lFyHSwhUDEqqC5Utp+HyanQm+JUgP2uNsE3pksEnoWzUN9QX /+12bntQOGWtuIP2uMYOPI0FCd6w0K28df9/Rt1ibCNgH6+Chm1WI7heQ4OQLvTU D3XkRHCgK9tj/BRytkJJ0qKQCE2IUZcw -----END CERTIFICATE-----Generated at Sun May 3 00:41:12 2026 by rpki-client