$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133805.roa File: AS133805.roa (raw, json) Hash identifier: Z0pHhjQOZF1cwxddnvXDf+KO6NEejtwcwdmZ0GYGj1E= Subject key identifier: F8:F1:32:E1:CA:62:01:58:86:69:7F:55:A4:66:BF:F3:89:8C:B5:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C6820B90BE1350ED8F6F87C6E88ED2DE1DC6BF0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133805.roa Signing time: Sat 02 May 2026 08:36:08 +0000 ROA not before: Sat 02 May 2026 08:31:08 +0000 ROA not after: Sat 01 May 2027 08:36:08 +0000 asID: 133805 IP address blocks: 103.48.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:68:20:b9:0b:e1:35:0e:d8:f6:f8:7c:6e:88:ed:2d:e1:dc:6b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:08 2026 GMT Not After : May 1 08:36:08 2027 GMT Subject: CN=F8F132E1CA62015886697F55A466BFF3898CB569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:97:4e:7c:15:ef:1b:7d:72:8c:3b:88:08: 99:08:fc:f7:c2:da:a5:5a:7e:7b:8c:ad:eb:29:e9: 21:ec:33:19:75:39:e1:bd:f4:5b:94:60:f0:c3:a7: 6e:51:4c:cb:05:59:6d:45:60:8b:6f:53:76:3e:13: 47:71:b8:ce:dc:af:73:27:48:d0:bb:1d:8f:60:f4: 3e:3c:79:1a:61:7e:08:63:83:97:a9:95:43:bd:d0: 8b:c0:d4:6b:f8:e7:65:25:61:9f:28:84:77:d7:42: 46:dd:52:63:2b:15:dc:b1:42:5c:8c:67:a1:93:4f: 5a:11:8d:64:31:bd:84:74:1f:b4:4e:0c:fb:d3:f7: 3e:23:74:2c:20:ad:33:18:9f:d3:1c:e8:2f:25:e7: 72:90:32:af:46:39:5b:9c:ed:db:19:ba:3c:5d:bc: 26:82:4c:db:cb:42:f1:ed:4d:fd:cb:b1:d0:f0:be: f9:95:a6:ec:b6:b2:49:57:94:f2:fa:83:64:ac:88: 7d:77:71:00:c2:71:e8:17:c8:16:30:33:2f:3e:a2: 6d:c3:6f:41:22:0d:20:02:9f:ec:50:88:37:6c:e7: a0:92:34:f2:89:1b:ee:16:ab:bd:c0:8b:f4:e3:df: 8d:22:3c:66:3b:e5:8e:c6:05:e8:da:40:3a:08:df: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:32:E1:CA:62:01:58:86:69:7F:55:A4:66:BF:F3:89:8C:B5:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133805.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.27.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ef:03:03:3f:cf:13:8a:d9:c3:70:e2:d0:9d:fb:4f:63:bd: 0a:64:4b:ff:40:ed:2f:fd:25:a6:10:4d:e4:b4:23:c3:a6:d6: 41:8f:82:3e:d5:67:b0:e7:3b:6e:1a:ba:ac:fc:53:fc:62:5e: 32:95:ef:55:5e:ad:3c:21:99:43:bf:99:65:3a:f2:5b:34:36: 44:f1:5a:37:97:32:b0:e0:da:7e:de:3e:ba:1e:ff:0e:49:5e: 23:17:85:51:d8:c9:6a:b2:89:95:d8:bb:39:23:f4:af:8f:15: 8d:c2:f6:4f:74:6e:a1:83:3a:21:d2:61:1e:31:e6:b6:fe:ab: 25:5f:e8:f5:ce:14:f4:d2:e2:76:2f:a5:b4:ac:33:96:10:51: 0e:39:a6:b3:85:4c:08:1e:50:a2:12:5a:31:07:26:40:4b:0c: e4:ca:db:b8:28:9d:b2:00:12:e6:16:6f:30:99:a0:22:bf:08: 17:36:cd:d8:11:e9:e1:b8:b5:95:d1:20:ae:af:b3:9a:04:45: ae:7c:78:fd:b1:51:63:fe:2d:f0:35:10:05:9d:97:78:53:cb: 9d:fc:09:07:ae:46:6d:a2:93:25:bb:a4:86:73:22:2d:ac:bb: ff:f0:18:4a:ed:85:33:2e:cb:c6:54:76:96:eb:37:42:b8:29: ef:92:5f:93 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULGgguQvhNQ7Y9vh8bojtLeHca/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzEwOFoX DTI3MDUwMTA4MzYwOFowMzExMC8GA1UEAxMoRjhGMTMyRTFDQTYyMDE1ODg2Njk3 RjU1QTQ2NkJGRjM4OThDQjU2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/8l058Fe8bfXKMO4gImQj898LapVp+e4yt6ynpIewzGXU54b30W5Rg8MOn blFMywVZbUVgi29Tdj4TR3G4ztyvcydI0Lsdj2D0Pjx5GmF+CGODl6mVQ73Qi8DU a/jnZSVhnyiEd9dCRt1SYysV3LFCXIxnoZNPWhGNZDG9hHQftE4M+9P3PiN0LCCt Mxif0xzoLyXncpAyr0Y5W5zt2xm6PF28JoJM28tC8e1N/cux0PC++ZWm7LaySVeU 8vqDZKyIfXdxAMJx6BfIFjAzLz6ibcNvQSINIAKf7FCIN2znoJI08okb7harvcCL 9OPfjSI8ZjvljsYF6NpAOgjf/kcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT48TLh ymIBWIZpf1WkZr/ziYy1aTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzODA1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZzAbMA0GCSqGSIb3DQEBCwUAA4IBAQCo7wMDP88TitnDcOLQnftPY70K ZEv/QO0v/SWmEE3ktCPDptZBj4I+1Wew5ztuGrqs/FP8Yl4yle9VXq08IZlDv5ll OvJbNDZE8Vo3lzKw4Np+3j66Hv8OSV4jF4VR2MlqsomV2Ls5I/SvjxWNwvZPdG6h gzoh0mEeMea2/qslX+j1zhT00uJ2L6W0rDOWEFEOOaazhUwIHlCiEloxByZASwzk ytu4KJ2yABLmFm8wmaAivwgXNs3YEenhuLWV0SCur7OaBEWufHj9sVFj/i3wNRAF nZd4U8ud/AkHrkZtopMlu6SGcyItrLv/8BhK7YUzLsvGVHaW6zdCuCnvkl+T -----END CERTIFICATE-----Generated at Sun May 3 00:42:35 2026 by rpki-client