$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133811.roa File: AS133811.roa (raw, json) Hash identifier: fJmUXMf3mCYzYMaYG0hz41wXArpwU6CMVWMECjnMDxg= Subject key identifier: 50:4D:0F:E1:ED:77:F2:90:BB:EC:29:2C:58:F0:79:DB:91:86:6E:A5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 546ED5B7A6B8CE580EDD6A8223B45493F598DA1A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133811.roa Signing time: Sat 02 May 2026 21:36:07 +0000 ROA not before: Sat 02 May 2026 21:31:07 +0000 ROA not after: Sat 01 May 2027 21:36:07 +0000 asID: 133811 IP address blocks: 2406:ef40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6e:d5:b7:a6:b8:ce:58:0e:dd:6a:82:23:b4:54:93:f5:98:da:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:07 2026 GMT Not After : May 1 21:36:07 2027 GMT Subject: CN=504D0FE1ED77F290BBEC292C58F079DB91866EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f6:a4:10:16:3b:7f:0b:a2:d4:27:aa:da:90: 3e:67:94:d0:07:5b:c6:e0:90:93:2d:b2:a2:73:e8: d6:56:0d:26:50:5b:3a:13:be:5e:b6:4a:ac:62:7a: 41:54:af:4d:40:3a:8a:bd:6b:02:38:6d:80:ea:8f: ed:d7:fd:84:5e:11:6f:7c:60:d2:10:72:f4:a2:32: 0a:55:2b:e4:ab:cf:57:8f:7b:78:77:08:17:ee:3e: 08:ec:04:d4:bf:89:cc:cd:00:7a:3f:f4:32:a8:97: 6a:b9:df:0b:80:ba:6a:b6:d6:5b:58:ed:82:a1:08: 95:89:3d:b5:f1:7d:a7:dd:b6:63:83:d2:72:83:56: c6:69:d6:1e:9e:9e:4b:a0:8c:61:04:e0:91:f9:6b: 6b:54:8a:fc:10:31:1b:0d:67:c4:88:dc:36:b7:bd: 2e:88:92:61:a3:63:46:36:4b:7e:9d:48:df:c2:3c: a1:b7:4a:c1:fe:ef:a1:84:10:90:23:23:3f:5c:dc: 3f:33:36:76:40:e9:81:5f:4c:b2:59:1a:93:a6:06: c4:16:11:b5:70:bc:e3:60:b1:e9:96:46:ff:88:bc: 3e:c3:8e:ee:d2:ca:fc:fc:a6:dd:2b:70:d5:30:73: b3:d4:ed:68:f4:ab:1f:1c:04:26:07:12:a1:41:34: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4D:0F:E1:ED:77:F2:90:BB:EC:29:2C:58:F0:79:DB:91:86:6E:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:ef40::/32 Signature Algorithm: sha256WithRSAEncryption 6a:5a:35:95:8f:16:14:bf:27:9a:04:22:27:64:87:3b:85:fc: 33:d3:48:72:67:b1:1e:ab:11:b2:b4:f2:75:53:9f:f7:36:3a: b4:f8:d3:7b:62:62:90:6a:0e:38:2e:9d:81:43:e9:ed:a6:0e: 16:3b:3f:ab:93:45:c0:49:3d:ef:b9:b9:b9:e6:9c:9f:a8:d5: c2:1f:b8:32:32:82:30:aa:9c:ce:71:f7:d4:55:d8:a1:1d:e6: dc:63:f5:75:74:e7:05:be:0a:7a:c1:3c:34:d3:2d:32:45:2f: f7:ab:c2:8d:a2:dd:39:2e:56:d0:ec:f4:96:0f:73:90:d3:85: 64:0a:03:be:4c:2d:31:58:d0:84:55:41:85:05:ec:cb:d2:76: a6:cc:ad:ba:33:6c:4e:3a:71:15:49:2e:f1:68:cf:20:5b:87: 3c:e6:c1:37:95:fa:e8:f8:76:37:47:72:99:85:05:66:31:ff: ed:92:52:78:a5:f8:47:5f:08:ef:3d:6d:40:87:e8:7b:82:2f: ab:96:21:e9:69:88:1d:02:c5:af:d9:44:08:6d:30:53:22:0b: 75:52:c6:83:44:60:41:b9:f3:45:41:f5:c0:66:09:69:59:59: 9a:f2:4e:f0:a3:9f:0a:f5:08:59:9f:06:56:99:97:5f:91:2e: 4e:bf:48:0d -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUVG7Vt6a4zlgO3WqCI7RUk/WY2howDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzEwN1oX DTI3MDUwMTIxMzYwN1owMzExMC8GA1UEAxMoNTA0RDBGRTFFRDc3RjI5MEJCRUMy OTJDNThGMDc5REI5MTg2NkVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOz2pBAWO38LotQnqtqQPmeU0AdbxuCQky2yonPo1lYNJlBbOhO+XrZKrGJ6 QVSvTUA6ir1rAjhtgOqP7df9hF4Rb3xg0hBy9KIyClUr5KvPV497eHcIF+4+COwE 1L+JzM0Aej/0MqiXarnfC4C6arbWW1jtgqEIlYk9tfF9p922Y4PScoNWxmnWHp6e S6CMYQTgkflra1SK/BAxGw1nxIjcNre9LoiSYaNjRjZLfp1I38I8obdKwf7voYQQ kCMjP1zcPzM2dkDpgV9Mslkak6YGxBYRtXC842Cx6ZZG/4i8PsOO7tLK/Pym3Stw 1TBzs9TtaPSrHxwEJgcSoUE06HMCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRQTQ/h 7XfykLvsKSxY8HnbkYZupTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzODExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAbvQDANBgkqhkiG9w0BAQsFAAOCAQEAalo1lY8WFL8nmgQiJ2SHO4X8 M9NIcmexHqsRsrTydVOf9zY6tPjTe2JikGoOOC6dgUPp7aYOFjs/q5NFwEk977m5 ueacn6jVwh+4MjKCMKqcznH31FXYoR3m3GP1dXTnBb4KesE8NNMtMkUv96vCjaLd OS5W0Oz0lg9zkNOFZAoDvkwtMVjQhFVBhQXsy9J2psytujNsTjpxFUku8WjPIFuH PObBN5X66Ph2N0dymYUFZjH/7ZJSeKX4R18I7z1tQIfoe4Ivq5Yh6WmIHQLFr9lE CG0wUyILdVLGg0RgQbnzRUH1wGYJaVlZmvJO8KOfCvUIWZ8GVpmXX5EuTr9IDQ== -----END CERTIFICATE-----Generated at Sun May 3 00:42:20 2026 by rpki-client