$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133816.roa File: AS133816.roa (raw, json) Hash identifier: T37T3+wuXEw8v0aMNQrrnKnHXMAYcYR/UBPwtdvOTT0= Subject key identifier: 1B:5A:99:CD:BC:6C:A5:CC:48:EC:20:4F:64:B1:6D:1E:16:C2:8E:2F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66FCE29681076D8C63AC897993C26D3EDA0D2B09 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133816.roa Signing time: Sat 02 May 2026 09:21:59 +0000 ROA not before: Sat 02 May 2026 09:16:59 +0000 ROA not after: Sat 01 May 2027 09:21:59 +0000 asID: 133816 IP address blocks: 103.52.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fc:e2:96:81:07:6d:8c:63:ac:89:79:93:c2:6d:3e:da:0d:2b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:59 2026 GMT Not After : May 1 09:21:59 2027 GMT Subject: CN=1B5A99CDBC6CA5CC48EC204F64B16D1E16C28E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:3d:f2:6d:85:2b:a7:ca:a7:a4:cf:fe:02: ad:20:43:c3:34:57:da:2b:13:aa:53:da:d4:29:40: cb:a7:fe:27:86:09:09:ca:d0:59:77:b8:4e:8c:ad: 62:61:03:e1:37:1c:56:51:35:67:e9:dc:a0:1e:c4: a1:c7:3e:6a:a3:a2:b6:c1:96:7a:a7:11:d0:f6:71: 56:6f:dc:b0:92:b0:9b:65:49:76:84:af:f4:c8:4d: 0e:ea:b8:11:7e:71:8d:f4:51:31:3b:21:56:63:5e: 01:d8:95:67:5e:b0:8e:49:24:8e:64:c7:94:08:84: e4:33:15:d5:86:ed:fd:48:e8:6b:17:82:01:03:fe: 35:19:7d:28:d1:24:44:16:04:2a:c7:63:d3:08:16: 11:e4:d9:13:a3:5c:90:a3:20:87:97:0a:29:7b:f8: a3:c7:6d:77:24:84:ed:7d:3b:4d:18:13:30:7b:d8: 60:8e:4b:11:6f:2c:a4:ba:9e:fe:cd:21:38:11:37: 20:6b:75:09:81:72:a8:83:c8:0a:34:3f:c2:ae:43: 8a:d4:54:0d:5e:1e:79:32:7e:ed:3b:38:60:da:09: 87:1d:b9:f5:ef:8a:b8:01:f5:a1:52:d8:d6:90:29: 3c:b6:8f:ba:fb:22:c3:5a:d3:d6:b1:83:26:f0:ba: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5A:99:CD:BC:6C:A5:CC:48:EC:20:4F:64:B1:6D:1E:16:C2:8E:2F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133816.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.213.0/24 Signature Algorithm: sha256WithRSAEncryption a3:12:74:d6:c6:51:57:df:74:26:c6:df:8d:e2:e1:0f:a3:e4: 0b:2f:37:8e:41:4a:25:eb:6c:28:cc:fd:e7:e5:90:8a:93:59: 67:a1:c7:e3:c7:d0:e5:d1:00:d1:32:3e:4a:a7:fe:36:dc:22: 45:6d:cc:81:27:82:a8:90:25:84:b2:8a:de:b9:cf:3a:eb:63: 55:ee:0f:ca:15:50:9a:c0:c9:3a:55:16:38:1f:44:5d:a9:af: 09:3e:78:bf:f1:ef:d2:eb:fd:62:87:14:c4:57:4d:ba:60:1f: 37:1d:0f:f2:4d:1c:0d:23:5e:af:a2:fc:e0:c5:1a:86:e8:70: 12:51:99:c3:64:70:dd:5f:69:3e:58:59:27:a6:3b:77:bd:7e: 22:a8:28:cb:7f:9c:25:48:85:23:2a:5d:12:c4:2a:81:c3:68: 67:8d:ed:f7:57:eb:86:6c:c8:c2:d6:0f:da:d6:d9:59:99:a1: 20:23:0c:10:87:8e:6f:23:6a:36:05:8a:a5:fa:97:b3:d0:7b: 5e:07:b8:59:e8:c6:94:d8:d3:70:cb:9d:9e:7d:dd:82:d6:11: d5:fa:4c:ce:8b:50:60:29:3a:ae:6b:5d:ae:53:b2:6e:38:d5: 7e:b9:40:3e:11:c1:5d:4c:33:3f:ef:bd:a1:f5:ba:85:6c:bb: 90:e1:4e:e2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZvziloEHbYxjrIl5k8JtPtoNKwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY1OVoX DTI3MDUwMTA5MjE1OVowMzExMC8GA1UEAxMoMUI1QTk5Q0RCQzZDQTVDQzQ4RUMy MDRGNjRCMTZEMUUxNkMyOEUyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgRPfJthSunyqekz/4CrSBDwzRX2isTqlPa1ClAy6f+J4YJCcrQWXe4Toyt YmED4TccVlE1Z+ncoB7Eocc+aqOitsGWeqcR0PZxVm/csJKwm2VJdoSv9MhNDuq4 EX5xjfRRMTshVmNeAdiVZ16wjkkkjmTHlAiE5DMV1Ybt/UjoaxeCAQP+NRl9KNEk RBYEKsdj0wgWEeTZE6NckKMgh5cKKXv4o8dtdySE7X07TRgTMHvYYI5LEW8spLqe /s0hOBE3IGt1CYFyqIPICjQ/wq5DitRUDV4eeTJ+7Ts4YNoJhx259e+KuAH1oVLY 1pApPLaPuvsiw1rT1rGDJvC65BMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQbWpnN vGylzEjsIE9ksW0eFsKOLzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzODE2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZzTVMA0GCSqGSIb3DQEBCwUAA4IBAQCjEnTWxlFX33Qmxt+N4uEPo+QL LzeOQUol62wozP3n5ZCKk1lnocfjx9Dl0QDRMj5Kp/423CJFbcyBJ4KokCWEsore uc8662NV7g/KFVCawMk6VRY4H0Rdqa8JPni/8e/S6/1ihxTEV026YB83HQ/yTRwN I16vovzgxRqG6HASUZnDZHDdX2k+WFknpjt3vX4iqCjLf5wlSIUjKl0SxCqBw2hn je33V+uGbMjC1g/a1tlZmaEgIwwQh45vI2o2BYql+pez0HteB7hZ6MaU2NNwy52e fd2C1hHV+kzOi1BgKTqua12uU7JuONV+uUA+EcFdTDM/772h9bqFbLuQ4U7i -----END CERTIFICATE-----Generated at Sun May 3 00:42:13 2026 by rpki-client