$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134091.roa File: AS134091.roa (raw, json) Hash identifier: LLkwwozOcTVKKMVPQduH0hz0MfrbOsoS+K6uF/7uIQQ= Subject key identifier: 54:78:A9:36:46:17:FE:66:37:B3:3F:8D:79:25:57:B9:6D:E5:69:AD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6296E615F19ACD201393FDA346D834E40C31B4F5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134091.roa Signing time: Fri 31 Jul 2026 04:24:39 +0000 ROA not before: Fri 31 Jul 2026 04:19:39 +0000 ROA not after: Fri 30 Jul 2027 04:24:39 +0000 asID: 134091 IP address blocks: 2001:df7:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:e6:15:f1:9a:cd:20:13:93:fd:a3:46:d8:34:e4:0c:31:b4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 31 04:19:39 2026 GMT Not After : Jul 30 04:24:39 2027 GMT Subject: CN=5478A9364617FE6637B33F8D792557B96DE569AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:43:3c:aa:58:e1:f3:4b:e4:44:76:ed:6c: cd:4d:1f:e2:17:d3:a0:53:be:ec:27:8b:41:02:92: cb:11:f2:2e:db:d2:ad:bc:fe:96:57:4f:5a:a8:35: b9:e3:aa:df:07:f0:3f:6d:88:0d:0f:0c:d6:62:fc: 25:a8:d9:02:57:16:88:64:09:66:47:46:10:c2:bf: c9:b8:4d:3d:5c:b1:4b:93:16:10:3c:9d:cc:78:7f: d9:63:5e:86:4f:6a:fc:50:ee:17:6e:c5:4d:0a:28: 8d:2c:26:40:35:ca:5e:91:53:b4:73:66:ce:0c:0d: 82:01:b0:b9:d5:76:1b:c5:0b:39:d1:b3:71:68:6e: 5c:7c:69:db:12:61:20:5a:39:80:ef:11:53:56:35: 7d:3a:1d:e2:da:f6:00:f8:c4:60:a1:c9:c8:5a:b1: ff:61:8a:58:b2:ff:01:87:2a:d8:45:3c:ec:85:54: 65:eb:66:5f:12:5b:4c:5a:48:f8:40:3c:3a:2e:2a: 02:c0:c8:23:86:ee:fe:8c:31:84:e1:88:f1:4e:f8: c1:03:cb:ac:01:60:15:1d:29:a0:50:71:4a:c2:5c: b7:52:c1:a5:22:6e:d6:ec:9d:39:9c:bd:ba:41:ee: dd:f8:2c:13:9b:b6:17:c6:73:4c:0a:67:bf:74:4f: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:78:A9:36:46:17:FE:66:37:B3:3F:8D:79:25:57:B9:6D:E5:69:AD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption 2d:42:d1:1d:97:95:20:cd:2b:0b:bd:e0:f5:d7:b4:60:bf:08: 64:83:4d:0e:9d:12:57:80:88:dc:a7:73:41:df:98:2c:bb:76: 03:25:c0:34:39:6e:8a:c9:2d:c4:8e:07:f0:10:8c:ec:bb:de: 80:10:83:fa:45:a9:0e:a8:22:92:70:c4:cd:3e:67:c6:fa:f7: 7a:68:75:c6:b3:5c:ca:ff:bf:3b:51:d4:96:4d:fa:ce:f2:c7: 05:75:52:3e:e7:a1:7f:bb:79:2e:9c:13:ff:bf:e0:45:d1:ab: a3:38:c8:6a:9f:ff:c9:56:76:d2:ba:29:8c:18:2b:bb:37:11: 4b:4f:2f:49:6d:27:b6:7b:5a:58:d4:7c:a8:d0:af:a7:57:4b: b2:28:e5:7c:ce:43:8e:21:0f:cf:bb:f3:3b:ba:6c:4a:b8:27: 45:2f:4c:cf:45:1d:2d:5b:c0:e7:0b:5f:2a:16:d8:41:bb:14: 97:ca:6e:44:1b:11:53:b5:c2:b6:88:61:39:bd:4b:d0:7e:41: 6e:31:73:82:be:1c:53:a7:4d:24:5f:a7:00:90:65:65:0e:e1: 4b:39:5a:44:72:2c:2a:8a:b3:bd:90:18:bc:3f:b2:12:84:4a: 25:a1:59:5a:a1:e6:ee:da:29:d3:20:7f:56:f0:80:ce:86:92: 1c:41:9b:9d -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUYpbmFfGazSATk/2jRtg05AwxtPUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDczMTA0MTkzOVoX DTI3MDczMDA0MjQzOVowMzExMC8GA1UEAxMoNTQ3OEE5MzY0NjE3RkU2NjM3QjMz RjhENzkyNTU3Qjk2REU1NjlBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIfrQzyqWOHzS+REdu1szU0f4hfToFO+7CeLQQKSyxHyLtvSrbz+lldPWqg1 ueOq3wfwP22IDQ8M1mL8JajZAlcWiGQJZkdGEMK/ybhNPVyxS5MWEDydzHh/2WNe hk9q/FDuF27FTQoojSwmQDXKXpFTtHNmzgwNggGwudV2G8ULOdGzcWhuXHxp2xJh IFo5gO8RU1Y1fTod4tr2APjEYKHJyFqx/2GKWLL/AYcq2EU87IVUZetmXxJbTFpI +EA8Oi4qAsDII4bu/owxhOGI8U74wQPLrAFgFR0poFBxSsJct1LBpSJu1uydOZy9 ukHu3fgsE5u2F8ZzTApnv3RP/icCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRUeKk2 Rhf+ZjezP415JVe5beVprTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0MDkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9zvAMA0GCSqGSIb3DQEBCwUAA4IBAQAtQtEdl5UgzSsLveD117Rg vwhkg00OnRJXgIjcp3NB35gsu3YDJcA0OW6KyS3EjgfwEIzsu96AEIP6RakOqCKS cMTNPmfG+vd6aHXGs1zK/787UdSWTfrO8scFdVI+56F/u3kunBP/v+BF0aujOMhq n//JVnbSuimMGCu7NxFLTy9JbSe2e1pY1Hyo0K+nV0uyKOV8zkOOIQ/Pu/M7umxK uCdFL0zPRR0tW8DnC18qFthBuxSXym5EGxFTtcK2iGE5vUvQfkFuMXOCvhxTp00k X6cAkGVlDuFLOVpEciwqirO9kBi8P7IShEoloVlaoebu2inTIH9W8IDOhpIcQZud -----END CERTIFICATE-----Generated at Sun Aug 2 14:24:35 2026 by rpki-client