$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134630.roa File: AS134630.roa (raw, json) Hash identifier: 1iJMMEtYWFDiYPi4/5ICh4QVMUtgNt//9RH75MXk45o= Subject key identifier: C5:96:C1:76:CC:ED:87:20:32:02:B2:9C:4B:2A:2A:CA:A1:F2:16:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D57E980CA62AB6DE95D001F48829568A64FC33E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134630.roa Signing time: Sat 02 May 2026 21:33:43 +0000 ROA not before: Sat 02 May 2026 21:28:43 +0000 ROA not after: Sat 01 May 2027 21:33:43 +0000 asID: 134630 IP address blocks: 49.156.20.0/23 maxlen: 24 49.156.22.0/23 maxlen: 24 103.200.16.0/23 maxlen: 24 103.200.18.0/23 maxlen: 24 2403:8680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:57:e9:80:ca:62:ab:6d:e9:5d:00:1f:48:82:95:68:a6:4f:c3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:28:43 2026 GMT Not After : May 1 21:33:43 2027 GMT Subject: CN=C596C176CCED87203202B29C4B2A2ACAA1F2166D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:c3:8b:19:19:af:ec:23:17:f3:cf:87:4c: a7:3c:3b:5e:c0:b0:7c:01:d0:76:06:87:71:c3:46: 16:cb:24:4e:fc:1d:de:30:d6:35:01:41:58:e5:3e: 4d:cd:60:89:0c:c4:99:b8:33:9a:54:39:35:eb:0f: 5e:e5:95:d7:d5:bd:24:7b:58:5a:55:41:eb:bf:c5: ea:53:13:16:49:04:9b:51:18:fa:3a:69:60:ff:88: 0b:cb:bd:4b:a6:61:3f:dc:84:8b:9b:dc:08:ae:3d: a5:ae:8b:da:86:d0:ed:05:c4:ae:db:e4:f2:49:69: 4c:33:0d:90:b0:10:c3:80:03:18:0c:67:9e:fd:9f: 65:56:8c:cc:72:d1:88:83:3b:53:12:90:4e:bd:ca: 5a:0f:f0:fc:2b:63:d6:1d:3a:0f:01:ab:ac:1f:66: 59:af:a1:67:fc:a5:2d:10:c6:fb:de:2e:ba:24:09: ad:02:4c:63:06:d6:e7:b3:aa:4f:0d:dd:47:2e:a8: 02:f2:4c:f3:e1:2c:82:a3:32:80:96:c6:af:db:36: 3b:78:25:9b:1f:19:72:b3:08:d1:ea:7b:d5:e5:03: f4:4c:54:77:86:44:3b:84:2a:7e:3a:41:63:1f:57: 45:9d:44:aa:1f:f8:40:b3:b0:39:c8:dd:f8:ad:30: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:96:C1:76:CC:ED:87:20:32:02:B2:9C:4B:2A:2A:CA:A1:F2:16:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.156.20.0/22 103.200.16.0/22 IPv6: 2403:8680::/32 Signature Algorithm: sha256WithRSAEncryption a4:4d:13:8d:d0:34:8a:42:d1:3e:6b:97:ce:45:bb:02:24:26: d7:8a:91:0a:92:38:27:e9:1d:c2:6d:90:a6:9a:29:5f:db:ad: 42:24:e9:6e:e4:da:a4:4b:d9:9e:88:32:af:8c:b9:ef:e4:63: 92:ae:ef:be:87:88:9b:94:02:b9:3b:13:f0:16:76:58:20:86: 15:0c:a6:40:b2:6e:6f:7b:b6:5a:06:a1:90:e0:c2:4a:f1:fc: 73:64:c2:c6:91:2f:f6:c9:4b:23:6f:52:42:58:d7:83:cc:e1: ae:f4:9d:2c:7e:69:cc:41:f8:e8:7d:1a:67:77:fa:5a:fb:36: ed:c3:67:51:ef:d7:8d:af:98:bf:c9:d6:2a:75:17:85:05:d3: 76:ec:5b:5b:f7:02:3f:48:b5:e5:d3:ad:52:c2:45:62:24:9a: 76:36:32:92:76:29:77:67:64:62:42:e8:7b:78:11:db:0d:38: 4b:aa:0d:c6:88:cf:36:b9:2a:88:bf:8a:b5:69:7e:89:a9:d4: 87:37:fe:2b:f6:40:62:b1:cd:40:09:2b:03:da:e5:90:bc:cb: de:9f:cb:9c:e1:7b:02:1e:95:89:38:57:7f:2e:8d:1c:fb:a2: 4f:45:c7:9f:42:70:af:3f:ff:e0:47:d9:80:61:3d:06:53:5c: 03:61:6e:87 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUDVfpgMpiq23pXQAfSIKVaKZPwz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjg0M1oX DTI3MDUwMTIxMzM0M1owMzExMC8GA1UEAxMoQzU5NkMxNzZDQ0VEODcyMDMyMDJC MjlDNEIyQTJBQ0FBMUYyMTY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0Hw4sZGa/sIxfzz4dMpzw7XsCwfAHQdgaHccNGFsskTvwd3jDWNQFBWOU+ Tc1giQzEmbgzmlQ5NesPXuWV19W9JHtYWlVB67/F6lMTFkkEm1EY+jppYP+IC8u9 S6ZhP9yEi5vcCK49pa6L2obQ7QXErtvk8klpTDMNkLAQw4ADGAxnnv2fZVaMzHLR iIM7UxKQTr3KWg/w/Ctj1h06DwGrrB9mWa+hZ/ylLRDG+94uuiQJrQJMYwbW57Oq Tw3dRy6oAvJM8+EsgqMygJbGr9s2O3glmx8ZcrMI0ep71eUD9ExUd4ZEO4QqfjpB Yx9XRZ1Eqh/4QLOwOcjd+K0w3xUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBTFlsF2 zO2HIDICspxLKirKofIWbTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQCMZwUAwQCZ8gQMA0EAgACMAcDBQAkA4aAMA0GCSqGSIb3DQEBCwUAA4IB AQCkTRON0DSKQtE+a5fORbsCJCbXipEKkjgn6R3CbZCmmilf261CJOlu5NqkS9me iDKvjLnv5GOSru++h4iblAK5OxPwFnZYIIYVDKZAsm5ve7ZaBqGQ4MJK8fxzZMLG kS/2yUsjb1JCWNeDzOGu9J0sfmnMQfjofRpnd/pa+zbtw2dR79eNr5i/ydYqdReF BdN27Ftb9wI/SLXl061SwkViJJp2NjKSdil3Z2RiQuh7eBHbDThLqg3GiM82uSqI v4q1aX6JqdSHN/4r9kBisc1ACSsD2uWQvMven8uc4XsCHpWJOFd/Lo0c+6JPRcef QnCvP//gR9mAYT0GU1wDYW6H -----END CERTIFICATE-----Generated at Sun May 3 00:42:02 2026 by rpki-client