$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134635.roa File: AS134635.roa (raw, json) Hash identifier: gmsKNftpNAt/ulRjgxatQsSQ1XsyWB+zxCIisQpFTa0= Subject key identifier: 31:F8:E6:CF:8A:BF:33:14:AC:D0:22:BB:68:17:F9:D4:E7:2D:45:FE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B9B2A87DA3687417C33D014E64FE57B05836854 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134635.roa Signing time: Sat 02 May 2026 21:25:51 +0000 ROA not before: Sat 02 May 2026 21:20:51 +0000 ROA not after: Sat 01 May 2027 21:25:51 +0000 asID: 134635 IP address blocks: 2001:df1:ba40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:9b:2a:87:da:36:87:41:7c:33:d0:14:e6:4f:e5:7b:05:83:68:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:51 2026 GMT Not After : May 1 21:25:51 2027 GMT Subject: CN=31F8E6CF8ABF3314ACD022BB6817F9D4E72D45FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:b2:c5:87:55:5a:c0:43:10:81:45:69:7d: 94:dc:cf:61:a1:73:0a:20:7a:b7:f6:fc:d1:4c:d0: 68:5e:0f:9b:11:be:c9:60:9c:bd:49:be:1d:da:28: f1:db:01:3d:4a:ea:39:32:37:57:17:c7:5d:83:1e: c6:8c:bf:32:de:e0:63:e9:72:92:ab:ac:d3:1c:88: a0:71:fc:b9:d3:cc:06:77:de:6f:53:d4:b0:eb:4f: 89:e5:d4:0a:83:ca:ef:e8:8e:6d:ce:f6:c5:68:e0: 7c:dc:33:7f:de:21:48:39:14:f3:2f:5d:01:49:29: dd:45:f3:2c:aa:d9:c4:14:5d:3c:c6:79:5d:71:fb: c2:f7:e5:4a:56:90:cd:b8:0e:0d:0a:31:17:db:37: 9b:ad:97:a0:5e:06:26:4f:ee:6b:93:75:62:b8:18: 10:af:bc:ca:3d:e7:e6:0f:bb:c1:ad:49:9f:49:f2: 59:c7:6d:09:e2:c7:2f:b0:2a:f4:be:b1:b1:c7:3c: 91:97:ec:d9:df:1f:0e:ef:99:ad:3b:a3:b4:4a:88: ba:a7:02:16:82:4d:a6:27:a4:30:ff:ac:f9:6a:c9: f4:10:9a:79:94:b8:49:b5:a2:8f:f9:9b:ed:44:7b: da:5f:6f:f6:44:39:79:33:a1:2d:56:2d:69:03:21: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F8:E6:CF:8A:BF:33:14:AC:D0:22:BB:68:17:F9:D4:E7:2D:45:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:ba40::/48 Signature Algorithm: sha256WithRSAEncryption 99:2b:44:04:ae:c9:40:56:2a:88:c8:9f:a1:e4:b8:19:ba:c5: 1b:0f:af:cd:78:e3:15:56:cf:3b:91:fc:b8:ab:53:57:29:66: da:4e:3c:c4:01:4f:47:1f:c8:5a:92:35:6e:90:24:74:c1:62: ad:c0:5b:16:43:16:2c:fa:8c:a3:ff:6f:22:7a:00:ae:4b:42: e7:e5:4b:94:21:35:3c:60:8d:80:df:d5:d0:61:96:9b:42:91: e2:2d:dc:16:c8:f1:5c:6a:16:a6:8f:82:8e:1f:77:c2:09:63: 80:f6:fc:66:b6:64:31:b0:07:74:be:17:f1:98:d6:f6:df:6a: 29:a1:c0:3c:9c:18:c3:dc:3e:ce:4c:55:37:82:9c:48:76:31: d9:18:7d:ae:0b:b1:98:a6:bb:04:ba:c3:dd:7f:6a:fb:ff:23: 6b:fe:f6:01:d8:66:3a:5f:13:5a:6b:b6:5c:f7:f5:cb:2b:ba: ce:e1:b6:73:b2:e2:f2:8c:15:d8:f1:31:11:4b:f7:22:89:06: ff:8c:6b:97:16:e3:24:49:26:fa:d6:f7:8d:0e:62:70:1b:ea: 41:90:bf:cf:13:8f:a6:ab:c1:70:68:db:12:35:f0:26:98:ae: 06:3e:08:19:9e:e9:e0:43:e3:74:66:f8:e0:da:b4:7a:c8:56: 25:d3:12:2a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUK5sqh9o2h0F8M9AU5k/lewWDaFQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjA1MVoX DTI3MDUwMTIxMjU1MVowMzExMC8GA1UEAxMoMzFGOEU2Q0Y4QUJGMzMxNEFDRDAy MkJCNjgxN0Y5RDRFNzJENDVGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJP8ssWHVVrAQxCBRWl9lNzPYaFzCiB6t/b80UzQaF4PmxG+yWCcvUm+Hdoo 8dsBPUrqOTI3VxfHXYMexoy/Mt7gY+lykqus0xyIoHH8udPMBnfeb1PUsOtPieXU CoPK7+iObc72xWjgfNwzf94hSDkU8y9dAUkp3UXzLKrZxBRdPMZ5XXH7wvflSlaQ zbgODQoxF9s3m62XoF4GJk/ua5N1YrgYEK+8yj3n5g+7wa1Jn0nyWcdtCeLHL7Aq 9L6xscc8kZfs2d8fDu+ZrTujtEqIuqcCFoJNpiekMP+s+WrJ9BCaeZS4SbWij/mb 7UR72l9v9kQ5eTOhLVYtaQMhXW8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQx+ObP ir8zFKzQIrtoF/nU5y1F/jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8bpAMA0GCSqGSIb3DQEBCwUAA4IBAQCZK0QErslAViqIyJ+h5LgZ usUbD6/NeOMVVs87kfy4q1NXKWbaTjzEAU9HH8hakjVukCR0wWKtwFsWQxYs+oyj /28iegCuS0Ln5UuUITU8YI2A39XQYZabQpHiLdwWyPFcahamj4KOH3fCCWOA9vxm tmQxsAd0vhfxmNb232opocA8nBjD3D7OTFU3gpxIdjHZGH2uC7GYprsEusPdf2r7 /yNr/vYB2GY6XxNaa7Zc9/XLK7rO4bZzsuLyjBXY8TERS/ciiQb/jGuXFuMkSSb6 1veNDmJwG+pBkL/PE4+mq8FwaNsSNfAmmK4GPggZnungQ+N0Zvjg2rR6yFYl0xIq -----END CERTIFICATE-----Generated at Sun May 3 00:39:46 2026 by rpki-client