$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134661.roa File: AS134661.roa (raw, json) Hash identifier: 6yUZz3OwrN6azLtbfy0xkqKsbZIbU1+6z6LG3Fw5yAw= Subject key identifier: 42:7D:F6:E2:B5:D1:3B:B5:FA:21:8A:05:F2:21:8B:4F:93:B2:56:25 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7F53DB3AF9CEC6E0A7D9BD4B01136547C60D18A0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134661.roa Signing time: Tue 01 Sep 2026 07:49:42 +0000 ROA not before: Tue 01 Sep 2026 07:44:42 +0000 ROA not after: Tue 31 Aug 2027 07:49:42 +0000 asID: 134661 IP address blocks: 103.212.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:53:db:3a:f9:ce:c6:e0:a7:d9:bd:4b:01:13:65:47:c6:0d:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 1 07:44:42 2026 GMT Not After : Aug 31 07:49:42 2027 GMT Subject: CN=427DF6E2B5D13BB5FA218A05F2218B4F93B25625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:58:37:db:2f:27:3f:12:9c:17:54:af:e5: aa:df:9d:ff:72:7a:68:4f:34:f8:26:65:12:bb:b4: e9:74:7f:95:f7:b0:37:3b:1a:73:7c:4e:5e:a7:94: d8:b9:82:33:43:5e:14:79:03:02:22:cc:1d:61:85: bf:69:d3:0a:64:15:87:6e:45:5e:e2:a7:4f:02:5a: d2:6e:fc:6b:29:58:a5:8a:97:13:b7:ad:e2:a7:67: 3d:80:2d:4b:a8:35:56:08:81:1a:74:60:8b:3f:47: 89:10:81:7b:9d:af:cd:40:62:09:1a:67:9f:e6:22: 93:36:85:e9:da:af:1c:a6:4d:a6:65:85:8d:ff:f3: ba:0a:6e:1d:51:8e:56:ea:fe:3d:ce:c2:29:54:b0: f3:d6:13:64:11:2e:5c:34:6d:fb:01:72:58:fc:da: 02:f0:15:2c:3f:9d:0e:7e:93:78:52:99:5b:a1:66: b5:1b:cb:1a:c4:bb:0f:a6:1e:b3:72:44:89:69:44: 89:12:f5:b4:fe:f2:b8:67:2f:64:9b:ca:e8:97:c3: 1d:19:ca:37:83:c2:39:73:9f:a1:4d:1e:65:aa:e0: 54:18:d1:f8:66:a7:88:7e:7b:04:cd:26:9b:0c:bb: 14:b5:e5:b3:5d:5d:b7:cc:a3:9a:b2:48:f3:0c:c1: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7D:F6:E2:B5:D1:3B:B5:FA:21:8A:05:F2:21:8B:4F:93:B2:56:25 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.234.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b9:f3:9c:63:be:24:77:0e:eb:10:c8:96:41:c2:a1:f5:6f: 7c:34:0f:7e:24:2b:2b:cb:dd:62:41:a8:6e:3a:7c:3d:c4:bd: 82:f6:06:77:73:2a:7d:33:2a:85:3a:06:fb:9e:84:40:39:10: 59:0d:8a:cf:d4:6f:1e:23:d6:1c:70:de:70:51:97:1f:11:26: 00:1f:c0:59:8a:3a:7e:f6:0d:f4:bd:d9:fa:da:ba:9b:a5:84: 67:5e:0f:2a:3a:f5:2b:8a:f5:1a:48:66:73:b1:de:c9:d5:ac: fb:2c:ed:ab:18:70:79:ec:ae:9f:ea:ce:67:c6:1e:87:02:04: 5f:25:b9:49:44:98:48:dc:76:9c:a5:56:11:b5:ef:68:b5:01: 1e:bf:69:42:bd:cc:0e:0b:11:fd:8b:97:03:53:c5:f6:41:20: 44:2b:0e:88:8d:74:3d:79:9e:91:a9:8a:55:b6:4d:f2:7e:7d: cd:45:10:93:68:b7:de:c9:58:0a:2d:15:d7:4f:d2:ef:0a:7f: 43:2c:f5:86:a7:72:1b:93:cf:af:9a:9d:f5:1e:c8:3e:a6:95: e2:a3:55:35:68:63:2c:79:c9:0b:dc:34:c9:95:a3:78:a9:fe: 0d:69:15:e6:df:2e:36:8a:56:9a:74:bb:06:29:05:3c:d0:94: 86:31:fb:f2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUf1PbOvnOxuCn2b1LARNlR8YNGKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkwMTA3NDQ0MloX DTI3MDgzMTA3NDk0MlowMzExMC8GA1UEAxMoNDI3REY2RTJCNUQxM0JCNUZBMjE4 QTA1RjIyMThCNEY5M0IyNTYyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjUWDfbLyc/EpwXVK/lqt+d/3J6aE80+CZlEru06XR/lfewNzsac3xOXqeU 2LmCM0NeFHkDAiLMHWGFv2nTCmQVh25FXuKnTwJa0m78aylYpYqXE7et4qdnPYAt S6g1VgiBGnRgiz9HiRCBe52vzUBiCRpnn+YikzaF6dqvHKZNpmWFjf/zugpuHVGO Vur+Pc7CKVSw89YTZBEuXDRt+wFyWPzaAvAVLD+dDn6TeFKZW6FmtRvLGsS7D6Ye s3JEiWlEiRL1tP7yuGcvZJvK6JfDHRnKN4PCOXOfoU0eZargVBjR+GaniH57BM0m mwy7FLXls11dt8yjmrJI8wzBLe8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRCffbi tdE7tfohigXyIYtPk7JWJTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ9TqMA0GCSqGSIb3DQEBCwUAA4IBAQCXufOcY74kdw7rEMiWQcKh9W98 NA9+JCsry91iQahuOnw9xL2C9gZ3cyp9MyqFOgb7noRAORBZDYrP1G8eI9YccN5w UZcfESYAH8BZijp+9g30vdn62rqbpYRnXg8qOvUrivUaSGZzsd7J1az7LO2rGHB5 7K6f6s5nxh6HAgRfJblJRJhI3HacpVYRte9otQEev2lCvcwOCxH9i5cDU8X2QSBE Kw6IjXQ9eZ6RqYpVtk3yfn3NRRCTaLfeyVgKLRXXT9LvCn9DLPWGp3Ibk8+vmp31 Hsg+ppXio1U1aGMseckL3DTJlaN4qf4NaRXm3y42ilaadLsGKQU80JSGMfvy -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:33 2026 by rpki-client