$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134728.roa File: AS134728.roa (raw, json) Hash identifier: fu0rn+UIlNcpI1nkWFboqiEDb2hskKix3AEn1ak8hdY= Subject key identifier: 8F:48:95:10:60:5B:59:A8:6E:E0:42:BC:E9:43:7E:FB:1B:75:27:47 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 534316E7C6E5E9932F6C7DFB1D04C25E67D4E423 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134728.roa Signing time: Sat 02 May 2026 09:27:23 +0000 ROA not before: Sat 02 May 2026 09:22:23 +0000 ROA not after: Sat 01 May 2027 09:27:23 +0000 asID: 134728 IP address blocks: 2001:df6:abc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:43:16:e7:c6:e5:e9:93:2f:6c:7d:fb:1d:04:c2:5e:67:d4:e4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:23 2026 GMT Not After : May 1 09:27:23 2027 GMT Subject: CN=8F489510605B59A86EE042BCE9437EFB1B752747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:a2:93:5a:33:81:27:9d:e0:ee:c6:9e:1e: 9b:a6:15:17:f7:eb:df:cc:9c:3f:81:85:ad:e1:a8: 14:74:88:f4:75:6b:56:8d:5b:d6:a2:b4:00:02:10: 07:8f:9e:76:ea:2d:46:b7:ad:82:97:9d:7e:f0:c4: cc:73:93:a3:28:85:36:26:e1:43:e8:6d:db:09:1f: 54:45:2b:a9:f1:31:da:cf:f9:98:46:4f:79:d5:6e: ab:72:d0:b3:f4:b2:62:4a:fa:96:89:10:e3:89:e3: 7a:a9:40:0e:eb:86:d7:9d:db:5e:84:4f:85:53:03: b3:30:16:bf:d2:30:27:ce:37:3e:97:7a:c6:5d:e9: b8:85:6d:35:24:11:d5:7d:03:42:45:e1:37:ea:1c: 84:fc:d5:30:e2:36:36:65:34:4f:f7:5c:4f:dd:d0: 15:f5:dc:c2:36:87:e5:8c:01:8b:b3:d5:ad:4f:7e: fd:96:cd:c5:7e:34:87:6e:17:c5:ba:e0:57:3b:f2: 54:b3:5a:62:c3:52:5c:e8:a6:53:f1:63:b9:4d:62: 23:c6:23:cf:83:95:1e:61:c0:d4:05:5a:f4:5f:5b: 77:ef:26:72:f0:65:83:63:1e:ab:55:ab:89:eb:d1: f4:9a:00:0f:76:06:9f:a2:2b:cf:e8:55:3a:da:e4: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:95:10:60:5B:59:A8:6E:E0:42:BC:E9:43:7E:FB:1B:75:27:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134728.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:abc0::/48 Signature Algorithm: sha256WithRSAEncryption 37:ea:48:96:dd:e4:47:8a:00:ed:ad:35:10:0f:1b:18:c0:23: a6:c9:84:01:a7:3d:be:d0:c2:00:24:d7:e4:60:aa:c4:fc:86: d2:58:c3:94:5a:9d:53:f8:48:d4:6c:d3:0d:12:e5:88:11:87: 02:70:c0:ec:41:3c:0d:aa:59:51:39:4a:07:c4:7b:a3:68:81: f9:ee:63:c8:f7:e6:9e:71:6a:6f:ed:08:81:d6:a8:5e:c2:31: 7b:44:0d:72:ab:c4:be:09:91:b5:70:43:52:bc:46:a6:52:3e: 91:29:26:96:54:b6:25:20:11:87:62:57:f0:c9:3c:0a:83:89: 00:f0:ed:35:2d:38:51:ee:2e:eb:31:3e:2f:85:2a:13:58:28: 8d:a4:f4:97:16:69:27:6a:ff:d7:e8:08:c7:e9:e6:87:e2:16: 51:47:03:92:e2:dd:2c:53:bc:ad:de:62:51:31:35:e7:69:11: ed:cf:eb:e2:11:e1:73:ee:da:f7:be:0d:b9:7b:54:78:1f:57: e0:9d:35:17:69:c2:71:39:34:d9:12:b0:4c:82:f5:34:01:33: 97:ad:52:44:9a:7a:af:8d:7b:0e:2f:8e:35:83:8b:ae:fa:2e: 47:39:27:60:bf:dd:e9:ee:74:69:96:91:ee:2d:aa:ad:b0:ba: 28:99:c4:e7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUU0MW58bl6ZMvbH37HQTCXmfU5CMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIyM1oX DTI3MDUwMTA5MjcyM1owMzExMC8GA1UEAxMoOEY0ODk1MTA2MDVCNTlBODZFRTA0 MkJDRTk0MzdFRkIxQjc1Mjc0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlQopNaM4EnneDuxp4em6YVF/fr38ycP4GFreGoFHSI9HVrVo1b1qK0AAIQ B4+eduotRretgpedfvDEzHOToyiFNibhQ+ht2wkfVEUrqfEx2s/5mEZPedVuq3LQ s/SyYkr6lokQ44njeqlADuuG153bXoRPhVMDszAWv9IwJ843Ppd6xl3puIVtNSQR 1X0DQkXhN+ochPzVMOI2NmU0T/dcT93QFfXcwjaH5YwBi7PVrU9+/ZbNxX40h24X xbrgVzvyVLNaYsNSXOimU/FjuU1iI8Yjz4OVHmHA1AVa9F9bd+8mcvBlg2Meq1Wr ievR9JoAD3YGn6Irz+hVOtrkuVMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSPSJUQ YFtZqG7gQrzpQ377G3UnRzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NzI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9qvAMA0GCSqGSIb3DQEBCwUAA4IBAQA36kiW3eRHigDtrTUQDxsY wCOmyYQBpz2+0MIAJNfkYKrE/IbSWMOUWp1T+EjUbNMNEuWIEYcCcMDsQTwNqllR OUoHxHujaIH57mPI9+aecWpv7QiB1qhewjF7RA1yq8S+CZG1cENSvEamUj6RKSaW VLYlIBGHYlfwyTwKg4kA8O01LThR7i7rMT4vhSoTWCiNpPSXFmknav/X6AjH6eaH 4hZRRwOS4t0sU7yt3mJRMTXnaRHtz+viEeFz7tr3vg25e1R4H1fgnTUXacJxOTTZ ErBMgvU0ATOXrVJEmnqvjXsOL441g4uu+i5HOSdgv93p7nRplpHuLaqtsLoomcTn -----END CERTIFICATE-----Generated at Sun May 3 00:42:08 2026 by rpki-client