$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS135430.roa File: AS135430.roa (raw, json) Hash identifier: euIXNPr2BHGXPgQ/QTjbThWVTmomgPWiIktydMkH228= Subject key identifier: F5:A0:A2:48:EF:27:BC:87:A4:BF:2D:80:EC:C6:AA:93:98:19:2D:E2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3FC5EFB35AE3A0A81257883A5F3701E2D05B9B4E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135430.roa Signing time: Sun 04 Oct 2026 00:32:34 +0000 ROA not before: Sun 04 Oct 2026 00:27:34 +0000 ROA not after: Sun 03 Oct 2027 00:32:34 +0000 asID: 135430 IP address blocks: 163.128.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c5:ef:b3:5a:e3:a0:a8:12:57:88:3a:5f:37:01:e2:d0:5b:9b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 4 00:27:34 2026 GMT Not After : Oct 3 00:32:34 2027 GMT Subject: CN=F5A0A248EF27BC87A4BF2D80ECC6AA9398192DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:4f:ee:6f:49:61:40:ab:b7:86:ea:a8:a2: 1b:39:1d:2c:a6:36:5e:82:03:f4:8b:f5:d6:86:51: 6f:fa:1a:ff:6f:1e:87:c3:45:ed:42:c5:c2:c1:5f: 27:ed:be:87:e6:1d:dc:24:75:0f:ec:f9:1a:6a:b3: f6:65:7a:52:59:6c:c0:90:56:3c:39:73:38:a2:2f: bb:97:64:46:16:c7:ec:e7:47:cc:3e:81:cb:b6:94: d2:af:7f:15:0f:10:d2:62:fc:e4:61:5e:f4:12:f0: 18:8d:ee:42:e8:d2:6f:e1:d3:5f:00:24:5f:40:7d: cc:43:77:ef:eb:8c:ee:34:10:82:e0:09:d3:ca:7e: 61:00:d5:a1:5e:ab:3e:78:32:12:8e:27:90:3f:f4: 5d:b6:19:09:51:1f:16:91:2e:c1:6c:11:d0:b4:09: 0e:83:80:6b:70:6f:13:05:ca:50:21:14:eb:d0:f0: f3:59:27:04:9e:d3:20:0c:f5:96:17:44:d3:d2:91: 8c:15:55:cf:42:c3:33:be:7f:01:8d:59:f9:e4:99: 15:e3:06:2a:42:74:fc:46:5e:0f:4e:d1:18:78:cf: 8c:21:e8:1d:3f:69:ab:25:67:e2:4f:f6:a7:fe:4d: 6a:8c:ba:ea:c6:23:fa:fa:51:0e:75:4f:de:d7:80: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:A2:48:EF:27:BC:87:A4:BF:2D:80:EC:C6:AA:93:98:19:2D:E2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.70.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:7c:4b:14:51:56:52:e9:2b:b4:f1:13:0f:10:60:2e:78:6e: ec:4f:31:c4:f4:39:ba:f4:73:fb:87:4b:08:72:53:29:3c:8d: f6:49:ed:d0:4c:a1:d0:27:47:a6:4c:c6:99:c1:e1:05:b7:03: 38:e5:40:49:38:dd:50:4e:01:42:e0:82:96:ad:69:1a:ee:a6: d8:36:88:34:7f:93:37:e0:b9:6d:92:64:6f:08:5c:cc:d1:f0: 74:70:34:2a:08:84:a2:0f:24:29:84:ae:a1:51:27:54:58:1b: 41:2c:43:b3:20:23:0a:d2:41:32:6a:be:3c:7b:15:80:6a:dd: 49:0d:ea:41:ce:ad:8c:42:e9:64:a0:d2:72:cd:84:6b:4d:10: 0d:21:9b:ef:d1:dc:a3:a3:75:3c:e8:1e:01:fd:29:20:20:99: cb:26:2b:31:f8:54:4b:d8:d2:0c:2a:28:99:09:65:e8:db:2e: d0:b6:3b:be:84:e1:96:a1:37:0d:4d:b2:c9:c6:bb:f1:99:32: 72:ef:04:0d:bb:b3:4f:6f:a8:54:74:59:ea:3f:da:24:be:85: 62:6e:31:34:e4:70:f7:2a:5d:2a:f3:7d:f3:c3:13:91:49:28: a0:91:a3:c0:63:e3:89:8b:cd:5b:56:e6:f1:bd:d7:d9:96:f5: 26:33:ea:2e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUP8Xvs1rjoKgSV4g6XzcB4tBbm04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNDAwMjczNFoX DTI3MTAwMzAwMzIzNFowMzExMC8GA1UEAxMoRjVBMEEyNDhFRjI3QkM4N0E0QkYy RDgwRUNDNkFBOTM5ODE5MkRFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKD/T+5vSWFAq7eG6qiiGzkdLKY2XoID9Iv11oZRb/oa/28eh8NF7ULFwsFf J+2+h+Yd3CR1D+z5Gmqz9mV6UllswJBWPDlzOKIvu5dkRhbH7OdHzD6By7aU0q9/ FQ8Q0mL85GFe9BLwGI3uQujSb+HTXwAkX0B9zEN37+uM7jQQguAJ08p+YQDVoV6r PngyEo4nkD/0XbYZCVEfFpEuwWwR0LQJDoOAa3BvEwXKUCEU69Dw81knBJ7TIAz1 lhdE09KRjBVVz0LDM75/AY1Z+eSZFeMGKkJ0/EZeD07RGHjPjCHoHT9pqyVn4k/2 p/5Naoy66sYj+vpRDnVP3teAiDMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT1oKJI 7ye8h6S/LYDsxqqTmBkt4jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM1NDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBo4BGMA0GCSqGSIb3DQEBCwUAA4IBAQAcfEsUUVZS6Su08RMPEGAueG7s TzHE9Dm69HP7h0sIclMpPI32Se3QTKHQJ0emTMaZweEFtwM45UBJON1QTgFC4IKW rWka7qbYNog0f5M34LltkmRvCFzM0fB0cDQqCISiDyQphK6hUSdUWBtBLEOzICMK 0kEyar48exWAat1JDepBzq2MQulkoNJyzYRrTRANIZvv0dyjo3U86B4B/SkgIJnL Jisx+FRL2NIMKiiZCWXo2y7Qtju+hOGWoTcNTbLJxrvxmTJy7wQNu7NPb6hUdFnq P9okvoVibjE05HD3Kl0q833zwxORSSigkaPAY+OJi81bVubxvdfZlvUmM+ou -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:00 2026 by rpki-client