$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS135444.roa File: AS135444.roa (raw, json) Hash identifier: Qh6auUjwK7GEg33M87Onqh9991NCQt03tcyeJBsXJJA= Subject key identifier: FD:86:79:BF:4C:FD:B1:30:54:2D:61:96:9C:E8:7E:9C:4E:E8:6C:C8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 44420373EB5F84F4209FECCF3C9DDA9C5B449607 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135444.roa Signing time: Sat 02 May 2026 21:25:42 +0000 ROA not before: Sat 02 May 2026 21:20:42 +0000 ROA not after: Sat 01 May 2027 21:25:42 +0000 asID: 135444 IP address blocks: 103.74.5.0/24 maxlen: 24 2001:df1:a9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:42:03:73:eb:5f:84:f4:20:9f:ec:cf:3c:9d:da:9c:5b:44:96:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:42 2026 GMT Not After : May 1 21:25:42 2027 GMT Subject: CN=FD8679BF4CFDB130542D61969CE87E9C4EE86CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:f7:9b:58:ee:67:6c:b1:c9:60:99:de:16: bd:85:41:7c:b9:f3:16:2b:8f:38:5d:41:22:b8:60: aa:1c:a1:85:77:6c:5a:62:10:0e:83:d2:24:8b:87: 0d:c4:f3:28:e0:9d:d5:e7:2e:15:5b:8c:64:d8:41: 57:b1:e6:e7:a8:75:30:87:a8:7d:58:e9:8c:67:c1: 04:ca:60:99:b5:74:53:7b:60:b3:ef:90:34:32:25: fd:d6:dc:d8:56:61:c0:68:9a:f2:73:b7:46:0a:05: fb:39:2a:0a:31:c2:d6:d6:70:17:c0:4d:e4:1f:24: 54:0b:56:e3:69:2d:47:99:ec:c2:03:f2:ba:bb:38: 52:06:97:43:21:b9:9d:14:c1:0e:dd:3c:be:f1:68: 8d:a0:d3:5c:23:17:37:3b:de:ad:f7:12:3f:b6:c2: c9:59:4a:7e:2b:60:84:f9:4f:4f:eb:13:39:1e:2c: 90:da:79:0d:7c:64:bc:6f:fe:01:fa:67:c7:1b:5d: 10:90:5f:72:07:e7:bf:18:6b:5b:74:a8:0a:67:ed: e2:88:35:45:f9:c8:c7:ef:ac:11:36:3f:98:4c:1f: c4:de:5b:f7:91:0c:df:70:39:3f:16:bc:a9:f1:e4: a6:bf:85:41:4a:a4:87:0b:90:f2:d8:fc:ca:67:88: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:79:BF:4C:FD:B1:30:54:2D:61:96:9C:E8:7E:9C:4E:E8:6C:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135444.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.74.5.0/24 IPv6: 2001:df1:a9c0::/48 Signature Algorithm: sha256WithRSAEncryption 18:3c:cc:97:7b:b1:cf:13:be:d0:5c:06:c6:e8:82:52:30:f8: c9:12:29:bd:1f:ac:04:60:3d:65:00:4e:08:3b:86:4f:6f:89: 58:23:02:54:02:9f:74:cd:98:da:be:32:d3:80:6e:82:b2:95: 66:de:d1:01:f9:fb:7c:11:e4:a8:cb:f7:52:b4:ee:da:19:1b: 99:94:27:e2:31:5f:9a:54:0f:29:ff:d0:68:c5:85:c1:6d:09: 1d:b5:be:2a:a7:a9:62:74:c7:07:9b:98:ee:8a:dd:59:57:92: 8d:59:b5:b6:ed:d6:5d:c6:c9:a5:3b:94:8b:6e:40:2e:bd:13: ce:bd:ae:53:73:39:c7:92:f2:89:a9:a3:27:e1:f1:f1:6e:d3: 2a:23:39:81:a7:18:44:46:c8:93:e4:8f:00:8e:2d:eb:c9:ec: 06:50:42:ed:a9:23:7f:be:d2:57:d8:9b:c8:e4:f8:1a:c6:c8: 95:4d:da:c1:42:7d:9e:09:dc:cc:ea:ba:e6:30:d2:64:94:02: b0:56:e7:9a:89:08:f0:a5:28:48:80:cf:7f:06:40:f7:a4:b4: 35:93:49:75:0e:06:e0:39:b8:d1:a5:49:17:9b:4f:84:a8:ad: cc:00:3e:8d:ce:8c:09:a9:56:a1:23:20:b5:69:34:81:24:84: aa:54:e3:1c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUREIDc+tfhPQgn+zPPJ3anFtElgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjA0MloX DTI3MDUwMTIxMjU0MlowMzExMC8GA1UEAxMoRkQ4Njc5QkY0Q0ZEQjEzMDU0MkQ2 MTk2OUNFODdFOUM0RUU4NkNDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKPa95tY7mdssclgmd4WvYVBfLnzFiuPOF1BIrhgqhyhhXdsWmIQDoPSJIuH DcTzKOCd1ecuFVuMZNhBV7Hm56h1MIeofVjpjGfBBMpgmbV0U3tgs++QNDIl/dbc 2FZhwGia8nO3RgoF+zkqCjHC1tZwF8BN5B8kVAtW42ktR5nswgPyurs4UgaXQyG5 nRTBDt08vvFojaDTXCMXNzverfcSP7bCyVlKfitghPlPT+sTOR4skNp5DXxkvG/+ AfpnxxtdEJBfcgfnvxhrW3SoCmft4og1RfnIx++sETY/mEwfxN5b95EM33A5Pxa8 qfHkpr+FQUqkhwuQ8tj8ymeIf50CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT9hnm/ TP2xMFQtYZac6H6cTuhsyDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM1NDQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ0oFMA8EAgACMAkDBwAgAQ3xqcAwDQYJKoZIhvcNAQELBQADggEBABg8 zJd7sc8TvtBcBsboglIw+MkSKb0frARgPWUATgg7hk9viVgjAlQCn3TNmNq+MtOA boKylWbe0QH5+3wR5KjL91K07toZG5mUJ+IxX5pUDyn/0GjFhcFtCR21viqnqWJ0 xwebmO6K3VlXko1Ztbbt1l3GyaU7lItuQC69E869rlNzOceS8ompoyfh8fFu0yoj OYGnGERGyJPkjwCOLevJ7AZQQu2pI3++0lfYm8jk+BrGyJVN2sFCfZ4J3MzquuYw 0mSUArBW55qJCPClKEiAz38GQPektDWTSXUOBuA5uNGlSRebT4SorcwAPo3OjAmp VqEjILVpNIEkhKpU4xw= -----END CERTIFICATE-----Generated at Sun May 3 00:42:19 2026 by rpki-client