$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS135445.roa File: AS135445.roa (raw, json) Hash identifier: +40hvrpb6Bp3fJdWdgdxGe0weLnmBsaB1w3jzTEt5wY= Subject key identifier: 94:85:48:30:B3:3C:75:3A:DA:17:EC:C9:FB:89:47:78:5C:C4:32:FF Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2171653B41CB5961E03706E83204E804DB91863A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135445.roa Signing time: Sat 02 May 2026 09:22:22 +0000 ROA not before: Sat 02 May 2026 09:17:22 +0000 ROA not after: Sat 01 May 2027 09:22:22 +0000 asID: 135445 IP address blocks: 124.158.128.0/24 maxlen: 24 124.158.129.0/24 maxlen: 24 124.158.130.0/24 maxlen: 24 124.158.131.0/24 maxlen: 24 124.158.132.0/24 maxlen: 24 124.158.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:71:65:3b:41:cb:59:61:e0:37:06:e8:32:04:e8:04:db:91:86:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:22 2026 GMT Not After : May 1 09:22:22 2027 GMT Subject: CN=94854830B33C753ADA17ECC9FB8947785CC432FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:5d:42:cf:08:31:13:ce:89:ca:eb:cd:28: eb:8a:b2:e1:da:b5:07:d8:b4:31:b1:d5:d7:7f:9d: 2c:72:0b:c3:2f:15:23:b4:04:a9:48:95:ae:06:6e: af:0a:17:ee:75:dc:0b:8a:d5:5d:b6:fd:db:78:e8: b3:20:bd:fe:86:57:8f:08:df:a7:ca:d8:0a:c6:84: 37:ce:4c:d9:91:ba:9a:9b:67:ba:d2:3a:81:d9:d4: b8:b6:7e:89:c6:ce:ef:85:80:0e:cf:39:5a:1a:c1: 0d:59:7a:01:1c:ba:a5:28:b4:d1:6a:d0:0f:d7:fd: cb:1c:5e:83:60:94:42:48:31:d8:a3:aa:bc:97:d4: 21:74:5d:b8:69:c3:f8:eb:32:1c:b0:a5:b9:9b:4b: cf:bb:a7:70:3f:ea:6d:74:5b:2d:93:79:9c:d6:60: 3f:cb:be:eb:d9:75:95:d5:fa:ee:1b:2e:8b:54:b7: 20:f4:23:e0:70:20:61:3d:3b:ac:e1:d1:32:fd:86: 27:e1:7c:c6:65:b1:b5:78:5f:85:b3:0f:6e:4a:9d: c9:9a:d8:74:a3:2f:32:74:3e:72:80:ef:f6:3c:b2: 24:1d:32:f0:92:dc:68:56:6c:27:39:e0:8a:73:90: dd:ad:8c:bd:22:7d:b7:89:e0:9d:21:43:60:57:f9: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:85:48:30:B3:3C:75:3A:DA:17:EC:C9:FB:89:47:78:5C:C4:32:FF X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.128.0-124.158.132.255 124.158.140.0/23 Signature Algorithm: sha256WithRSAEncryption 49:10:d1:90:3f:8c:ee:92:18:5b:5e:46:56:e5:61:e3:54:85: af:40:45:b5:c2:b9:1f:8d:81:5f:fc:5d:a2:77:10:23:3b:a9: bc:a0:8b:bb:cc:d9:d4:c8:2c:0b:b9:11:65:f6:ef:44:43:42: a0:50:03:f5:86:85:80:d0:07:b2:89:8f:bb:17:19:86:71:88: c2:e1:3d:5e:32:ff:ac:f3:a1:27:fd:93:4a:56:84:5e:3c:f5: e2:fa:0b:1b:99:00:65:86:78:c0:c2:67:b5:93:7f:7b:f3:3a: 8d:86:cf:39:01:3e:da:b1:2f:a3:24:dd:27:0e:6c:e3:b6:4e: 31:55:73:f5:3c:e8:c6:6a:7e:ce:91:b3:1c:ba:c6:8c:14:de: 87:f7:20:54:f6:69:9b:a4:87:4f:c2:4a:6f:32:0a:b3:88:9b: 93:02:cd:f1:af:f6:a8:b3:96:d7:fd:5e:71:cd:33:98:45:85: 19:15:f9:d4:57:1c:fc:30:42:b4:4b:78:d1:b0:20:2b:21:0c: d5:db:3b:67:46:75:af:95:03:3f:a5:f4:90:bf:4b:c2:c5:dc: c3:32:e4:70:be:38:10:66:9c:a1:06:60:18:dc:8d:53:a4:65: 1c:57:f9:95:9f:48:c0:b5:74:91:83:d8:da:96:1c:c4:e6:3d: 7f:c6:5d:ab -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUIXFlO0HLWWHgNwboMgToBNuRhjowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcyMloX DTI3MDUwMTA5MjIyMlowMzExMC8GA1UEAxMoOTQ4NTQ4MzBCMzNDNzUzQURBMTdF Q0M5RkI4OTQ3Nzg1Q0M0MzJGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2zXULPCDETzonK680o64qy4dq1B9i0MbHV13+dLHILwy8VI7QEqUiVrgZu rwoX7nXcC4rVXbb923josyC9/oZXjwjfp8rYCsaEN85M2ZG6mptnutI6gdnUuLZ+ icbO74WADs85WhrBDVl6ARy6pSi00WrQD9f9yxxeg2CUQkgx2KOqvJfUIXRduGnD +OsyHLCluZtLz7uncD/qbXRbLZN5nNZgP8u+69l1ldX67hsui1S3IPQj4HAgYT07 rOHRMv2GJ+F8xmWxtXhfhbMPbkqdyZrYdKMvMnQ+coDv9jyyJB0y8JLcaFZsJzng inOQ3a2MvSJ9t4ngnSFDYFf543ECAwEAAaOCAdowggHWMB0GA1UdDgQWBBSUhUgw szx1OtoX7Mn7iUd4XMQy/zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM1NDQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIA ATAUMAwDBAd8noADBAB8noQDBAF8nowwDQYJKoZIhvcNAQELBQADggEBAEkQ0ZA/ jO6SGFteRlblYeNUha9ARbXCuR+NgV/8XaJ3ECM7qbygi7vM2dTILAu5EWX270RD QqBQA/WGhYDQB7KJj7sXGYZxiMLhPV4y/6zzoSf9k0pWhF489eL6CxuZAGWGeMDC Z7WTf3vzOo2GzzkBPtqxL6Mk3ScObOO2TjFVc/U86MZqfs6Rsxy6xowU3of3IFT2 aZukh0/CSm8yCrOIm5MCzfGv9qizltf9XnHNM5hFhRkV+dRXHPwwQrRLeNGwICsh DNXbO2dGda+VAz+l9JC/S8LF3MMy5HC+OBBmnKEGYBjcjVOkZRxX+ZWfSMC1dJGD 2NqWHMTmPX/GXas= -----END CERTIFICATE-----Generated at Sun May 3 01:44:00 2026 by rpki-client