$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS135456.roa File: AS135456.roa (raw, json) Hash identifier: OzRHroa2V8XxFa2zZrXJAjClLN+3tEC870o9aEo/tF0= Subject key identifier: 3D:73:36:C6:D5:DF:60:82:42:9F:6E:60:CB:BD:55:EB:7A:A0:4C:C1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74D8228AE8816DEFCD74435757F9EAC41806E637 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135456.roa Signing time: Sat 02 May 2026 08:34:47 +0000 ROA not before: Sat 02 May 2026 08:29:47 +0000 ROA not after: Sat 01 May 2027 08:34:47 +0000 asID: 135456 IP address blocks: 103.64.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:22:8a:e8:81:6d:ef:cd:74:43:57:57:f9:ea:c4:18:06:e6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:47 2026 GMT Not After : May 1 08:34:47 2027 GMT Subject: CN=3D7336C6D5DF6082429F6E60CBBD55EB7AA04CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:bd:68:f6:84:63:4d:90:b1:b0:e6:df:51: 1c:32:0d:71:f4:e1:de:79:ab:c9:09:bf:e4:06:c0: e3:5b:9a:d4:f0:2c:03:b3:8c:c0:30:3c:7a:d9:42: b2:39:88:ac:5b:67:0b:a2:1b:ff:26:50:3f:fd:6d: 55:fa:9d:99:cf:fb:53:37:e7:5d:ef:ea:26:ee:c8: 26:d9:54:db:45:88:a1:d6:57:8b:29:8f:db:39:33: b4:25:80:ba:b1:e3:13:43:80:1a:16:f5:cd:79:c3: 99:91:44:75:3e:ab:e2:dc:89:59:4e:f5:0a:2a:22: 44:ef:01:d3:a3:65:29:d1:5a:ce:2e:8d:26:0b:6f: 6f:8f:53:d3:f9:dd:91:15:ca:c7:be:99:95:3e:8a: d4:da:83:da:8a:52:31:65:59:15:da:92:6b:cb:91: 02:76:a3:52:e0:16:72:0d:8b:cb:cc:d4:6e:da:6e: 8a:d7:cd:23:16:fe:d0:b8:06:45:98:6d:2a:87:f5: 00:db:63:05:41:b6:4d:4b:25:2c:0a:60:6e:8d:3c: c7:43:f2:08:de:69:25:b4:44:ab:0c:c1:91:a5:b1: c2:55:ab:7a:c5:72:75:4c:60:5b:b7:50:e2:90:a2: 67:44:6e:60:ea:d1:43:6a:fc:80:78:79:3c:c8:68: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:73:36:C6:D5:DF:60:82:42:9F:6E:60:CB:BD:55:EB:7A:A0:4C:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS135456.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.64.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:91:e1:13:1d:0c:40:17:57:ab:47:7a:9c:76:6b:92:7f:c3: 1a:8c:46:11:87:44:0f:36:6f:50:c0:d9:c2:33:4d:5b:71:32: 60:e6:cc:c5:57:eb:32:59:9e:dd:cb:03:fd:b2:e6:54:ef:12: 2b:5f:c8:82:d3:98:78:1f:a8:97:56:af:b4:17:58:0e:83:37: bb:35:2a:4f:7a:90:3c:1f:5a:08:0b:a1:9e:90:6e:19:1c:7c: 84:37:bc:06:9b:17:cb:a8:53:8f:89:85:ec:54:17:88:14:04: ae:a0:56:78:8d:64:d3:47:d1:71:5d:87:1f:d6:9b:2c:a3:dc: 70:13:86:fd:38:35:d8:8b:20:02:92:cd:32:14:fe:66:2c:9a: 84:59:27:93:b4:fd:88:5a:9e:0b:f7:d1:98:c5:ae:12:4c:b8: b0:bb:a5:f3:57:44:89:f8:a9:bc:4a:98:a2:29:69:bf:ac:95: 21:41:f8:32:de:21:53:33:d4:62:c2:45:aa:7e:6b:e4:ff:4e: d1:f3:bb:51:04:9e:cf:55:6c:0a:9e:6b:c7:d3:25:52:cd:dd: 86:6d:be:b0:e3:0e:df:ac:1a:53:25:41:fc:f9:63:09:02:b4: 1e:e9:34:f4:ac:4d:28:91:1d:42:94:7e:23:c4:5c:4d:87:0a: e0:81:44:cd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdNgiiuiBbe/NdENXV/nqxBgG5jcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4Mjk0N1oX DTI3MDUwMTA4MzQ0N1owMzExMC8GA1UEAxMoM0Q3MzM2QzZENURGNjA4MjQyOUY2 RTYwQ0JCRDU1RUI3QUEwNENDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3hvWj2hGNNkLGw5t9RHDINcfTh3nmryQm/5AbA41ua1PAsA7OMwDA8etlC sjmIrFtnC6Ib/yZQP/1tVfqdmc/7UzfnXe/qJu7IJtlU20WIodZXiymP2zkztCWA urHjE0OAGhb1zXnDmZFEdT6r4tyJWU71CioiRO8B06NlKdFazi6NJgtvb49T0/nd kRXKx76ZlT6K1NqD2opSMWVZFdqSa8uRAnajUuAWcg2Ly8zUbtpuitfNIxb+0LgG RZhtKof1ANtjBUG2TUslLApgbo08x0PyCN5pJbREqwzBkaWxwlWresVydUxgW7dQ 4pCiZ0RuYOrRQ2r8gHh5PMhoeT8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ9czbG 1d9ggkKfbmDLvVXreqBMwTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM1NDU2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ0APMA0GCSqGSIb3DQEBCwUAA4IBAQAvkeETHQxAF1erR3qcdmuSf8Ma jEYRh0QPNm9QwNnCM01bcTJg5szFV+syWZ7dywP9suZU7xIrX8iC05h4H6iXVq+0 F1gOgze7NSpPepA8H1oIC6GekG4ZHHyEN7wGmxfLqFOPiYXsVBeIFASuoFZ4jWTT R9FxXYcf1psso9xwE4b9ODXYiyACks0yFP5mLJqEWSeTtP2IWp4L99GYxa4STLiw u6XzV0SJ+Km8SpiiKWm/rJUhQfgy3iFTM9RiwkWqfmvk/07R87tRBJ7PVWwKnmvH 0yVSzd2Gbb6w4w7frBpTJUH8+WMJArQe6TT0rE0okR1ClH4jxFxNhwrggUTN -----END CERTIFICATE-----Generated at Sun May 3 00:42:21 2026 by rpki-client