$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136068.roa File: AS136068.roa (raw, json) Hash identifier: vJg/Ho//bkgkA2OobtIcUFKV4WSvydplIrg6nJ8/pm8= Subject key identifier: C5:FC:5C:23:EE:A1:2D:A0:DF:85:7D:9F:5B:8F:8D:29:63:EA:B5:A6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A56D610DE2B79429553CEF715EAB5D4B8C360F0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136068.roa Signing time: Sat 02 May 2026 08:37:22 +0000 ROA not before: Sat 02 May 2026 08:32:22 +0000 ROA not after: Sat 01 May 2027 08:37:22 +0000 asID: 136068 IP address blocks: 103.82.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:56:d6:10:de:2b:79:42:95:53:ce:f7:15:ea:b5:d4:b8:c3:60:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:22 2026 GMT Not After : May 1 08:37:22 2027 GMT Subject: CN=C5FC5C23EEA12DA0DF857D9F5B8F8D2963EAB5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:ef:87:5b:3f:67:cc:28:ca:c6:8d:b0:3b: fe:1d:27:b1:b6:ee:bd:36:a7:d8:8f:08:50:6e:38: b1:5c:5c:63:d4:15:c4:1d:3d:23:f4:c7:3c:76:c3: 3d:0c:f4:d3:d0:f8:52:56:85:c2:78:fa:0e:1c:b0: 99:da:6a:71:19:b9:df:46:45:89:f5:9b:67:d6:8e: de:8b:7c:6b:97:1a:a6:92:69:5a:46:ee:a5:66:13: 67:e2:00:17:86:cf:b9:1f:f6:b5:28:d7:fb:f1:da: 28:45:47:6e:1f:af:fd:3f:95:74:19:08:42:c3:ab: fa:5d:ea:26:80:05:ca:4b:2d:99:e3:8c:5a:2b:25: 5e:99:6f:4c:8c:eb:4e:e2:5a:88:ed:25:a5:f4:f3: b6:f0:b8:57:c7:af:81:ed:e7:b8:18:36:11:d9:26: 28:e2:71:c5:4a:2c:54:9d:3b:c7:ea:bf:82:a0:e6: 78:41:e5:dd:c0:03:bc:2d:db:8b:69:dc:61:31:fd: 45:53:47:6a:f6:3a:a7:ec:18:c5:fd:f0:2c:52:4e: e3:b8:94:5b:f1:92:57:23:ed:ce:49:e5:62:9c:83: ee:b2:0e:40:3b:2b:4b:51:95:ad:07:dd:7e:16:bc: 21:45:ee:c1:76:df:31:14:47:e6:e4:8d:93:0e:a7: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:5C:23:EE:A1:2D:A0:DF:85:7D:9F:5B:8F:8D:29:63:EA:B5:A6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136068.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.7.0/24 Signature Algorithm: sha256WithRSAEncryption 01:cb:15:5e:5a:9a:eb:c3:29:5d:0c:e5:8c:98:34:5e:bd:65: 38:96:ab:b5:56:51:4a:66:4d:e5:e3:89:55:c8:90:fa:ce:e7: 05:65:cf:5b:12:a1:d9:79:65:32:1b:ef:1d:14:92:ef:5c:1f: 6a:86:4d:3f:3d:e1:9d:45:bd:1c:cf:a1:01:74:e9:0d:d0:7d: 53:6b:5d:8b:89:2a:c5:0e:83:b4:94:d8:96:a5:2b:c4:be:fb: 8d:a1:a4:5c:b8:67:1f:f2:45:20:c1:82:58:d9:9a:3e:1b:c0: da:e0:83:3d:e9:22:eb:2e:46:f9:5f:d0:ed:81:9f:45:10:b6: 42:80:2b:60:ac:e3:0b:f1:3a:32:d1:00:5a:45:dd:75:78:df: 4b:fa:c3:a9:ac:66:6b:ab:d0:68:18:35:d3:c0:77:95:08:89: 4b:10:35:cf:bd:15:64:ec:f9:bb:1c:1e:ed:38:7b:e9:ab:92: 5f:96:90:03:9a:41:e4:f7:f7:aa:6c:08:32:65:66:2e:ab:00: 3d:a8:33:5b:39:56:6e:af:e6:e1:1d:64:2e:a7:a4:1e:1e:01: 8f:94:91:31:9a:8f:6e:86:84:a8:45:6b:04:3c:c3:86:5a:01: d1:8f:99:09:81:45:f5:7f:94:78:b3:69:ca:da:6a:ae:d0:ec: 64:a5:08:a5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGlbWEN4reUKVU873Feq11LjDYPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIyMloX DTI3MDUwMTA4MzcyMlowMzExMC8GA1UEAxMoQzVGQzVDMjNFRUExMkRBMERGODU3 RDlGNUI4RjhEMjk2M0VBQjVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuw74dbP2fMKMrGjbA7/h0nsbbuvTan2I8IUG44sVxcY9QVxB09I/THPHbD PQz009D4UlaFwnj6DhywmdpqcRm530ZFifWbZ9aO3ot8a5cappJpWkbupWYTZ+IA F4bPuR/2tSjX+/HaKEVHbh+v/T+VdBkIQsOr+l3qJoAFykstmeOMWislXplvTIzr TuJaiO0lpfTztvC4V8evge3nuBg2EdkmKOJxxUosVJ07x+q/gqDmeEHl3cADvC3b i2ncYTH9RVNHavY6p+wYxf3wLFJO47iUW/GSVyPtzknlYpyD7rIOQDsrS1GVrQfd fha8IUXuwXbfMRRH5uSNkw6niM8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTF/Fwj 7qEtoN+FfZ9bj40pY+q1pjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MDY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ1IHMA0GCSqGSIb3DQEBCwUAA4IBAQAByxVeWprrwyldDOWMmDRevWU4 lqu1VlFKZk3l44lVyJD6zucFZc9bEqHZeWUyG+8dFJLvXB9qhk0/PeGdRb0cz6EB dOkN0H1Ta12LiSrFDoO0lNiWpSvEvvuNoaRcuGcf8kUgwYJY2Zo+G8Da4IM96SLr Lkb5X9DtgZ9FELZCgCtgrOML8Toy0QBaRd11eN9L+sOprGZrq9BoGDXTwHeVCIlL EDXPvRVk7Pm7HB7tOHvpq5JflpADmkHk9/eqbAgyZWYuqwA9qDNbOVZur+bhHWQu p6QeHgGPlJExmo9uhoSoRWsEPMOGWgHRj5kJgUX1f5R4s2nK2mqu0OxkpQil -----END CERTIFICATE-----Generated at Sun May 3 00:41:40 2026 by rpki-client