$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136100.roa File: AS136100.roa (raw, json) Hash identifier: aOnXGQix2bL/zhQ9pS2C4w1eV2gLYkCCMAwvxaeXG24= Subject key identifier: 91:B9:D2:AE:64:62:EA:E9:9B:DE:F7:76:21:C3:EC:2B:37:AB:33:E4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 68616BF431F945BFA11EDFF3B5223F9104137ABA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136100.roa Signing time: Sat 02 May 2026 21:22:40 +0000 ROA not before: Sat 02 May 2026 21:17:40 +0000 ROA not after: Sat 01 May 2027 21:22:40 +0000 asID: 136100 IP address blocks: 103.89.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:61:6b:f4:31:f9:45:bf:a1:1e:df:f3:b5:22:3f:91:04:13:7a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:17:40 2026 GMT Not After : May 1 21:22:40 2027 GMT Subject: CN=91B9D2AE6462EAE99BDEF77621C3EC2B37AB33E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:73:c6:ff:bb:4c:fe:1c:3f:ae:8a:6e:00: 95:02:5e:ed:5a:3c:2f:cf:45:cb:09:5b:3b:dc:36: be:4a:2c:f7:1e:a1:78:f1:4c:88:e1:f8:e1:de:2d: e6:79:33:2b:ee:e9:b5:45:2a:cb:35:f5:9e:10:5c: e1:ac:97:77:95:90:21:0b:35:2f:12:28:ba:45:c1: 91:2e:43:89:9d:f2:ed:8b:e9:b2:64:b8:ff:05:53: ad:d0:de:ee:3b:8b:72:25:9b:83:08:a6:b0:65:39: 57:d5:80:b6:bd:bf:74:a2:5b:de:e7:fd:8b:4f:b9: f1:20:70:6c:1c:4a:f6:83:c4:36:b2:be:8b:72:cf: 9d:41:4c:92:f4:16:53:20:66:e6:64:bb:72:a7:d0: a7:8f:76:13:55:40:0e:84:2f:61:24:ea:a0:33:17: a3:32:13:c4:ae:cd:eb:d1:66:28:ca:e5:f3:b7:68: b9:83:b4:31:c4:a0:c1:b1:54:b7:4f:c1:5c:a1:5f: 5d:bc:88:b6:b2:2a:7b:02:cc:a8:33:d6:28:3b:cb: 6c:b6:66:4c:ed:f0:7d:fe:02:16:3a:96:33:a1:d1: 62:96:22:eb:4d:0c:04:b3:83:15:68:a2:33:64:71: f4:9b:82:40:14:e9:8d:ed:60:e7:4f:e7:b5:76:f9: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:D2:AE:64:62:EA:E9:9B:DE:F7:76:21:C3:EC:2B:37:AB:33:E4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136100.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:58:37:f9:39:7c:5f:1a:13:12:2b:b6:6e:96:aa:b6:36:3d: db:df:6a:a0:bc:be:03:53:01:21:dc:76:ed:05:9f:fa:62:1d: 15:27:82:27:4c:ea:b8:a6:0e:8c:e7:cd:bf:24:b0:bd:d3:b4: 3a:bb:44:46:54:77:e7:83:df:e8:03:bb:61:bf:7d:e4:06:fd: 65:7c:e1:e1:d7:f0:b6:25:7f:74:f2:41:a7:d9:8b:90:d5:3e: ea:e5:d0:6c:e5:b9:42:8b:8a:75:19:f6:50:3d:87:10:60:85: 63:b8:47:4e:16:27:c3:a3:48:3a:6c:00:ec:bd:1a:ee:63:2c: da:5e:f8:bf:5b:ee:4f:3b:83:ee:33:c6:15:61:75:11:ac:55: 8b:89:bb:67:c5:84:53:34:2e:1b:a8:db:61:73:33:e4:44:83: d4:8d:f4:c3:cc:e6:22:cf:60:23:42:eb:14:6d:6a:77:8b:2e: 34:1a:ca:c7:50:bd:4d:fb:48:4a:d8:34:18:3a:25:83:c3:22: 60:29:4c:5b:4c:6f:ea:9f:83:1c:8e:28:7c:7d:75:1b:eb:f4: 7d:fd:84:39:87:99:28:78:e3:fc:97:8f:2f:b3:64:c4:93:4d: 04:a7:95:a0:91:54:62:a8:99:31:7f:f4:19:02:19:94:e0:23: 11:5d:69:6e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUaGFr9DH5Rb+hHt/ztSI/kQQTerowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTc0MFoX DTI3MDUwMTIxMjI0MFowMzExMC8GA1UEAxMoOTFCOUQyQUU2NDYyRUFFOTlCREVG Nzc2MjFDM0VDMkIzN0FCMzNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhIc8b/u0z+HD+uim4AlQJe7Vo8L89FywlbO9w2vkos9x6hePFMiOH44d4t 5nkzK+7ptUUqyzX1nhBc4ayXd5WQIQs1LxIoukXBkS5DiZ3y7YvpsmS4/wVTrdDe 7juLciWbgwimsGU5V9WAtr2/dKJb3uf9i0+58SBwbBxK9oPENrK+i3LPnUFMkvQW UyBm5mS7cqfQp492E1VADoQvYSTqoDMXozITxK7N69FmKMrl87douYO0McSgwbFU t0/BXKFfXbyItrIqewLMqDPWKDvLbLZmTO3wff4CFjqWM6HRYpYi600MBLODFWii M2Rx9JuCQBTpje1g50/ntXb56GECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSRudKu ZGLq6Zve93Yhw+wrN6sz5DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MTAwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ1mgMA0GCSqGSIb3DQEBCwUAA4IBAQAfWDf5OXxfGhMSK7Zulqq2Nj3b 32qgvL4DUwEh3HbtBZ/6Yh0VJ4InTOq4pg6M582/JLC907Q6u0RGVHfng9/oA7th v33kBv1lfOHh1/C2JX908kGn2YuQ1T7q5dBs5blCi4p1GfZQPYcQYIVjuEdOFifD o0g6bADsvRruYyzaXvi/W+5PO4PuM8YVYXURrFWLibtnxYRTNC4bqNthczPkRIPU jfTDzOYiz2AjQusUbWp3iy40GsrHUL1N+0hK2DQYOiWDwyJgKUxbTG/qn4Mcjih8 fXUb6/R9/YQ5h5koeOP8l48vs2TEk00Ep5WgkVRiqJkxf/QZAhmU4CMRXWlu -----END CERTIFICATE-----Generated at Sun May 3 01:40:39 2026 by rpki-client