$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136111.roa File: AS136111.roa (raw, json) Hash identifier: fl9qkGmwDcJ4DABHtFxObL5Tv15LJWpSm0s4zmw8/4w= Subject key identifier: DA:76:EE:AA:D8:C8:17:80:78:30:5C:B3:FB:D1:15:DF:AF:C1:53:1C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 298B3EE584EAA8F735EDA90391D2517DD91AFB02 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136111.roa Signing time: Sat 02 May 2026 21:05:10 +0000 ROA not before: Sat 02 May 2026 21:00:10 +0000 ROA not after: Sat 01 May 2027 21:05:10 +0000 asID: 136111 IP address blocks: 103.94.212.0/24 maxlen: 24 103.138.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8b:3e:e5:84:ea:a8:f7:35:ed:a9:03:91:d2:51:7d:d9:1a:fb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:10 2026 GMT Not After : May 1 21:05:10 2027 GMT Subject: CN=DA76EEAAD8C8178078305CB3FBD115DFAFC1531C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:0e:76:11:0c:1f:46:fa:d7:52:c1:8d:b3: eb:08:84:cf:17:3f:74:cf:1e:78:c5:ce:d0:fa:11: 5f:c4:41:f3:34:25:77:81:7f:c6:1f:7c:82:15:16: df:15:39:60:09:ef:8e:b6:f0:d5:61:dd:8c:52:55: 85:da:66:cf:30:18:13:75:8c:d6:a8:8e:99:c7:5c: f7:bd:ad:32:22:3c:49:45:c0:24:a6:21:d7:a6:22: 87:9a:0d:85:59:a8:0c:69:94:4f:9e:72:69:ad:26: 79:a3:18:1d:5e:93:8d:d2:07:f2:50:d9:89:cc:ec: 05:f4:ff:10:ae:71:20:40:ef:cb:b6:ff:ce:13:ef: 1a:72:a6:bb:0b:46:5d:4a:49:26:6b:87:f5:33:30: 56:f4:bb:1b:55:d7:76:10:a8:06:85:98:51:40:0a: f8:5a:18:82:0e:39:53:2d:72:b9:1b:d2:ae:94:23: 32:76:ad:22:d0:9b:1d:a3:76:7a:25:31:8b:a9:30: 0d:23:d4:58:14:54:5e:14:24:f5:75:f0:e3:82:da: 80:86:8a:91:0f:ec:cd:04:da:5e:3e:06:a0:12:dd: e2:d9:db:53:1c:a2:c0:86:2f:4f:b2:b4:77:56:aa: e4:6f:78:e4:a4:49:7d:4c:75:83:11:8f:2e:33:6d: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:76:EE:AA:D8:C8:17:80:78:30:5C:B3:FB:D1:15:DF:AF:C1:53:1C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.212.0/24 103.138.58.0/23 Signature Algorithm: sha256WithRSAEncryption 45:07:63:3f:86:15:9f:2e:ab:66:c7:4a:5f:7f:8f:04:cb:18: 0e:cd:f7:f3:0e:c8:ee:6e:d2:79:b9:d9:fc:73:9f:b9:08:f6: 28:ad:24:c1:7e:42:48:fe:37:e3:ba:f6:5d:15:52:b2:d4:16: 30:c7:1d:c2:55:b0:66:81:0b:8e:5c:c7:64:22:db:f4:8f:1b: 28:8c:4d:e1:2f:c0:ae:08:0a:97:9a:ae:74:0e:b5:49:29:b2: 50:84:f6:a1:16:14:f1:f1:9e:af:f7:12:78:16:9d:93:13:05: 70:1e:6f:f1:c1:01:ab:e5:7a:65:e1:92:96:ad:9e:3c:0d:7e: 35:23:ab:fd:56:12:cb:72:42:83:27:54:0b:6b:26:a5:e9:17: 3e:4e:d8:c8:07:db:65:b5:59:58:e7:76:b1:74:e1:2b:b3:3f: 30:c4:bf:83:91:6b:ff:72:49:03:49:3d:3a:56:f0:e6:64:d2: e3:29:1c:97:2d:09:03:f3:79:fc:6e:07:82:a9:6e:d3:0f:e0: 3f:ff:58:67:e7:bf:53:38:74:4a:04:33:f0:d9:79:44:b7:13: d2:60:ac:35:f4:0a:87:ab:0d:c8:49:56:30:2d:e2:6e:0f:c2: 98:55:2f:41:21:0e:51:85:a0:eb:a2:4e:63:31:8a:43:12:5f: 95:8f:6d:6a -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUKYs+5YTqqPc17akDkdJRfdka+wIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDAxMFoX DTI3MDUwMTIxMDUxMFowMzExMC8GA1UEAxMoREE3NkVFQUFEOEM4MTc4MDc4MzA1 Q0IzRkJEMTE1REZBRkMxNTMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJNDnYRDB9G+tdSwY2z6wiEzxc/dM8eeMXO0PoRX8RB8zQld4F/xh98ghUW 3xU5YAnvjrbw1WHdjFJVhdpmzzAYE3WM1qiOmcdc972tMiI8SUXAJKYh16Yih5oN hVmoDGmUT55yaa0meaMYHV6TjdIH8lDZiczsBfT/EK5xIEDvy7b/zhPvGnKmuwtG XUpJJmuH9TMwVvS7G1XXdhCoBoWYUUAK+FoYgg45Uy1yuRvSrpQjMnatItCbHaN2 eiUxi6kwDSPUWBRUXhQk9XXw44LagIaKkQ/szQTaXj4GoBLd4tnbUxyiwIYvT7K0 d1aq5G945KRJfUx1gxGPLjNty8kCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTadu6q 2MgXgHgwXLP70RXfr8FTHDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MTExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ17UAwQBZ4o6MA0GCSqGSIb3DQEBCwUAA4IBAQBFB2M/hhWfLqtmx0pf f48EyxgOzffzDsjubtJ5udn8c5+5CPYorSTBfkJI/jfjuvZdFVKy1BYwxx3CVbBm gQuOXMdkItv0jxsojE3hL8CuCAqXmq50DrVJKbJQhPahFhTx8Z6v9xJ4Fp2TEwVw Hm/xwQGr5Xpl4ZKWrZ48DX41I6v9VhLLckKDJ1QLayal6Rc+TtjIB9tltVlY53ax dOErsz8wxL+DkWv/ckkDST06VvDmZNLjKRyXLQkD83n8bgeCqW7TD+A//1hn579T OHRKBDPw2XlEtxPSYKw19AqHqw3ISVYwLeJuD8KYVS9BIQ5RhaDrok5jMYpDEl+V j21q -----END CERTIFICATE-----Generated at Sun May 3 00:39:52 2026 by rpki-client