$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136123.roa File: AS136123.roa (raw, json) Hash identifier: pRW1+rLDDF9iJeN3wFjhjtCu83IrriUyeB6ybVmb0NY= Subject key identifier: C1:A0:89:9A:88:BB:B3:92:BE:08:42:9D:27:C2:F4:F8:8A:CE:CB:C4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 19135D265A135F09A8BDE52BC59B0F9F68248093 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136123.roa Signing time: Sat 02 May 2026 09:22:18 +0000 ROA not before: Sat 02 May 2026 09:17:18 +0000 ROA not after: Sat 01 May 2027 09:22:18 +0000 asID: 136123 IP address blocks: 103.95.162.0/24 maxlen: 24 103.98.61.0/24 maxlen: 24 2001:df1:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:13:5d:26:5a:13:5f:09:a8:bd:e5:2b:c5:9b:0f:9f:68:24:80:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:18 2026 GMT Not After : May 1 09:22:18 2027 GMT Subject: CN=C1A0899A88BBB392BE08429D27C2F4F88ACECBC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:f3:70:08:ca:bc:44:f0:53:4a:9c:ed:cd: 8a:bd:a7:c2:28:d1:a0:1c:24:18:2d:db:e1:42:fc: c4:6c:7a:16:b7:eb:71:e9:88:b7:be:90:ae:32:28: 49:c6:05:5a:98:08:04:c2:ea:64:6a:ed:37:06:6b: 90:a3:e5:c9:1c:f8:db:c3:9e:3c:82:dc:1b:c0:37: 8c:55:ce:29:9d:b7:75:20:0c:62:cf:f4:c3:15:a5: 49:fb:84:fb:72:01:ea:79:7b:08:26:9f:2c:fc:f4: 76:eb:ff:88:fb:ee:49:14:3d:ca:47:fa:c6:f6:66: da:0d:4b:a0:ba:88:8b:05:9e:37:70:4d:97:15:e7: 83:93:5b:38:01:47:77:1b:97:88:53:26:bf:c2:9b: 02:c4:e0:ee:01:43:92:fb:c5:d4:13:56:25:d7:7c: 8e:3b:77:7f:e2:6c:f1:88:c1:e0:53:c6:83:a3:92: 38:12:5a:64:fc:d1:de:e5:15:f5:45:e6:6e:d0:55: 56:23:9e:a2:89:08:ce:a9:e1:52:f2:56:df:d6:08: fd:6f:3e:97:6e:1d:98:f8:b0:ef:41:3b:4f:3f:64: c4:f1:2a:7e:38:d8:35:94:69:6e:16:4c:81:3b:a2: a4:28:d4:1d:5d:8b:64:12:4c:e9:33:57:03:13:ab: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A0:89:9A:88:BB:B3:92:BE:08:42:9D:27:C2:F4:F8:8A:CE:CB:C4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.162.0/24 103.98.61.0/24 IPv6: 2001:df1:b300::/48 Signature Algorithm: sha256WithRSAEncryption 71:19:59:2d:a4:03:ea:bb:3a:24:49:9c:b1:4a:01:82:d2:c4: 57:08:02:72:41:34:f6:d3:c5:31:16:49:b5:ae:fd:cb:b0:85: f0:56:19:3d:65:d1:c6:7d:b4:f9:e2:ce:4c:64:28:0a:00:32: b9:4a:0d:84:ea:de:4c:84:50:8a:bb:2e:a4:f8:f1:9f:68:84: 5d:99:d6:4c:04:84:a7:b4:b8:61:d8:59:a6:49:4e:80:6a:d4: 94:51:1d:01:d6:bb:71:9b:19:52:75:82:a4:eb:f2:0e:8d:66: f9:cd:86:7a:5f:6c:bf:f6:31:10:20:cc:79:72:4f:8c:ba:02: 0d:e8:ae:3b:96:85:d2:3d:8a:3d:a0:0c:68:71:86:52:e7:19: 49:fb:fd:17:29:30:17:36:e2:af:84:cf:35:b6:a5:fe:6d:bb: 7d:5c:c7:ff:df:16:54:9b:b8:2e:c9:26:32:ce:30:0a:8d:38: b0:5e:45:9d:68:54:7e:08:e5:98:6b:2d:e6:82:8b:ec:c5:05: 63:e1:39:ae:67:a6:e1:2e:e9:5f:6c:03:44:15:66:59:7e:b3: 0f:bb:86:70:77:3a:5d:23:d5:b7:6e:b1:0d:10:60:09:47:a4: 8a:52:73:26:69:e3:c3:58:8c:e6:57:8b:78:75:f7:ff:1a:27: a1:c4:18:37 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUGRNdJloTXwmoveUrxZsPn2gkgJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcxOFoX DTI3MDUwMTA5MjIxOFowMzExMC8GA1UEAxMoQzFBMDg5OUE4OEJCQjM5MkJFMDg0 MjlEMjdDMkY0Rjg4QUNFQ0JDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4083AIyrxE8FNKnO3Nir2nwijRoBwkGC3b4UL8xGx6FrfrcemIt76QrjIo ScYFWpgIBMLqZGrtNwZrkKPlyRz428OePILcG8A3jFXOKZ23dSAMYs/0wxWlSfuE +3IB6nl7CCafLPz0duv/iPvuSRQ9ykf6xvZm2g1LoLqIiwWeN3BNlxXng5NbOAFH dxuXiFMmv8KbAsTg7gFDkvvF1BNWJdd8jjt3f+Js8YjB4FPGg6OSOBJaZPzR3uUV 9UXmbtBVViOeookIzqnhUvJW39YI/W8+l24dmPiw70E7Tz9kxPEqfjjYNZRpbhZM gTuipCjUHV2LZBJM6TNXAxOrpJECAwEAAaOCAeMwggHfMB0GA1UdDgQWBBTBoIma iLuzkr4IQp0nwvT4is7LxDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MTIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQAZ1+iAwQAZ2I9MA8EAgACMAkDBwAgAQ3xswAwDQYJKoZIhvcNAQELBQAD ggEBAHEZWS2kA+q7OiRJnLFKAYLSxFcIAnJBNPbTxTEWSbWu/cuwhfBWGT1l0cZ9 tPnizkxkKAoAMrlKDYTq3kyEUIq7LqT48Z9ohF2Z1kwEhKe0uGHYWaZJToBq1JRR HQHWu3GbGVJ1gqTr8g6NZvnNhnpfbL/2MRAgzHlyT4y6Ag3orjuWhdI9ij2gDGhx hlLnGUn7/RcpMBc24q+EzzW2pf5tu31cx//fFlSbuC7JJjLOMAqNOLBeRZ1oVH4I 5ZhrLeaCi+zFBWPhOa5npuEu6V9sA0QVZll+sw+7hnB3Ol0j1bdusQ0QYAlHpIpS cyZp48NYjOZXi3h19/8aJ6HEGDc= -----END CERTIFICATE-----Generated at Sun May 3 00:40:28 2026 by rpki-client