$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136835.roa File: AS136835.roa (raw, json) Hash identifier: i6AFf6f8Kl2RE3ASA1AXQrlz9cpYJ8hcg5gSQ7jUbs4= Subject key identifier: 39:01:EB:61:0F:E0:F7:CA:93:D4:9C:8B:4F:71:7F:80:1D:7C:AB:2E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C68E20BC02C5996EE585336B8023F06A3C591C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136835.roa Signing time: Sat 02 May 2026 21:36:17 +0000 ROA not before: Sat 02 May 2026 21:31:17 +0000 ROA not after: Sat 01 May 2027 21:36:17 +0000 asID: 136835 IP address blocks: 2407:24c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:68:e2:0b:c0:2c:59:96:ee:58:53:36:b8:02:3f:06:a3:c5:91:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:17 2026 GMT Not After : May 1 21:36:17 2027 GMT Subject: CN=3901EB610FE0F7CA93D49C8B4F717F801D7CAB2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:99:69:d8:e6:58:a0:f4:cd:b4:68:03:f4:af: 3e:a2:c5:2e:e5:cf:23:78:50:e6:19:4f:c0:34:9f: 74:25:fe:7f:09:ff:1b:06:80:3a:68:54:66:10:b9: f7:52:bb:22:34:3e:16:fc:95:ab:6d:11:24:0c:6a: f8:d0:27:92:02:9e:d1:90:ff:b6:f9:97:e2:24:fa: 8b:7b:7e:2e:87:25:8d:cb:99:96:b3:eb:86:4f:60: 7a:04:22:0e:22:e3:24:fa:11:74:1f:81:38:fe:5c: 83:36:88:fc:4f:9e:8e:1d:c4:d5:60:eb:e5:86:6a: 08:bd:2c:df:d5:f3:58:95:a6:2f:6d:64:dc:3f:2b: cb:01:b0:9e:6e:8d:e8:e5:4e:a3:13:14:dc:2a:c4: 0c:41:8c:1f:ad:ba:76:45:cc:c9:f3:09:8f:9e:1c: 0a:ce:ef:ae:2e:2a:ef:95:e1:e2:6a:c3:f1:03:ca: 4e:27:c5:20:7d:9e:8e:48:f3:f1:4d:fd:cb:6f:29: 07:7a:17:bf:6a:14:87:ab:f2:4c:4a:f8:3c:4c:53: 14:36:54:4b:28:19:35:dc:82:da:b5:7f:53:99:be: 54:a2:ae:36:d5:89:3b:c9:19:46:e5:8c:a0:fd:aa: 2b:b8:7a:d0:97:43:94:c8:f5:26:42:58:8e:0b:41: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:01:EB:61:0F:E0:F7:CA:93:D4:9C:8B:4F:71:7F:80:1D:7C:AB:2E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:24c0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:6d:b3:73:15:44:ab:23:01:9f:f7:a3:7a:fc:e8:5f:7b:6e: 10:96:c4:26:e7:40:51:45:08:c3:80:a1:7b:97:60:9d:30:64: 3c:40:d3:08:82:d8:d3:1d:b7:c9:1e:ad:59:4d:b4:10:68:98: 82:74:eb:de:7c:a7:a4:c1:c6:4f:59:2c:cc:b4:2f:35:8d:73: cb:4d:4c:8e:d6:8d:46:68:c1:cc:bf:71:5c:1f:3e:11:59:ee: 36:7a:98:9e:81:fe:46:39:1d:63:f7:60:54:72:bc:0f:e8:16: 5f:b9:4c:85:d4:69:eb:ed:ce:7d:a5:f1:62:f9:03:87:50:8a: 8f:d4:50:d0:33:9d:99:d6:8b:ce:a1:f3:60:c3:4c:de:af:e1: ea:43:21:fa:4d:93:48:c9:f5:22:b2:ed:f2:64:55:4f:30:f5: dd:46:38:42:a3:a7:41:f4:ee:86:95:50:54:7b:ae:df:58:4a: 09:ac:6f:96:28:e2:55:a4:43:5b:05:79:43:cd:15:ba:70:0e: 7b:1e:90:1e:ea:2e:67:c1:6a:3d:b6:3c:45:67:c4:c9:a4:12: cc:b3:0f:a0:a1:2e:2b:5f:95:f7:08:b9:60:4f:04:bd:8c:07: d8:b0:db:59:87:f9:51:3b:4d:33:7f:6b:49:3d:de:36:e3:4a: bb:91:2b:ba -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUfGjiC8AsWZbuWFM2uAI/BqPFkckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzExN1oX DTI3MDUwMTIxMzYxN1owMzExMC8GA1UEAxMoMzkwMUVCNjEwRkUwRjdDQTkzRDQ5 QzhCNEY3MTdGODAxRDdDQUIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyZadjmWKD0zbRoA/SvPqLFLuXPI3hQ5hlPwDSfdCX+fwn/GwaAOmhUZhC5 91K7IjQ+FvyVq20RJAxq+NAnkgKe0ZD/tvmX4iT6i3t+LocljcuZlrPrhk9gegQi DiLjJPoRdB+BOP5cgzaI/E+ejh3E1WDr5YZqCL0s39XzWJWmL21k3D8rywGwnm6N 6OVOoxMU3CrEDEGMH626dkXMyfMJj54cCs7vri4q75Xh4mrD8QPKTifFIH2ejkjz 8U39y28pB3oXv2oUh6vyTEr4PExTFDZUSygZNdyC2rV/U5m+VKKuNtWJO8kZRuWM oP2qK7h60JdDlMj1JkJYjgtB/eUCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBQ5Aeth D+D3ypPUnItPcX+AHXyrLjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2ODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAckwDANBgkqhkiG9w0BAQsFAAOCAQEATW2zcxVEqyMBn/ejevzoX3tu EJbEJudAUUUIw4Che5dgnTBkPEDTCILY0x23yR6tWU20EGiYgnTr3nynpMHGT1ks zLQvNY1zy01MjtaNRmjBzL9xXB8+EVnuNnqYnoH+RjkdY/dgVHK8D+gWX7lMhdRp 6+3OfaXxYvkDh1CKj9RQ0DOdmdaLzqHzYMNM3q/h6kMh+k2TSMn1IrLt8mRVTzD1 3UY4QqOnQfTuhpVQVHuu31hKCaxvlijiVaRDWwV5Q80VunAOex6QHuouZ8FqPbY8 RWfEyaQSzLMPoKEuK1+V9wi5YE8EvYwH2LDbWYf5UTtNM39rST3eNuNKu5Erug== -----END CERTIFICATE-----Generated at Tue May 5 08:26:08 2026 by rpki-client