$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136877.roa File: AS136877.roa (raw, json) Hash identifier: h9Bz/YRd8Tpe46hbwD20hlrP5KyKKIQke4qlm7Fcn2E= Subject key identifier: E7:DD:CB:13:16:FA:50:13:24:04:41:82:63:D3:48:8E:E3:EF:93:7A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 073A552A369F3DFF5970E52A8EFB29C843D74F5A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136877.roa Signing time: Sat 02 May 2026 08:36:03 +0000 ROA not before: Sat 02 May 2026 08:31:03 +0000 ROA not after: Sat 01 May 2027 08:36:03 +0000 asID: 136877 IP address blocks: 103.106.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3a:55:2a:36:9f:3d:ff:59:70:e5:2a:8e:fb:29:c8:43:d7:4f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:03 2026 GMT Not After : May 1 08:36:03 2027 GMT Subject: CN=E7DDCB1316FA50132404418263D3488EE3EF937A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:ea:1b:06:f2:03:25:a7:81:68:68:aa:1c: 7b:da:53:77:dd:7f:b4:1b:51:13:38:cf:6d:9a:c5: 48:6d:ee:e4:90:6d:b5:e9:c3:9b:0b:b9:b4:7a:b5: de:cf:b7:2f:6f:b6:de:33:da:f8:f5:77:ee:5b:14: 14:1b:28:15:83:ab:cf:18:a3:c6:06:6c:f9:57:6e: c3:9b:99:72:d7:87:7b:ef:df:5f:e3:b3:cd:3b:15: 2e:24:16:61:8e:3c:56:ba:3d:95:56:d7:5b:45:fe: 58:b6:a9:ac:4c:05:e0:bf:16:0d:1e:be:10:29:ef: 75:80:40:f9:ed:54:91:4f:2c:f6:3c:47:5e:fc:4b: 42:55:7a:b3:a5:f4:a9:49:0b:b9:cc:16:b9:88:6e: 9b:b1:1b:b2:6f:77:36:76:52:4b:b5:89:03:ce:87: ec:de:69:50:59:41:0a:d8:ce:88:55:4b:64:27:8f: 6c:f8:60:00:27:a3:55:64:cb:d7:a2:6c:b0:a1:7c: e5:80:0a:1e:81:76:3b:0c:9d:ce:3e:40:5f:67:b2: e0:8a:02:77:53:86:44:42:04:01:75:07:56:dc:61: 94:79:5f:18:55:84:66:8e:98:a3:e2:04:bd:58:c0: 88:57:bb:20:08:60:16:ec:09:c4:70:82:0b:88:30: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DD:CB:13:16:FA:50:13:24:04:41:82:63:D3:48:8E:E3:EF:93:7A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.80.0/22 Signature Algorithm: sha256WithRSAEncryption 53:61:60:d3:85:29:d1:7e:5b:8c:6a:6e:13:5c:29:14:d8:6a: 1f:f5:4d:47:ac:a4:6b:ca:32:8b:1a:26:02:d2:fd:a5:43:58: 9c:57:48:4a:f0:8b:2c:2a:23:43:4d:ed:f2:1c:6c:97:55:50: 50:b9:ef:c8:ed:24:c2:00:eb:72:d5:b6:6e:80:c1:22:1d:34: 48:26:ef:4c:56:1a:9c:ab:fc:7b:3d:64:fc:ed:88:43:06:3e: e1:77:7c:af:35:38:3a:c1:30:0a:6d:f0:e9:c1:38:f6:04:17: 08:0b:3e:e5:e9:17:d3:5b:e0:0b:4c:4e:95:7e:d3:1b:b7:22: 56:ff:66:1c:9c:93:93:5b:9f:25:48:ba:ab:4c:b6:3f:2b:3b: 42:e4:8a:f1:51:3e:d8:0b:fd:8e:41:1a:37:01:a9:59:68:1b: 55:17:a3:28:d7:98:ed:1b:ba:d7:b3:a6:e4:fe:d8:13:68:63: e7:da:e0:2f:86:9d:6e:a3:b6:21:c8:9b:40:70:3a:55:56:82: 84:01:06:51:94:54:5c:b4:69:62:13:11:e7:4f:82:98:68:6d: fe:ae:ac:53:57:91:3c:4a:67:ee:2f:aa:76:81:54:af:88:e1: 05:19:22:86:a4:64:ac:2d:11:28:52:0e:7f:a7:cf:29:2a:f1: 71:0a:6d:28 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBzpVKjafPf9ZcOUqjvspyEPXT1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzEwM1oX DTI3MDUwMTA4MzYwM1owMzExMC8GA1UEAxMoRTdERENCMTMxNkZBNTAxMzI0MDQ0 MTgyNjNEMzQ4OEVFM0VGOTM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKC16hsG8gMlp4FoaKoce9pTd91/tBtREzjPbZrFSG3u5JBttenDmwu5tHq1 3s+3L2+23jPa+PV37lsUFBsoFYOrzxijxgZs+Vduw5uZcteHe+/fX+OzzTsVLiQW YY48Vro9lVbXW0X+WLaprEwF4L8WDR6+ECnvdYBA+e1UkU8s9jxHXvxLQlV6s6X0 qUkLucwWuYhum7Ebsm93NnZSS7WJA86H7N5pUFlBCtjOiFVLZCePbPhgACejVWTL 16JssKF85YAKHoF2Owydzj5AX2ey4IoCd1OGREIEAXUHVtxhlHlfGFWEZo6Yo+IE vVjAiFe7IAhgFuwJxHCCC4gwngMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTn3csT FvpQEyQEQYJj00iO4++TejAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2ODc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ2pQMA0GCSqGSIb3DQEBCwUAA4IBAQBTYWDThSnRfluMam4TXCkU2Gof 9U1HrKRryjKLGiYC0v2lQ1icV0hK8IssKiNDTe3yHGyXVVBQue/I7STCAOty1bZu gMEiHTRIJu9MVhqcq/x7PWT87YhDBj7hd3yvNTg6wTAKbfDpwTj2BBcICz7l6RfT W+ALTE6VftMbtyJW/2YcnJOTW58lSLqrTLY/KztC5IrxUT7YC/2OQRo3AalZaBtV F6Mo15jtG7rXs6bk/tgTaGPn2uAvhp1uo7YhyJtAcDpVVoKEAQZRlFRctGliExHn T4KYaG3+rqxTV5E8SmfuL6p2gVSviOEFGSKGpGSsLREoUg5/p88pKvFxCm0o -----END CERTIFICATE-----Generated at Sun May 3 00:40:36 2026 by rpki-client