$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137291.roa File: AS137291.roa (raw, json) Hash identifier: pNrPjtEZX+GzEu9miZdhgerGpVHSxX61aXywV3uPp8c= Subject key identifier: 91:AA:B7:42:91:40:4D:A2:E2:1E:94:AE:9C:D6:79:46:E7:06:A8:CA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 46AACC1FDBAEB3AE1727822E17FD59724E57D762 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137291.roa Signing time: Sat 02 May 2026 09:19:18 +0000 ROA not before: Sat 02 May 2026 09:14:18 +0000 ROA not after: Sat 01 May 2027 09:19:18 +0000 asID: 137291 IP address blocks: 103.107.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:aa:cc:1f:db:ae:b3:ae:17:27:82:2e:17:fd:59:72:4e:57:d7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:18 2026 GMT Not After : May 1 09:19:18 2027 GMT Subject: CN=91AAB74291404DA2E21E94AE9CD67946E706A8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:95:f8:9d:e6:7b:e9:b4:0d:12:50:20:4a: bd:0d:c7:c3:2a:90:0e:a3:93:1e:f4:8f:c3:61:21: 6b:51:43:32:34:e1:0b:ad:79:b5:10:d5:8e:68:23: 4b:0a:40:17:73:51:c5:64:23:d5:43:d4:91:88:18: f2:06:c1:30:c2:e4:60:5c:bb:75:17:5a:bc:bb:8a: 9f:71:4e:c3:25:e7:d7:b1:12:7c:97:86:7c:98:34: 2e:10:6a:09:c9:53:99:77:d3:2a:ac:6b:14:ab:45: 9d:5e:9e:dd:0f:f9:0d:f0:13:0b:46:be:b8:02:4e: 49:81:53:a5:75:cc:6e:1a:05:2a:f3:b1:53:94:18: 48:e8:dc:43:e7:1c:40:54:df:c0:45:79:04:7b:cd: 90:15:96:ed:b9:75:5b:40:e2:59:23:2b:df:ff:12: a5:b0:5c:33:70:a7:37:55:de:0f:d4:64:97:91:84: 95:35:79:6c:aa:4a:37:d2:79:d3:37:64:e7:29:bb: af:0b:8c:05:a1:7d:2e:50:73:5f:aa:32:d4:22:77: f6:c0:ab:46:cc:40:82:65:2d:1c:65:b3:9e:9b:4b: e4:0b:20:da:fd:22:64:3e:50:49:11:bb:72:28:96: 27:59:1f:39:f6:9f:7c:48:80:92:38:86:ac:1c:7b: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:B7:42:91:40:4D:A2:E2:1E:94:AE:9C:D6:79:46:E7:06:A8:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.116.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:e8:76:e1:fe:b3:0e:7b:44:6c:2e:6c:be:d9:d8:56:f5:ed: 47:f2:e8:f2:3c:29:5f:c7:f9:73:30:90:15:54:6a:17:0e:fc: cb:c2:dc:00:30:83:d3:ca:f8:5e:73:d5:ae:10:63:ba:b1:26: f1:14:a5:a8:da:26:17:4b:2b:de:9e:ab:d9:24:7e:8e:f1:2f: de:99:6e:7b:fc:f5:7e:1a:f8:46:93:9f:86:ab:bd:a0:35:b4: 8f:34:63:5a:b8:38:8f:84:d0:d9:a5:59:45:c3:67:72:8c:ef: 58:6f:25:93:eb:65:20:0e:7c:59:e1:0e:6a:2f:ce:15:c1:1e: 6d:d1:54:5a:f1:0c:37:db:df:b2:82:47:a6:a1:80:c2:2b:49: 40:a2:45:ae:db:8f:e5:83:9b:79:9b:9e:6d:9f:51:a8:94:92: c9:fc:1f:4e:a3:b5:8d:01:6f:f4:1f:9a:41:c2:9a:f2:1b:1c: 47:ba:73:55:95:53:8f:a8:16:03:81:ea:44:e1:13:db:5c:9f: e8:ac:0b:cd:a1:e8:13:36:29:2e:79:9e:bf:8c:3f:80:75:f9: 6d:7d:de:9b:01:4e:65:42:22:8b:fa:28:76:13:03:f2:88:0a: 6a:94:e1:4a:c2:42:75:46:71:db:fe:f8:48:84:f6:9f:f7:b2: 1c:3e:93:1c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURqrMH9uus64XJ4IuF/1Zck5X12IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQxOFoX DTI3MDUwMTA5MTkxOFowMzExMC8GA1UEAxMoOTFBQUI3NDI5MTQwNERBMkUyMUU5 NEFFOUNENjc5NDZFNzA2QThDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4blfid5nvptA0SUCBKvQ3HwyqQDqOTHvSPw2Eha1FDMjThC615tRDVjmgj SwpAF3NRxWQj1UPUkYgY8gbBMMLkYFy7dRdavLuKn3FOwyXn17ESfJeGfJg0LhBq CclTmXfTKqxrFKtFnV6e3Q/5DfATC0a+uAJOSYFTpXXMbhoFKvOxU5QYSOjcQ+cc QFTfwEV5BHvNkBWW7bl1W0DiWSMr3/8SpbBcM3CnN1XeD9Rkl5GElTV5bKpKN9J5 0zdk5ym7rwuMBaF9LlBzX6oy1CJ39sCrRsxAgmUtHGWznptL5Asg2v0iZD5QSRG7 ciiWJ1kfOfaffEiAkjiGrBx7FzkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSRqrdC kUBNouIelK6c1nlG5waoyjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MjkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ2t0MA0GCSqGSIb3DQEBCwUAA4IBAQBK6Hbh/rMOe0RsLmy+2dhW9e1H 8ujyPClfx/lzMJAVVGoXDvzLwtwAMIPTyvhec9WuEGO6sSbxFKWo2iYXSyvenqvZ JH6O8S/emW57/PV+GvhGk5+Gq72gNbSPNGNauDiPhNDZpVlFw2dyjO9YbyWT62Ug DnxZ4Q5qL84VwR5t0VRa8Qw329+ygkemoYDCK0lAokWu24/lg5t5m55tn1GolJLJ /B9Oo7WNAW/0H5pBwpryGxxHunNVlVOPqBYDgepE4RPbXJ/orAvNoegTNikueZ6/ jD+Adfltfd6bAU5lQiKL+ih2EwPyiApqlOFKwkJ1RnHb/vhIhPaf97IcPpMc -----END CERTIFICATE-----Generated at Sun May 3 00:41:17 2026 by rpki-client