$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137311.roa File: AS137311.roa (raw, json) Hash identifier: UOgMZjt1eAVXnDOEkXbuzT/IscJS/8pcD1kgEqWAYts= Subject key identifier: 9D:93:B9:50:D1:54:3E:11:E4:C4:60:79:3E:C8:1C:C5:76:91:3E:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A109ADEBF42B10ED321B4D839141FA9438F3192 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137311.roa Signing time: Sat 02 May 2026 21:16:24 +0000 ROA not before: Sat 02 May 2026 21:11:24 +0000 ROA not after: Sat 01 May 2027 21:16:24 +0000 asID: 137311 IP address blocks: 103.232.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:10:9a:de:bf:42:b1:0e:d3:21:b4:d8:39:14:1f:a9:43:8f:31:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:11:24 2026 GMT Not After : May 1 21:16:24 2027 GMT Subject: CN=9D93B950D1543E11E4C460793EC81CC576913E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:92:cc:e6:c5:2f:2d:e0:7d:25:42:72:76: 51:a4:5c:7f:a4:0d:e7:82:0b:0c:32:b9:f8:bb:57: 15:58:1f:eb:83:11:59:e4:a4:a8:87:25:b5:87:63: c5:56:df:12:e6:34:f3:62:df:4c:22:f9:0a:15:83: 12:80:6f:3e:32:f2:30:62:69:6b:c9:e4:e8:a4:4c: f5:5d:6c:f4:33:74:07:89:af:1f:48:d6:35:df:fe: cc:74:f5:6e:6c:fa:a6:d4:af:83:48:77:9e:c9:de: 54:50:75:46:a9:9c:00:d9:84:e3:bd:24:e3:34:ca: 96:b6:e5:e4:02:d9:db:50:4d:55:56:e2:36:00:cb: b5:94:2b:7f:cf:a3:ad:11:6b:3f:32:05:18:ee:0d: b4:2a:b6:be:27:8c:34:ec:cc:b3:1c:5d:66:b1:87: 68:2e:a1:b1:2c:36:89:ca:df:8f:c5:87:54:89:0b: c6:44:49:e3:9e:54:22:f4:72:59:56:f8:3d:f7:74: 73:13:03:f8:64:c7:02:f6:f7:5b:e0:2f:17:7a:5d: fc:77:68:ab:d4:f5:be:b9:9c:99:c2:33:fc:b1:e9: eb:40:e8:30:89:9d:e4:37:93:b6:29:01:22:01:93: 76:3f:47:6e:c9:24:83:4d:09:86:3a:2f:dd:e8:a8: b9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:93:B9:50:D1:54:3E:11:E4:C4:60:79:3E:C8:1C:C5:76:91:3E:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.64.0/22 Signature Algorithm: sha256WithRSAEncryption 96:e2:35:d3:e0:e1:8a:ce:f1:f2:80:88:fb:ed:e7:72:08:8d: 1f:ca:9c:23:09:ec:31:23:2e:5d:60:50:d7:86:9d:31:3a:41: 34:0a:76:5e:66:14:c9:e5:7b:89:77:e8:7b:b9:cf:64:48:22: db:26:29:ce:ba:eb:11:41:fc:b0:82:8e:7b:00:b8:51:8d:7e: 81:b5:7c:18:8b:5b:3f:76:7d:de:7f:7d:c1:1f:13:3d:49:da: 38:f9:b0:36:8b:94:13:ad:ce:4c:6e:5e:fe:03:c4:fe:2f:3c: ba:92:ac:22:60:34:28:31:7c:09:fa:d2:e9:79:9a:76:a2:c4: a5:a2:5e:4a:8e:30:16:57:a0:fb:e3:94:2a:18:22:be:71:5b: a0:36:9d:96:af:ee:f6:7b:18:9d:e2:e5:b2:d5:b2:65:c8:bd: aa:53:53:fd:b9:0e:cc:6e:6c:38:38:e6:a4:68:9b:0a:8c:7a: 47:ce:9b:2d:c0:d5:f7:a0:95:d9:0f:77:56:93:e5:91:6e:e0: d8:b1:9d:db:54:2f:23:b4:82:40:17:51:b0:af:71:72:61:fc: 7b:1c:94:b7:99:fa:c7:25:eb:ed:60:dd:49:34:41:1a:c2:c0: 4f:88:51:a5:3d:5d:d4:2d:13:8e:cc:ac:8e:ca:47:ea:2f:02: 65:69:d2:6f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUChCa3r9CsQ7TIbTYORQfqUOPMZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTEyNFoX DTI3MDUwMTIxMTYyNFowMzExMC8GA1UEAxMoOUQ5M0I5NTBEMTU0M0UxMUU0QzQ2 MDc5M0VDODFDQzU3NjkxM0U2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS/kszmxS8t4H0lQnJ2UaRcf6QN54ILDDK5+LtXFVgf64MRWeSkqIcltYdj xVbfEuY082LfTCL5ChWDEoBvPjLyMGJpa8nk6KRM9V1s9DN0B4mvH0jWNd/+zHT1 bmz6ptSvg0h3nsneVFB1RqmcANmE470k4zTKlrbl5ALZ21BNVVbiNgDLtZQrf8+j rRFrPzIFGO4NtCq2vieMNOzMsxxdZrGHaC6hsSw2icrfj8WHVIkLxkRJ455UIvRy WVb4Pfd0cxMD+GTHAvb3W+AvF3pd/Hdoq9T1vrmcmcIz/LHp60DoMImd5DeTtikB IgGTdj9Hbskkg00Jhjov3eioueUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSdk7lQ 0VQ+EeTEYHk+yBzFdpE+bTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ+hAMA0GCSqGSIb3DQEBCwUAA4IBAQCW4jXT4OGKzvHygIj77edyCI0f ypwjCewxIy5dYFDXhp0xOkE0CnZeZhTJ5XuJd+h7uc9kSCLbJinOuusRQfywgo57 ALhRjX6BtXwYi1s/dn3ef33BHxM9Sdo4+bA2i5QTrc5Mbl7+A8T+Lzy6kqwiYDQo MXwJ+tLpeZp2osSlol5KjjAWV6D745QqGCK+cVugNp2Wr+72exid4uWy1bJlyL2q U1P9uQ7Mbmw4OOakaJsKjHpHzpstwNX3oJXZD3dWk+WRbuDYsZ3bVC8jtIJAF1Gw r3FyYfx7HJS3mfrHJevtYN1JNEEawsBPiFGlPV3ULROOzKyOykfqLwJladJv -----END CERTIFICATE-----Generated at Sun May 3 00:41:46 2026 by rpki-client