$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137315.roa File: AS137315.roa (raw, json) Hash identifier: bZf6Fmo/Q0vz6kXU9kU03SqlwaQz0UROfVIdzfUTmrk= Subject key identifier: 65:4A:F5:2E:75:68:F5:46:C4:4A:C5:E6:14:91:91:C6:E6:B4:E7:EE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 46FE63286D4667A2B0EBE52602FD5117CD992F4C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137315.roa Signing time: Sat 02 May 2026 09:19:59 +0000 ROA not before: Sat 02 May 2026 09:14:59 +0000 ROA not after: Sat 01 May 2027 09:19:59 +0000 asID: 137315 IP address blocks: 103.164.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fe:63:28:6d:46:67:a2:b0:eb:e5:26:02:fd:51:17:cd:99:2f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:59 2026 GMT Not After : May 1 09:19:59 2027 GMT Subject: CN=654AF52E7568F546C44AC5E6149191C6E6B4E7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:9a:de:7d:c3:51:a5:10:b3:ac:4b:51:99: fa:27:47:a6:6b:51:cd:c9:f8:43:43:46:db:73:61: 45:36:94:e3:a4:6f:23:6b:03:45:88:07:42:88:6a: ba:80:9e:17:a1:3e:6c:46:45:ef:25:8b:47:45:ca: e0:c8:c7:72:fa:d8:8c:84:01:e6:31:c6:e4:f5:3a: 87:cc:26:39:88:cc:69:1b:01:bd:28:71:c8:a5:4a: ac:de:41:48:9b:e3:ca:43:63:ab:87:36:3c:36:32: 50:4e:73:9f:c7:eb:fa:99:43:07:dc:d2:3d:1d:6f: d8:01:d5:47:3f:7e:be:9c:d5:5b:17:a8:0f:e2:ca: cc:3b:a8:ca:48:3d:79:05:4e:02:63:8d:3d:df:e1: c4:99:85:9c:03:74:55:ea:9a:7d:bb:12:09:13:2e: d0:ae:d9:70:3f:6a:2a:e3:e9:fe:87:b7:97:ec:fa: cb:7c:21:7f:f2:2e:af:eb:6d:d8:19:d2:f1:f7:7f: aa:8b:d6:5d:f8:2e:9c:ce:b2:23:0d:c5:17:1d:db: d8:91:37:f7:05:1c:98:71:ea:f4:0f:94:11:fa:86: cb:eb:7d:5c:f4:2b:30:b4:cd:a6:c8:90:c5:a3:a1: 53:15:09:0d:7f:29:1c:ea:16:db:44:74:d3:3d:24: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4A:F5:2E:75:68:F5:46:C4:4A:C5:E6:14:91:91:C6:E6:B4:E7:EE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:3d:65:b6:c5:e7:2c:34:73:79:56:1a:52:59:71:38:59:ad: 3f:a1:2f:c4:5d:7b:5f:ac:c6:8f:9f:e3:90:69:d8:63:6c:2c: 73:fb:43:6a:45:67:1e:a3:b3:86:30:4f:04:47:8a:df:b5:4d: 68:8f:ef:f4:2d:fc:4c:c5:a3:79:62:87:c0:2e:10:67:01:93: fe:ec:14:de:94:5d:28:db:7c:f8:51:e2:54:ba:be:15:ab:98: 36:2b:8d:3a:f7:4c:93:89:7d:a9:6d:a3:79:c0:34:5f:1b:2f: 58:1e:ae:02:ac:cc:d3:75:cd:a8:d9:4a:b1:b4:3b:52:d3:63: 7b:25:59:f2:1b:d8:91:e8:e5:10:66:9b:6a:1b:52:b7:16:e0: 9e:59:ef:12:75:e7:c4:24:1a:f7:bf:fb:d8:ab:bd:16:f9:12: 5e:0e:ea:05:60:5d:5a:97:68:73:d7:6c:46:3e:07:9a:ce:9f: a5:fe:f3:55:95:3f:76:cc:8e:d1:c6:2e:a5:96:7b:e9:4f:71: d5:00:fe:51:f2:86:d1:4f:3a:ce:26:d8:55:88:85:df:81:a4: 91:4b:e1:4d:ed:69:cd:2f:38:54:db:30:ad:4f:7c:85:35:14: 50:8d:0c:25:74:b9:6a:fb:48:d8:fb:54:c2:77:2d:12:e3:f4: 5f:79:ac:50 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURv5jKG1GZ6Kw6+UmAv1RF82ZL0wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1OVoX DTI3MDUwMTA5MTk1OVowMzExMC8GA1UEAxMoNjU0QUY1MkU3NTY4RjU0NkM0NEFD NUU2MTQ5MTkxQzZFNkI0RTdFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4tmt59w1GlELOsS1GZ+idHpmtRzcn4Q0NG23NhRTaU46RvI2sDRYgHQohq uoCeF6E+bEZF7yWLR0XK4MjHcvrYjIQB5jHG5PU6h8wmOYjMaRsBvShxyKVKrN5B SJvjykNjq4c2PDYyUE5zn8fr+plDB9zSPR1v2AHVRz9+vpzVWxeoD+LKzDuoykg9 eQVOAmONPd/hxJmFnAN0VeqafbsSCRMu0K7ZcD9qKuPp/oe3l+z6y3whf/Iur+tt 2BnS8fd/qovWXfgunM6yIw3FFx3b2JE39wUcmHHq9A+UEfqGy+t9XPQrMLTNpsiQ xaOhUxUJDX8pHOoW20R00z0koRECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRlSvUu dWj1RsRKxeYUkZHG5rTn7jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzE1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6Q8MA0GCSqGSIb3DQEBCwUAA4IBAQB9PWW2xecsNHN5VhpSWXE4Wa0/ oS/EXXtfrMaPn+OQadhjbCxz+0NqRWceo7OGME8ER4rftU1oj+/0LfxMxaN5YofA LhBnAZP+7BTelF0o23z4UeJUur4Vq5g2K40690yTiX2pbaN5wDRfGy9YHq4CrMzT dc2o2UqxtDtS02N7JVnyG9iR6OUQZptqG1K3FuCeWe8SdefEJBr3v/vYq70W+RJe DuoFYF1al2hz12xGPgeazp+l/vNVlT92zI7Rxi6llnvpT3HVAP5R8obRTzrOJthV iIXfgaSRS+FN7WnNLzhU2zCtT3yFNRRQjQwldLlq+0jY+1TCdy0S4/RfeaxQ -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client