$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137352.roa File: AS137352.roa (raw, json) Hash identifier: HSDmhCrrgh3vhv3so/CLw3rCePCAN7/8JR24ght4xj0= Subject key identifier: 46:54:78:84:42:DE:64:4F:17:10:B9:FA:94:A1:61:3D:3B:48:F9:77 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5C7700D36576C0C51C6879AEAC64EFE6D0693994 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137352.roa Signing time: Sat 02 May 2026 09:19:16 +0000 ROA not before: Sat 02 May 2026 09:14:16 +0000 ROA not after: Sat 01 May 2027 09:19:16 +0000 asID: 137352 IP address blocks: 103.113.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:77:00:d3:65:76:c0:c5:1c:68:79:ae:ac:64:ef:e6:d0:69:39:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:16 2026 GMT Not After : May 1 09:19:16 2027 GMT Subject: CN=4654788442DE644F1710B9FA94A1613D3B48F977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:76:d3:94:72:e9:0c:5d:ad:62:78:13:e2: fe:1a:8a:83:52:13:2b:5a:0f:e4:7d:a3:52:0a:87: e0:5c:01:65:0a:a6:9b:d4:9e:15:f7:87:ed:7c:51: 73:b2:70:be:35:e9:9b:c7:12:78:b4:aa:2b:94:d4: 51:8d:05:57:3b:49:99:97:dc:5e:f8:f0:3c:5a:7b: ce:78:4e:d1:aa:b2:b7:a3:fa:f1:ad:ad:e8:13:e7: 82:a1:42:1e:76:f8:f4:07:63:9e:ac:3b:46:4a:f3: f8:11:03:77:bf:3c:b8:f0:e9:61:b6:7d:a6:d5:6d: 3b:20:64:49:54:39:6c:c0:44:04:ff:8f:9b:37:ee: b9:ea:b3:e7:28:35:16:26:7b:1f:15:4b:ac:5a:50: b6:1c:67:7e:e0:2c:a8:e6:0b:dd:3c:8e:45:4e:10: 6a:2e:de:22:b8:ec:a1:75:91:a0:eb:df:86:8d:5a: 2f:7f:81:59:69:b6:10:83:d6:2c:58:a7:16:40:9d: 67:82:19:d7:e4:56:9d:60:9f:f8:d2:59:50:f7:8c: 20:63:cf:94:0b:2f:0a:3d:3d:0a:46:0b:b2:2f:e6: ae:11:13:f7:ff:ba:62:3c:63:77:28:5b:53:51:9f: 6a:19:fb:5e:ad:57:8f:87:61:b0:c4:e6:c1:04:f9: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:54:78:84:42:DE:64:4F:17:10:B9:FA:94:A1:61:3D:3B:48:F9:77 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.170.0/23 Signature Algorithm: sha256WithRSAEncryption 03:32:e6:43:a1:60:1b:76:9c:c5:f4:5e:b9:67:e3:01:b3:04: 84:7c:e4:09:57:82:c7:18:1d:ec:02:07:fb:5e:e0:cc:7c:49: 4c:c2:be:9d:66:6e:fb:93:1c:ee:a5:27:9f:0a:47:89:18:e8: c6:de:8f:77:1e:e5:65:62:02:2a:cb:0f:ed:8e:7c:41:6e:e2: 33:e8:e4:f0:aa:2d:d1:a8:b8:5c:a0:6e:68:30:99:e9:ee:2d: 92:ce:33:f0:58:96:6a:30:b1:5a:de:84:6c:3c:b2:1b:ec:a0: 15:b6:90:96:73:67:f6:8c:30:3c:d4:b3:8c:25:45:f8:f6:f4: 6a:89:08:08:22:26:9d:be:a9:9b:6d:1c:1f:94:ac:f5:0d:2f: a2:d6:5f:46:61:62:11:41:b3:35:1a:2e:84:0f:98:9e:59:9f: 7e:3c:59:30:69:f1:1a:fb:07:44:26:80:1e:47:c8:e8:50:16: e4:4d:e3:c4:de:c0:91:0c:f4:44:98:46:fa:46:36:d8:35:fc: c3:d8:19:c5:17:cf:7f:21:d7:1b:d3:c6:b7:80:7a:75:61:c4: 71:57:bb:5f:17:86:9e:2f:70:3f:e8:ab:97:66:49:26:ac:65: 29:34:ac:c8:20:79:83:9b:59:b4:4b:6c:06:60:93:f5:d9:31: 16:a0:2e:cf -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXHcA02V2wMUcaHmurGTv5tBpOZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQxNloX DTI3MDUwMTA5MTkxNlowMzExMC8GA1UEAxMoNDY1NDc4ODQ0MkRFNjQ0RjE3MTBC OUZBOTRBMTYxM0QzQjQ4Rjk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfEdtOUcukMXa1ieBPi/hqKg1ITK1oP5H2jUgqH4FwBZQqmm9SeFfeH7XxR c7JwvjXpm8cSeLSqK5TUUY0FVztJmZfcXvjwPFp7znhO0aqyt6P68a2t6BPngqFC Hnb49Adjnqw7Rkrz+BEDd788uPDpYbZ9ptVtOyBkSVQ5bMBEBP+Pmzfuueqz5yg1 FiZ7HxVLrFpQthxnfuAsqOYL3TyORU4Qai7eIrjsoXWRoOvfho1aL3+BWWm2EIPW LFinFkCdZ4IZ1+RWnWCf+NJZUPeMIGPPlAsvCj09CkYLsi/mrhET9/+6Yjxjdyhb U1Gfahn7Xq1Xj4dhsMTmwQT53eUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRGVHiE Qt5kTxcQufqUoWE9O0j5dzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ3GqMA0GCSqGSIb3DQEBCwUAA4IBAQADMuZDoWAbdpzF9F65Z+MBswSE fOQJV4LHGB3sAgf7XuDMfElMwr6dZm77kxzupSefCkeJGOjG3o93HuVlYgIqyw/t jnxBbuIz6OTwqi3RqLhcoG5oMJnp7i2SzjPwWJZqMLFa3oRsPLIb7KAVtpCWc2f2 jDA81LOMJUX49vRqiQgIIiadvqmbbRwflKz1DS+i1l9GYWIRQbM1Gi6ED5ieWZ9+ PFkwafEa+wdEJoAeR8joUBbkTePE3sCRDPREmEb6RjbYNfzD2BnFF89/Idcb08a3 gHp1YcRxV7tfF4aeL3A/6KuXZkkmrGUpNKzIIHmDm1m0S2wGYJP12TEWoC7P -----END CERTIFICATE-----Generated at Sun May 3 00:40:24 2026 by rpki-client