$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137363.roa File: AS137363.roa (raw, json) Hash identifier: lw3HQeoL6jirHzkw1rOMm0sSvmyvKyjNV5Yd9IEV1mo= Subject key identifier: 26:72:78:66:49:2E:C4:6C:00:1E:F1:B5:CB:7D:3A:05:2E:2E:65:5F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 717B802D247DDA85E303BAC680A47606EAD9D85C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137363.roa Signing time: Sat 02 May 2026 09:27:10 +0000 ROA not before: Sat 02 May 2026 09:22:10 +0000 ROA not after: Sat 01 May 2027 09:27:10 +0000 asID: 137363 IP address blocks: 202.10.52.0/24 maxlen: 24 202.10.53.0/24 maxlen: 24 202.10.54.0/24 maxlen: 24 202.10.55.0/24 maxlen: 24 202.10.56.0/24 maxlen: 24 202.10.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:80:2d:24:7d:da:85:e3:03:ba:c6:80:a4:76:06:ea:d9:d8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:10 2026 GMT Not After : May 1 09:27:10 2027 GMT Subject: CN=26727866492EC46C001EF1B5CB7D3A052E2E655F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:b4:a1:e2:72:6d:6f:61:83:56:ec:eb:3c: 9c:17:29:64:e5:39:26:3d:45:9e:9a:f5:a6:a8:8c: 16:d6:b1:13:e4:e7:cb:77:df:7e:85:4f:6d:d7:b3: e7:59:d2:9d:f8:e5:d4:44:21:21:b7:40:1d:90:51: 02:61:4f:59:d1:a2:7d:75:0e:87:84:a2:0c:59:e0: dc:3c:44:8f:75:b8:59:a9:b5:e5:4b:00:4a:88:9b: 57:b0:02:7c:20:97:53:bd:93:5f:a1:d1:0c:c8:c5: 09:8e:3b:62:ac:6c:20:a0:7f:09:3e:76:cf:7f:3b: eb:53:84:73:1d:fc:c4:de:7a:10:2d:3d:f0:2d:62: d3:0c:7e:97:75:87:72:8c:99:0b:a3:d6:bc:bd:8e: 4d:f7:56:84:b1:0a:c3:43:a0:c6:fe:02:60:49:74: 5b:4f:24:21:ef:69:96:cd:86:0b:09:b5:bb:b4:9f: cd:7d:5e:2a:1a:0d:61:79:15:55:d2:f9:8d:e5:1a: 9c:ae:09:a0:31:64:d1:25:ce:c7:6b:84:72:8a:fe: 1c:93:23:7f:82:86:32:4e:66:68:73:c0:02:31:4b: f2:2d:f5:1b:a5:4d:ff:0a:62:67:41:78:3a:b0:b9: ae:cb:31:0b:63:c0:59:6a:86:af:36:94:0e:ce:6e: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:72:78:66:49:2E:C4:6C:00:1E:F1:B5:CB:7D:3A:05:2E:2E:65:5F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.52.0-202.10.57.255 Signature Algorithm: sha256WithRSAEncryption 21:1e:30:11:a9:ef:0b:af:8a:67:04:49:b2:e9:1e:e2:f0:3c: f4:93:9c:44:b1:5f:47:b2:54:9c:76:12:e7:9f:ac:48:3e:50: 91:b7:91:b8:5b:b1:23:9f:c3:a3:49:7f:12:2d:60:cb:40:05: 28:7f:66:8c:2e:b7:e3:df:f8:f0:92:35:3a:74:70:54:08:2b: ad:53:b5:a4:00:96:d2:e9:fc:30:67:73:54:b7:b8:72:e5:25: d9:83:e9:38:22:3e:86:da:78:8a:e2:b2:8d:bb:61:bf:db:c2: ea:8f:b2:f6:0e:18:c6:76:19:80:55:25:c9:22:c9:95:3d:44: d4:77:af:d5:81:d7:92:bc:a2:4a:18:13:7b:09:46:35:95:93: f2:8a:ed:95:55:c0:d0:13:f1:7f:1e:b4:60:88:df:c8:b4:8a: 45:0a:17:0b:6a:14:0d:ef:14:05:f1:f3:dc:a0:6c:6f:2e:9c: 89:b9:4a:b8:c2:11:97:bb:25:98:94:41:87:a4:d5:4d:ee:19: 21:c4:fa:91:62:63:d0:dd:9e:e4:b4:f0:18:47:97:92:51:61: 85:55:d0:3b:be:33:45:b7:b4:c2:a4:80:6f:6f:08:06:bb:88: 40:a4:f5:fd:98:1c:b4:61:5a:85:9a:6a:81:dd:55:f4:e6:cc: ff:f0:fd:50 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUcXuALSR92oXjA7rGgKR2BurZ2FwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMFoX DTI3MDUwMTA5MjcxMFowMzExMC8GA1UEAxMoMjY3Mjc4NjY0OTJFQzQ2QzAwMUVG MUI1Q0I3RDNBMDUyRTJFNjU1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJRVtKHicm1vYYNW7Os8nBcpZOU5Jj1Fnpr1pqiMFtaxE+Tny3fffoVPbdez 51nSnfjl1EQhIbdAHZBRAmFPWdGifXUOh4SiDFng3DxEj3W4Wam15UsASoibV7AC fCCXU72TX6HRDMjFCY47YqxsIKB/CT52z38761OEcx38xN56EC098C1i0wx+l3WH coyZC6PWvL2OTfdWhLEKw0Ogxv4CYEl0W08kIe9pls2GCwm1u7SfzX1eKhoNYXkV VdL5jeUanK4JoDFk0SXOx2uEcor+HJMjf4KGMk5maHPAAjFL8i31G6VN/wpiZ0F4 OrC5rssxC2PAWWqGrzaUDs5u5IcCAwEAAaOCAdQwggHQMB0GA1UdDgQWBBQmcnhm SS7EbAAe8bXLfToFLi5lXzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA ATAOMAwDBALKCjQDBAHKCjgwDQYJKoZIhvcNAQELBQADggEBACEeMBGp7wuvimcE SbLpHuLwPPSTnESxX0eyVJx2EuefrEg+UJG3kbhbsSOfw6NJfxItYMtABSh/Zowu t+Pf+PCSNTp0cFQIK61TtaQAltLp/DBnc1S3uHLlJdmD6TgiPobaeIriso27Yb/b wuqPsvYOGMZ2GYBVJckiyZU9RNR3r9WB15K8okoYE3sJRjWVk/KK7ZVVwNAT8X8e tGCI38i0ikUKFwtqFA3vFAXx89ygbG8unIm5SrjCEZe7JZiUQYek1U3uGSHE+pFi Y9DdnuS08BhHl5JRYYVV0Du+M0W3tMKkgG9vCAa7iECk9f2YHLRhWoWaaoHdVfTm zP/w/VA= -----END CERTIFICATE-----Generated at Sun May 3 00:42:22 2026 by rpki-client