$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137366.roa File: AS137366.roa (raw, json) Hash identifier: JBI3Rfe5Cbgt/2CBgS6MsiCAtgUWNBoxsL0VX/U0hhc= Subject key identifier: AB:49:22:C6:53:FD:68:5D:C3:A9:46:4E:0D:D2:AF:46:AF:FE:9F:E9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BB2C70E789B9C59F63CABC9AD6B2A734A70DE5D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137366.roa Signing time: Sat 02 May 2026 09:19:50 +0000 ROA not before: Sat 02 May 2026 09:14:50 +0000 ROA not after: Sat 01 May 2027 09:19:50 +0000 asID: 137366 IP address blocks: 103.12.12.0/23 maxlen: 24 103.16.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b2:c7:0e:78:9b:9c:59:f6:3c:ab:c9:ad:6b:2a:73:4a:70:de:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:50 2026 GMT Not After : May 1 09:19:50 2027 GMT Subject: CN=AB4922C653FD685DC3A9464E0DD2AF46AFFE9FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:33:a0:85:4b:20:50:a4:2e:25:39:b7:5b: 62:ea:78:ba:74:30:8a:5f:89:42:55:02:70:b6:f1: 78:ec:d4:5e:16:fd:17:2d:a8:94:bd:e0:e7:df:04: 5e:42:d4:9b:c0:f0:b9:dd:90:ea:45:cd:82:95:63: 6a:5f:34:6c:37:44:be:9d:ad:40:5d:13:22:bb:b5: e5:dd:ef:f9:ba:6e:27:a9:9c:21:05:72:37:39:ee: d8:f7:c8:86:9e:6f:ee:d1:a1:2e:43:50:8e:46:63: de:2f:7e:e5:d7:24:8d:ea:f3:a1:80:d9:a4:32:60: c0:db:fb:6e:ed:06:b3:46:f2:de:f3:45:6c:5c:86: 7f:86:86:b4:f5:18:b6:bf:4d:a2:6f:cb:0e:33:91: b2:c5:7f:79:26:37:47:73:d7:46:7a:93:9a:38:32: 8e:1b:7a:ad:b7:1b:2d:f3:b6:2e:a8:58:f7:ad:91: e1:a5:37:fb:52:c0:60:3b:fa:9c:21:18:d8:97:1e: 3f:d6:d3:6a:0f:ea:e8:04:27:3f:fb:5f:c9:3a:50: f3:7f:7c:af:c4:38:53:b4:73:e8:b5:6b:71:80:a1: ae:d6:30:25:2c:ba:b2:8b:2b:56:72:8e:26:39:dc: 2f:1f:f8:c8:8c:9d:b4:98:2d:62:89:ef:41:37:02: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:49:22:C6:53:FD:68:5D:C3:A9:46:4E:0D:D2:AF:46:AF:FE:9F:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137366.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.12.0/23 103.16.188.0/22 Signature Algorithm: sha256WithRSAEncryption 43:7d:d8:d4:5d:7f:c6:2d:30:18:94:5b:1a:b0:48:c2:5b:5a: fa:fb:09:d4:1c:4c:c2:11:19:e2:43:01:6e:8c:86:0c:de:a4: 53:a3:6d:91:3d:1c:87:ff:9b:62:46:31:2f:ae:83:91:ce:2b: aa:86:c9:c4:39:66:de:43:7c:cf:4b:1d:8b:da:ba:58:2f:e0: 60:cb:13:5a:22:2e:e3:a3:94:7b:b0:4d:4b:3d:df:3d:c5:25: 21:8e:69:19:89:de:e8:33:f1:67:d1:c6:99:d5:82:a4:e3:e6: f7:24:5a:2b:03:08:d5:5e:d2:48:bc:25:ca:9b:d4:ba:05:53: d8:f9:f9:5c:60:0c:f2:35:73:ed:45:75:a3:56:2b:7b:36:64: 1e:1b:17:27:4b:c9:87:24:98:4d:a4:30:57:77:7b:97:23:0c: b3:c2:fc:b6:d7:73:b4:2d:12:fd:8c:cd:cb:22:fe:04:f1:cb: d3:e4:58:94:7b:0d:a2:1b:6c:eb:76:f9:4b:64:89:21:cc:d4: 3c:13:59:08:39:62:ad:21:d1:69:ea:f7:04:c2:a0:30:7b:45: f5:5a:e1:23:fb:bb:e7:2e:27:7c:29:fa:1c:81:e4:d1:1e:6d: 53:bd:2a:65:89:99:a4:f9:56:0e:b0:dc:f7:c5:1a:df:0e:3e: 37:86:e9:fc -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUS7LHDnibnFn2PKvJrWsqc0pw3l0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1MFoX DTI3MDUwMTA5MTk1MFowMzExMC8GA1UEAxMoQUI0OTIyQzY1M0ZENjg1REMzQTk0 NjRFMEREMkFGNDZBRkZFOUZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTRM6CFSyBQpC4lObdbYup4unQwil+JQlUCcLbxeOzUXhb9Fy2olL3g598E XkLUm8Dwud2Q6kXNgpVjal80bDdEvp2tQF0TIru15d3v+bpuJ6mcIQVyNznu2PfI hp5v7tGhLkNQjkZj3i9+5dckjerzoYDZpDJgwNv7bu0Gs0by3vNFbFyGf4aGtPUY tr9Nom/LDjORssV/eSY3R3PXRnqTmjgyjht6rbcbLfO2LqhY962R4aU3+1LAYDv6 nCEY2JceP9bTag/q6AQnP/tfyTpQ8398r8Q4U7Rz6LVrcYChrtYwJSy6sosrVnKO JjncLx/4yIydtJgtYonvQTcC4SsCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBSrSSLG U/1oXcOpRk4N0q9Gr/6f6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQBZwwMAwQCZxC8MA0GCSqGSIb3DQEBCwUAA4IBAQBDfdjUXX/GLTAYlFsa sEjCW1r6+wnUHEzCERniQwFujIYM3qRTo22RPRyH/5tiRjEvroORziuqhsnEOWbe Q3zPSx2L2rpYL+BgyxNaIi7jo5R7sE1LPd89xSUhjmkZid7oM/Fn0caZ1YKk4+b3 JForAwjVXtJIvCXKm9S6BVPY+flcYAzyNXPtRXWjVit7NmQeGxcnS8mHJJhNpDBX d3uXIwyzwvy213O0LRL9jM3LIv4E8cvT5FiUew2iG2zrdvlLZIkhzNQ8E1kIOWKt IdFp6vcEwqAwe0X1WuEj+7vnLid8KfocgeTRHm1TvSpliZmk+VYOsNz3xRrfDj43 hun8 -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client