$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137367.roa File: AS137367.roa (raw, json) Hash identifier: 2wpZncyjr2CaI89PFrGufRy+dOOkFv1TsxDaR3hCaig= Subject key identifier: C5:1C:94:FC:BD:6D:3D:65:1F:0A:4D:85:2A:22:0A:74:FD:B7:08:10 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6289B4655C0E7E89F654B4D50AA107119B30A1AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137367.roa Signing time: Sat 02 May 2026 09:19:21 +0000 ROA not before: Sat 02 May 2026 09:14:21 +0000 ROA not after: Sat 01 May 2027 09:19:21 +0000 asID: 137367 IP address blocks: 103.12.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:89:b4:65:5c:0e:7e:89:f6:54:b4:d5:0a:a1:07:11:9b:30:a1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:21 2026 GMT Not After : May 1 09:19:21 2027 GMT Subject: CN=C51C94FCBD6D3D651F0A4D852A220A74FDB70810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:b1:c4:4e:55:9f:de:c9:35:41:b7:d3:9c: 06:88:f2:0d:7e:34:6a:9e:74:aa:60:84:46:18:36: 9a:00:f8:fe:91:19:b4:8f:15:6b:28:b4:bb:83:14: 37:2e:ca:4c:f8:10:43:85:35:dc:80:b7:78:bf:f4: 27:cf:a2:e4:4d:6e:17:d2:d9:59:4a:62:cc:d9:0e: f9:48:24:ec:df:0c:fc:dd:11:cc:b7:d4:b6:a1:e4: 11:93:d4:a0:35:66:f0:60:f6:f7:90:df:3f:70:df: 63:dc:e2:7a:cd:97:66:62:ea:e0:59:5b:09:61:bf: 1c:f0:16:4c:d1:1a:25:c7:98:9a:17:e9:9a:39:ba: 98:8d:69:91:59:34:07:6f:da:9b:bf:86:a1:90:8a: 83:0e:4b:e7:c7:bf:1f:fe:89:37:ea:6d:7d:31:bd: 22:1e:94:00:64:60:91:74:8f:55:75:ee:78:4b:fd: d9:d8:ab:68:ee:81:2d:0d:ec:31:99:3f:be:65:51: 0f:a6:23:c9:e2:e2:7d:b4:e7:73:c4:f6:70:64:82: e9:c2:2b:20:63:96:14:b9:63:f2:8d:cf:49:63:93: c8:93:5f:4a:e2:bc:ec:75:bb:2c:1d:be:84:c2:bf: c7:9b:5b:68:67:b3:6b:37:c2:1f:cb:bc:31:a7:e9: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1C:94:FC:BD:6D:3D:65:1F:0A:4D:85:2A:22:0A:74:FD:B7:08:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137367.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.14.0/23 Signature Algorithm: sha256WithRSAEncryption 62:d4:80:05:59:52:1a:ca:ff:08:85:9d:be:5c:8f:af:17:9b: 07:59:cd:56:b5:74:bd:f4:3d:71:1b:cc:9d:88:7f:10:cd:02: 35:98:b3:0d:e8:e4:5f:b7:8c:bf:47:07:64:d3:6d:80:53:ea: 00:ef:0c:8a:b2:9e:34:3f:fb:81:3b:f3:5f:7c:6a:7c:4a:6a: 36:01:b2:c1:79:95:ca:47:06:f8:5b:0b:3e:3f:b6:b5:77:91: 24:63:2b:2f:16:b8:e2:85:1a:16:9d:ae:97:cf:bc:c5:3e:3b: af:1a:5a:0c:d0:0e:aa:a6:12:50:cf:2e:af:7d:b2:ef:11:b7: 3a:3c:ab:06:3f:f8:ee:17:05:b2:42:38:b8:52:f5:61:25:e9: 2a:50:80:07:ae:ef:6f:fd:5d:00:91:99:bb:f3:ca:da:48:88: 1a:24:1a:60:f6:a2:4c:99:94:e6:01:54:3c:f0:e5:d0:1d:b3: 33:da:ef:31:94:a8:56:18:fe:f5:23:a3:ba:b4:94:41:4a:3e: f8:c1:e4:77:9d:25:f2:f2:40:fb:3b:e9:2c:d4:06:01:5e:a2: b3:57:92:f3:3f:39:94:e3:5f:37:ab:13:2d:af:6f:41:f8:ba: 9c:16:dd:06:60:0b:08:7c:f3:06:80:8b:db:b0:71:c0:2d:65: 27:f5:50:c9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYom0ZVwOfon2VLTVCqEHEZswoa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQyMVoX DTI3MDUwMTA5MTkyMVowMzExMC8GA1UEAxMoQzUxQzk0RkNCRDZEM0Q2NTFGMEE0 RDg1MkEyMjBBNzRGREI3MDgxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOgZscROVZ/eyTVBt9OcBojyDX40ap50qmCERhg2mgD4/pEZtI8Vayi0u4MU Ny7KTPgQQ4U13IC3eL/0J8+i5E1uF9LZWUpizNkO+Ugk7N8M/N0RzLfUtqHkEZPU oDVm8GD295DfP3DfY9zies2XZmLq4FlbCWG/HPAWTNEaJceYmhfpmjm6mI1pkVk0 B2/am7+GoZCKgw5L58e/H/6JN+ptfTG9Ih6UAGRgkXSPVXXueEv92diraO6BLQ3s MZk/vmVRD6YjyeLifbTnc8T2cGSC6cIrIGOWFLlj8o3PSWOTyJNfSuK87HW7LB2+ hMK/x5tbaGezazfCH8u8MafpKv8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTFHJT8 vW09ZR8KTYUqIgp0/bcIEDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzY3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZwwOMA0GCSqGSIb3DQEBCwUAA4IBAQBi1IAFWVIayv8IhZ2+XI+vF5sH Wc1WtXS99D1xG8ydiH8QzQI1mLMN6ORft4y/Rwdk022AU+oA7wyKsp40P/uBO/Nf fGp8Smo2AbLBeZXKRwb4Wws+P7a1d5EkYysvFrjihRoWna6Xz7zFPjuvGloM0A6q phJQzy6vfbLvEbc6PKsGP/juFwWyQji4UvVhJekqUIAHru9v/V0AkZm788raSIga JBpg9qJMmZTmAVQ88OXQHbMz2u8xlKhWGP71I6O6tJRBSj74weR3nSXy8kD7O+ks 1AYBXqKzV5LzPzmU4183qxMtr29B+LqcFt0GYAsIfPMGgIvbsHHALWUn9VDJ -----END CERTIFICATE-----Generated at Sun May 3 01:40:38 2026 by rpki-client