$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137368.roa File: AS137368.roa (raw, json) Hash identifier: Gl1Ec1ZI6o0P1f3nU7l7nXw7nEVFx+MtUAL0LsKqbcI= Subject key identifier: D1:F8:17:AA:63:AD:1E:2C:B9:BC:46:10:A8:BB:61:B3:5A:BD:38:43 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 242CDAC94AB93185C7A2DF75888FEFA7729265AE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137368.roa Signing time: Sat 02 May 2026 09:26:20 +0000 ROA not before: Sat 02 May 2026 09:21:20 +0000 ROA not after: Sat 01 May 2027 09:26:20 +0000 asID: 137368 IP address blocks: 103.116.210.0/24 maxlen: 24 2001:df3:ff00::/48 maxlen: 48 2001:df5:7b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2c:da:c9:4a:b9:31:85:c7:a2:df:75:88:8f:ef:a7:72:92:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:20 2026 GMT Not After : May 1 09:26:20 2027 GMT Subject: CN=D1F817AA63AD1E2CB9BC4610A8BB61B35ABD3843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:a5:56:4b:39:7c:a4:2e:ab:45:bb:04:30: d2:f3:5e:e5:21:13:ff:09:37:36:62:fc:e9:b9:3e: 6c:f8:13:1b:b5:42:99:da:87:99:62:ee:8e:4a:ab: 58:8d:7c:32:a6:0e:bc:26:d3:9f:84:93:d5:6b:c5: a4:f9:3d:10:09:e6:eb:4b:c1:b7:c3:f5:85:86:d0: 9e:67:62:9d:de:c9:59:38:75:0c:4b:ba:3e:c6:56: 8c:84:d2:a2:5d:b1:91:87:ff:5b:0f:28:55:d3:00: a0:ce:7f:08:fa:ca:84:e3:1c:a7:7a:e2:2e:6e:21: 46:4e:78:d7:92:1b:4e:60:73:be:a5:4f:1f:94:c9: ff:80:57:a0:60:57:c2:3e:82:e0:a2:2b:ac:e9:75: c6:82:bb:08:0c:b1:3e:5d:2f:11:8a:9b:b2:b4:b4: 2f:34:fc:0f:62:22:31:b0:af:79:f9:52:cf:5e:d5: 96:3f:c2:b7:1b:56:34:c9:1e:dc:e6:5b:28:35:ff: be:f3:5f:c6:1d:7b:25:16:c8:66:bd:1c:33:42:c1: ba:ec:35:86:58:7b:e1:96:d2:98:29:65:df:eb:99: 33:df:50:ef:ce:dd:6a:a0:95:8f:60:ec:5a:c0:0f: f8:7f:6f:79:f3:c2:94:94:a7:77:5b:35:55:ea:48: a1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:17:AA:63:AD:1E:2C:B9:BC:46:10:A8:BB:61:B3:5A:BD:38:43 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137368.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.210.0/24 IPv6: 2001:df3:ff00::/48 2001:df5:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 2a:74:5c:ae:75:b9:f0:e0:dd:08:c7:1f:9d:7f:c1:9e:ee:f7: a7:a0:e8:83:21:30:50:e8:cb:95:36:39:24:f4:70:4e:77:ee: 97:c7:ec:f0:03:1a:54:0a:4d:b7:99:1d:aa:56:b4:3f:8a:6b: 36:71:92:b0:72:9d:10:c6:64:00:8b:8d:9c:c9:63:86:a4:13: 78:9c:eb:c0:17:e8:c9:f1:a5:00:b1:b4:9e:93:23:ba:fa:8e: 8a:fc:b0:f5:df:e9:b9:62:5c:50:7c:c0:e1:41:16:f8:58:d5: 27:d6:8c:02:f3:b5:44:bc:e1:8a:48:08:9a:4e:27:94:37:b4: 92:e2:3a:e2:6c:aa:29:ae:b9:87:2a:7d:77:32:c3:e1:27:51: 0e:0a:2a:02:2e:7a:75:d6:07:27:03:90:7d:5d:4e:75:6f:de: 8c:cc:e7:1d:5b:1f:50:54:42:af:99:49:24:72:1e:78:3f:e1: 43:3b:6a:6a:54:84:f9:bd:0a:b4:1d:b7:15:04:4b:e0:ff:58: 66:c6:a2:fb:9c:16:55:1d:f5:c2:d3:5b:d9:d3:b9:ec:da:04: 99:51:34:5e:9d:dd:e0:9a:21:2c:3d:66:75:50:b5:b3:5d:4a: 37:68:06:31:85:78:e9:dd:ea:57:62:4f:15:f9:20:26:77:b9: b2:f0:52:d8 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUJCzayUq5MYXHot91iI/vp3KSZa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEyMFoX DTI3MDUwMTA5MjYyMFowMzExMC8GA1UEAxMoRDFGODE3QUE2M0FEMUUyQ0I5QkM0 NjEwQThCQjYxQjM1QUJEMzg0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuApVZLOXykLqtFuwQw0vNe5SET/wk3NmL86bk+bPgTG7VCmdqHmWLujkqr WI18MqYOvCbTn4ST1WvFpPk9EAnm60vBt8P1hYbQnmdind7JWTh1DEu6PsZWjITS ol2xkYf/Ww8oVdMAoM5/CPrKhOMcp3riLm4hRk5415IbTmBzvqVPH5TJ/4BXoGBX wj6C4KIrrOl1xoK7CAyxPl0vEYqbsrS0LzT8D2IiMbCveflSz17Vlj/CtxtWNMke 3OZbKDX/vvNfxh17JRbIZr0cM0LBuuw1hlh74ZbSmCll3+uZM99Q787daqCVj2Ds WsAP+H9vefPClJSnd1s1VepIoVMCAwEAAaOCAeYwggHiMB0GA1UdDgQWBBTR+Beq Y60eLLm8RhCou2GzWr04QzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3MzY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIA ATAGAwQAZ3TSMBgEAgACMBIDBwAgAQ3z/wADBwAgAQ31ewAwDQYJKoZIhvcNAQEL BQADggEBACp0XK51ufDg3QjHH51/wZ7u96eg6IMhMFDoy5U2OST0cE537pfH7PAD GlQKTbeZHapWtD+KazZxkrBynRDGZACLjZzJY4akE3ic68AX6MnxpQCxtJ6TI7r6 jor8sPXf6bliXFB8wOFBFvhY1SfWjALztUS84YpICJpOJ5Q3tJLiOuJsqimuuYcq fXcyw+EnUQ4KKgIuenXWBycDkH1dTnVv3ozM5x1bH1BUQq+ZSSRyHng/4UM7ampU hPm9CrQdtxUES+D/WGbGovucFlUd9cLTW9nTuezaBJlRNF6d3eCaISw9ZnVQtbNd SjdoBjGFeOnd6ldiTxX5ICZ3ubLwUtg= -----END CERTIFICATE-----Generated at Sun May 3 00:41:15 2026 by rpki-client