$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137428.roa File: AS137428.roa (raw, json) Hash identifier: zOjfLZe8/gBKH42F/qmDHGbiUjKutxwOHLKzm0c1Uqc= Subject key identifier: D5:DA:D7:F9:C5:EE:76:7F:04:F4:CB:DF:27:B2:F5:FD:D2:E2:BE:24 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 75F77B17938DE170F3B10C4E8EAA027034B52EEE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137428.roa Signing time: Sat 02 May 2026 09:26:15 +0000 ROA not before: Sat 02 May 2026 09:21:15 +0000 ROA not after: Sat 01 May 2027 09:26:15 +0000 asID: 137428 IP address blocks: 2001:df5:d340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f7:7b:17:93:8d:e1:70:f3:b1:0c:4e:8e:aa:02:70:34:b5:2e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:15 2026 GMT Not After : May 1 09:26:15 2027 GMT Subject: CN=D5DAD7F9C5EE767F04F4CBDF27B2F5FDD2E2BE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:e2:15:ae:62:d4:85:29:4f:9d:79:31:1c: 14:13:2a:8c:ad:2c:d7:c9:bf:76:fe:b5:a2:74:f8: e4:35:80:28:f8:fc:2a:ba:16:38:86:aa:29:4f:1f: 88:89:40:dd:72:d3:0b:86:7b:0f:8f:e5:88:4b:74: 3b:65:27:32:d8:04:8e:26:d0:80:ae:99:9a:8e:09: 3e:86:d3:72:f6:23:14:c6:a5:d9:f7:72:48:65:ad: 66:9b:fb:bc:1a:21:5b:84:fb:e7:a1:d0:02:29:c7: 5b:d8:b3:45:f5:26:0e:e7:d8:2a:9e:f6:6a:19:2f: 68:3f:ed:65:1e:08:e0:fc:c3:8b:e1:25:fd:7c:fc: a4:19:4c:9e:a1:95:c0:00:45:d8:6a:60:a9:3b:83: d2:e7:f0:2a:4f:9e:41:44:93:a0:ee:ea:2e:76:ab: 19:9f:44:92:12:6a:e1:21:cd:ff:d8:e8:a1:76:b1: 9f:2b:bc:fb:c6:a6:a5:5a:c9:d0:8f:87:01:f9:71: 9a:e0:1e:a9:1e:9d:c1:65:88:42:33:5a:ef:bf:f0: 3b:de:7b:f3:64:78:76:ec:a4:e5:64:d6:dc:e0:42: 92:89:1a:da:52:f6:73:51:9f:ac:bb:92:b4:c9:74: 97:20:f0:80:60:58:5d:96:51:b3:26:2e:d0:8a:15: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:D7:F9:C5:EE:76:7F:04:F4:CB:DF:27:B2:F5:FD:D2:E2:BE:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:d340::/48 Signature Algorithm: sha256WithRSAEncryption 5a:22:6e:ac:15:1a:52:57:00:4b:60:bf:a0:48:1d:5d:8b:5b: d4:24:a0:a8:fe:d2:40:8f:62:10:8a:2e:f2:b7:b2:53:b1:6e: bc:c9:59:f5:79:2b:3a:c8:70:02:13:0a:3b:e5:66:91:83:a6: 8a:c2:d2:18:fe:4a:05:19:a0:5d:b3:dc:86:29:72:16:4b:f8: 6e:2f:cb:f5:a2:d2:a2:c0:b8:62:61:4a:5a:74:34:9c:8a:87: 92:41:e5:a5:9b:09:37:59:24:de:04:03:dc:92:8b:0d:55:f6: fa:3b:fb:e1:18:15:fe:71:9b:64:ec:36:03:9d:0e:1f:fa:64: f6:e3:50:a2:9c:0c:b2:53:b2:9e:dd:78:d9:58:e2:69:d0:e6: 0c:3c:d8:5d:5f:1b:d3:cf:ae:82:1a:52:a1:96:2f:6e:28:09: 16:dd:d6:4e:97:55:12:09:06:56:f5:fd:f1:42:25:ef:a5:37: b6:98:21:d7:76:1e:3b:69:b9:8c:dd:7b:55:ed:7a:fa:99:e4: 5e:fa:1f:21:31:2f:77:67:c1:a6:f5:5d:37:47:c7:c1:f9:cc: 06:dd:fe:5e:cb:9c:18:27:42:6b:93:5d:58:19:de:6b:a2:3b: d2:d9:ae:c7:3b:cc:d5:bc:c3:72:64:91:47:e2:42:b1:32:99: 30:89:d0:a9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUdfd7F5ON4XDzsQxOjqoCcDS1Lu4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExNVoX DTI3MDUwMTA5MjYxNVowMzExMC8GA1UEAxMoRDVEQUQ3RjlDNUVFNzY3RjA0RjRD QkRGMjdCMkY1RkREMkUyQkUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXN4hWuYtSFKU+deTEcFBMqjK0s18m/dv61onT45DWAKPj8KroWOIaqKU8f iIlA3XLTC4Z7D4/liEt0O2UnMtgEjibQgK6Zmo4JPobTcvYjFMal2fdySGWtZpv7 vBohW4T756HQAinHW9izRfUmDufYKp72ahkvaD/tZR4I4PzDi+El/Xz8pBlMnqGV wABF2GpgqTuD0ufwKk+eQUSToO7qLnarGZ9EkhJq4SHN/9jooXaxnyu8+8ampVrJ 0I+HAflxmuAeqR6dwWWIQjNa77/wO95782R4duyk5WTW3OBCkoka2lL2c1GfrLuS tMl0lyDwgGBYXZZRsyYu0IoV42UCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTV2tf5 xe52fwT0y98nsvX90uK+JDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3NDI4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9dNAMA0GCSqGSIb3DQEBCwUAA4IBAQBaIm6sFRpSVwBLYL+gSB1d i1vUJKCo/tJAj2IQii7yt7JTsW68yVn1eSs6yHACEwo75WaRg6aKwtIY/koFGaBd s9yGKXIWS/huL8v1otKiwLhiYUpadDScioeSQeWlmwk3WSTeBAPckosNVfb6O/vh GBX+cZtk7DYDnQ4f+mT241CinAyyU7Ke3XjZWOJp0OYMPNhdXxvTz66CGlKhli9u KAkW3dZOl1USCQZW9f3xQiXvpTe2mCHXdh47abmM3XtV7Xr6meRe+h8hMS93Z8Gm 9V03R8fB+cwG3f5ey5wYJ0Jrk11YGd5rojvS2a7HO8zVvMNyZJFH4kKxMpkwidCp -----END CERTIFICATE-----Generated at Sun May 3 01:44:05 2026 by rpki-client