$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137496.roa File: AS137496.roa (raw, json) Hash identifier: jtIzUtlZejEFsjVVERGH2PQP3GJlRX08wT94ZE4eLyE= Subject key identifier: CC:C9:65:13:97:4C:65:87:09:97:0A:AF:35:09:CD:06:8C:FB:A0:83 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 590516564770556CE8C83D655E650777CD436310 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137496.roa Signing time: Mon 03 Aug 2026 06:14:31 +0000 ROA not before: Mon 03 Aug 2026 06:09:31 +0000 ROA not after: Mon 02 Aug 2027 06:14:31 +0000 asID: 137496 IP address blocks: 2001:df7:3c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:05:16:56:47:70:55:6c:e8:c8:3d:65:5e:65:07:77:cd:43:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 3 06:09:31 2026 GMT Not After : Aug 2 06:14:31 2027 GMT Subject: CN=CCC96513974C658709970AAF3509CD068CFBA083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:e8:dc:67:b7:98:bc:4a:a3:be:e8:6a:6f: e0:4c:16:2d:3c:c0:f3:90:ac:55:4c:ff:d7:7f:7a: d5:83:eb:c1:21:6e:99:76:ee:9b:ca:5a:20:99:92: cc:72:21:f7:cb:6e:4f:4e:4d:0d:89:90:81:c5:88: 22:16:c9:ae:a5:05:fe:cc:6a:77:b5:a3:8c:46:52: 23:71:fe:ed:e1:62:c3:0e:90:a5:42:25:c9:70:f5: a9:bf:20:f5:9a:9b:fc:ed:27:b4:e5:7a:4f:5b:12: 4d:33:84:6e:b0:f5:36:5d:81:e9:90:a7:9e:f7:4d: a1:bb:f9:f5:b0:01:f3:58:5e:09:55:ee:f0:9e:c3: 9a:d2:c0:2d:99:62:0f:04:c2:8e:39:70:a4:73:f9: 6e:35:87:88:ec:42:68:60:da:80:43:42:67:41:f1: 62:dc:61:e5:b7:15:04:47:82:b3:2a:58:3d:ba:5d: be:43:8f:cf:91:de:77:dc:33:87:25:9f:a0:0c:54: b7:59:4c:1f:48:8f:98:21:da:fd:dc:f3:38:0e:2f: 5f:4e:43:8f:f3:ac:0f:fc:3e:ca:1b:c1:6e:16:2c: 4a:41:82:ac:d1:e4:e0:62:97:1f:41:18:34:08:25: df:4d:41:e1:c2:26:8d:42:cf:95:b4:4d:40:eb:68: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C9:65:13:97:4C:65:87:09:97:0A:AF:35:09:CD:06:8C:FB:A0:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137496.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:3c40::/48 Signature Algorithm: sha256WithRSAEncryption 22:5e:ea:52:ff:c0:ce:58:1a:92:9f:d9:c4:75:81:51:f0:f5: 37:1b:97:f2:81:3f:7f:07:97:c5:30:6a:ce:a6:72:40:99:87: fe:8a:06:44:9f:1a:1e:9f:a4:a7:2b:fe:93:c6:36:cf:64:d0: ef:56:a7:d3:88:d2:d5:b7:4a:86:ef:dc:88:3c:9b:6d:50:85: da:35:1e:b9:d3:c8:65:3e:19:de:02:33:37:d5:8d:9d:3e:61: 02:bf:fd:19:64:93:f6:3a:ab:e7:3d:03:71:72:eb:ef:70:d0: dd:03:8c:ce:80:73:b4:b6:9e:3b:3a:7c:b8:99:a9:de:b9:8b: c8:3d:ba:23:3a:99:bc:9d:7a:9b:19:5d:a2:a8:46:07:fc:ce: 41:9a:b5:22:3b:d2:57:15:62:0e:e8:bf:16:40:d4:70:14:04: 0f:17:49:f8:19:0d:07:08:9e:e3:6d:9c:37:1b:ff:c1:6c:73: ed:a2:55:7a:9a:7e:09:27:42:3e:6b:9b:1d:f8:3a:df:4b:ba: 91:13:49:38:c1:82:86:10:60:cf:5c:2d:8f:5f:c8:d8:62:a3: c4:53:bf:dc:b9:80:ee:84:6c:a5:4f:15:ea:06:4b:6a:e6:7a: 7b:ad:98:cd:d5:bf:72:b7:15:17:cd:2c:64:ef:d8:dc:c6:fc: a1:c8:6e:cd -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUWQUWVkdwVWzoyD1lXmUHd81DYxAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwMzA2MDkzMVoX DTI3MDgwMjA2MTQzMVowMzExMC8GA1UEAxMoQ0NDOTY1MTM5NzRDNjU4NzA5OTcw QUFGMzUwOUNEMDY4Q0ZCQTA4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOm06Nxnt5i8SqO+6Gpv4EwWLTzA85CsVUz/13961YPrwSFumXbum8paIJmS zHIh98tuT05NDYmQgcWIIhbJrqUF/sxqd7WjjEZSI3H+7eFiww6QpUIlyXD1qb8g 9Zqb/O0ntOV6T1sSTTOEbrD1Nl2B6ZCnnvdNobv59bAB81heCVXu8J7DmtLALZli DwTCjjlwpHP5bjWHiOxCaGDagENCZ0HxYtxh5bcVBEeCsypYPbpdvkOPz5Hed9wz hyWfoAxUt1lMH0iPmCHa/dzzOA4vX05Dj/OsD/w+yhvBbhYsSkGCrNHk4GKXH0EY NAgl301B4cImjULPlbRNQOtogJECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTMyWUT l0xlhwmXCq81Cc0GjPuggzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3NDk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9zxAMA0GCSqGSIb3DQEBCwUAA4IBAQAiXupS/8DOWBqSn9nEdYFR 8PU3G5fygT9/B5fFMGrOpnJAmYf+igZEnxoen6SnK/6TxjbPZNDvVqfTiNLVt0qG 79yIPJttUIXaNR6508hlPhneAjM31Y2dPmECv/0ZZJP2OqvnPQNxcuvvcNDdA4zO gHO0tp47Ony4maneuYvIPbojOpm8nXqbGV2iqEYH/M5BmrUiO9JXFWIO6L8WQNRw FAQPF0n4GQ0HCJ7jbZw3G//BbHPtolV6mn4JJ0I+a5sd+DrfS7qRE0k4wYKGEGDP XC2PX8jYYqPEU7/cuYDuhGylTxXqBktq5np7rZjN1b9ytxUXzSxk79jcxvyhyG7N -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:11 2026 by rpki-client