$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137874.roa File: AS137874.roa (raw, json) Hash identifier: 0IPDAddKmsYkwcuq5IAPr9e5hfydDIlS9YNPD4HTZaU= Subject key identifier: 85:4A:78:BE:72:EA:06:8E:1B:D3:21:33:6C:06:4E:3D:07:7E:10:B4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 461351B4556C4D0CA25976FB4058B92CDC29E4A3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137874.roa Signing time: Fri 07 Aug 2026 04:25:39 +0000 ROA not before: Fri 07 Aug 2026 04:20:39 +0000 ROA not after: Fri 06 Aug 2027 04:25:39 +0000 asID: 137874 IP address blocks: 2001:df7:51c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:13:51:b4:55:6c:4d:0c:a2:59:76:fb:40:58:b9:2c:dc:29:e4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 7 04:20:39 2026 GMT Not After : Aug 6 04:25:39 2027 GMT Subject: CN=854A78BE72EA068E1BD321336C064E3D077E10B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:44:33:01:f4:6b:a9:67:30:58:e9:63:71:be: 7f:75:f6:df:3f:f5:6c:75:eb:fa:33:76:89:14:48: b7:bd:db:04:44:9d:71:d4:f7:ec:61:af:7c:32:57: 16:03:3f:64:42:69:8b:b4:2d:bd:a2:89:b5:f1:cc: 98:b5:58:05:62:bd:07:37:ae:26:bf:75:a2:08:91: b9:4f:2f:f3:0e:e0:c0:05:90:b8:1c:95:12:3a:6e: cb:71:3e:33:48:04:fd:52:dd:da:18:87:50:19:4e: e2:49:4b:f3:58:41:06:2c:73:74:6a:28:c0:72:54: 02:dc:6f:f4:ec:06:6d:4f:24:e6:0d:5c:24:23:c4: 67:07:57:8d:22:9c:49:a6:e1:8d:ff:c1:ce:38:37: e9:fa:c0:57:c7:60:ef:ae:b6:fa:17:76:9b:8e:9b: bd:24:b6:77:6b:21:9e:3c:aa:a4:16:71:ab:72:8d: e2:44:2b:f3:69:ee:92:8d:e4:aa:bc:fc:0a:a9:8b: 3b:67:46:c0:24:67:ba:4d:b1:b2:34:c2:d2:b7:52: d2:69:6e:41:fa:53:10:04:1b:8e:37:03:45:91:64: 83:e7:9f:24:90:d8:71:79:5f:43:d1:2b:1a:f0:c5: 5d:76:a3:60:3f:38:08:76:3e:e2:17:e2:9c:42:1e: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4A:78:BE:72:EA:06:8E:1B:D3:21:33:6C:06:4E:3D:07:7E:10:B4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137874.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:51c0::/48 Signature Algorithm: sha256WithRSAEncryption 76:2a:60:03:b9:6c:37:78:de:61:4a:1f:fc:68:dc:aa:4c:d4: 19:83:9d:b2:78:d5:4f:9f:96:23:28:6c:a8:54:1f:46:40:f2: 19:80:69:57:f6:0d:ed:d8:0d:bd:ed:17:2c:27:d6:2a:a3:84: ed:74:ec:2c:66:64:da:ee:c1:8c:62:58:64:23:5b:76:30:14: da:20:87:73:9b:28:28:26:bc:f1:4e:92:85:ba:a5:ea:eb:12: 81:6b:bb:f5:0b:f7:af:59:3a:1b:3a:8a:4e:49:90:aa:4b:38: b1:2f:31:43:71:08:f1:65:30:7a:a0:94:fa:d2:02:aa:00:0f: f0:18:68:64:27:61:53:7e:85:e1:30:22:87:0d:a4:81:07:12: f6:78:fe:69:ef:89:07:aa:30:b1:86:09:d8:9b:88:64:54:b8: 40:1e:36:97:5e:e6:1e:24:fc:1b:4d:8b:e4:fd:cc:76:88:00: 32:08:72:e9:31:64:46:ef:ad:83:f5:fb:a1:7d:7c:a8:7e:41: b5:62:b8:24:ea:f0:53:5c:c9:b2:00:f2:10:db:90:e0:c6:7d: 5f:13:50:55:97:97:16:9a:48:cb:3f:2c:f0:3a:ce:d5:36:7b: 58:09:05:27:dd:ec:a9:c5:3b:b6:52:12:a3:dd:c5:e6:55:ab: f9:ea:5b:f3 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURhNRtFVsTQyiWXb7QFi5LNwp5KMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgwNzA0MjAzOVoX DTI3MDgwNjA0MjUzOVowMzExMC8GA1UEAxMoODU0QTc4QkU3MkVBMDY4RTFCRDMy MTMzNkMwNjRFM0QwNzdFMTBCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKREMwH0a6lnMFjpY3G+f3X23z/1bHXr+jN2iRRIt73bBESdcdT37GGvfDJX FgM/ZEJpi7QtvaKJtfHMmLVYBWK9BzeuJr91ogiRuU8v8w7gwAWQuByVEjpuy3E+ M0gE/VLd2hiHUBlO4klL81hBBixzdGoowHJUAtxv9OwGbU8k5g1cJCPEZwdXjSKc Sabhjf/Bzjg36frAV8dg7662+hd2m46bvSS2d2shnjyqpBZxq3KN4kQr82nuko3k qrz8CqmLO2dGwCRnuk2xsjTC0rdS0mluQfpTEAQbjjcDRZFkg+efJJDYcXlfQ9Er GvDFXXajYD84CHY+4hfinEIe+20CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSFSni+ cuoGjhvTITNsBk49B34QtDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3ODc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91HAMA0GCSqGSIb3DQEBCwUAA4IBAQB2KmADuWw3eN5hSh/8aNyq TNQZg52yeNVPn5YjKGyoVB9GQPIZgGlX9g3t2A297RcsJ9Yqo4TtdOwsZmTa7sGM YlhkI1t2MBTaIIdzmygoJrzxTpKFuqXq6xKBa7v1C/evWTobOopOSZCqSzixLzFD cQjxZTB6oJT60gKqAA/wGGhkJ2FTfoXhMCKHDaSBBxL2eP5p74kHqjCxhgnYm4hk VLhAHjaXXuYeJPwbTYvk/cx2iAAyCHLpMWRG762D9fuhfXyofkG1Yrgk6vBTXMmy APIQ25Dgxn1fE1BVl5cWmkjLPyzwOs7VNntYCQUn3eypxTu2UhKj3cXmVav56lvz -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:05 2026 by rpki-client