$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS137909.roa File: AS137909.roa (raw, json) Hash identifier: 84YPMobDjpYHohZYkuWw+X6IkeoYk5qHXGTP75acroI= Subject key identifier: B0:EC:7A:31:AF:07:5F:B1:0F:03:67:08:E0:52:25:0B:A8:B0:BD:4D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 791CA928039EB2862792F706E5DC70545DF65C1C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137909.roa Signing time: Sat 02 May 2026 09:26:48 +0000 ROA not before: Sat 02 May 2026 09:21:48 +0000 ROA not after: Sat 01 May 2027 09:26:48 +0000 asID: 137909 IP address blocks: 2001:df4:ea40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:a9:28:03:9e:b2:86:27:92:f7:06:e5:dc:70:54:5d:f6:5c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:48 2026 GMT Not After : May 1 09:26:48 2027 GMT Subject: CN=B0EC7A31AF075FB10F036708E052250BA8B0BD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:9c:73:7e:37:e2:af:2f:8e:55:d3:6e:10: f7:2d:64:3e:76:86:54:b4:48:16:86:ff:38:70:bf: 1a:e1:c2:1b:9e:14:ca:94:1c:b3:ba:b9:2b:0e:56: bb:95:c2:b0:2c:20:99:18:91:57:e0:2e:2b:48:7c: 81:e8:25:5e:ed:67:c0:8e:31:ef:c9:74:d3:e8:9a: 77:1f:15:bf:d3:72:ee:fd:c5:6f:cd:d5:f8:68:2f: e8:55:d2:fc:4e:78:53:9c:c6:3d:30:b1:89:5d:6a: 6e:5f:7c:01:6d:4f:0d:fe:65:06:df:91:9d:fa:53: b6:bf:b8:4b:9c:99:4e:d0:1a:a7:72:2b:c4:7b:41: d9:69:e8:78:82:f9:a0:86:c0:68:3c:1e:5b:9f:5e: 01:f2:e2:44:6a:b5:f9:b6:75:6e:b1:85:cb:f2:8b: 56:e4:0d:03:61:7e:7d:f7:2c:62:af:53:6e:04:be: c4:9a:01:5a:db:ff:49:e7:ec:98:9e:f4:4b:c7:4f: e8:3f:f4:4c:d0:26:60:c8:18:1b:4b:47:20:e0:96: a0:c6:ac:ea:5b:c3:6f:09:07:78:5d:c7:31:50:a8: 05:a0:9c:bd:2f:2c:e9:8c:10:5a:04:17:b6:da:26: 6b:16:1b:c7:2c:ba:d3:57:17:66:8c:fd:d2:13:2a: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EC:7A:31:AF:07:5F:B1:0F:03:67:08:E0:52:25:0B:A8:B0:BD:4D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS137909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:ea40::/48 Signature Algorithm: sha256WithRSAEncryption 05:ed:27:02:cb:39:c9:7d:6c:a1:ec:47:65:13:89:b7:1f:b6: d4:fd:f5:36:bc:a2:ed:35:34:5f:83:0a:9b:8a:66:47:59:03: 2f:22:21:61:fb:ce:fe:a7:ac:d9:5a:cd:5a:f8:02:ac:ac:e3: 07:ea:54:77:40:40:72:25:96:00:af:20:3a:b4:e9:cc:08:09: 6c:bf:47:94:55:02:cd:18:32:37:09:81:5e:32:da:05:62:1d: 60:57:e7:2c:28:f8:f4:e1:21:2b:55:12:fb:14:c7:60:78:9b: 9f:1b:5c:b7:c6:32:80:ba:ee:0b:51:1c:45:f3:85:06:2a:f3: 64:06:9d:f8:00:6b:94:f0:ee:de:3d:20:0c:1e:d7:13:d1:f0: 33:9e:7d:c2:98:65:7c:12:fb:1e:10:56:c0:91:36:09:57:7e: e0:52:b8:9c:7f:b2:3f:31:8b:72:6c:9e:74:d1:3b:39:a5:d4: 95:73:99:80:75:58:48:7b:4d:5e:ad:60:b9:4f:83:97:17:a3: d7:39:ec:5f:ad:93:09:3c:6a:4a:86:ba:38:ae:40:6a:c4:7a: 5f:19:bb:e4:ef:76:0a:7d:db:66:e5:99:13:0e:2b:a0:4b:f7: eb:1d:f6:91:05:d0:8f:ff:25:da:74:d1:6e:d0:cd:ba:b1:d0: 73:cc:26:0c -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUeRypKAOesoYnkvcG5dxwVF32XBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE0OFoX DTI3MDUwMTA5MjY0OFowMzExMC8GA1UEAxMoQjBFQzdBMzFBRjA3NUZCMTBGMDM2 NzA4RTA1MjI1MEJBOEIwQkQ0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJu5nHN+N+KvL45V024Q9y1kPnaGVLRIFob/OHC/GuHCG54UypQcs7q5Kw5W u5XCsCwgmRiRV+AuK0h8geglXu1nwI4x78l00+iadx8Vv9Ny7v3Fb83V+Ggv6FXS /E54U5zGPTCxiV1qbl98AW1PDf5lBt+RnfpTtr+4S5yZTtAap3IrxHtB2WnoeIL5 oIbAaDweW59eAfLiRGq1+bZ1brGFy/KLVuQNA2F+ffcsYq9TbgS+xJoBWtv/Sefs mJ70S8dP6D/0TNAmYMgYG0tHIOCWoMas6lvDbwkHeF3HMVCoBaCcvS8s6YwQWgQX ttomaxYbxyy601cXZoz90hMqyncCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSw7Hox rwdfsQ8DZwjgUiULqLC9TTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM3OTA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9OpAMA0GCSqGSIb3DQEBCwUAA4IBAQAF7ScCyznJfWyh7EdlE4m3 H7bU/fU2vKLtNTRfgwqbimZHWQMvIiFh+87+p6zZWs1a+AKsrOMH6lR3QEByJZYA ryA6tOnMCAlsv0eUVQLNGDI3CYFeMtoFYh1gV+csKPj04SErVRL7FMdgeJufG1y3 xjKAuu4LURxF84UGKvNkBp34AGuU8O7ePSAMHtcT0fAznn3CmGV8EvseEFbAkTYJ V37gUricf7I/MYtybJ500Ts5pdSVc5mAdVhIe01erWC5T4OXF6PXOexfrZMJPGpK hro4rkBqxHpfGbvk73YKfdtm5ZkTDiugS/frHfaRBdCP/yXadNFu0M26sdBzzCYM -----END CERTIFICATE-----Generated at Sun May 3 00:40:21 2026 by rpki-client