$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS59137.roa File: AS59137.roa (raw, json) Hash identifier: XkUdp9IvfxdxV74kI4bwdl2MzYl0LO8kVgvcKQuKbPo= Subject key identifier: C1:DC:31:3F:9E:F1:C9:6B:3A:9C:CA:EB:2C:B9:19:56:42:37:89:BA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 579684A40B583407D8357606BBD20E39594FB1CE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59137.roa Signing time: Sat 02 May 2026 21:18:52 +0000 ROA not before: Sat 02 May 2026 21:13:52 +0000 ROA not after: Sat 01 May 2027 21:18:52 +0000 asID: 59137 IP address blocks: 103.252.20.0/24 maxlen: 24 103.252.21.0/24 maxlen: 24 103.252.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:96:84:a4:0b:58:34:07:d8:35:76:06:bb:d2:0e:39:59:4f:b1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:13:52 2026 GMT Not After : May 1 21:18:52 2027 GMT Subject: CN=C1DC313F9EF1C96B3A9CCAEB2CB91956423789BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:ea:29:c0:92:32:d5:02:53:cd:2b:8d:e6: 1d:b1:7f:45:ac:77:f7:96:21:72:47:a3:7d:ea:cf: 68:01:34:53:83:82:12:ee:8c:e5:07:f7:c8:26:b3: e0:35:83:3d:da:0d:f7:35:f4:4f:f3:6f:12:e2:f6: 7d:eb:d1:3b:27:14:93:06:2f:61:88:7d:a9:0e:2f: cb:ca:b4:77:42:1a:e2:b3:9d:a9:1e:0d:35:04:3c: bc:36:cd:a6:28:61:2b:a6:7f:ae:64:72:d1:5f:49: 8c:88:01:0a:fd:05:b2:cc:0d:e0:b9:b5:ee:b6:9c: d5:7a:37:ce:2d:83:92:e2:91:3e:c8:c9:72:06:6a: 94:ac:96:27:27:15:58:bc:33:57:47:a1:ea:57:d2: 32:51:eb:c1:ef:84:28:00:28:4a:86:04:6b:32:f5: 38:ba:74:cb:7a:e0:42:51:dc:80:95:d1:a3:8e:21: bd:78:2b:a0:3d:1b:d8:5f:f5:12:d3:1f:97:27:d2: bd:d1:f7:2b:4f:2b:e7:27:f2:ea:24:d8:8b:48:20: 74:00:ff:ee:45:a2:81:b5:d3:7b:8c:fc:ee:eb:0b: 6a:92:c2:38:a7:d8:a6:5c:99:85:31:75:2a:0d:f4: bf:a0:c7:0d:d2:79:86:51:02:a6:65:77:53:98:93: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DC:31:3F:9E:F1:C9:6B:3A:9C:CA:EB:2C:B9:19:56:42:37:89:BA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS59137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.20.0/23 103.252.23.0/24 Signature Algorithm: sha256WithRSAEncryption 96:88:28:20:37:cc:1c:5d:f1:b5:08:54:72:cf:c4:cf:85:6e: f5:95:4c:9f:40:54:f4:05:da:bb:ad:85:0d:14:29:f5:5f:b5: d4:a6:77:ed:0f:0a:ce:4d:22:ab:ea:23:7c:58:04:85:b3:5f: 0e:55:b6:6e:2d:33:4c:fe:18:7d:e7:34:71:60:c5:12:f2:7a: f1:a5:5c:20:0a:0a:81:31:8c:b1:f5:8d:29:ce:4b:b6:e4:99: 0f:e3:db:52:89:3c:79:64:b7:b0:3b:eb:eb:4b:83:f4:87:2c: b6:4e:a8:b1:16:51:a3:18:65:b4:ce:4c:f4:cc:8f:5d:56:94: d4:13:37:dc:cf:41:d2:09:11:e4:2e:d5:a5:b5:50:c3:b7:9e: 41:bb:51:ab:47:ec:c2:99:af:06:be:99:9c:b9:2b:60:63:5a: 8e:02:e2:c1:f6:1f:e5:83:57:53:65:ce:82:08:4c:14:0d:50: f9:a3:7c:ef:8d:5c:0c:86:67:aa:c3:51:55:dc:b4:b0:a4:c0: 2e:b1:03:a5:a8:0d:be:e1:11:2f:6c:89:61:a5:32:93:fa:8d: bf:e4:20:e1:5f:66:14:4b:75:9f:34:2c:08:ad:3c:a0:06:e6: 08:2c:98:29:5c:a0:3e:84:25:36:a1:51:3b:11:1c:02:3a:30: 2b:79:ff:9a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUV5aEpAtYNAfYNXYGu9IOOVlPsc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTM1MloX DTI3MDUwMTIxMTg1MlowMzExMC8GA1UEAxMoQzFEQzMxM0Y5RUYxQzk2QjNBOUND QUVCMkNCOTE5NTY0MjM3ODlCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIF6inAkjLVAlPNK43mHbF/Rax395YhckejferPaAE0U4OCEu6M5Qf3yCaz 4DWDPdoN9zX0T/NvEuL2fevROycUkwYvYYh9qQ4vy8q0d0Ia4rOdqR4NNQQ8vDbN pihhK6Z/rmRy0V9JjIgBCv0FsswN4Lm17rac1Xo3zi2DkuKRPsjJcgZqlKyWJycV WLwzV0eh6lfSMlHrwe+EKAAoSoYEazL1OLp0y3rgQlHcgJXRo44hvXgroD0b2F/1 EtMflyfSvdH3K08r5yfy6iTYi0ggdAD/7kWigbXTe4z87usLapLCOKfYplyZhTF1 Kg30v6DHDdJ5hlECpmV3U5iTjcECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBTB3DE/ nvHJazqcyussuRlWQjeJujAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBRBggrBgEFBQcBCwRFMEMwQQYIKwYBBQUHMAuGNXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTNTkxMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgAB MAwDBAFn/BQDBABn/BcwDQYJKoZIhvcNAQELBQADggEBAJaIKCA3zBxd8bUIVHLP xM+FbvWVTJ9AVPQF2ruthQ0UKfVftdSmd+0PCs5NIqvqI3xYBIWzXw5Vtm4tM0z+ GH3nNHFgxRLyevGlXCAKCoExjLH1jSnOS7bkmQ/j21KJPHlkt7A76+tLg/SHLLZO qLEWUaMYZbTOTPTMj11WlNQTN9zPQdIJEeQu1aW1UMO3nkG7UatH7MKZrwa+mZy5 K2BjWo4C4sH2H+WDV1NlzoIITBQNUPmjfO+NXAyGZ6rDUVXctLCkwC6xA6WoDb7h ES9siWGlMpP6jb/kIOFfZhRLdZ80LAitPKAG5ggsmClcoD6EJTahUTsRHAI6MCt5 /5o= -----END CERTIFICATE-----Generated at Sun May 3 00:40:22 2026 by rpki-client