$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135649.roa File: AS135649.roa (raw, json) Hash identifier: qGQc+xbjxgoPkdvOd12lP3WY08m+2PtmCrHdi2n7eT8= Subject key identifier: 1B:AF:C6:8B:F1:57:34:86:27:99:46:E9:C9:CD:BD:82:C1:BC:4E:65 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6B156F78A01DDC3299847E43FEC1F013BDE42878 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135649.roa Signing time: Wed 18 Mar 2026 04:00:00 +0000 ROA not before: Wed 18 Mar 2026 03:55:00 +0000 ROA not after: Wed 17 Mar 2027 04:00:00 +0000 asID: 135649 IP address blocks: 160.250.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:15:6f:78:a0:1d:dc:32:99:84:7e:43:fe:c1:f0:13:bd:e4:28:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 18 03:55:00 2026 GMT Not After : Mar 17 04:00:00 2027 GMT Subject: CN=1BAFC68BF1573486279946E9C9CDBD82C1BC4E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:19:67:13:39:94:d9:88:da:d2:89:4c:e7: 57:7f:ad:c3:20:0d:14:9e:77:a6:75:3b:c0:37:c2: b4:c9:3d:ba:7d:a0:77:cd:d9:c0:30:cb:ce:6e:24: 13:e6:86:ea:ed:b1:df:e2:2d:df:93:25:14:84:80: be:78:af:4b:67:03:a1:de:0e:f8:07:9a:fd:c1:f5: 2b:ff:a0:9b:c3:37:8e:e9:17:c1:17:ee:c7:ae:07: 00:c4:52:49:84:24:5f:9e:92:a6:46:31:e2:d0:37: b0:17:e8:94:e3:be:79:54:5c:fd:70:b7:46:51:86: ab:5f:7c:5b:db:e9:57:91:d1:ba:3e:77:0e:bf:f2: aa:94:cf:d6:54:a3:58:c3:db:9a:3f:e9:1e:7a:ba: fb:fb:68:c5:6f:e6:14:87:ac:c1:68:89:0c:03:63: 98:78:28:44:f2:6a:8f:d0:51:d4:99:39:df:12:50: db:03:2a:dc:a3:41:62:8b:62:0e:b5:5f:71:f8:a4: 18:32:d8:3c:e8:93:56:c3:ad:91:0d:3f:7e:ad:85: 3b:12:08:50:76:52:d4:fd:77:90:eb:bf:ba:0a:05: ad:78:53:ef:22:91:22:90:47:ec:11:41:06:5b:2d: e1:64:44:b2:89:18:1e:66:d4:65:4b:59:e8:bf:a0: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:C6:8B:F1:57:34:86:27:99:46:E9:C9:CD:BD:82:C1:BC:4E:65 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS135649.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.226.0/24 Signature Algorithm: sha256WithRSAEncryption 73:4d:54:e0:2b:67:ec:e2:5b:e0:5d:0d:89:ca:22:1b:d8:b7: 63:0d:78:07:71:b8:98:4f:1b:cd:c8:dd:dc:00:cd:3f:48:e2: da:16:42:01:83:5f:4e:90:5f:b3:bc:c7:d0:21:bf:cf:e8:6e: 65:b5:c5:35:26:e0:66:c3:60:8c:52:74:ef:36:8c:31:89:0d: c1:03:d7:5f:24:4d:13:9a:b0:33:38:3e:2e:f5:80:42:70:fa: 5c:79:e8:74:c8:36:8f:0d:88:8f:8a:62:69:7f:ec:c3:22:33: 81:90:7e:f9:56:82:74:22:4f:c5:7c:3a:fc:7d:97:5c:db:28: c5:06:1e:fe:62:a4:1e:6a:64:f2:c6:73:60:26:5e:ae:98:d7: 06:34:b7:7d:bd:00:2e:0f:50:73:33:b7:15:ab:c1:47:3a:ee: 52:c1:a8:4f:1b:e1:a2:ac:c9:d6:a4:88:fa:e5:e5:bb:6c:43: fb:0a:7d:1e:fb:1c:77:a0:57:12:92:f1:1c:b9:39:ec:d4:10: 06:34:81:fa:e7:10:8b:81:8a:75:34:8d:37:af:fc:4c:6b:e7: 9a:34:03:86:0d:f0:cc:6c:45:61:43:40:12:8b:cc:20:01:cf: 42:4a:9b:62:08:8b:c3:8f:b1:43:4d:f4:d6:2f:b8:ae:53:10: b3:08:dd:cf -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUaxVveKAd3DKZhH5D/sHwE73kKHgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxODAzNTUwMFoX DTI3MDMxNzA0MDAwMFowMzExMC8GA1UEAxMoMUJBRkM2OEJGMTU3MzQ4NjI3OTk0 NkU5QzlDREJEODJDMUJDNEU2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPpGWcTOZTZiNrSiUznV3+twyANFJ53pnU7wDfCtMk9un2gd83ZwDDLzm4k E+aG6u2x3+It35MlFISAvnivS2cDod4O+Aea/cH1K/+gm8M3jukXwRfux64HAMRS SYQkX56SpkYx4tA3sBfolOO+eVRc/XC3RlGGq198W9vpV5HRuj53Dr/yqpTP1lSj WMPbmj/pHnq6+/toxW/mFIeswWiJDANjmHgoRPJqj9BR1Jk53xJQ2wMq3KNBYoti DrVfcfikGDLYPOiTVsOtkQ0/fq2FOxIIUHZS1P13kOu/ugoFrXhT7yKRIpBH7BFB Blst4WREsokYHmbUZUtZ6L+g50sCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQbr8aL 8Vc0hieZRunJzb2CwbxOZTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzNTY0OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKD64jANBgkqhkiG9w0BAQsFAAOCAQEAc01U4Ctn7OJb4F0Nicoi G9i3Yw14B3G4mE8bzcjd3ADNP0ji2hZCAYNfTpBfs7zH0CG/z+huZbXFNSbgZsNg jFJ07zaMMYkNwQPXXyRNE5qwMzg+LvWAQnD6XHnodMg2jw2Ij4piaX/swyIzgZB+ +VaCdCJPxXw6/H2XXNsoxQYe/mKkHmpk8sZzYCZerpjXBjS3fb0ALg9QczO3FavB RzruUsGoTxvhoqzJ1qSI+uXlu2xD+wp9Hvscd6BXEpLxHLk57NQQBjSB+ucQi4GK dTSNN6/8TGvnmjQDhg3wzGxFYUNAEovMIAHPQkqbYgiLw4+xQ0301i+4rlMQswjd zw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:44:35 2026 by rpki-client