$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa File: AS136065.roa (raw, json) Hash identifier: AcE5JZbDk1Vjdjkzg9QAIRIv4N3hXevmPSRCnho+uLk= Subject key identifier: BA:61:C2:4C:2F:EF:43:00:4E:92:D7:BA:69:C3:6A:A4:06:85:D1:62 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53B86A7965DFBA577AA90C1457880CE09DDA80B2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa Signing time: Mon 13 Oct 2025 07:00:00 +0000 ROA not before: Mon 13 Oct 2025 06:55:00 +0000 ROA not after: Mon 12 Oct 2026 07:00:00 +0000 asID: 136065 IP address blocks: 103.82.126.0/23 maxlen: 24 103.83.178.0/23 maxlen: 24 2001:df7:fa00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b8:6a:79:65:df:ba:57:7a:a9:0c:14:57:88:0c:e0:9d:da:80:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 13 06:55:00 2025 GMT Not After : Oct 12 07:00:00 2026 GMT Subject: CN=BA61C24C2FEF43004E92D7BA69C36AA40685D162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:ed:79:6d:4d:47:15:6b:55:60:2a:58:e9: 0d:ae:ab:8d:33:ec:aa:ca:3e:5b:ae:07:d1:2f:50: 07:e6:ec:ce:fc:17:5a:e4:98:d9:30:49:ae:17:63: 20:39:28:16:39:84:67:0c:7a:c0:de:ee:43:db:14: 54:ff:a8:fa:f2:5f:0b:90:c8:e1:1a:b9:53:a4:d0: 35:68:14:28:2a:14:be:83:eb:83:7c:93:8b:ee:75: 23:c1:f3:33:62:2d:b1:2a:4b:0b:a5:79:1f:7d:19: ea:ac:10:4f:7c:f5:41:93:ea:c1:d2:65:32:84:90: af:87:0f:f0:76:c8:5d:af:47:2c:d8:91:ce:a3:88: 83:7d:13:6d:92:df:db:2c:cf:94:9c:e2:95:d8:fd: ac:c1:ca:04:43:54:6f:87:4c:c0:9c:89:47:24:62: e6:9b:d0:90:f6:6a:dc:b4:c2:80:0e:37:fb:da:cc: d0:32:bc:38:8c:3d:6d:7d:0a:6e:b3:3e:a3:e3:46: e3:34:ec:e1:fa:40:8e:8c:d7:93:3c:2c:a9:93:eb: cb:6e:4c:77:af:01:78:f4:c7:53:8b:57:2f:49:4d: e8:14:50:2f:0b:f1:f5:12:0f:ae:66:e6:f1:d5:0f: ac:a0:12:65:4c:25:a0:04:37:22:5f:8a:55:03:50: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:C2:4C:2F:EF:43:00:4E:92:D7:BA:69:C3:6A:A4:06:85:D1:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.126.0/23 103.83.178.0/23 IPv6: 2001:df7:fa00::/48 Signature Algorithm: sha256WithRSAEncryption 26:cf:e9:55:32:af:fa:89:3a:38:85:0d:f0:5b:7e:e4:a0:5b: 8d:08:80:74:4b:57:d0:7d:07:37:6f:20:d3:54:cb:60:f6:c2: c9:28:37:23:b7:38:23:88:a3:bd:12:08:7c:f9:b7:f9:bb:5b: 6b:83:c9:be:38:5e:51:24:fe:95:3e:9e:43:e5:0c:b6:91:a1: 21:74:26:8e:e0:17:56:e5:55:e7:9c:5d:20:44:f7:ad:2b:02: 77:f3:44:4b:af:f1:87:c4:7f:38:72:fe:a4:db:dc:3b:6f:12: 74:51:73:67:d7:89:18:0d:47:17:2f:90:ad:11:a5:49:1a:ad: 32:35:7b:cb:cf:24:a2:ff:f0:e3:00:eb:67:77:3a:57:1e:03: 50:f6:48:b2:14:f4:a3:f7:46:01:e9:ec:cd:c8:2e:28:ee:96: 53:39:80:c9:77:16:ee:37:ec:47:3d:25:f7:d4:73:8c:5f:55: 08:b9:d0:22:d1:2b:40:7b:72:85:a1:ba:77:0e:ca:f7:2d:9c: 3b:6c:f6:60:e9:10:f3:ad:f5:2d:62:eb:ee:c6:0f:e1:20:96: a9:67:cf:47:da:c4:90:c8:4c:b3:94:a8:ad:a2:15:a4:ae:98: e7:a7:7e:45:9b:ec:d4:fa:c2:29:52:56:14:28:a5:b5:0c:6c: 72:0b:70:f1 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUU7hqeWXfuld6qQwUV4gM4J3agLIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxMzA2NTUwMFoX DTI2MTAxMjA3MDAwMFowMzExMC8GA1UEAxMoQkE2MUMyNEMyRkVGNDMwMDRFOTJE N0JBNjlDMzZBQTQwNjg1RDE2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhY7XltTUcVa1VgKljpDa6rjTPsqso+W64H0S9QB+bszvwXWuSY2TBJrhdj IDkoFjmEZwx6wN7uQ9sUVP+o+vJfC5DI4Rq5U6TQNWgUKCoUvoPrg3yTi+51I8Hz M2ItsSpLC6V5H30Z6qwQT3z1QZPqwdJlMoSQr4cP8HbIXa9HLNiRzqOIg30TbZLf 2yzPlJzildj9rMHKBENUb4dMwJyJRyRi5pvQkPZq3LTCgA43+9rM0DK8OIw9bX0K brM+o+NG4zTs4fpAjozXkzwsqZPry25Md68BePTHU4tXL0lN6BRQLwvx9RIPrmbm 8dUPrKASZUwloAQ3Il+KVQNQWb8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBS6YcJM L+9DAE6S17ppw2qkBoXRYjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw EgQCAAEwDAMEAWdSfgMEAWdTsjAPBAIAAjAJAwcAIAEN9/oAMA0GCSqGSIb3DQEB CwUAA4IBAQAmz+lVMq/6iTo4hQ3wW37koFuNCIB0S1fQfQc3byDTVMtg9sLJKDcj tzgjiKO9Egh8+bf5u1trg8m+OF5RJP6VPp5D5Qy2kaEhdCaO4BdW5VXnnF0gRPet KwJ380RLr/GHxH84cv6k29w7bxJ0UXNn14kYDUcXL5CtEaVJGq0yNXvLzySi//Dj AOtndzpXHgNQ9kiyFPSj90YB6ezNyC4o7pZTOYDJdxbuN+xHPSX31HOMX1UIudAi 0StAe3KFobp3Dsr3LZw7bPZg6RDzrfUtYuvuxg/hIJapZ89H2sSQyEyzlKitohWk rpjnp35Fm+zU+sIpUlYUKKW1DGxyC3Dx -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:25 2025 by rpki-client