$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136600.roa File: AS136600.roa (raw, json) Hash identifier: fxQQY9KXyL9j73dfCEeNpfqtMEVj8uzNKqTFJwmCbAs= Subject key identifier: 52:18:35:47:6F:CE:BC:0E:EB:B9:7C:24:66:4F:D7:40:D3:06:53:C8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A95A0742CA404FD600E44BBBEE908B00D2463F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136600.roa Signing time: Thu 26 Mar 2026 04:35:34 +0000 ROA not before: Thu 26 Mar 2026 04:30:34 +0000 ROA not after: Thu 25 Mar 2027 04:35:34 +0000 asID: 136600 IP address blocks: 163.128.82.0/23 maxlen: 24 2001:df6:d6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:95:a0:74:2c:a4:04:fd:60:0e:44:bb:be:e9:08:b0:0d:24:63:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 26 04:30:34 2026 GMT Not After : Mar 25 04:35:34 2027 GMT Subject: CN=521835476FCEBC0EEBB97C24664FD740D30653C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:62:01:10:e7:bd:9e:d3:30:1d:c2:a9:44: 37:30:93:ec:d7:e5:74:69:d6:74:2f:37:2f:d6:65: ab:f3:61:fe:37:a0:8f:ed:e2:0f:3e:63:e7:25:41: 04:b9:89:c4:0a:f7:78:73:3a:1a:e6:b0:7b:b3:6a: f6:17:2e:78:e4:e4:2c:84:dc:ab:0f:3c:3c:52:a4: 2b:21:d9:59:01:a3:ee:94:69:a0:9e:4e:92:b3:d3: 1c:3b:05:eb:f8:06:44:88:67:34:5e:7b:13:5a:f1: 57:6f:3d:d2:2d:87:44:7c:52:3c:6b:ed:df:db:e2: f5:0c:e1:0c:f1:34:1a:30:a6:68:06:63:1e:65:be: b3:27:b4:01:4d:f6:fd:80:58:33:79:1e:11:0f:89: 5c:88:6c:b8:63:d6:20:f1:d8:f8:57:80:30:ed:40: 75:0e:b3:fa:ad:37:d6:ae:50:17:c7:90:c8:ca:30: 09:0c:61:71:58:51:f4:33:2e:15:f4:7c:14:aa:e4: 0e:38:69:f2:7b:67:8b:85:d0:e0:c2:7c:ef:59:0b: bc:55:8d:62:da:7b:49:01:46:f3:95:64:ed:fe:a5: b0:60:16:7c:f6:14:22:27:29:65:9e:3d:d4:c0:d7: b3:a9:1b:99:4d:11:3d:bd:eb:22:2a:ed:a4:26:f3: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:35:47:6F:CE:BC:0E:EB:B9:7C:24:66:4F:D7:40:D3:06:53:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136600.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.82.0/23 IPv6: 2001:df6:d6c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:89:f9:31:63:1d:94:e7:ff:e4:8a:83:9b:4c:5b:ab:5f:93: fb:92:93:c7:b0:59:2a:e4:55:03:a8:c2:92:a4:3c:64:e0:aa: fa:65:dd:30:9d:36:4f:bb:3a:04:65:26:fb:0e:e5:d0:49:cb: 39:ec:fc:63:cb:00:25:c0:e6:c8:82:c0:2b:9f:f3:8d:5d:34: f1:02:7a:b8:f8:56:04:4c:74:1c:69:c6:a1:e1:7f:f2:48:df: 8d:e5:d8:0a:48:eb:4b:6e:f2:f2:07:cd:72:99:cb:7c:64:e0: c7:d2:f4:c9:71:60:f8:90:fe:b3:a7:ac:3a:7e:0c:b2:21:84: ed:bd:9e:f4:8b:87:29:74:f3:f4:38:90:7f:3c:ae:c1:a4:f8: 68:bd:ce:c7:14:1e:22:49:07:b2:eb:ba:49:b1:9e:2b:db:37: be:c5:99:16:43:20:0c:b1:b1:f3:42:b5:4a:38:71:87:f4:9f: b7:27:0a:19:36:d3:c8:03:00:4b:c0:ab:c2:74:2a:20:e7:e3: e4:6b:23:42:18:44:6e:19:e2:28:1c:87:e3:07:77:2e:1a:ad: 12:ce:be:24:64:5d:14:40:4a:64:0e:78:f0:9a:4c:5d:a1:00: 8f:01:41:b9:e9:50:dc:3e:d2:90:dd:02:40:e6:ba:63:73:2c: 31:20:67:cd -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUOpWgdCykBP1gDkS7vukIsA0kY/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNjA0MzAzNFoX DTI3MDMyNTA0MzUzNFowMzExMC8GA1UEAxMoNTIxODM1NDc2RkNFQkMwRUVCQjk3 QzI0NjY0RkQ3NDBEMzA2NTNDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPIYgEQ572e0zAdwqlENzCT7NfldGnWdC83L9Zlq/Nh/jegj+3iDz5j5yVB BLmJxAr3eHM6Guawe7Nq9hcueOTkLITcqw88PFKkKyHZWQGj7pRpoJ5OkrPTHDsF 6/gGRIhnNF57E1rxV2890i2HRHxSPGvt39vi9QzhDPE0GjCmaAZjHmW+sye0AU32 /YBYM3keEQ+JXIhsuGPWIPHY+FeAMO1AdQ6z+q031q5QF8eQyMowCQxhcVhR9DMu FfR8FKrkDjhp8ntni4XQ4MJ871kLvFWNYtp7SQFG85Vk7f6lsGAWfPYUIicpZZ49 1MDXs6kbmU0RPb3rIirtpCbz48UCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRSGDVH b868Duu5fCRmT9dA0wZTyDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjYwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaOAUjAPBAIAAjAJAwcAIAEN9tbAMA0GCSqGSIb3DQEBCwUAA4IB AQAvifkxYx2U5//kioObTFurX5P7kpPHsFkq5FUDqMKSpDxk4Kr6Zd0wnTZPuzoE ZSb7DuXQScs57PxjywAlwObIgsArn/ONXTTxAnq4+FYETHQcacah4X/ySN+N5dgK SOtLbvLyB81ymct8ZODH0vTJcWD4kP6zp6w6fgyyIYTtvZ70i4cpdPP0OJB/PK7B pPhovc7HFB4iSQey67pJsZ4r2ze+xZkWQyAMsbHzQrVKOHGH9J+3JwoZNtPIAwBL wKvCdCog5+PkayNCGERuGeIoHIfjB3cuGq0Szr4kZF0UQEpkDnjwmkxdoQCPAUG5 6VDcPtKQ3QJA5rpjcywxIGfN -----END CERTIFICATE-----Generated at Thu Mar 26 17:33:20 2026 by rpki-client