$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa File: AS136876.roa (raw, json) Hash identifier: rgNZG63QVkT9MOdBMf/gzWohQO8/vJRM8Ii9rbzzHOk= Subject key identifier: 8C:D8:CA:6A:0B:76:8F:1F:6F:78:40:C7:59:65:90:37:46:9B:45:1B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B78F860F62BCAACEC39DD129D95DC40F1ECF8A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa Signing time: Thu 12 Mar 2026 07:00:00 +0000 ROA not before: Thu 12 Mar 2026 06:55:00 +0000 ROA not after: Thu 11 Mar 2027 07:00:00 +0000 asID: 136876 IP address blocks: 103.105.190.0/24 maxlen: 24 103.163.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:78:f8:60:f6:2b:ca:ac:ec:39:dd:12:9d:95:dc:40:f1:ec:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 12 06:55:00 2026 GMT Not After : Mar 11 07:00:00 2027 GMT Subject: CN=8CD8CA6A0B768F1F6F7840C759659037469B451B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:fe:dd:6e:e6:c1:9a:80:bc:66:90:20:62: fe:72:7a:cd:7b:ad:bf:a9:28:85:d2:a0:bf:23:02: 5a:11:d2:b1:84:66:8d:74:da:65:d3:89:2f:33:45: 24:19:dd:38:9d:4c:70:3e:ef:9e:94:8b:0c:bc:1b: a9:fc:6d:78:8a:38:64:73:ba:58:63:b8:b4:6a:c9: 24:86:e1:f0:b4:74:c6:ab:fd:a4:32:20:dd:91:97: 1c:f0:cc:ed:41:5a:b8:51:f6:34:97:98:58:c5:e1: e3:1f:5e:2a:be:c1:e8:fe:cb:15:85:19:1d:f1:d4: d7:08:c3:8a:e0:56:75:64:45:c4:ad:91:b3:03:13: d3:d0:ab:83:58:7e:b9:13:58:f8:6f:d0:f1:63:a5: b7:e9:9f:b4:6f:28:8f:5d:ba:b5:df:ed:6c:61:73: 19:68:a8:13:fb:a5:77:b0:77:b2:94:f2:50:17:74: 21:ac:f1:9d:f1:05:1d:62:bf:22:ac:fa:82:e1:61: fd:80:67:a7:c2:71:1c:6c:e1:a5:bc:95:27:c0:02: 82:8a:33:be:98:9f:06:5d:49:04:9d:ee:59:f2:66: 21:06:8d:2d:a3:b3:dc:9a:1b:81:12:af:aa:29:5a: 47:1d:14:07:40:c1:40:56:43:12:85:51:1f:92:47: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D8:CA:6A:0B:76:8F:1F:6F:78:40:C7:59:65:90:37:46:9B:45:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136876.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.190.0/24 103.163.38.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f5:45:67:b2:de:f2:e9:ef:36:08:fe:32:45:73:15:c3:e5: bf:8d:3a:22:fa:7b:98:70:f1:4d:15:e7:bd:49:f1:36:f9:55: 5f:30:ac:3b:d1:d5:67:c9:01:4b:ce:01:04:b0:ee:17:71:a6: 45:d0:e3:98:91:93:fa:61:87:55:16:86:db:b5:e0:79:7e:83: fc:15:ac:e6:70:52:04:5f:56:48:d4:13:0d:99:d0:7d:f6:65: 1b:c8:c6:dc:ef:f1:0c:e4:ec:92:3f:fd:a8:a8:38:74:e7:04: 88:8c:53:65:fd:34:df:fb:66:1f:c2:6c:f9:14:ba:42:ba:82: 10:72:2a:b8:69:30:a6:73:87:3e:e4:33:2b:45:5d:78:d7:16: ad:8f:d0:8b:61:67:4e:62:25:66:b0:ad:31:9e:b6:c5:db:08: 46:20:3f:09:9e:79:4c:ab:50:1c:5d:1a:73:88:0b:17:a9:79: a7:7f:f5:0a:0d:05:74:8d:7b:90:87:cd:bc:69:2d:f5:aa:fc: 98:56:12:9e:42:4b:53:a0:cf:4b:48:93:d4:4c:fe:a0:03:85: 21:da:95:3f:39:55:71:07:69:42:99:53:59:ec:03:ce:2e:dc: cb:5b:1e:65:74:6f:0c:f0:9a:45:6a:34:a1:df:fe:1a:0f:d2: 56:3f:cb:10 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUC3j4YPYryqzsOd0SnZXcQPHs+KcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMjA2NTUwMFoX DTI3MDMxMTA3MDAwMFowMzExMC8GA1UEAxMoOENEOENBNkEwQjc2OEYxRjZGNzg0 MEM3NTk2NTkwMzc0NjlCNDUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCd/t1u5sGagLxmkCBi/nJ6zXutv6kohdKgvyMCWhHSsYRmjXTaZdOJLzNF JBndOJ1McD7vnpSLDLwbqfxteIo4ZHO6WGO4tGrJJIbh8LR0xqv9pDIg3ZGXHPDM 7UFauFH2NJeYWMXh4x9eKr7B6P7LFYUZHfHU1wjDiuBWdWRFxK2RswMT09Crg1h+ uRNY+G/Q8WOlt+mftG8oj126td/tbGFzGWioE/uld7B3spTyUBd0IazxnfEFHWK/ Iqz6guFh/YBnp8JxHGzhpbyVJ8ACgoozvpifBl1JBJ3uWfJmIQaNLaOz3JobgRKv qilaRx0UB0DBQFZDEoVRH5JHELMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSM2Mpq C3aPH294QMdZZZA3RptFGzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGdpvgMEAGejJjANBgkqhkiG9w0BAQsFAAOCAQEAb/VFZ7Le8unv Ngj+MkVzFcPlv406Ivp7mHDxTRXnvUnxNvlVXzCsO9HVZ8kBS84BBLDuF3GmRdDj mJGT+mGHVRaG27XgeX6D/BWs5nBSBF9WSNQTDZnQffZlG8jG3O/xDOTskj/9qKg4 dOcEiIxTZf003/tmH8Js+RS6QrqCEHIquGkwpnOHPuQzK0VdeNcWrY/Qi2FnTmIl ZrCtMZ62xdsIRiA/CZ55TKtQHF0ac4gLF6l5p3/1Cg0FdI17kIfNvGkt9ar8mFYS nkJLU6DPS0iT1Ez+oAOFIdqVPzlVcQdpQplTWewDzi7cy1seZXRvDPCaRWo0od/+ Gg/SVj/LEA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:02:05 2026 by rpki-client