$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS136220.roa File: AS136220.roa (raw, json) Hash identifier: LKtOdSBHw68bKWo7q9TlPzuGKriBaVQnKyrBlICmn8Y= Subject key identifier: 7B:CA:99:18:38:B8:6F:EA:23:0D:DD:50:B6:E0:E3:2E:79:C8:21:BE Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 077D9CB1CE8AE1DF8E398B833DA62526615B8094 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136220.roa Signing time: Wed 01 Jul 2026 02:44:33 +0000 ROA not before: Wed 01 Jul 2026 02:39:33 +0000 ROA not after: Wed 30 Jun 2027 02:44:33 +0000 asID: 136220 IP address blocks: 160.236.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7d:9c:b1:ce:8a:e1:df:8e:39:8b:83:3d:a6:25:26:61:5b:80:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 1 02:39:33 2026 GMT Not After : Jun 30 02:44:33 2027 GMT Subject: CN=7BCA991838B86FEA230DDD50B6E0E32E79C821BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:93:db:35:63:ac:97:56:67:0d:22:77:fa: 5b:d6:cf:3b:4e:37:e4:80:5b:f8:cc:14:ee:97:d8: 0c:bd:c0:51:9b:d0:df:e0:c8:df:2f:86:b3:e5:0d: 5f:26:84:10:f6:f3:0e:c9:1f:19:62:57:6a:e4:a9: 0c:c0:00:be:23:27:46:8a:7f:67:9d:76:87:e9:e3: f0:e9:22:15:e9:73:ef:20:5a:89:48:1a:ad:73:95: b0:cb:17:4f:d2:c0:f3:55:5f:a7:7d:72:77:3f:88: a4:72:66:30:64:cc:8f:8b:d0:3a:b2:ce:43:cf:bf: 63:68:4d:2d:61:78:01:b0:bc:84:61:dc:c2:93:1f: 74:ba:f3:be:01:d5:c6:84:15:da:2a:b4:8d:6f:48: a9:28:c8:50:a6:58:ce:d6:5b:79:d5:77:82:40:54: 9f:5f:f7:be:11:e1:44:05:09:5e:c8:a8:9f:12:b6: 48:77:78:93:44:4e:d1:68:31:72:34:a5:9b:59:7e: 5b:4c:28:2c:b0:5d:91:5a:4f:d6:e5:de:24:ea:14: 81:36:64:ad:08:b6:ec:c0:70:c3:e4:45:33:b5:3d: ec:77:94:dc:5c:99:bb:59:a0:ad:38:db:9f:51:30: d5:0d:eb:07:33:8b:26:d4:ec:84:9c:da:30:60:56: f7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CA:99:18:38:B8:6F:EA:23:0D:DD:50:B6:E0:E3:2E:79:C8:21:BE X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS136220.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d5:ea:f6:6f:2c:b9:a1:81:19:75:64:40:60:c5:25:1b:5e: 5c:b6:66:87:44:5f:43:8a:3d:00:35:50:75:b4:5f:bd:a5:a0: d7:cd:2a:58:e7:f9:bf:9d:92:8d:03:2f:fc:a0:20:da:eb:a3: b3:d6:1c:f0:68:46:6a:59:5b:bc:2a:af:a5:97:49:74:dc:d0: ea:44:2a:b4:9d:75:e8:02:77:e1:eb:59:ed:2d:b3:58:c3:f2: 17:b2:b4:04:e9:fd:07:5d:0c:f8:8b:0c:4c:23:7c:36:8e:32: b5:48:e6:e7:ef:65:95:b7:89:9f:6b:e8:e6:fa:e2:b5:be:71: e7:2e:59:65:05:94:df:b7:19:ed:5f:d1:cc:ea:be:b7:56:ed: a5:9b:46:ac:94:60:e2:1d:d6:0c:32:fb:27:a1:27:97:23:06: 06:e2:cb:d6:0a:a2:12:2d:ba:4b:6f:b1:2e:1a:1e:f5:86:a7: 54:a5:4e:6d:99:46:2e:e0:87:9f:53:54:b4:54:5a:25:35:a9: 4f:9f:57:f1:93:a3:88:ff:fb:b8:4b:25:be:fa:54:2d:48:6b: cd:01:4f:15:be:9f:f3:06:94:4f:7c:eb:ec:91:08:88:31:13: 68:de:08:05:e2:23:15:53:16:d0:c2:eb:f1:25:23:1b:5b:ef: ab:db:66:79 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUB32csc6K4d+OOYuDPaYlJmFbgJQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwMTAyMzkzM1oX DTI3MDYzMDAyNDQzM1owMzExMC8GA1UEAxMoN0JDQTk5MTgzOEI4NkZFQTIzMERE RDUwQjZFMEUzMkU3OUM4MjFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfVk9s1Y6yXVmcNInf6W9bPO0435IBb+MwU7pfYDL3AUZvQ3+DI3y+Gs+UN XyaEEPbzDskfGWJXauSpDMAAviMnRop/Z512h+nj8OkiFelz7yBaiUgarXOVsMsX T9LA81Vfp31ydz+IpHJmMGTMj4vQOrLOQ8+/Y2hNLWF4AbC8hGHcwpMfdLrzvgHV xoQV2iq0jW9IqSjIUKZYztZbedV3gkBUn1/3vhHhRAUJXsionxK2SHd4k0RO0Wgx cjSlm1l+W0woLLBdkVpP1uXeJOoUgTZkrQi27MBww+RFM7U97HeU3FyZu1mgrTjb n1Ew1Q3rBzOLJtTshJzaMGBW9zUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR7ypkY OLhv6iMN3VC24OMuecghvjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTM2MjIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOwVMA0GCSqGSIb3DQEBCwUAA4IBAQAu1er2byy5oYEZdWRAYMUlG15c tmaHRF9Dij0ANVB1tF+9paDXzSpY5/m/nZKNAy/8oCDa66Oz1hzwaEZqWVu8Kq+l l0l03NDqRCq0nXXoAnfh61ntLbNYw/IXsrQE6f0HXQz4iwxMI3w2jjK1SObn72WV t4mfa+jm+uK1vnHnLlllBZTftxntX9HM6r63Vu2lm0aslGDiHdYMMvsnoSeXIwYG 4svWCqISLbpLb7EuGh71hqdUpU5tmUYu4IefU1S0VFolNalPn1fxk6OI//u4SyW+ +lQtSGvNAU8Vvp/zBpRPfOvskQiIMRNo3ggF4iMVUxbQwuvxJSMbW++r22Z5 -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:21 2026 by rpki-client