$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131702.roa File: AS131702.roa (raw, json) Hash identifier: Ntiyo7fNpq7RgEb+zCRPgXl232vYepHSVcBmRClJolk= Subject key identifier: 20:7E:96:99:D3:35:54:B0:51:22:5C:6B:EA:47:CB:0E:40:0D:8E:BD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6C59743A0A156EA302F16D2C71B86AC286283540 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131702.roa Signing time: Fri 10 Jul 2026 12:58:14 +0000 ROA not before: Fri 10 Jul 2026 12:53:14 +0000 ROA not after: Fri 09 Jul 2027 12:58:14 +0000 asID: 131702 IP address blocks: 103.111.144.0/22 maxlen: 24 103.154.227.0/24 maxlen: 24 2400:dc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:59:74:3a:0a:15:6e:a3:02:f1:6d:2c:71:b8:6a:c2:86:28:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 10 12:53:14 2026 GMT Not After : Jul 9 12:58:14 2027 GMT Subject: CN=207E9699D33554B051225C6BEA47CB0E400D8EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:fe:c2:03:23:b7:e4:65:df:7c:e9:3f:0d: 15:4c:ca:db:c3:a4:39:32:e1:bb:47:fe:cf:46:55: a8:5e:59:dc:57:bf:48:1a:7e:ca:f8:63:8a:89:df: 5a:8a:48:8c:02:d2:55:cd:94:b8:97:57:41:e4:5a: e6:f3:92:c9:6b:96:73:4e:80:47:8a:15:83:67:06: 5c:ca:f6:86:bc:79:46:66:35:41:41:64:6e:b3:bd: 77:1d:ce:9c:d8:cd:ad:1f:7d:b5:ac:af:18:57:a9: e0:20:48:1a:5d:69:24:33:e1:54:ab:df:ad:ec:0a: dc:75:17:23:16:39:59:28:52:da:eb:17:7f:08:e1: 03:35:e9:6a:19:b7:56:bc:7e:77:10:19:c2:2e:06: ad:12:5a:05:69:ef:08:b3:14:0b:80:f3:07:47:f7: 93:44:26:4a:14:ff:bf:05:e5:c8:5f:51:4c:79:c2: ea:4e:3c:f8:a4:f4:a8:25:7d:34:12:24:fa:6d:6d: c0:87:08:cc:a4:b2:7e:97:31:06:18:79:c3:18:c1: 8d:db:ad:dd:56:47:fd:11:b0:33:6d:e3:83:5d:b7: b2:32:c3:37:e2:bb:d0:10:1d:af:e2:0d:68:f3:e7: 0f:be:99:76:0a:c3:10:67:6f:80:b5:1e:69:6b:44: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:96:99:D3:35:54:B0:51:22:5C:6B:EA:47:CB:0E:40:0D:8E:BD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131702.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.144.0/22 103.154.227.0/24 IPv6: 2400:dc00::/32 Signature Algorithm: sha256WithRSAEncryption 92:17:6d:22:13:0e:a4:4f:32:51:65:e6:57:93:c0:fb:dd:67: 7f:52:62:04:da:eb:3d:1e:c3:b6:d9:94:bd:ab:97:68:a0:1e: fb:de:23:a9:2a:b5:4f:29:d9:e4:e3:d1:ca:af:23:a9:ce:58: b0:24:be:44:ae:0a:2b:28:f4:62:92:3e:f5:aa:2e:01:97:3b: 7b:61:32:bc:d3:50:46:b4:b4:5e:76:77:e6:1a:ac:dc:92:ce: 90:3b:b5:25:ae:01:52:4c:02:a7:07:b3:da:01:b4:c6:7e:17: f9:b8:c0:2a:8e:f8:2b:2f:47:4b:51:40:e5:e3:c1:62:da:36: 0d:c1:9f:30:16:f4:8b:a6:0c:15:42:a4:d7:98:65:f1:d2:66: 08:3e:e1:bb:36:28:8b:ce:57:b2:12:d9:af:79:bd:79:3d:22: 8d:6b:7e:b0:bc:85:54:d0:4e:2f:a4:59:c3:42:43:75:67:7b: 7b:fe:32:31:ff:50:85:be:6e:77:28:2f:91:68:4e:72:56:9a: 5c:ec:55:18:85:d9:89:3d:c6:bc:1d:2c:e4:19:8e:ec:80:bb: a5:7a:8d:b2:ac:29:e4:c1:18:be:27:07:19:f4:17:f5:f4:f5: 1e:5d:58:91:0f:91:7d:f2:d5:a6:5e:9e:16:c4:70:e0:02:92: c7:4d:30:29 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUbFl0OgoVbqMC8W0scbhqwoYoNUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcxMDEyNTMxNFoX DTI3MDcwOTEyNTgxNFowMzExMC8GA1UEAxMoMjA3RTk2OTlEMzM1NTRCMDUxMjI1 QzZCRUE0N0NCMEU0MDBEOEVCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6p/sIDI7fkZd986T8NFUzK28OkOTLhu0f+z0ZVqF5Z3Fe/SBp+yvhjionf WopIjALSVc2UuJdXQeRa5vOSyWuWc06AR4oVg2cGXMr2hrx5RmY1QUFkbrO9dx3O nNjNrR99tayvGFep4CBIGl1pJDPhVKvfrewK3HUXIxY5WShS2usXfwjhAzXpahm3 Vrx+dxAZwi4GrRJaBWnvCLMUC4DzB0f3k0QmShT/vwXlyF9RTHnC6k48+KT0qCV9 NBIk+m1twIcIzKSyfpcxBhh5wxjBjdut3VZH/RGwM23jg123sjLDN+K70BAdr+IN aPPnD76ZdgrDEGdvgLUeaWtELlMCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBQgfpaZ 0zVUsFEiXGvqR8sOQA2OvTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxNzAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQCZ2+QAwQAZ5rjMA0EAgACMAcDBQAkANwAMA0GCSqGSIb3DQEBCwUAA4IB AQCSF20iEw6kTzJRZeZXk8D73Wd/UmIE2us9HsO22ZS9q5dooB773iOpKrVPKdnk 49HKryOpzliwJL5ErgorKPRikj71qi4Blzt7YTK801BGtLRednfmGqzcks6QO7Ul rgFSTAKnB7PaAbTGfhf5uMAqjvgrL0dLUUDl48Fi2jYNwZ8wFvSLpgwVQqTXmGXx 0mYIPuG7NiiLzleyEtmveb15PSKNa36wvIVU0E4vpFnDQkN1Z3t7/jIx/1CFvm53 KC+RaE5yVppc7FUYhdmJPca8HSzkGY7sgLuleo2yrCnkwRi+JwcZ9Bf19PUeXViR D5F98tWmXp4WxHDgApLHTTAp -----END CERTIFICATE-----Generated at Fri Jul 24 01:06:04 2026 by rpki-client