$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133797.roa File: AS133797.roa (raw, json) Hash identifier: rUg8IcE4p+5a+NbLLqYZcdHIB6ir3OCA0vOZ0/0Plhs= Subject key identifier: 65:E7:56:D2:1E:05:3F:6C:81:D8:68:F6:06:6C:7B:A5:A4:48:B4:1F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2870F526EB917560439EFC61A607CA23D98A9CE9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133797.roa Signing time: Mon 04 May 2026 06:47:30 +0000 ROA not before: Mon 04 May 2026 06:42:30 +0000 ROA not after: Mon 03 May 2027 06:47:30 +0000 asID: 133797 IP address blocks: 45.122.56.0/22 maxlen: 22 45.122.56.0/22 maxlen: 24 103.43.128.0/22 maxlen: 22 103.43.128.0/22 maxlen: 24 2402:3480::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:f5:26:eb:91:75:60:43:9e:fc:61:a6:07:ca:23:d9:8a:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 4 06:42:30 2026 GMT Not After : May 3 06:47:30 2027 GMT Subject: CN=65E756D21E053F6C81D868F6066C7BA5A448B41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:e6:65:1e:a4:76:de:0d:2c:26:8b:82:03: 0a:a0:52:a4:d9:60:df:48:98:63:67:82:de:5c:99: c1:67:68:2e:52:98:63:9f:61:65:5b:de:9a:0e:52: 9c:99:8e:49:65:a0:f9:14:3b:da:6f:b1:e2:07:a7: 0d:57:f4:34:74:48:97:17:14:6b:f2:09:38:69:54: af:23:19:c4:9f:b8:57:96:f5:19:18:51:40:6a:cb: 9a:a9:3e:fe:a8:f9:1d:6f:68:4b:1d:bc:d0:9a:da: 96:06:4a:e2:cf:cf:86:cc:85:cb:0d:36:d0:fe:61: 73:e2:83:62:7d:91:f7:be:44:69:54:85:64:75:d4: 79:59:62:1e:a1:9d:b3:d4:8c:92:fa:ab:60:c5:aa: 45:82:5e:de:92:bc:b4:df:91:d5:7e:84:36:d4:e7: 68:e6:6b:eb:0c:b0:b2:3e:ab:b5:ee:2b:03:5e:da: 01:f0:9b:c8:7b:a0:1a:15:0f:55:5d:d7:00:0d:2b: a0:46:91:89:19:cc:46:d1:8d:6e:c9:36:27:4e:07: 32:db:e3:9f:d8:fe:2b:7a:f6:77:3f:28:7b:46:38: 25:1e:67:3c:8b:e2:1a:24:44:dd:aa:97:20:85:3a: f2:30:80:6b:53:7e:a4:80:56:09:61:68:41:48:a4: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E7:56:D2:1E:05:3F:6C:81:D8:68:F6:06:6C:7B:A5:A4:48:B4:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133797.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.122.56.0/22 103.43.128.0/22 IPv6: 2402:3480::/32 Signature Algorithm: sha256WithRSAEncryption 15:3a:f7:ca:98:f2:ed:79:1c:5f:49:46:06:63:6b:d8:4f:22: 31:bf:cb:0a:35:45:23:01:2b:80:51:aa:0e:6a:6a:71:69:e5: c8:24:40:ac:7d:57:bf:ea:51:64:a7:dd:f6:7b:88:61:98:70: 44:ae:12:0d:fc:4e:83:f7:14:77:62:10:b2:8d:dc:cd:44:aa: cd:a5:6c:65:65:4c:ef:19:5e:9c:d6:b0:fa:29:41:50:88:12: 29:f6:2c:8e:e5:a9:f7:70:a0:b9:cf:95:34:e4:01:5c:51:cd: bb:65:bc:ff:0e:0e:1e:10:18:62:6d:c3:57:34:db:9b:7c:ac: 40:5f:cc:2f:31:81:2e:7f:f7:ae:d3:7b:bb:54:a7:9d:ac:23: ec:c5:a0:75:bf:46:0d:3a:42:d6:7b:b3:bc:7d:43:f3:69:3e: b1:9f:ac:7d:19:fd:af:6b:e4:88:9a:49:9e:bd:9b:05:35:14: 83:4e:e7:cb:4d:e6:f3:57:c6:24:4b:26:2e:ae:50:5f:72:39: 8f:19:cd:b0:42:8d:de:2d:aa:6b:65:46:8a:ac:b1:5d:9a:b6: 3e:88:2c:7e:f3:b2:31:ca:88:de:7f:8e:44:9d:b7:75:b8:0c: 2b:5d:1e:72:91:cf:13:3e:3c:a5:5f:ee:5a:f4:db:36:13:a6: 61:4c:3d:3f -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUKHD1JuuRdWBDnvxhpgfKI9mKnOkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwNDA2NDIzMFoX DTI3MDUwMzA2NDczMFowMzExMC8GA1UEAxMoNjVFNzU2RDIxRTA1M0Y2QzgxRDg2 OEY2MDY2QzdCQTVBNDQ4QjQxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoO5mUepHbeDSwmi4IDCqBSpNlg30iYY2eC3lyZwWdoLlKYY59hZVvemg5S nJmOSWWg+RQ72m+x4genDVf0NHRIlxcUa/IJOGlUryMZxJ+4V5b1GRhRQGrLmqk+ /qj5HW9oSx280JralgZK4s/PhsyFyw020P5hc+KDYn2R975EaVSFZHXUeVliHqGd s9SMkvqrYMWqRYJe3pK8tN+R1X6ENtTnaOZr6wywsj6rte4rA17aAfCbyHugGhUP VV3XAA0roEaRiRnMRtGNbsk2J04HMtvjn9j+K3r2dz8oe0Y4JR5nPIviGiRE3aqX IIU68jCAa1N+pIBWCWFoQUiki7UCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRl51bS HgU/bIHYaPYGbHulpEi0HzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzNzk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQCLXo4AwQCZyuAMA0EAgACMAcDBQAkAjSAMA0GCSqGSIb3DQEBCwUAA4IB AQAVOvfKmPLteRxfSUYGY2vYTyIxv8sKNUUjASuAUaoOampxaeXIJECsfVe/6lFk p932e4hhmHBErhIN/E6D9xR3YhCyjdzNRKrNpWxlZUzvGV6c1rD6KUFQiBIp9iyO 5an3cKC5z5U05AFcUc27Zbz/Dg4eEBhibcNXNNubfKxAX8wvMYEuf/eu03u7VKed rCPsxaB1v0YNOkLWe7O8fUPzaT6xn6x9Gf2va+SImkmevZsFNRSDTufLTebzV8Yk SyYurlBfcjmPGc2wQo3eLaprZUaKrLFdmrY+iCx+87Ixyojef45Enbd1uAwrXR5y kc8TPjylX+5a9Ns2E6ZhTD0/ -----END CERTIFICATE-----Generated at Tue May 12 22:42:20 2026 by rpki-client