$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133841.roa File: AS133841.roa (raw, json) Hash identifier: JZdkZqIkr5s2V56uxzzwlBtZ7KUy3p2J2Kb1SgtvDGk= Subject key identifier: D7:F9:17:C5:DC:0A:41:5F:A5:B9:23:67:88:61:9E:B7:32:D0:2F:F4 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 32A1AAFA5A04DAF64427E6F1267542AF7AC9A392 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133841.roa Signing time: Thu 23 Jul 2026 03:28:44 +0000 ROA not before: Thu 23 Jul 2026 03:23:44 +0000 ROA not after: Thu 22 Jul 2027 03:28:44 +0000 asID: 133841 IP address blocks: 210.79.158.0/23 maxlen: 24 2400:8000:4805::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a1:aa:fa:5a:04:da:f6:44:27:e6:f1:26:75:42:af:7a:c9:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 23 03:23:44 2026 GMT Not After : Jul 22 03:28:44 2027 GMT Subject: CN=D7F917C5DC0A415FA5B9236788619EB732D02FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:ae:dd:ed:9c:d9:80:0b:89:a9:7e:a3:ff: 7d:a0:d2:25:2a:7e:a2:ea:b7:a6:64:ac:8a:20:63: 94:3e:df:7c:44:a7:98:31:c0:51:d0:dc:f6:aa:81: 96:c7:e3:bc:c0:bd:0e:94:4b:83:c0:28:b6:88:fc: de:a3:f8:8d:b5:bc:aa:64:46:4e:75:82:8d:54:90: 1e:4c:aa:37:e6:49:0c:c8:ad:bc:b3:b5:21:8e:34: 7a:98:68:ee:a5:24:0d:85:aa:fc:62:46:9c:0a:7b: 7f:22:e6:26:dd:ad:63:bd:b6:ec:7e:65:aa:66:ec: 58:3b:99:bf:4d:fc:75:cb:f7:91:09:35:71:f1:df: 24:af:ee:d0:62:bf:cb:bd:ef:b3:28:16:21:eb:35: 77:f2:a3:06:a9:f1:6d:b3:6c:9d:1c:19:be:90:fa: 8f:db:4b:52:86:d5:81:44:6c:26:1c:c7:13:81:31: 57:56:ab:ec:dd:76:7d:95:0c:a8:d1:fd:48:aa:c4: e1:ff:ca:18:9a:4e:d0:4c:93:71:92:a7:48:fa:66: 1f:c7:64:f2:37:e2:d3:da:88:a3:93:61:d6:31:21: 3d:6c:bf:ca:09:5d:6e:bf:e0:71:c6:be:20:b6:67: ad:41:f0:c3:20:0e:09:25:d5:f1:6b:63:96:39:0a: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F9:17:C5:DC:0A:41:5F:A5:B9:23:67:88:61:9E:B7:32:D0:2F:F4 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.158.0/23 IPv6: 2400:8000:4805::/48 Signature Algorithm: sha256WithRSAEncryption 6a:ed:e2:74:a3:41:15:36:2d:85:e6:ad:c7:cf:bf:bd:8c:6c: ff:0b:ca:54:8a:d8:2d:07:99:3a:b2:05:e7:74:21:6d:25:dc: a7:8d:5c:c5:83:94:63:35:b7:ae:35:e1:10:57:f3:d7:ff:e3: 38:e0:83:84:8c:e9:0d:c4:7f:f3:16:cd:12:56:5f:75:94:fc: cf:53:43:aa:25:b5:10:f8:c3:59:f4:50:8e:05:8f:a0:ed:a7: ab:e3:55:d8:77:87:4e:06:3d:42:a9:cd:c1:b8:c0:a9:14:d0: 98:d2:c1:7e:1a:ef:1b:ce:11:b3:58:f9:92:25:78:57:ba:99: d4:a2:ca:4d:df:1b:82:96:6c:d2:88:1c:83:e6:1a:48:76:ad: a5:09:20:cc:1c:e1:25:e5:b1:6f:d4:1e:13:e6:ec:a4:39:9c: 1e:3e:a2:2b:a9:7c:7d:57:ce:3a:85:70:8f:84:60:e8:09:b7: d4:db:06:95:f3:7c:25:af:28:53:f7:69:1f:16:2e:5d:4f:90: 8e:64:f2:c8:e3:e0:38:3a:ab:06:10:29:9f:d2:d2:c2:c0:e3: 8c:2c:db:bf:cd:d0:93:d1:2a:a8:26:4b:b7:e5:5d:d9:50:65: c2:6c:16:f5:19:db:cb:ce:37:2c:85:b1:ed:f1:84:79:71:20: 3a:f4:e9:98 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMqGq+loE2vZEJ+bxJnVCr3rJo5IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyMzAzMjM0NFoX DTI3MDcyMjAzMjg0NFowMzExMC8GA1UEAxMoRDdGOTE3QzVEQzBBNDE1RkE1Qjky MzY3ODg2MTlFQjczMkQwMkZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMHrt3tnNmAC4mpfqP/faDSJSp+ouq3pmSsiiBjlD7ffESnmDHAUdDc9qqB lsfjvMC9DpRLg8Aotoj83qP4jbW8qmRGTnWCjVSQHkyqN+ZJDMitvLO1IY40epho 7qUkDYWq/GJGnAp7fyLmJt2tY7227H5lqmbsWDuZv038dcv3kQk1cfHfJK/u0GK/ y73vsygWIes1d/KjBqnxbbNsnRwZvpD6j9tLUobVgURsJhzHE4ExV1ar7N12fZUM qNH9SKrE4f/KGJpO0EyTcZKnSPpmH8dk8jfi09qIo5Nh1jEhPWy/ygldbr/gcca+ ILZnrUHwwyAOCSXV8WtjljkKFEECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTX+RfF 3ApBX6W5I2eIYZ63MtAv9DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzODQxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQB0k+eMA8EAgACMAkDBwAkAIAASAUwDQYJKoZIhvcNAQELBQADggEBAGrt 4nSjQRU2LYXmrcfPv72MbP8LylSK2C0HmTqyBed0IW0l3KeNXMWDlGM1t6414RBX 89f/4zjgg4SM6Q3Ef/MWzRJWX3WU/M9TQ6oltRD4w1n0UI4Fj6Dtp6vjVdh3h04G PUKpzcG4wKkU0JjSwX4a7xvOEbNY+ZIleFe6mdSiyk3fG4KWbNKIHIPmGkh2raUJ IMwc4SXlsW/UHhPm7KQ5nB4+oiupfH1XzjqFcI+EYOgJt9TbBpXzfCWvKFP3aR8W Ll1PkI5k8sjj4Dg6qwYQKZ/S0sLA44ws27/N0JPRKqgmS7flXdlQZcJsFvUZ28vO NyyFse3xhHlxIDr06Zg= -----END CERTIFICATE-----Generated at Thu Jul 23 23:50:24 2026 by rpki-client