$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa File: AS134643.roa (raw, json) Hash identifier: IJW6ejdO4UzdwR8yxBB0hYIQ4Uogb087uGuQ5tmqxRo= Subject key identifier: 75:54:54:A6:2D:41:F4:27:55:5B:C9:6D:F9:63:40:F4:55:46:45:F8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 434E6BE29C0CE39E1D52DAAD6093D078E7BBB803 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa Signing time: Sun 03 May 2026 05:54:53 +0000 ROA not before: Sun 03 May 2026 05:49:53 +0000 ROA not after: Sun 02 May 2027 05:54:53 +0000 asID: 134643 IP address blocks: 103.207.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4e:6b:e2:9c:0c:e3:9e:1d:52:da:ad:60:93:d0:78:e7:bb:b8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:49:53 2026 GMT Not After : May 2 05:54:53 2027 GMT Subject: CN=755454A62D41F427555BC96DF96340F4554645F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3d:0d:fa:12:a7:77:93:4a:26:23:3f:93:6d: 21:8b:17:1c:52:5d:37:72:08:fc:c1:0e:b2:31:be: 4a:fc:f7:e5:bc:c2:04:5e:94:e7:69:d8:a7:c3:a1: 88:6f:c2:70:62:f0:ea:ca:3c:dd:c6:d3:47:ab:8b: 98:99:74:ba:d0:a8:4f:0a:49:ff:5a:f8:06:7d:57: c0:a8:4e:e0:f0:eb:2c:c1:42:4a:c1:79:dd:07:85: b6:c0:14:b1:6b:93:e5:a6:78:cf:ad:ba:3e:db:16: ff:08:fd:d3:c9:06:f0:91:f0:28:e8:c9:96:42:3e: 66:7e:f6:ef:79:7e:38:c2:36:b1:d9:29:71:b4:6f: 8b:34:9c:06:43:4c:09:82:fa:fb:87:38:68:ab:24: 5f:2a:a1:d4:a6:45:a7:be:14:b7:05:a1:11:ea:48: a0:b9:85:3b:fe:90:cb:c2:db:23:f4:04:cb:09:7b: 6a:68:2d:76:b7:a9:1c:4c:57:5e:b3:ce:b1:5f:e8: b5:74:50:a4:33:eb:c2:06:6a:2a:f4:83:aa:d1:2e: 19:c0:0b:54:c4:e0:2a:6c:fe:bd:79:1b:e7:bb:58: f6:32:3c:55:5b:5b:d0:17:38:f0:cf:65:22:8d:e5: 2b:a8:6b:5f:34:a2:5a:fa:fa:77:18:bb:50:87:70: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:54:54:A6:2D:41:F4:27:55:5B:C9:6D:F9:63:40:F4:55:46:45:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 Signature Algorithm: sha256WithRSAEncryption 54:b1:14:cb:38:a6:5f:2d:a9:43:78:fd:86:9d:bc:4f:ad:ab: 7b:94:7a:bb:f6:c3:bc:9b:7b:3a:04:41:b6:00:37:ef:72:d7: 30:de:27:8a:01:2a:19:87:f4:9f:21:da:19:82:cd:a1:22:73: 17:d5:54:5c:84:84:70:1f:7f:c2:d5:37:33:15:19:0d:50:6a: a3:a0:77:4f:66:85:ac:3c:db:1e:8f:83:f5:a7:26:d8:76:c2: 9e:9f:b7:a7:ea:6d:34:36:c1:79:55:d5:c5:60:88:4f:7f:c2: 9e:13:83:07:68:f9:25:ed:1a:cd:f8:5f:99:1c:99:c2:d2:2b: 01:51:d9:2a:5a:2a:c4:9e:48:e9:40:d4:32:d2:78:28:92:3a: 21:8b:2b:0e:2d:60:8c:26:e7:f3:bd:26:9c:cd:50:0c:2c:ec: 80:aa:2c:ef:a2:29:06:9a:ec:59:06:7a:0d:bb:66:9b:f4:bc: 7c:95:93:bd:2f:cf:4c:62:9c:d0:4d:af:98:23:65:60:ee:1e: 33:95:8b:b6:0c:73:68:9d:a1:f1:19:0e:ac:16:4d:9d:f4:6a: a1:6c:19:de:dc:54:0a:7f:ab:3b:e6:f5:40:64:cd:b8:cc:39: 6f:5c:9d:b5:d7:38:66:db:9d:79:1b:2e:d4:d5:d3:b7:0a:ab: 9a:cd:fe:bc -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQ05r4pwM454dUtqtYJPQeOe7uAMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NDk1M1oX DTI3MDUwMjA1NTQ1M1owMzExMC8GA1UEAxMoNzU1NDU0QTYyRDQxRjQyNzU1NUJD OTZERjk2MzQwRjQ1NTQ2NDVGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIk9DfoSp3eTSiYjP5NtIYsXHFJdN3II/MEOsjG+Svz35bzCBF6U52nYp8Oh iG/CcGLw6so83cbTR6uLmJl0utCoTwpJ/1r4Bn1XwKhO4PDrLMFCSsF53QeFtsAU sWuT5aZ4z626PtsW/wj908kG8JHwKOjJlkI+Zn7273l+OMI2sdkpcbRvizScBkNM CYL6+4c4aKskXyqh1KZFp74UtwWhEepIoLmFO/6Qy8LbI/QEywl7amgtdrepHExX XrPOsV/otXRQpDPrwgZqKvSDqtEuGcALVMTgKmz+vXkb57tY9jI8VVtb0Bc48M9l Io3lK6hrXzSiWvr6dxi7UIdw31UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR1VFSm LUH0J1VbyW35Y0D0VUZF+DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ89gMA0GCSqGSIb3DQEBCwUAA4IBAQBUsRTLOKZfLalDeP2GnbxPrat7 lHq79sO8m3s6BEG2ADfvctcw3ieKASoZh/SfIdoZgs2hInMX1VRchIRwH3/C1Tcz FRkNUGqjoHdPZoWsPNsej4P1pybYdsKen7en6m00NsF5VdXFYIhPf8KeE4MHaPkl 7RrN+F+ZHJnC0isBUdkqWirEnkjpQNQy0ngokjohiysOLWCMJufzvSaczVAMLOyA qizvoikGmuxZBnoNu2ab9Lx8lZO9L89MYpzQTa+YI2Vg7h4zlYu2DHNonaHxGQ6s Fk2d9GqhbBne3FQKf6s75vVAZM24zDlvXJ211zhm2515Gy7U1dO3Cquazf68 -----END CERTIFICATE-----Generated at Tue May 12 22:43:05 2026 by rpki-client