$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134654.roa File: AS134654.roa (raw, json) Hash identifier: mK/KZefU0DAMVO9dab463pTzrYzCmnMJc2f+W7nZgno= Subject key identifier: F9:95:DA:30:86:97:44:96:85:C5:24:88:15:2E:0C:38:8D:C7:88:74 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3DF733B438D3BA65669C7D4FC0F1A5EA25746FC0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134654.roa Signing time: Sun 03 May 2026 02:12:47 +0000 ROA not before: Sun 03 May 2026 02:07:47 +0000 ROA not after: Sun 02 May 2027 02:12:47 +0000 asID: 134654 IP address blocks: 103.147.254.0/23 maxlen: 24 103.147.254.0/24 maxlen: 24 175.184.238.0/23 maxlen: 24 2405:c5c0:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f7:33:b4:38:d3:ba:65:66:9c:7d:4f:c0:f1:a5:ea:25:74:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:07:47 2026 GMT Not After : May 2 02:12:47 2027 GMT Subject: CN=F995DA308697449685C52488152E0C388DC78874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:8d:83:b1:47:2d:ff:2b:d1:67:bf:c2:86: ef:13:ed:ed:17:20:0f:50:99:39:3b:ed:50:2f:d7: f8:f4:7f:d1:36:26:4b:d0:d9:7b:73:69:b6:75:69: 62:04:ab:8e:99:6a:71:80:46:6a:14:ec:18:bc:00: b3:54:86:0b:f6:e0:17:60:ad:45:82:c3:ea:58:77: 54:f9:54:6f:94:be:f7:43:3f:f4:bd:37:fa:f1:51: fd:f0:01:09:66:67:c3:b9:0a:e6:c3:60:d2:54:28: e4:c0:41:33:38:b7:0a:09:b9:92:de:81:9d:a1:30: 76:2a:eb:f6:72:f4:5a:a9:41:d4:13:1a:e6:f1:57: fc:7b:96:e3:f3:ca:1f:8c:ba:fe:89:27:ef:91:ca: 1b:0f:c4:a6:ba:ed:75:ee:69:c2:4a:ae:4a:00:68: 7d:aa:45:f5:1c:e6:f5:4b:7a:80:36:a0:40:d7:9c: c4:63:7a:e2:92:8d:0c:5f:fc:e4:f5:4d:bf:2e:64: 63:b4:b9:de:a1:a0:aa:36:f7:15:a9:f4:61:d0:48: 21:f4:77:0f:a7:06:57:97:66:f9:64:77:97:d3:d4: 9c:c4:1f:81:44:b6:82:2b:49:ce:e6:c7:58:3c:73: e5:b9:e6:55:32:c4:e1:54:b7:e7:f1:29:02:68:14: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:95:DA:30:86:97:44:96:85:C5:24:88:15:2E:0C:38:8D:C7:88:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134654.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.254.0/23 175.184.238.0/23 IPv6: 2405:c5c0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 63:b6:99:4a:19:62:bd:73:3a:af:85:4d:29:1f:6c:bb:82:79: 31:6d:74:c8:36:4b:17:b5:42:a9:5c:04:2e:58:40:b7:19:66: 3f:ad:4b:44:e5:d8:17:b1:91:41:50:40:57:4c:ab:a6:5a:ca: f4:5e:3c:78:f8:38:ac:f5:a6:33:db:64:0b:3d:72:7c:4c:ac: a7:1a:81:5b:b1:a5:29:5f:6e:90:53:f2:90:b9:0c:49:78:9b: 82:cb:0c:f6:c3:66:26:6a:f8:62:cc:88:a8:46:d4:fd:41:08: d7:a3:49:7b:33:40:c2:2f:45:c9:7a:7a:7c:f7:44:0b:b3:f7: 81:71:9b:3e:ac:d3:66:6d:49:6e:f8:24:83:d6:6a:1a:c9:a9: f8:b7:97:d0:df:37:a9:e1:92:9f:cf:d9:4c:b3:28:a4:8e:13: 8d:29:3b:cf:e7:63:47:3d:b2:87:42:11:8c:5e:13:06:38:0b: 44:d7:5a:7a:d9:49:74:84:36:23:94:61:fc:4f:49:b0:e9:56: 31:29:0e:22:71:00:2c:f4:b9:3d:da:90:f9:a1:57:c4:f0:a4: 32:8a:ba:78:4b:a5:31:fc:78:c7:7f:cf:28:d8:a9:97:2e:cc: 59:61:73:59:52:70:ae:de:ed:cc:bc:0d:ce:2f:2a:5a:51:a1: e2:05:fa:b4 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUPfcztDjTumVmnH1PwPGl6iV0b8AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMDc0N1oX DTI3MDUwMjAyMTI0N1owMzExMC8GA1UEAxMoRjk5NURBMzA4Njk3NDQ5Njg1QzUy NDg4MTUyRTBDMzg4REM3ODg3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1mjYOxRy3/K9Fnv8KG7xPt7RcgD1CZOTvtUC/X+PR/0TYmS9DZe3NptnVp YgSrjplqcYBGahTsGLwAs1SGC/bgF2CtRYLD6lh3VPlUb5S+90M/9L03+vFR/fAB CWZnw7kK5sNg0lQo5MBBMzi3Cgm5kt6BnaEwdirr9nL0WqlB1BMa5vFX/HuW4/PK H4y6/okn75HKGw/Eprrtde5pwkquSgBofapF9Rzm9Ut6gDagQNecxGN64pKNDF/8 5PVNvy5kY7S53qGgqjb3Fan0YdBIIfR3D6cGV5dm+WR3l9PUnMQfgUS2gitJzubH WDxz5bnmVTLE4VS35/EpAmgU/ccCAwEAAaOCAeIwggHeMB0GA1UdDgQWBBT5ldow hpdEloXFJIgVLgw4jceIdDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIA ATAMAwQBZ5P+AwQBr7juMA4EAgACMAgDBgAkBcXA/zANBgkqhkiG9w0BAQsFAAOC AQEAY7aZShlivXM6r4VNKR9su4J5MW10yDZLF7VCqVwELlhAtxlmP61LROXYF7GR QVBAV0yrplrK9F48ePg4rPWmM9tkCz1yfEyspxqBW7GlKV9ukFPykLkMSXibgssM 9sNmJmr4YsyIqEbU/UEI16NJezNAwi9FyXp6fPdEC7P3gXGbPqzTZm1Jbvgkg9Zq Gsmp+LeX0N83qeGSn8/ZTLMopI4TjSk7z+djRz2yh0IRjF4TBjgLRNdaetlJdIQ2 I5Rh/E9JsOlWMSkOInEALPS5PdqQ+aFXxPCkMoq6eEulMfx4x3/PKNiply7MWWFz WVJwrt7tzLwNzi8qWlGh4gX6tA== -----END CERTIFICATE-----Generated at Tue May 12 22:56:49 2026 by rpki-client