$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136131.roa File: AS136131.roa (raw, json) Hash identifier: R2AOW1IIPCW2Vk/0IaPC2Af6M3QRQODgyen+0g/J+TM= Subject key identifier: 9B:C6:29:9C:8B:4A:E1:C1:FC:F5:E1:A0:7B:ED:B9:48:B7:7D:23:AA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 648A9350591FE7934AE2F2D2900ED72C8B0E3A99 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136131.roa Signing time: Sun 03 May 2026 03:39:00 +0000 ROA not before: Sun 03 May 2026 03:34:00 +0000 ROA not after: Sun 02 May 2027 03:39:00 +0000 asID: 136131 IP address blocks: 103.97.77.0/24 maxlen: 24 103.97.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:93:50:59:1f:e7:93:4a:e2:f2:d2:90:0e:d7:2c:8b:0e:3a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 03:34:00 2026 GMT Not After : May 2 03:39:00 2027 GMT Subject: CN=9BC6299C8B4AE1C1FCF5E1A07BEDB948B77D23AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:b2:e1:87:b2:52:c4:d8:e5:a3:ca:a9:be: 70:92:57:9e:e5:24:a2:5e:51:b6:ee:af:be:15:7e: 95:d2:8e:1f:76:60:1c:b1:ee:80:6f:22:bd:99:e4: c9:b4:b6:1e:f8:f7:fb:19:e1:4a:94:8b:1b:3b:02: 52:9d:6e:42:07:f1:d9:82:1b:28:a7:c1:78:3c:73: 98:49:b7:fb:f0:7d:f2:61:45:5c:2b:b5:30:fe:40: 78:86:d2:4c:17:63:91:9d:9a:91:3f:45:2a:1b:58: 56:57:26:30:b2:43:71:2f:37:88:0f:c7:0d:3c:7c: f4:3c:8a:24:3e:d9:06:7c:ed:a4:d9:52:05:77:6e: 5e:fb:b3:0c:f2:7a:0f:7f:96:bf:9e:b3:ba:1b:cc: 3b:a1:2f:84:fe:9f:c5:e0:a6:d6:4e:40:38:8c:57: 03:fd:49:5e:73:dd:0a:85:b8:2c:0b:9a:90:89:40: c0:ac:12:ad:41:19:c3:d4:1e:ad:62:ed:6d:cc:47: 4f:e8:02:e6:d1:53:0d:a8:79:65:f7:89:20:29:4b: c2:55:3d:66:7c:bf:c0:8e:10:b4:bd:c2:ea:94:29: 69:5f:89:89:d0:75:2e:2b:f2:22:bc:f6:73:a3:35: e9:22:41:6e:59:25:76:9e:b1:62:2f:6e:4a:d4:29: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:29:9C:8B:4A:E1:C1:FC:F5:E1:A0:7B:ED:B9:48:B7:7D:23:AA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.77.0/24 103.97.79.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:b8:00:c2:31:65:ec:28:e7:50:34:22:4f:4b:0f:4e:a9:6b: 31:22:96:ba:bb:25:d3:bc:f0:d2:af:ec:8c:25:40:95:b2:36: 5d:8b:03:11:ac:fd:6c:d7:82:9a:29:79:e8:5d:7b:0a:65:01: 35:b5:7e:50:9d:b3:6f:6e:22:4d:40:51:e6:78:3d:c6:53:a0: 4e:9b:2e:03:8c:87:79:2d:94:9d:ad:fd:21:a1:f5:22:6b:52: 2c:ee:ce:ac:eb:5a:39:d0:c9:3e:2a:39:24:7b:67:16:20:d2: 86:95:3a:18:4c:c5:bd:ac:5e:2a:82:de:57:7b:20:6d:f7:e1: 52:f4:ff:fa:15:4c:e2:0c:37:e1:fd:7f:0f:b5:16:69:26:6b: a8:37:3a:74:2f:a9:ee:d6:57:d2:f8:1c:a9:c1:46:cd:7c:96: 5c:1b:2e:22:e9:b4:28:6a:8f:01:38:9d:91:44:de:58:f8:17: 86:fb:bf:52:34:d0:47:5b:7a:cd:2a:f5:44:3e:85:23:d4:45: c0:d6:68:69:9d:b9:92:e7:3a:7d:0a:52:67:2c:30:b0:5b:ec: 32:b1:ab:4b:5f:21:22:38:fa:73:d9:27:a2:dc:23:6d:9e:7c: 8f:ac:46:b6:30:0c:fc:73:e6:60:f8:ec:3c:95:16:82:be:b1: 66:d4:4b:5b -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUZIqTUFkf55NK4vLSkA7XLIsOOpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAzMzQwMFoX DTI3MDUwMjAzMzkwMFowMzExMC8GA1UEAxMoOUJDNjI5OUM4QjRBRTFDMUZDRjVF MUEwN0JFREI5NDhCNzdEMjNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqYsuGHslLE2OWjyqm+cJJXnuUkol5Rtu6vvhV+ldKOH3ZgHLHugG8ivZnk ybS2Hvj3+xnhSpSLGzsCUp1uQgfx2YIbKKfBeDxzmEm3+/B98mFFXCu1MP5AeIbS TBdjkZ2akT9FKhtYVlcmMLJDcS83iA/HDTx89DyKJD7ZBnztpNlSBXduXvuzDPJ6 D3+Wv56zuhvMO6EvhP6fxeCm1k5AOIxXA/1JXnPdCoW4LAuakIlAwKwSrUEZw9Qe rWLtbcxHT+gC5tFTDah5ZfeJIClLwlU9Zny/wI4QtL3C6pQpaV+JidB1LivyIrz2 c6M16SJBblkldp6xYi9uStQpi1kCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBSbximc i0rhwfz14aB77blIt30jqjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2MTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ2FNAwQAZ2FPMA0GCSqGSIb3DQEBCwUAA4IBAQAMuADCMWXsKOdQNCJP Sw9OqWsxIpa6uyXTvPDSr+yMJUCVsjZdiwMRrP1s14KaKXnoXXsKZQE1tX5QnbNv biJNQFHmeD3GU6BOmy4DjId5LZSdrf0hofUia1Is7s6s61o50Mk+Kjkke2cWINKG lToYTMW9rF4qgt5XeyBt9+FS9P/6FUziDDfh/X8PtRZpJmuoNzp0L6nu1lfS+Byp wUbNfJZcGy4i6bQoao8BOJ2RRN5Y+BeG+79SNNBHW3rNKvVEPoUj1EXA1mhpnbmS 5zp9ClJnLDCwW+wysatLXyEiOPpz2Sei3CNtnnyPrEa2MAz8c+Zg+Ow8lRaCvrFm 1Etb -----END CERTIFICATE-----Generated at Tue May 12 22:43:43 2026 by rpki-client