$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136403.roa File: AS136403.roa (raw, json) Hash identifier: OHo8bBh9rzruI2VJC59B5XA+vsi8hH/hREvY4zsysGc= Subject key identifier: 5E:06:C0:44:9E:7B:63:DB:ED:FA:F3:E8:EF:19:F7:B8:94:D5:2A:57 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 66CC94C5505CD2FA0E48EFCE475145CF34D5C2DD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136403.roa Signing time: Fri 03 Jul 2026 08:02:18 +0000 ROA not before: Fri 03 Jul 2026 07:57:18 +0000 ROA not after: Fri 02 Jul 2027 08:02:18 +0000 asID: 136403 IP address blocks: 2001:df7:27c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cc:94:c5:50:5c:d2:fa:0e:48:ef:ce:47:51:45:cf:34:d5:c2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 3 07:57:18 2026 GMT Not After : Jul 2 08:02:18 2027 GMT Subject: CN=5E06C0449E7B63DBEDFAF3E8EF19F7B894D52A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:de:fe:09:0b:72:d8:8f:d3:75:1a:9c:82: 14:6c:84:2a:e0:e8:41:61:a2:34:3a:6c:a5:a5:a8: e0:22:23:c3:02:d9:7c:6b:dd:7f:be:5f:08:2b:15: 64:5d:21:be:df:aa:4e:54:62:4a:44:fb:6a:d0:99: 49:d9:ab:80:40:e3:ec:d1:21:83:7e:75:8e:92:0a: 04:ae:a0:40:e0:d5:59:04:63:3b:93:ff:d4:55:be: 9e:a3:a2:df:4f:5b:28:dd:dd:ae:e7:89:b2:3a:e6: af:38:4e:f1:05:80:92:a5:c2:86:45:53:5e:f2:81: 0d:60:c1:e7:6c:01:b2:7e:79:60:7e:c3:87:a1:4b: d9:28:16:09:04:d4:9c:03:21:87:e1:67:82:f2:90: d8:b8:7d:30:73:59:68:ce:3e:5e:59:2a:71:90:76: 54:5a:e2:45:cf:79:3d:5b:41:75:d3:41:ac:5e:b4: 0c:50:30:8d:d0:ce:f6:37:eb:39:2e:44:c0:73:36: 47:aa:d1:cb:bf:da:38:09:89:62:61:4f:24:60:f8: e4:e7:90:07:5c:59:d7:0e:c6:14:eb:3e:16:99:07: 36:93:d3:b3:51:82:26:78:b4:75:83:5f:28:d7:cb: b0:87:6d:d0:cf:3c:0f:74:0e:16:05:06:aa:27:e7: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:06:C0:44:9E:7B:63:DB:ED:FA:F3:E8:EF:19:F7:B8:94:D5:2A:57 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136403.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:27c0::/48 Signature Algorithm: sha256WithRSAEncryption 93:38:3f:fb:3d:1c:6a:63:ce:f7:b2:d9:11:ec:e7:35:d3:b3: 65:58:e0:a8:11:67:c0:39:11:4a:f7:23:45:a4:5b:f8:04:20: c5:ed:5f:a8:d4:e6:5c:e6:5b:a3:ba:dd:f0:3f:a8:0b:34:c1: 78:c9:33:21:fb:b1:5f:7d:9c:18:d2:cf:e5:37:bd:57:af:5d: 90:34:26:67:76:d1:25:7f:40:1e:ad:99:ea:6c:f5:15:76:4a: 2f:f9:9d:5d:e3:b6:0e:df:1f:2e:1a:7b:64:d0:14:81:09:5c: 80:ed:ac:c8:5b:39:28:9c:62:ab:44:72:76:81:cd:b0:2e:22: ff:b8:af:66:34:17:50:51:07:2c:74:5c:8c:63:07:39:4f:17: c4:4b:15:0c:df:b4:be:d0:2c:42:be:99:fe:e8:74:1f:d6:d9: 29:a7:4c:2a:5b:d5:56:d2:a9:98:01:31:57:09:63:5e:95:a8: e3:1b:ca:15:90:75:d8:f5:4a:96:8d:79:0c:e8:72:82:99:0d: 52:76:9b:4e:d2:12:47:e6:59:d1:38:ae:80:55:60:18:41:2b: 83:2b:d5:ee:b1:87:6d:bb:a9:92:b3:ee:18:f6:b4:93:fe:8f: e9:e1:a7:92:5a:c5:2c:20:08:23:3e:e6:ec:28:c2:47:0e:0d: 05:3a:cf:8b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZsyUxVBc0voOSO/OR1FFzzTVwt0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcwMzA3NTcxOFoX DTI3MDcwMjA4MDIxOFowMzExMC8GA1UEAxMoNUUwNkMwNDQ5RTdCNjNEQkVERkFG M0U4RUYxOUY3Qjg5NEQ1MkE1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANN83v4JC3LYj9N1GpyCFGyEKuDoQWGiNDpspaWo4CIjwwLZfGvdf75fCCsV ZF0hvt+qTlRiSkT7atCZSdmrgEDj7NEhg351jpIKBK6gQODVWQRjO5P/1FW+nqOi 309bKN3drueJsjrmrzhO8QWAkqXChkVTXvKBDWDB52wBsn55YH7Dh6FL2SgWCQTU nAMhh+FngvKQ2Lh9MHNZaM4+XlkqcZB2VFriRc95PVtBddNBrF60DFAwjdDO9jfr OS5EwHM2R6rRy7/aOAmJYmFPJGD45OeQB1xZ1w7GFOs+FpkHNpPTs1GCJni0dYNf KNfLsIdt0M88D3QOFgUGqifnRu8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBReBsBE nntj2+368+jvGfe4lNUqVzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2NDAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9yfAMA0GCSqGSIb3DQEBCwUAA4IBAQCTOD/7PRxqY873stkR7Oc1 07NlWOCoEWfAORFK9yNFpFv4BCDF7V+o1OZc5lujut3wP6gLNMF4yTMh+7FffZwY 0s/lN71Xr12QNCZndtElf0AerZnqbPUVdkov+Z1d47YO3x8uGntk0BSBCVyA7azI WzkonGKrRHJ2gc2wLiL/uK9mNBdQUQcsdFyMYwc5TxfESxUM37S+0CxCvpn+6HQf 1tkpp0wqW9VW0qmYATFXCWNelajjG8oVkHXY9UqWjXkM6HKCmQ1SdptO0hJH5lnR OK6AVWAYQSuDK9XusYdtu6mSs+4Y9rST/o/p4aeSWsUsIAgjPubsKMJHDg0FOs+L -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:30 2026 by rpki-client