$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136820.roa File: AS136820.roa (raw, json) Hash identifier: cOw+hzAOd6zn2mnojzJy8uDG0vsmGDPCkXc/GpfNeoY= Subject key identifier: 9C:54:12:EC:E0:74:9B:1D:3C:D8:53:FE:24:22:9E:FB:21:3C:03:47 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3C5B5C30C83ECACA6F09CD8FD7B7F29A9C38D2BA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136820.roa Signing time: Sun 03 May 2026 15:10:50 +0000 ROA not before: Sun 03 May 2026 15:05:50 +0000 ROA not after: Sun 02 May 2027 15:10:50 +0000 asID: 136820 IP address blocks: 2401:97c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5b:5c:30:c8:3e:ca:ca:6f:09:cd:8f:d7:b7:f2:9a:9c:38:d2:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 15:05:50 2026 GMT Not After : May 2 15:10:50 2027 GMT Subject: CN=9C5412ECE0749B1D3CD853FE24229EFB213C0347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:78:72:a0:21:77:ac:f5:95:05:17:f3:eb: b5:1e:1d:24:0c:2b:1b:f4:d2:6f:15:99:25:6c:01: b1:04:7b:3e:42:38:ee:07:c0:ff:13:d0:6d:29:97: 57:81:13:e2:90:88:7c:6b:5a:c2:98:b5:cb:a2:7a: f5:f3:b4:5b:ad:66:85:90:b6:97:3c:b2:50:21:05: 4c:27:24:10:24:b5:b5:fd:31:e0:6d:f2:60:4f:5a: 6b:d5:27:d5:3a:12:d1:6f:58:62:20:94:5d:d1:f0: 05:f9:bb:0e:42:e7:04:8c:9e:3e:89:16:de:df:4d: 0b:08:08:f2:38:e8:43:9e:f4:72:a7:bc:ee:30:14: bd:34:80:92:7b:e7:b7:a1:80:45:a7:ed:59:61:f2: e7:9d:7d:9d:77:ec:24:a5:7b:72:af:69:1f:b5:ec: 27:c4:ea:26:00:82:07:1f:8e:39:9b:99:f6:24:c4: 92:d1:af:e4:78:2a:6e:d8:4b:d5:fa:00:15:23:ad: ec:46:51:8b:d2:93:e4:8b:9b:ce:2c:81:a6:8c:56: b9:eb:70:7a:e7:f1:f5:29:87:69:8d:df:0a:a0:1c: ff:66:bd:63:b4:16:50:00:b4:4a:b3:36:eb:e0:40: be:00:17:0a:0d:3b:f4:de:d9:ec:2b:de:dc:ea:57: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:54:12:EC:E0:74:9B:1D:3C:D8:53:FE:24:22:9E:FB:21:3C:03:47 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:79:72:ce:35:d0:db:b3:a1:ba:b1:59:96:df:fa:3d:ed:82: de:68:f3:9b:db:fa:54:d1:81:6a:75:47:c2:ad:be:21:c9:60: eb:71:03:e7:7a:c7:45:90:67:94:70:58:58:3a:ef:a5:5a:16: cc:22:12:e4:d8:cb:74:a2:6e:11:40:d7:1b:fd:89:43:11:f7: 80:18:24:f7:f0:ad:ab:de:36:15:a2:6f:aa:c7:cc:94:62:b9: 48:d6:a7:63:8c:f0:54:e0:f1:af:96:53:aa:0a:e4:c9:f9:10: 2b:ed:f5:60:df:00:6c:d4:ac:50:f1:7c:80:1a:a4:61:dd:1d: bd:ea:0e:95:e6:51:35:ea:39:b3:71:4f:7c:64:ed:e2:ef:93: 55:10:46:39:3d:75:ee:49:6e:db:ee:b4:c4:8a:ff:c2:37:37: 9f:1e:85:cc:a9:f6:b6:39:8f:a9:78:4a:37:5e:c1:86:d5:d8: 02:e8:39:25:25:22:41:12:7d:26:2c:33:2d:84:bc:d8:1f:1c: 6e:8f:ff:e5:1d:38:9c:79:ad:13:bf:24:27:a3:fa:46:d1:d7: 63:45:8b:3d:29:d2:7d:b0:9e:d8:04:f4:b5:a5:8c:64:23:b9: 1e:2e:46:59:14:2d:09:5f:a9:2f:a5:19:ab:81:82:0e:78:f8: 0a:ac:25:d0 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUPFtcMMg+yspvCc2P17fympw40rowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzE1MDU1MFoX DTI3MDUwMjE1MTA1MFowMzExMC8GA1UEAxMoOUM1NDEyRUNFMDc0OUIxRDNDRDg1 M0ZFMjQyMjlFRkIyMTNDMDM0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSueHKgIXes9ZUFF/PrtR4dJAwrG/TSbxWZJWwBsQR7PkI47gfA/xPQbSmX V4ET4pCIfGtawpi1y6J69fO0W61mhZC2lzyyUCEFTCckECS1tf0x4G3yYE9aa9Un 1ToS0W9YYiCUXdHwBfm7DkLnBIyePokW3t9NCwgI8jjoQ570cqe87jAUvTSAknvn t6GARaftWWHy5519nXfsJKV7cq9pH7XsJ8TqJgCCBx+OOZuZ9iTEktGv5HgqbthL 1foAFSOt7EZRi9KT5IubziyBpoxWuetweufx9SmHaY3fCqAc/2a9Y7QWUAC0SrM2 6+BAvgAXCg079N7Z7Cve3OpXoBkCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBScVBLs 4HSbHTzYU/4kIp77ITwDRzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2ODIwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAGXwDANBgkqhkiG9w0BAQsFAAOCAQEADXlyzjXQ27OhurFZlt/6Pe2C 3mjzm9v6VNGBanVHwq2+Iclg63ED53rHRZBnlHBYWDrvpVoWzCIS5NjLdKJuEUDX G/2JQxH3gBgk9/Ctq942FaJvqsfMlGK5SNanY4zwVODxr5ZTqgrkyfkQK+31YN8A bNSsUPF8gBqkYd0dveoOleZRNeo5s3FPfGTt4u+TVRBGOT117klu2+60xIr/wjc3 nx6FzKn2tjmPqXhKN17BhtXYAug5JSUiQRJ9JiwzLYS82B8cbo//5R04nHmtE78k J6P6RtHXY0WLPSnSfbCe2AT0taWMZCO5Hi5GWRQtCV+pL6UZq4GCDnj4Cqwl0A== -----END CERTIFICATE-----Generated at Tue May 12 22:57:08 2026 by rpki-client