$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS136869.roa File: AS136869.roa (raw, json) Hash identifier: RjaZbh0BWltqCCoVhFeT7+BJkJPJeMLwPsyc5+B/9oc= Subject key identifier: 91:7E:54:56:99:A8:C1:A0:C7:2D:EB:19:6E:EC:B8:D7:45:3F:99:9A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4807E2B79E437AA0D288258FD5563F756F84703D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136869.roa Signing time: Fri 24 Jul 2026 02:13:04 +0000 ROA not before: Fri 24 Jul 2026 02:08:04 +0000 ROA not after: Fri 23 Jul 2027 02:13:04 +0000 asID: 136869 IP address blocks: 103.106.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:07:e2:b7:9e:43:7a:a0:d2:88:25:8f:d5:56:3f:75:6f:84:70:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 24 02:08:04 2026 GMT Not After : Jul 23 02:13:04 2027 GMT Subject: CN=917E545699A8C1A0C72DEB196EECB8D7453F999A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:31:18:ec:e4:40:54:72:f6:7a:9e:de:19: ea:98:49:05:f7:ff:78:ad:ba:20:21:aa:6c:bc:73: 00:b3:b7:46:39:0b:9f:8e:1d:86:12:a1:55:30:3a: 08:b7:f6:32:97:f9:eb:0a:76:3f:43:e0:e4:ca:f8: db:e9:f2:a4:a3:08:b0:6b:ec:97:1c:86:bc:fb:00: a8:24:36:98:a4:16:0d:db:40:37:75:77:0d:58:5b: b9:0c:9d:7e:2d:9f:34:c3:23:bd:c1:35:60:85:5d: a1:7d:ef:df:a0:41:7b:a5:ea:48:26:a5:9b:04:e0: be:f0:65:a2:fc:2c:eb:64:a9:29:c3:00:e0:9b:2f: ba:9c:74:2f:a2:ba:31:b6:b4:6f:bb:8b:9c:1f:35: ad:11:1d:7a:e3:38:0d:99:82:4f:2d:ea:18:6e:bc: ff:03:7d:77:63:db:5f:21:ae:63:74:a1:0c:a4:4c: 7e:4e:a6:a5:e4:e8:48:21:34:7f:6e:f7:1b:5c:94: 92:ec:5d:35:b7:6f:51:62:2b:e5:56:3e:ca:ad:89: 5c:b7:fc:b4:dc:03:28:c8:af:38:db:f6:62:e8:37: 50:0c:16:d8:f6:03:d6:bd:51:ea:d8:2b:45:ba:55: c0:dd:1a:3e:50:4b:15:7e:c6:45:6a:a2:35:d8:d0: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7E:54:56:99:A8:C1:A0:C7:2D:EB:19:6E:EC:B8:D7:45:3F:99:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS136869.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.172.0/24 Signature Algorithm: sha256WithRSAEncryption 66:28:40:94:5a:ed:1e:af:39:bc:0f:16:71:e1:8c:5b:72:68: fc:e9:1f:ea:24:e6:ad:cf:ed:1e:52:c3:8f:4c:1e:c2:e1:a5: 45:d6:aa:f2:9f:6f:07:4f:89:f9:f8:3e:d0:bd:cb:64:c8:cb: ce:f1:64:97:32:4b:24:86:96:ba:14:cf:2f:b3:5a:f7:01:f1: 98:ed:a1:6a:4b:08:82:39:bf:4c:1d:9b:c7:9b:f7:fe:d9:c5: 4d:d4:c5:56:01:18:65:6f:95:bd:8f:f4:6a:8e:28:19:b8:8e: 6e:86:53:3b:94:e2:fb:ee:1e:c1:b5:26:b8:77:9c:1f:13:b7: ad:75:c0:c5:ca:87:d5:b4:a1:6e:84:61:41:55:26:1b:8e:7e: 58:82:c6:25:c5:4a:38:b7:88:2a:f7:da:6c:8e:12:26:69:a9: 5c:73:a1:d6:b4:bb:01:ef:9e:03:57:9a:04:82:ef:25:7d:d7: d9:5d:bd:fd:c5:3a:03:52:e7:7d:dc:71:f5:e7:76:a2:fb:04: 80:39:31:a7:51:78:14:6b:c5:c7:5a:7a:e7:95:b0:9d:64:ee: 13:aa:d8:5f:1a:42:c8:e8:61:10:7a:8a:ac:dc:95:8e:af:84: 73:b3:fd:d0:89:7a:64:8c:8a:f2:42:5f:8c:7c:92:3f:f0:3a: 56:c5:4f:15 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSAfit55DeqDSiCWP1VY/dW+EcD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyNDAyMDgwNFoX DTI3MDcyMzAyMTMwNFowMzExMC8GA1UEAxMoOTE3RTU0NTY5OUE4QzFBMEM3MkRF QjE5NkVFQ0I4RDc0NTNGOTk5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGAMRjs5EBUcvZ6nt4Z6phJBff/eK26ICGqbLxzALO3RjkLn44dhhKhVTA6 CLf2Mpf56wp2P0Pg5Mr42+nypKMIsGvslxyGvPsAqCQ2mKQWDdtAN3V3DVhbuQyd fi2fNMMjvcE1YIVdoX3v36BBe6XqSCalmwTgvvBlovws62SpKcMA4Jsvupx0L6K6 Mba0b7uLnB81rREdeuM4DZmCTy3qGG68/wN9d2PbXyGuY3ShDKRMfk6mpeToSCE0 f273G1yUkuxdNbdvUWIr5VY+yq2JXLf8tNwDKMivONv2Yug3UAwW2PYD1r1R6tgr RbpVwN0aPlBLFX7GRWqiNdjQbRcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSRflRW majBoMct6xlu7LjXRT+ZmjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM2ODY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ2qsMA0GCSqGSIb3DQEBCwUAA4IBAQBmKECUWu0erzm8DxZx4Yxbcmj8 6R/qJOatz+0eUsOPTB7C4aVF1qryn28HT4n5+D7QvctkyMvO8WSXMkskhpa6FM8v s1r3AfGY7aFqSwiCOb9MHZvHm/f+2cVN1MVWARhlb5W9j/RqjigZuI5uhlM7lOL7 7h7BtSa4d5wfE7etdcDFyofVtKFuhGFBVSYbjn5YgsYlxUo4t4gq99psjhImaalc c6HWtLsB754DV5oEgu8lfdfZXb39xToDUud93HH153ai+wSAOTGnUXgUa8XHWnrn lbCdZO4TqthfGkLI6GEQeoqs3JWOr4Rzs/3QiXpkjIryQl+MfJI/8DpWxU8V -----END CERTIFICATE-----Generated at Fri Jul 24 17:48:11 2026 by rpki-client