$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131075.roa File: AS131075.roa (raw, json) Hash identifier: sk3y9di2oOyW3njmaEHd9YNonKszxYSS5iIBWNI8Z7s= Subject key identifier: 6D:84:57:C6:B3:A2:91:63:6A:EE:B7:59:D2:68:43:8F:C0:60:16:E9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11FE993F1AF7AD5D217ECDA6DB7852D3BC445B73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131075.roa Signing time: Tue 24 Feb 2026 03:37:14 +0000 ROA not before: Tue 24 Feb 2026 03:32:14 +0000 ROA not after: Tue 23 Feb 2027 03:37:14 +0000 asID: 131075 IP address blocks: 2001:df6:9240::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fe:99:3f:1a:f7:ad:5d:21:7e:cd:a6:db:78:52:d3:bc:44:5b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 24 03:32:14 2026 GMT Not After : Feb 23 03:37:14 2027 GMT Subject: CN=6D8457C6B3A291636AEEB759D268438FC06016E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:a3:44:68:e6:b6:e6:d8:0a:93:7e:65:58: c1:0d:fd:50:ef:f0:4e:b7:41:8b:65:ed:de:25:a7: 00:94:3d:fc:65:42:cb:6b:a1:52:54:87:ff:7c:a7: 6b:06:6e:fa:eb:6b:95:6e:92:00:9d:47:f5:c2:24: a1:e7:a6:a6:ac:ac:c7:b6:f7:ff:b1:2d:a2:72:a8: 7f:fb:cd:5d:2f:66:ee:1a:62:ef:88:51:d8:2c:97: 90:74:c6:6a:0a:18:b0:0b:b2:31:34:64:91:7c:8d: 01:fb:17:ca:c3:74:04:6c:81:f4:53:9c:8f:a6:06: 9b:fa:82:aa:bb:58:b1:92:1e:53:3f:b6:ce:df:2f: 96:ae:a3:6e:6b:b9:ad:cf:e6:95:8e:f5:7d:55:fa: f5:0f:49:76:d3:e3:a4:a0:f1:04:27:53:cf:fc:d7: 4b:2b:92:90:09:25:67:9c:9b:d5:84:11:51:fc:5e: d2:35:2c:ce:67:04:67:63:e8:1c:7e:58:64:58:56: 8c:02:e9:82:43:87:85:a8:36:a1:a0:ed:06:bb:d0: a1:91:b8:98:86:50:b9:f7:ae:9b:2a:07:04:25:9d: 1f:1a:3e:eb:45:2b:50:e5:02:d2:70:a8:58:3d:22: 32:6f:41:2a:92:b9:2c:53:6e:7b:bf:c0:96:09:47: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:84:57:C6:B3:A2:91:63:6A:EE:B7:59:D2:68:43:8F:C0:60:16:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9240::/48 Signature Algorithm: sha256WithRSAEncryption 4a:d3:dd:07:50:de:a8:a5:5a:03:e3:f1:6e:ad:42:67:9e:b3: 24:a7:2d:87:f1:42:bc:05:bf:4e:ff:62:47:92:46:99:da:72: 80:21:04:53:12:26:b0:e1:bb:3f:1f:31:78:5d:01:0d:e5:de: a1:d7:f0:81:fe:fb:d2:f5:27:a2:f2:9c:96:7f:9b:47:0d:ad: b7:74:3a:8f:64:0c:10:ee:ba:87:ca:83:5b:76:fb:6b:7c:26: b4:07:ea:07:45:2e:07:9d:81:90:e1:30:82:75:54:f7:fd:8c: 38:a9:06:3c:19:1c:fc:fb:89:34:ea:df:ba:a8:1d:49:d3:a4: 98:3e:f0:66:97:f6:0e:f7:c5:8f:08:02:48:e3:8b:3b:75:bc: fb:36:23:08:9a:47:62:bb:4e:5b:b2:40:59:d5:21:4b:36:82: 69:58:92:c9:a9:e8:e9:a6:f4:25:05:7d:07:88:1a:ec:20:d7: 8f:78:07:f5:7f:72:d1:ea:2a:8f:3c:1a:53:2c:c5:6f:bb:9a: 83:a2:93:c8:4e:8b:97:ba:9e:e4:19:4c:52:4e:64:4d:e3:42: d3:bb:a9:16:9d:63:23:43:68:28:2e:8b:e9:4d:25:18:1e:84: dd:f5:83:db:2c:91:f9:63:1a:76:99:f4:c1:c2:a5:1b:56:56: 90:76:3a:3a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEf6ZPxr3rV0hfs2m23hS07xEW3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNDAzMzIxNFoX DTI3MDIyMzAzMzcxNFowMzExMC8GA1UEAxMoNkQ4NDU3QzZCM0EyOTE2MzZBRUVC NzU5RDI2ODQzOEZDMDYwMTZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTwo0Ro5rbm2AqTfmVYwQ39UO/wTrdBi2Xt3iWnAJQ9/GVCy2uhUlSH/3yn awZu+utrlW6SAJ1H9cIkoeempqysx7b3/7EtonKof/vNXS9m7hpi74hR2CyXkHTG agoYsAuyMTRkkXyNAfsXysN0BGyB9FOcj6YGm/qCqrtYsZIeUz+2zt8vlq6jbmu5 rc/mlY71fVX69Q9JdtPjpKDxBCdTz/zXSyuSkAklZ5yb1YQRUfxe0jUszmcEZ2Po HH5YZFhWjALpgkOHhag2oaDtBrvQoZG4mIZQufeumyoHBCWdHxo+60UrUOUC0nCo WD0iMm9BKpK5LFNue7/AlglHt/kCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRthFfG s6KRY2rut1nSaEOPwGAW6TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTA3NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfaSQDANBgkqhkiG9w0BAQsFAAOCAQEAStPdB1DeqKVaA+Px bq1CZ56zJKcth/FCvAW/Tv9iR5JGmdpygCEEUxImsOG7Px8xeF0BDeXeodfwgf77 0vUnovKcln+bRw2tt3Q6j2QMEO66h8qDW3b7a3wmtAfqB0UuB52BkOEwgnVU9/2M OKkGPBkc/PuJNOrfuqgdSdOkmD7wZpf2DvfFjwgCSOOLO3W8+zYjCJpHYrtOW7JA WdUhSzaCaViSyano6ab0JQV9B4ga7CDXj3gH9X9y0eoqjzwaUyzFb7uag6KTyE6L l7qe5BlMUk5kTeNC07upFp1jI0NoKC6L6U0lGB6E3fWD2yyR+WMadpn0wcKlG1ZW kHY6Og== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:30 2026 by rpki-client