$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135445.roa File: AS135445.roa (raw, json) Hash identifier: CFK9sasv2nahXevIf6fxdudHCoqQhgPrGXeS8KcFnQM= Subject key identifier: B9:F0:44:9D:4C:81:CF:97:62:4E:7B:3A:EC:E5:6B:C5:23:10:C2:FA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3265D5836BE743FA5A815F5BD5D3F7391EB5D89F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135445.roa Signing time: Fri 27 Feb 2026 04:00:00 +0000 ROA not before: Fri 27 Feb 2026 03:55:00 +0000 ROA not after: Fri 26 Feb 2027 04:00:00 +0000 asID: 135445 IP address blocks: 124.158.128.0/24 maxlen: 24 124.158.129.0/24 maxlen: 24 124.158.130.0/24 maxlen: 24 124.158.131.0/24 maxlen: 24 124.158.132.0/24 maxlen: 24 124.158.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:65:d5:83:6b:e7:43:fa:5a:81:5f:5b:d5:d3:f7:39:1e:b5:d8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 27 03:55:00 2026 GMT Not After : Feb 26 04:00:00 2027 GMT Subject: CN=B9F0449D4C81CF97624E7B3AECE56BC52310C2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:0e:81:83:32:cc:88:2d:ca:ae:89:82:24: 56:e0:f9:af:74:76:46:1c:b8:2a:d5:a8:59:50:d3: 33:cd:2e:a7:06:5a:b0:d7:a0:33:bd:7f:26:33:bc: e5:25:9f:13:68:2b:b0:b5:01:69:28:a6:da:9d:16: 80:9d:76:57:34:dd:30:2c:42:24:96:23:e1:34:4b: 10:9b:f9:82:8f:b2:fe:54:5f:32:a4:cb:dd:9d:31: 67:65:a5:1b:39:97:23:a9:fb:58:95:cd:f0:bb:2c: a1:31:41:3e:3b:7a:fc:69:06:65:6b:c7:f8:de:97: 85:63:74:71:ab:36:45:53:f9:80:a6:9e:be:9a:bf: 2e:18:0b:e1:3a:e5:aa:29:9b:ce:4d:3f:cd:15:1b: 62:40:f5:eb:bd:1a:91:b7:cd:e1:d5:8a:f1:6a:c9: 58:e9:a2:52:02:2a:ed:e4:8c:2d:e0:fa:de:b4:0a: a7:ae:9f:9f:0a:2a:b0:9a:4a:bf:3f:5d:68:53:f1: bf:f4:b9:63:ab:7a:e7:fe:56:e8:fc:25:3b:b8:51: b4:f7:3a:f1:73:f6:72:b2:c5:79:b2:58:cb:f1:be: 13:57:72:30:af:86:8c:3f:98:36:fb:de:e8:1e:0b: b2:12:59:cf:0b:86:9c:92:a6:42:c6:f3:9c:14:10: 7e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F0:44:9D:4C:81:CF:97:62:4E:7B:3A:EC:E5:6B:C5:23:10:C2:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135445.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.158.128.0-124.158.132.255 124.158.140.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:c7:13:7f:0b:c1:02:39:db:8d:80:f0:9d:46:3f:65:07:f7: 95:0d:bf:9c:0c:8b:9e:01:ab:dd:d3:8b:18:6f:fa:c8:4e:75: bc:4d:24:8b:0f:d2:d1:30:66:78:cd:83:80:25:f2:ee:d2:7c: 07:bb:92:42:93:bf:fa:eb:3e:15:02:92:f3:0e:3a:6a:af:87: fa:a6:d2:20:0d:e7:42:e5:bb:92:d4:9d:a7:45:4a:04:b6:23: 07:c5:ab:d4:be:a7:7b:d3:42:7d:89:a0:1d:25:76:3c:f3:6f: 35:71:90:6f:bc:bb:c5:8e:09:c7:fd:23:ed:e4:ed:0c:bf:2c: 29:c7:a2:61:7f:dd:f0:08:25:de:33:46:d9:4d:04:95:c2:6b: b2:f9:a0:d6:e8:4f:c9:cf:d6:c7:46:34:ec:3f:79:8c:26:e7: df:a5:48:08:12:14:9b:42:aa:29:b2:f8:d7:45:25:66:0b:56: 0e:45:9a:35:e9:22:54:07:45:a4:f7:c8:da:99:eb:be:58:be: fa:e3:5b:50:57:67:53:1a:12:bb:f6:82:9b:0c:17:e4:f9:81: d4:b4:c5:f5:e6:b7:d3:e4:e2:dd:41:99:69:82:7b:30:d7:5f: 4d:54:48:78:d4:e2:8f:b5:2d:f4:ec:8d:b9:93:b5:bb:37:39: 1c:9e:1b:85 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUMmXVg2vnQ/pagV9b1dP3OR612J8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNzAzNTUwMFoX DTI3MDIyNjA0MDAwMFowMzExMC8GA1UEAxMoQjlGMDQ0OUQ0QzgxQ0Y5NzYyNEU3 QjNBRUNFNTZCQzUyMzEwQzJGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9BDoGDMsyILcquiYIkVuD5r3R2Rhy4KtWoWVDTM80upwZasNegM71/JjO8 5SWfE2grsLUBaSim2p0WgJ12VzTdMCxCJJYj4TRLEJv5go+y/lRfMqTL3Z0xZ2Wl GzmXI6n7WJXN8LssoTFBPjt6/GkGZWvH+N6XhWN0cas2RVP5gKaevpq/LhgL4Trl qimbzk0/zRUbYkD1670akbfN4dWK8WrJWOmiUgIq7eSMLeD63rQKp66fnwoqsJpK vz9daFPxv/S5Y6t65/5W6PwlO7hRtPc68XP2crLFebJYy/G+E1dyMK+GjD+YNvve 6B4LshJZzwuGnJKmQsbznBQQfjMCAwEAAaOCAd4wggHaMB0GA1UdDgQWBBS58ESd TIHPl2JOezrs5WvFIxDC+jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTQ0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBww GgQCAAEwFDAMAwQHfJ6AAwQAfJ6EAwQBfJ6MMA0GCSqGSIb3DQEBCwUAA4IBAQAd xxN/C8ECOduNgPCdRj9lB/eVDb+cDIueAavd04sYb/rITnW8TSSLD9LRMGZ4zYOA JfLu0nwHu5JCk7/66z4VApLzDjpqr4f6ptIgDedC5buS1J2nRUoEtiMHxavUvqd7 00J9iaAdJXY88281cZBvvLvFjgnH/SPt5O0Mvywpx6Jhf93wCCXeM0bZTQSVwmuy +aDW6E/Jz9bHRjTsP3mMJuffpUgIEhSbQqopsvjXRSVmC1YORZo16SJUB0Wk98ja meu+WL7641tQV2dTGhK79oKbDBfk+YHUtMX15rfT5OLdQZlpgnsw119NVEh41OKP tS307I25k7W7NzkcnhuF -----END CERTIFICATE-----Generated at Sun Mar 1 22:00:57 2026 by rpki-client