$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135457.roa File: AS135457.roa (raw, json) Hash identifier: wgb8bB43Z7YqmvHXL9HKJ7997oFzv4OiP2w2gBo4Zc8= Subject key identifier: F4:D9:C3:E0:4E:8B:A1:94:00:2A:15:8F:F2:04:82:07:F9:2B:0D:AC Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B52B58C3F3ECEF1EAD263225773FCD927BCCA12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135457.roa Signing time: Wed 25 Feb 2026 07:03:09 +0000 ROA not before: Wed 25 Feb 2026 06:58:09 +0000 ROA not after: Wed 24 Feb 2027 07:03:09 +0000 asID: 135457 IP address blocks: 203.191.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:52:b5:8c:3f:3e:ce:f1:ea:d2:63:22:57:73:fc:d9:27:bc:ca:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 06:58:09 2026 GMT Not After : Feb 24 07:03:09 2027 GMT Subject: CN=F4D9C3E04E8BA194002A158FF2048207F92B0DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:96:9c:5b:24:b7:f7:5b:be:ef:8c:89:dd: 46:23:da:db:10:8e:bc:ba:2b:08:f4:b8:30:10:e4: dc:73:cc:7e:a5:92:6d:44:a7:17:f0:14:48:11:87: 81:27:27:b1:d3:6e:8f:aa:77:49:9d:7b:2f:e7:71: 37:bc:5d:62:76:3b:f3:fb:d5:e9:fa:9e:11:14:07: dc:79:dc:37:0f:c0:7c:79:27:35:ff:da:db:7e:c5: b3:6e:76:ca:6b:c1:f6:a7:7d:08:37:93:3f:7f:ee: 67:7d:55:8e:67:70:91:66:ba:70:14:0a:ce:2f:7c: 93:2d:e3:e2:d7:bb:3d:35:96:0a:c3:24:f5:ec:61: 62:82:93:72:e0:b9:19:b0:8f:ff:41:83:9f:d2:97: 36:fc:ef:c0:29:60:60:5d:11:1c:9c:91:e5:57:7a: cb:e3:5b:d0:a3:69:6c:89:c6:41:2b:0a:cd:96:ac: ef:b3:18:28:d4:81:28:f5:fa:ae:b2:3d:39:48:45: 31:67:e3:bb:04:ac:60:99:12:44:a2:46:35:90:65: ac:1f:d6:68:ef:91:12:1d:62:12:2e:1f:e4:61:33: d2:b5:33:68:a5:57:d4:2b:21:d9:0a:d5:92:57:36: c4:d8:71:33:c5:c5:8a:f5:a7:71:a5:cd:c8:2b:e0: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D9:C3:E0:4E:8B:A1:94:00:2A:15:8F:F2:04:82:07:F9:2B:0D:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.191.46.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:80:d1:16:f4:c4:d8:bc:d1:9b:7d:9f:4a:64:92:ce:c3:82: 7a:55:17:bd:47:de:9d:1f:a6:55:69:57:bb:9b:ce:e6:29:ba: 69:d7:b2:40:b8:a8:21:ab:01:71:be:40:ed:cf:68:0f:9e:6b: 49:f2:aa:76:29:75:e4:39:30:66:1b:11:24:38:23:c6:9e:2b: 82:d5:d0:77:fa:a3:29:f7:27:92:a9:42:37:71:00:25:8b:22: db:c2:be:74:54:f4:0d:ac:45:da:6d:4f:54:cb:d9:35:b1:9c: 18:32:ab:46:45:a7:79:ef:ca:73:b5:0f:aa:72:3c:ff:71:b1: fd:c5:58:20:ba:a4:83:a0:25:fb:29:a9:b1:99:1f:3f:0a:5e: 02:b7:35:51:ef:0a:82:6a:00:69:42:7e:14:6b:78:f9:0d:04: ae:e0:c9:10:a9:6d:f8:c9:44:9c:9a:85:c8:d5:49:9b:d7:49: fe:38:0f:c7:ab:00:e3:4e:ef:38:f9:60:c2:eb:89:37:c0:b0: 0c:e9:93:f5:61:93:81:84:3d:58:eb:1b:c0:b6:84:b8:cd:eb: 62:17:59:2d:32:e8:40:e1:c3:40:64:39:e6:44:95:c5:ab:39: 43:e7:68:75:53:0e:8e:3b:cd:14:8b:2f:61:06:09:e1:b3:7b: 82:99:e5:a6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUC1K1jD8+zvHq0mMiV3P82Se8yhIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTA2NTgwOVoX DTI3MDIyNDA3MDMwOVowMzExMC8GA1UEAxMoRjREOUMzRTA0RThCQTE5NDAwMkEx NThGRjIwNDgyMDdGOTJCMERBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgklpxbJLf3W77vjIndRiPa2xCOvLorCPS4MBDk3HPMfqWSbUSnF/AUSBGH gScnsdNuj6p3SZ17L+dxN7xdYnY78/vV6fqeERQH3HncNw/AfHknNf/a237Fs252 ymvB9qd9CDeTP3/uZ31VjmdwkWa6cBQKzi98ky3j4te7PTWWCsMk9exhYoKTcuC5 GbCP/0GDn9KXNvzvwClgYF0RHJyR5Vd6y+Nb0KNpbInGQSsKzZas77MYKNSBKPX6 rrI9OUhFMWfjuwSsYJkSRKJGNZBlrB/WaO+REh1iEi4f5GEz0rUzaKVX1Csh2QrV klc2xNhxM8XFivWncaXNyCvgIu0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBT02cPg TouhlAAqFY/yBIIH+SsNrDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTQ1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMu/LjANBgkqhkiG9w0BAQsFAAOCAQEATIDRFvTE2LzRm32fSmSS zsOCelUXvUfenR+mVWlXu5vO5im6adeyQLioIasBcb5A7c9oD55rSfKqdil15Dkw ZhsRJDgjxp4rgtXQd/qjKfcnkqlCN3EAJYsi28K+dFT0DaxF2m1PVMvZNbGcGDKr RkWnee/Kc7UPqnI8/3Gx/cVYILqkg6Al+ympsZkfPwpeArc1Ue8KgmoAaUJ+FGt4 +Q0EruDJEKlt+MlEnJqFyNVJm9dJ/jgPx6sA407vOPlgwuuJN8CwDOmT9WGTgYQ9 WOsbwLaEuM3rYhdZLTLoQOHDQGQ55kSVxas5Q+dodVMOjjvNFIsvYQYJ4bN7gpnl pg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:29 2026 by rpki-client