$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136091.roa File: AS136091.roa (raw, json) Hash identifier: Ue6SCnNjT92LsBiNcfQlWv0xbiFaHgt1GGTjo2SSxSs= Subject key identifier: 9D:F3:FB:ED:C6:C9:6F:2F:9E:B2:0E:4B:F4:90:57:CF:93:F2:03:D1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B26B7859C806FA16B555DC9AA2B2BEC25E5E451 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136091.roa Signing time: Wed 29 Oct 2025 15:16:24 +0000 ROA not before: Wed 29 Oct 2025 15:11:24 +0000 ROA not after: Wed 28 Oct 2026 15:16:24 +0000 asID: 136091 IP address blocks: 103.215.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:b7:85:9c:80:6f:a1:6b:55:5d:c9:aa:2b:2b:ec:25:e5:e4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 15:11:24 2025 GMT Not After : Oct 28 15:16:24 2026 GMT Subject: CN=9DF3FBEDC6C96F2F9EB20E4BF49057CF93F203D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:5b:f8:c9:c4:9e:61:98:78:f3:df:39:3e: 0f:55:cd:b5:82:e2:a9:95:22:2d:c5:a0:9c:3a:0e: 36:1e:ec:f5:cd:ff:3d:9f:13:16:6e:90:24:88:38: 51:2b:c9:f8:4d:65:7e:ed:a0:a1:3b:21:22:df:b4: 20:17:e5:e9:ba:f7:29:33:11:a0:06:88:23:32:fd: 55:ce:b5:e7:50:f0:e8:f4:a6:70:d4:a8:85:d5:0d: 90:90:6d:70:f1:50:6a:45:af:74:fc:03:a5:ac:58: 9e:ec:e5:6f:be:6b:a4:b7:e5:6c:d3:84:77:47:9a: 64:ca:69:43:59:6f:d1:4b:75:dc:a0:da:9e:58:43: 5b:dc:37:89:b3:72:18:38:ac:f8:21:51:3c:01:4a: 1b:ff:c5:08:0f:01:ef:37:f2:21:ae:7a:9b:a4:af: e1:88:3a:41:5f:59:5a:a5:fa:a6:92:19:37:30:50: 08:94:5a:c7:94:d6:54:80:8c:6b:8a:f0:43:d1:3b: e2:c7:e9:1e:5e:cc:6c:cd:8b:c1:d8:2c:9c:4b:1b: 04:40:b0:4e:53:67:ec:66:75:64:72:c0:62:d5:54: a7:3b:4b:bf:fa:6f:70:c2:5b:04:a8:92:b6:a3:51: d4:d1:09:38:28:89:c2:1e:f4:e4:cf:cc:68:3e:92: 0c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:FB:ED:C6:C9:6F:2F:9E:B2:0E:4B:F4:90:57:CF:93:F2:03:D1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136091.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.154.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:63:04:55:5d:51:95:ee:23:e7:21:af:b9:11:be:3c:24:ac: d0:5c:24:1f:03:0e:46:fc:c8:6f:79:8e:f6:c0:e5:eb:4f:6f: dc:fc:dd:a8:76:14:f1:ec:34:d6:25:91:cd:78:d0:a8:e6:b9: 0a:34:41:d6:42:fc:2c:71:b8:f8:54:b6:5e:89:6a:47:eb:9e: bd:4c:1a:8b:1b:ec:8e:06:c9:43:79:19:56:bc:e9:d7:36:6b: 1f:72:78:bc:82:84:7e:86:32:bc:a6:89:49:09:47:db:b5:77: 6f:e2:e1:7f:52:fe:8c:89:24:b1:3a:e6:58:b3:fc:a1:f9:8e: fb:35:22:ab:e7:b1:f9:64:3a:40:cd:fd:a6:62:52:f3:6f:ae: 4d:a1:1e:1d:13:3b:4c:d0:b1:11:78:f7:b4:c7:2f:00:54:8d: 44:4b:b3:0f:00:f1:f5:37:65:9a:96:bf:9b:eb:2d:77:03:25: b9:5e:d2:e4:1e:ca:5b:d3:6e:f9:a0:e6:b2:0f:c9:02:e1:4c: 77:ea:ed:ee:5e:09:0b:64:51:3f:d0:ce:f1:03:2a:5a:84:74: 3d:28:d3:c1:16:1a:fb:d1:db:42:40:78:4e:44:f6:0d:e9:b0: c1:39:be:61:e7:b8:88:d4:2c:61:9d:97:c1:7b:2a:48:57:2d: bf:3e:b4:55 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUGya3hZyAb6FrVV3Jqisr7CXl5FEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyOTE1MTEyNFoX DTI2MTAyODE1MTYyNFowMzExMC8GA1UEAxMoOURGM0ZCRURDNkM5NkYyRjlFQjIw RTRCRjQ5MDU3Q0Y5M0YyMDNEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPBW/jJxJ5hmHjz3zk+D1XNtYLiqZUiLcWgnDoONh7s9c3/PZ8TFm6QJIg4 USvJ+E1lfu2goTshIt+0IBfl6br3KTMRoAaIIzL9Vc6151Dw6PSmcNSohdUNkJBt cPFQakWvdPwDpaxYnuzlb75rpLflbNOEd0eaZMppQ1lv0Ut13KDanlhDW9w3ibNy GDis+CFRPAFKG//FCA8B7zfyIa56m6Sv4Yg6QV9ZWqX6ppIZNzBQCJRax5TWVICM a4rwQ9E74sfpHl7MbM2LwdgsnEsbBECwTlNn7GZ1ZHLAYtVUpztLv/pvcMJbBKiS tqNR1NEJOCiJwh705M/MaD6SDEsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSd8/vt xslvL56yDkv0kFfPk/ID0TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfXmjANBgkqhkiG9w0BAQsFAAOCAQEAP2MEVV1Rle4j5yGvuRG+ PCSs0FwkHwMORvzIb3mO9sDl609v3PzdqHYU8ew01iWRzXjQqOa5CjRB1kL8LHG4 +FS2XolqR+uevUwaixvsjgbJQ3kZVrzp1zZrH3J4vIKEfoYyvKaJSQlH27V3b+Lh f1L+jIkksTrmWLP8ofmO+zUiq+ex+WQ6QM39pmJS82+uTaEeHRM7TNCxEXj3tMcv AFSNREuzDwDx9Tdlmpa/m+stdwMluV7S5B7KW9Nu+aDmsg/JAuFMd+rt7l4JC2RR P9DO8QMqWoR0PSjTwRYa+9HbQkB4TkT2DemwwTm+Yee4iNQsYZ2XwXsqSFctvz60 VQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:40 2025 by rpki-client