$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136783.roa File: AS136783.roa (raw, json) Hash identifier: xT4LKcTy1X+pMO7HhUXc5K4J+zd9gBlRRKSNHHOo6lQ= Subject key identifier: A5:6C:3C:97:AD:DD:D1:1B:0F:CB:48:89:A3:D7:4B:98:58:BE:51:4C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DA7B3F701B2A41E5AD31117DAD36C9FE417EFBD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136783.roa Signing time: Tue 24 Feb 2026 08:03:28 +0000 ROA not before: Tue 24 Feb 2026 07:58:28 +0000 ROA not after: Tue 23 Feb 2027 08:03:28 +0000 asID: 136783 IP address blocks: 2001:df6:bcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a7:b3:f7:01:b2:a4:1e:5a:d3:11:17:da:d3:6c:9f:e4:17:ef:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 24 07:58:28 2026 GMT Not After : Feb 23 08:03:28 2027 GMT Subject: CN=A56C3C97ADDDD11B0FCB4889A3D74B9858BE514C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ca:0a:f5:4b:ac:c3:81:7e:e3:26:49:c9:fd: a7:2f:52:1f:20:ae:14:05:85:89:d9:65:4e:02:52: 72:d3:6d:3a:bf:46:26:22:76:6e:32:a0:cd:3e:e7: 6f:4b:6a:ae:fb:51:6c:6b:73:2b:00:c9:ba:be:c9: 60:96:33:7c:69:f4:60:00:c1:0d:37:08:0f:76:e1: f3:6c:df:0b:17:45:a9:54:2b:78:cb:52:fa:78:38: 6f:90:df:f9:d6:b2:88:14:1b:1f:5f:b3:7d:d6:18: 8a:37:bc:5b:4b:f3:fe:93:5e:7a:80:b6:ed:68:94: 4d:db:15:22:1a:8a:4a:e2:db:8b:04:9e:a7:3b:34: e3:2d:86:c7:f8:83:10:14:d9:92:bd:54:8d:62:75: 13:51:54:43:a7:56:54:79:bd:b9:0e:a4:c0:3a:70: dc:b1:d5:a4:c6:0a:11:61:00:de:8d:2b:ef:4a:8a: fa:d0:7f:61:f9:74:5d:31:b5:66:8f:3a:61:4b:28: 3f:e3:90:06:3d:37:45:ae:17:3a:88:f4:55:91:ad: 5d:21:d1:b8:18:59:8d:fc:bb:3c:8f:57:0b:fd:2a: cc:dc:d0:46:d3:8e:83:cf:af:dd:bc:b8:b6:d4:a3: ce:f4:8f:45:b8:08:7f:2b:f8:b8:d6:b8:67:66:96: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6C:3C:97:AD:DD:D1:1B:0F:CB:48:89:A3:D7:4B:98:58:BE:51:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136783.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:bcc0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:6b:f9:e2:1a:cd:eb:bc:f8:3a:3b:5b:63:e9:1f:96:c1:9b: 37:cb:e7:b2:54:1d:19:cd:e2:56:b8:30:12:66:41:cf:34:99: fb:c3:2a:fe:b6:23:3d:cc:b8:88:c4:9c:70:7c:bb:3b:6a:1f: a6:85:cb:13:4b:a9:10:2d:6f:62:d9:6c:37:e8:13:ca:ee:2f: d1:0f:2d:d2:5a:c6:81:59:3f:01:48:64:76:4c:26:07:14:bf: 32:5d:4a:99:46:3e:63:15:3b:0d:ed:af:38:04:bb:6b:f6:33: 05:65:88:d2:45:0d:ef:9e:1f:34:e1:60:fe:23:2e:33:a0:24: 51:15:f4:29:39:9d:20:76:9f:d1:bb:e5:c1:a5:c8:22:fa:99: cc:af:b8:0f:bd:bc:65:9e:7f:6a:70:c7:87:0f:e9:a0:a2:da: 64:d0:f9:c6:ee:b9:76:0f:36:74:1a:ad:c6:78:02:3d:90:76: e3:cc:ab:42:eb:67:4b:dd:f6:97:e7:cd:ee:e7:e3:13:a2:2e: a4:55:cc:ec:06:40:5b:9b:77:87:b0:ec:13:3a:88:a1:83:af: 40:e9:8d:28:a6:ec:28:2c:0e:18:e0:00:05:ad:b1:7d:d6:d2: cf:66:ca:dd:d6:f9:1b:44:4b:ab:71:5b:66:8a:1a:b1:fe:cd: e2:5c:fc:62 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUbaez9wGypB5a0xEX2tNsn+QX770wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNDA3NTgyOFoX DTI3MDIyMzA4MDMyOFowMzExMC8GA1UEAxMoQTU2QzNDOTdBRERERDExQjBGQ0I0 ODg5QTNENzRCOTg1OEJFNTE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN7KCvVLrMOBfuMmScn9py9SHyCuFAWFidllTgJSctNtOr9GJiJ2bjKgzT7n b0tqrvtRbGtzKwDJur7JYJYzfGn0YADBDTcID3bh82zfCxdFqVQreMtS+ng4b5Df +dayiBQbH1+zfdYYije8W0vz/pNeeoC27WiUTdsVIhqKSuLbiwSepzs04y2Gx/iD EBTZkr1UjWJ1E1FUQ6dWVHm9uQ6kwDpw3LHVpMYKEWEA3o0r70qK+tB/Yfl0XTG1 Zo86YUsoP+OQBj03Ra4XOoj0VZGtXSHRuBhZjfy7PI9XC/0qzNzQRtOOg8+v3by4 ttSjzvSPRbgIfyv4uNa4Z2aWn/kCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSlbDyX rd3RGw/LSImj10uYWL5RTDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjc4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfa8wDANBgkqhkiG9w0BAQsFAAOCAQEAXGv54hrN67z4Ojtb Y+kflsGbN8vnslQdGc3iVrgwEmZBzzSZ+8Mq/rYjPcy4iMSccHy7O2ofpoXLE0up EC1vYtlsN+gTyu4v0Q8t0lrGgVk/AUhkdkwmBxS/Ml1KmUY+YxU7De2vOAS7a/Yz BWWI0kUN754fNOFg/iMuM6AkURX0KTmdIHaf0bvlwaXIIvqZzK+4D728ZZ5/anDH hw/poKLaZND5xu65dg82dBqtxngCPZB248yrQutnS932l+fN7ufjE6IupFXM7AZA W5t3h7DsEzqIoYOvQOmNKKbsKCwOGOAABa2xfdbSz2bK3db5G0RLq3FbZooasf7N 4lz8Yg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:56:32 2026 by rpki-client