$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136873.roa File: AS136873.roa (raw, json) Hash identifier: iMb1AVSQnNR/ZhVIcKy/CawEOBvxcJD3LB5B1b8skJs= Subject key identifier: CD:F2:DA:7D:D8:49:39:AB:F4:9E:E7:F9:44:20:F4:E4:C5:63:F1:01 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0823A83A381A6E4AA629B59233D22911EC3669AF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136873.roa Signing time: Fri 10 Apr 2026 05:01:05 +0000 ROA not before: Fri 10 Apr 2026 04:56:05 +0000 ROA not after: Fri 09 Apr 2027 05:01:05 +0000 asID: 136873 IP address blocks: 103.75.84.0/23 maxlen: 24 103.116.49.0/24 maxlen: 24 103.165.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:23:a8:3a:38:1a:6e:4a:a6:29:b5:92:33:d2:29:11:ec:36:69:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 04:56:05 2026 GMT Not After : Apr 9 05:01:05 2027 GMT Subject: CN=CDF2DA7DD84939ABF49EE7F94420F4E4C563F101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:c8:b1:23:6a:e3:9e:ad:1c:a1:b3:f1:3b: 6e:ab:3f:0d:94:6e:01:fd:50:ab:be:c6:01:ac:37: a9:83:02:67:df:56:5e:c6:8a:01:a5:04:ed:75:2b: 96:40:9b:d8:d8:29:2a:3f:eb:28:eb:cf:fa:b3:31: 81:f0:0d:7d:1f:6e:37:2f:a4:b3:62:55:3b:09:2b: 73:8b:be:d8:2e:8a:5e:da:b8:c1:f5:ec:07:0f:47: 7e:93:4f:84:32:f8:a1:48:f9:e0:f0:f1:a8:93:79: 35:7d:ba:1d:67:4c:31:81:a8:57:6e:5f:9e:5a:e2: a4:5e:17:03:dd:e1:b9:24:57:ca:18:39:8d:fc:95: 27:71:5d:92:8a:77:da:ea:52:2e:14:d0:a1:cd:de: b3:e0:1a:b7:e6:ee:67:68:5b:9b:e7:6c:80:2b:d5: 35:66:c9:f9:56:b8:22:9e:e2:83:aa:a9:78:37:74: 63:fb:21:53:cf:2d:39:4c:5a:0d:0d:92:92:61:ff: 28:09:db:cb:f2:b3:b0:e1:89:75:79:58:78:4f:0a: dc:09:1a:f5:be:bc:29:9f:fb:a3:69:d6:d3:84:84: 4e:8b:ec:d1:49:40:0e:60:88:ec:42:2f:db:f6:3f: 1e:7d:51:42:43:58:59:15:35:41:6e:c9:fb:96:06: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F2:DA:7D:D8:49:39:AB:F4:9E:E7:F9:44:20:F4:E4:C5:63:F1:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136873.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.84.0/23 103.116.49.0/24 103.165.156.0/23 Signature Algorithm: sha256WithRSAEncryption 42:f1:ec:9c:d6:38:4f:9f:17:65:99:45:ad:ac:e1:19:b0:c7: 04:85:3b:bb:69:42:fd:cd:fc:1f:18:75:39:79:9a:43:ca:2b: 88:da:72:99:61:6e:ab:49:be:b4:93:a5:87:77:ef:ef:b6:d8: b1:cd:b0:28:c8:57:3e:7a:19:43:b2:0c:c3:8f:3e:88:94:42: ab:6d:5b:db:55:e0:1c:eb:f5:7b:36:16:78:64:9c:98:08:1b: c9:b0:79:77:74:99:8b:b2:1c:89:ca:28:51:b1:5a:ed:cf:69: 11:ee:af:13:a2:b2:91:5e:80:97:f8:ed:af:8e:2f:65:72:5e: df:62:da:dd:8c:ee:7c:3c:97:a1:6f:1b:6b:2f:31:41:23:86: 1d:8f:0e:75:f5:20:94:7c:9a:17:d4:84:c4:e3:d4:7e:4c:23: 73:0a:7b:77:c6:e2:80:e1:49:62:b0:eb:82:ca:96:86:e3:c8: fb:4c:5b:c0:c7:85:e0:96:6d:08:75:7f:7a:5b:14:61:5f:95: 00:fc:4d:b6:51:67:63:d1:d9:4f:96:d2:ac:71:27:fe:fd:f5: 7e:33:2f:3b:ec:c1:b2:5d:65:4c:a6:e1:60:f9:52:cc:55:0d: 27:ac:2a:95:38:e3:80:2e:f8:74:b5:a3:77:c0:51:df:24:91: 4f:d3:21:24 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUCCOoOjgabkqmKbWSM9IpEew2aa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMDA0NTYwNVoX DTI3MDQwOTA1MDEwNVowMzExMC8GA1UEAxMoQ0RGMkRBN0REODQ5MzlBQkY0OUVF N0Y5NDQyMEY0RTRDNTYzRjEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaayLEjauOerRyhs/E7bqs/DZRuAf1Qq77GAaw3qYMCZ99WXsaKAaUE7XUr lkCb2NgpKj/rKOvP+rMxgfANfR9uNy+ks2JVOwkrc4u+2C6KXtq4wfXsBw9HfpNP hDL4oUj54PDxqJN5NX26HWdMMYGoV25fnlripF4XA93huSRXyhg5jfyVJ3Fdkop3 2upSLhTQoc3es+Aat+buZ2hbm+dsgCvVNWbJ+Va4Ip7ig6qpeDd0Y/shU88tOUxa DQ2SkmH/KAnby/KzsOGJdXlYeE8K3Aka9b68KZ/7o2nW04SETovs0UlADmCI7EIv 2/Y/Hn1RQkNYWRU1QW7J+5YGLecCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBTN8tp9 2Ek5q/Se5/lEIPTkxWPxATAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg3My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWdLVAMEAGd0MQMEAWelnDANBgkqhkiG9w0BAQsFAAOCAQEAQvHs nNY4T58XZZlFrazhGbDHBIU7u2lC/c38Hxh1OXmaQ8oriNpymWFuq0m+tJOlh3fv 77bYsc2wKMhXPnoZQ7IMw48+iJRCq21b21XgHOv1ezYWeGScmAgbybB5d3SZi7Ic icooUbFa7c9pEe6vE6KykV6Al/jtr44vZXJe32La3YzufDyXoW8bay8xQSOGHY8O dfUglHyaF9SExOPUfkwjcwp7d8bigOFJYrDrgsqWhuPI+0xbwMeF4JZtCHV/elsU YV+VAPxNtlFnY9HZT5bSrHEn/v31fjMvO+zBsl1lTKbhYPlSzFUNJ6wqlTjjgC74 dLWjd8BR3ySRT9MhJA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:17:18 2026 by rpki-client