$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS131718.roa File: AS131718.roa (raw, json) Hash identifier: kl6RYj1ReG20x9hmxcLQcGmF/lATov2tjt81EkmQ7Gg= Subject key identifier: AF:7F:1B:D4:3B:20:10:84:27:7F:D9:05:84:60:01:D7:0B:CB:16:9A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59B7AF95FE8D94E99FBC608303EB277F1B54A0C5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131718.roa Signing time: Tue 19 May 2026 07:01:56 +0000 ROA not before: Tue 19 May 2026 06:56:56 +0000 ROA not after: Tue 18 May 2027 07:01:56 +0000 asID: 131718 IP address blocks: 2400:8000:4804::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b7:af:95:fe:8d:94:e9:9f:bc:60:83:03:eb:27:7f:1b:54:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 19 06:56:56 2026 GMT Not After : May 18 07:01:56 2027 GMT Subject: CN=AF7F1BD43B201084277FD905846001D70BCB169A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:1b:36:20:09:9d:7f:e5:e7:2a:db:b8:3d: d1:ed:37:6a:f0:a0:08:90:22:5f:4f:e1:45:5d:92: 44:58:85:58:04:24:85:ad:35:7f:5d:48:5a:06:43: e6:e2:5c:04:38:6c:1f:48:ac:f4:78:28:40:0d:cc: 0d:79:69:a5:3d:cc:0f:0f:47:11:3c:af:63:0d:f1: 23:a1:15:32:d1:f2:19:ec:d6:34:0b:ae:d0:e7:31: 72:52:a1:f8:9b:3e:d0:49:45:3a:4b:db:7f:3d:d5: b0:e5:ca:7f:a0:07:24:e7:be:3c:cf:12:84:77:db: fa:bd:c6:f0:a1:a6:62:32:5e:f4:61:e0:d0:e1:38: 95:e4:09:a9:5e:5f:da:4f:d1:08:6e:0a:8f:bc:5d: d4:b2:f7:03:c1:7a:40:1c:66:a9:ec:05:09:a5:be: 74:ef:b7:90:46:9e:bc:07:03:7a:93:b4:1b:d7:15: fd:ef:a0:a6:ba:e5:53:11:01:8d:ea:a4:5e:46:c2: 76:14:a9:2d:c3:6f:7a:8d:c2:1c:b1:a6:27:12:d0: 95:d1:79:b5:11:29:da:b8:44:84:6f:8a:85:a2:e8: 58:95:cf:ef:1a:d4:f2:76:9c:c2:e9:c6:10:6c:f7: 88:02:a1:01:83:27:88:60:e3:d3:62:3c:0f:25:4f: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:1B:D4:3B:20:10:84:27:7F:D9:05:84:60:01:D7:0B:CB:16:9A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS131718.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:8000:4804::/48 Signature Algorithm: sha256WithRSAEncryption 19:39:c9:94:8a:8f:4f:e9:27:4e:06:69:f5:b9:28:56:d1:37: ac:0e:a7:d5:44:9d:e3:ff:03:0c:9a:4e:46:54:9c:fc:81:1b: f4:2a:40:8c:d8:46:58:05:b6:ea:0a:6b:d8:4f:29:29:59:2f: a6:8f:bb:ef:b1:97:72:23:67:32:67:9f:94:61:86:1c:48:c0: 0e:a8:00:a4:0d:58:76:8e:75:12:f2:e2:06:ee:f9:33:13:4f: b3:1b:9c:e4:a9:97:52:fb:18:ec:78:d5:4e:a9:28:7b:31:fd: 7f:75:dd:95:c8:43:89:2e:d5:86:e4:58:99:e5:52:dd:df:16: bf:b1:a5:80:90:c1:01:e7:87:8f:5e:b7:47:27:d1:3f:8c:04: 48:5f:7a:c2:ea:54:28:f9:ca:03:24:ac:ef:5b:53:73:39:8a: 59:8e:16:62:e0:45:be:cc:7d:4d:c6:3d:f9:d2:4b:27:a9:dd: 3e:e7:70:58:41:0b:e2:6a:a4:76:6b:19:83:89:aa:79:81:23: 3e:e0:a1:d3:2c:89:6a:bf:0a:da:9a:cd:21:d3:8a:f6:94:5c: 7d:c8:89:54:6d:b3:90:53:60:10:cd:a0:33:5f:ad:f6:21:7d: 91:eb:07:f8:5a:f6:5a:37:5c:c0:37:7c:4e:c9:2f:39:26:7f: 59:9f:d9:e1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUWbevlf6NlOmfvGCDA+snfxtUoMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUxOTA2NTY1NloX DTI3MDUxODA3MDE1NlowMzExMC8GA1UEAxMoQUY3RjFCRDQzQjIwMTA4NDI3N0ZE OTA1ODQ2MDAxRDcwQkNCMTY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODIGzYgCZ1/5ecq27g90e03avCgCJAiX0/hRV2SRFiFWAQkha01f11IWgZD 5uJcBDhsH0is9HgoQA3MDXlppT3MDw9HETyvYw3xI6EVMtHyGezWNAuu0OcxclKh +Js+0ElFOkvbfz3VsOXKf6AHJOe+PM8ShHfb+r3G8KGmYjJe9GHg0OE4leQJqV5f 2k/RCG4Kj7xd1LL3A8F6QBxmqewFCaW+dO+3kEaevAcDepO0G9cV/e+gprrlUxEB jeqkXkbCdhSpLcNveo3CHLGmJxLQldF5tREp2rhEhG+KhaLoWJXP7xrU8nacwunG EGz3iAKhAYMniGDj02I8DyVPF20CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSvfxvU OyAQhCd/2QWEYAHXC8sWmjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMxNzE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJACAAEgEMA0GCSqGSIb3DQEBCwUAA4IBAQAZOcmUio9P6SdOBmn1uShW 0TesDqfVRJ3j/wMMmk5GVJz8gRv0KkCM2EZYBbbqCmvYTykpWS+mj7vvsZdyI2cy Z5+UYYYcSMAOqACkDVh2jnUS8uIG7vkzE0+zG5zkqZdS+xjseNVOqSh7Mf1/dd2V yEOJLtWG5FiZ5VLd3xa/saWAkMEB54ePXrdHJ9E/jARIX3rC6lQo+coDJKzvW1Nz OYpZjhZi4EW+zH1Nxj350ksnqd0+53BYQQviaqR2axmDiap5gSM+4KHTLIlqvwra ms0h04r2lFx9yIlUbbOQU2AQzaAzX632IX2R6wf4WvZaN1zAN3xOyS85Jn9Zn9nh -----END CERTIFICATE-----Generated at Wed Jun 17 12:23:10 2026 by rpki-client