$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa File: AS133095.roa (raw, json) Hash identifier: akkO8l+d7ElkGF5mRmT1ZmiDDsL994Pik8+2L5fhO8s= Subject key identifier: 00:A3:2B:0A:47:26:2B:D9:3F:AC:A9:52:6B:EF:96:B2:C7:05:EB:48 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47AD6D6CCA910EFBA5A0AD991285D0129734C8EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa Signing time: Sat 06 Jun 2026 07:13:24 +0000 ROA not before: Sat 06 Jun 2026 07:08:24 +0000 ROA not after: Sat 05 Jun 2027 07:13:24 +0000 asID: 133095 IP address blocks: 103.61.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ad:6d:6c:ca:91:0e:fb:a5:a0:ad:99:12:85:d0:12:97:34:c8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 6 07:08:24 2026 GMT Not After : Jun 5 07:13:24 2027 GMT Subject: CN=00A32B0A47262BD93FACA9526BEF96B2C705EB48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:de:48:38:15:ed:cd:67:d5:dc:1b:2d:73: 9c:b1:9d:47:f7:d1:79:95:91:91:92:cf:d2:46:0d: f3:4d:3f:c2:35:76:85:89:57:55:63:d4:25:56:b6: cf:e0:c5:3d:0c:c5:d7:34:06:bb:65:5d:64:ac:48: 44:0e:c7:b5:f3:1b:be:18:bb:c9:71:58:94:bc:15: 95:68:87:93:e5:bf:c4:0d:92:72:06:df:07:f4:bb: b2:8e:98:dd:7f:7f:8b:50:39:46:b2:40:08:53:4c: 78:a3:42:58:32:71:16:c7:49:0f:9c:69:13:bc:de: 0c:93:a2:46:bb:c3:7f:8c:f4:9b:2d:6c:8d:60:37: ed:07:dc:87:4a:17:13:44:6c:0c:a4:2e:51:82:61: 50:d3:ad:e2:b5:46:3f:6e:6f:94:74:7f:9f:f2:0e: bc:a0:fe:d6:1c:02:16:64:98:c0:19:55:90:06:9b: 9e:a3:c7:36:38:b7:b3:26:50:f1:b6:5b:36:9d:4d: 78:73:aa:da:93:96:3d:65:6b:8e:c3:70:5c:e8:89: 52:5e:e9:18:21:ba:4e:1b:21:35:72:a4:f8:04:8f: 35:e9:35:b4:a4:b4:2e:67:67:1a:27:16:ec:05:d5: 49:ec:ba:36:2d:2d:63:60:9a:56:71:c6:c2:7d:bf: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A3:2B:0A:47:26:2B:D9:3F:AC:A9:52:6B:EF:96:B2:C7:05:EB:48 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.61.226.0/23 Signature Algorithm: sha256WithRSAEncryption a1:e8:85:c1:5e:e0:10:92:ed:77:6e:06:03:e6:07:7c:45:13: f2:b0:de:e8:83:84:fc:57:f2:df:52:9c:6f:ed:98:a5:10:58: 70:f7:04:8d:21:c1:4a:23:63:6c:17:9a:3d:37:62:cd:b3:6c: 60:9a:da:c9:1f:f8:bd:77:33:b6:a1:e1:d5:3a:9c:45:fd:9a: 87:9a:0a:19:c7:01:71:c2:b7:b6:53:0b:28:63:36:a4:83:b1: 14:46:b0:89:f8:70:ed:1a:d2:1d:9f:84:5f:9e:02:fb:06:ad: 0d:95:87:15:c8:da:52:43:9e:20:b7:10:e7:94:65:05:c1:12: 29:ba:30:4c:af:2e:15:b0:88:31:7c:43:d8:4f:70:bb:a6:97: d7:77:22:b6:fd:72:79:3c:a1:d2:0a:ee:b1:9d:f2:65:82:07: 00:64:70:f5:c9:7b:55:82:25:98:e4:8b:4f:2d:37:24:30:36: 55:0e:ae:4e:9c:a5:bd:9c:9f:26:76:d8:ca:96:71:1e:55:3f: 12:b2:b8:ce:d5:f1:b3:b6:ed:dc:82:77:d3:05:1d:68:02:75: b3:34:ad:37:21:87:be:58:51:fa:12:2d:11:11:53:7b:a3:68: 09:cd:46:f3:ea:91:2e:13:57:2a:74:97:9a:ba:da:1b:20:5d: 4e:8b:50:cf -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUR61tbMqRDvuloK2ZEoXQEpc0yO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYwNjA3MDgyNFoX DTI3MDYwNTA3MTMyNFowMzExMC8GA1UEAxMoMDBBMzJCMEE0NzI2MkJEOTNGQUNB OTUyNkJFRjk2QjJDNzA1RUI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOx3kg4Fe3NZ9XcGy1znLGdR/fReZWRkZLP0kYN800/wjV2hYlXVWPUJVa2 z+DFPQzF1zQGu2VdZKxIRA7HtfMbvhi7yXFYlLwVlWiHk+W/xA2ScgbfB/S7so6Y 3X9/i1A5RrJACFNMeKNCWDJxFsdJD5xpE7zeDJOiRrvDf4z0my1sjWA37Qfch0oX E0RsDKQuUYJhUNOt4rVGP25vlHR/n/IOvKD+1hwCFmSYwBlVkAabnqPHNji3syZQ 8bZbNp1NeHOq2pOWPWVrjsNwXOiJUl7pGCG6ThshNXKk+ASPNek1tKS0LmdnGicW 7AXVSey6Ni0tY2CaVnHGwn2/txsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQAoysK RyYr2T+sqVJr75ayxwXrSDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzMDk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZz3iMA0GCSqGSIb3DQEBCwUAA4IBAQCh6IXBXuAQku13bgYD5gd8RRPy sN7og4T8V/LfUpxv7ZilEFhw9wSNIcFKI2NsF5o9N2LNs2xgmtrJH/i9dzO2oeHV OpxF/ZqHmgoZxwFxwre2UwsoYzakg7EURrCJ+HDtGtIdn4RfngL7Bq0NlYcVyNpS Q54gtxDnlGUFwRIpujBMry4VsIgxfEPYT3C7ppfXdyK2/XJ5PKHSCu6xnfJlggcA ZHD1yXtVgiWY5ItPLTckMDZVDq5OnKW9nJ8mdtjKlnEeVT8SsrjO1fGztu3cgnfT BR1oAnWzNK03IYe+WFH6Ei0REVN7o2gJzUbz6pEuE1cqdJeautobIF1Oi1DP -----END CERTIFICATE-----Generated at Wed Jun 17 08:24:55 2026 by rpki-client