$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS133798.roa File: AS133798.roa (raw, json) Hash identifier: Sw6KMUyJf0rwTJl4jy9cRHyb+zgSVMLAH9rxSqxUe9A= Subject key identifier: B6:6B:BB:31:D9:B5:EE:58:01:9D:4D:3C:52:6D:93:C2:12:E4:95:B8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5025F009D87874CD8434372E14B688B26CAB4885 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133798.roa Signing time: Sun 07 Jun 2026 14:47:12 +0000 ROA not before: Sun 07 Jun 2026 14:42:12 +0000 ROA not after: Sun 06 Jun 2027 14:47:12 +0000 asID: 133798 IP address blocks: 103.143.98.0/23 maxlen: 24 103.143.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:25:f0:09:d8:78:74:cd:84:34:37:2e:14:b6:88:b2:6c:ab:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 7 14:42:12 2026 GMT Not After : Jun 6 14:47:12 2027 GMT Subject: CN=B66BBB31D9B5EE58019D4D3C526D93C212E495B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:ce:b2:df:9c:03:10:30:ea:d4:0c:83:d3: 6b:a2:49:94:9b:47:cf:e4:3a:28:b7:d2:f0:b0:68: 96:49:24:a7:fc:d7:eb:63:28:df:76:a7:de:d6:78: 94:7c:97:6b:89:fe:82:f1:62:1c:1b:80:67:b1:70: 3b:1e:ef:34:1d:75:a0:08:f0:2c:d3:9d:e4:5e:6d: 9c:15:55:74:42:f1:af:73:fd:75:54:12:3f:0e:ae: b6:6f:d5:34:b6:62:6d:ad:be:56:67:bf:31:3f:b1: 34:44:e6:ca:0d:ce:0c:a0:55:b6:8d:86:8c:68:5e: 67:15:5d:2d:38:c6:88:c4:7d:3f:f6:43:8f:10:5a: d5:61:d5:c7:c7:5a:3a:e1:15:3a:ec:c9:ef:83:a6: 65:d7:10:8b:91:97:b0:0c:f7:b7:48:b6:64:e3:fa: 44:e4:c6:29:f9:d0:98:b4:d2:9f:fe:5d:1f:18:c2: d7:3d:89:bb:09:2a:d7:89:07:b4:3c:18:e2:62:61: 70:fb:17:2b:87:30:c3:a7:d3:bf:84:07:be:7b:eb: 52:67:62:ec:17:64:3e:be:a5:51:8f:37:60:6c:ca: a4:84:2c:00:e3:1b:5f:a1:28:77:5e:8b:a0:77:ec: a3:2a:f4:c6:8b:61:57:4a:c6:bd:29:4a:25:5b:85: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6B:BB:31:D9:B5:EE:58:01:9D:4D:3C:52:6D:93:C2:12:E4:95:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS133798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.98.0-103.143.101.255 Signature Algorithm: sha256WithRSAEncryption 7a:61:69:7f:a3:76:08:78:ad:01:dd:14:01:53:3c:a7:42:db: db:15:d4:37:5b:de:cb:65:98:2e:fc:e2:ce:8a:d7:a2:b9:2f: 95:b7:f1:ef:d1:26:ee:e0:81:1d:aa:83:e5:5e:35:52:ed:19: 0c:61:9a:64:ca:8a:29:8c:b4:d6:0c:d3:04:89:5e:66:91:46: 2c:e1:65:98:da:d3:17:a8:36:58:8d:a7:4a:54:8b:66:c4:20: dc:46:0f:25:b7:d3:37:88:c6:ab:fc:f5:49:11:b4:d4:f0:cc: 51:e3:fe:cb:78:58:41:ea:25:da:8d:ac:5c:d3:43:30:ba:08: 9e:80:f2:52:ec:a5:6c:43:53:41:17:43:5e:ca:43:60:5e:bb: 05:a2:5c:e5:ed:f9:6c:47:8a:a5:3d:0d:98:64:fb:50:b1:2e: 3b:f6:af:ff:63:4b:88:c5:67:ae:5f:7d:b4:81:98:ed:df:e5: 85:54:3a:aa:a9:8e:d3:e7:23:5b:c6:fc:dc:d8:49:a1:2c:6e: 15:91:f0:7f:5c:b7:f1:32:8c:90:4d:45:88:82:d9:6a:62:3f: f4:a1:bc:b3:82:68:c8:74:ac:e7:14:9f:5b:52:41:a9:1d:a0: a4:aa:5a:71:07:62:aa:2f:ed:14:52:34:43:3a:af:40:04:3c: 6c:80:47:6a -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUUCXwCdh4dM2ENDcuFLaIsmyrSIUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYwNzE0NDIxMloX DTI3MDYwNjE0NDcxMlowMzExMC8GA1UEAxMoQjY2QkJCMzFEOUI1RUU1ODAxOUQ0 RDNDNTI2RDkzQzIxMkU0OTVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkGzrLfnAMQMOrUDIPTa6JJlJtHz+Q6KLfS8LBolkkkp/zX62Mo33an3tZ4 lHyXa4n+gvFiHBuAZ7FwOx7vNB11oAjwLNOd5F5tnBVVdELxr3P9dVQSPw6utm/V NLZiba2+Vme/MT+xNETmyg3ODKBVto2GjGheZxVdLTjGiMR9P/ZDjxBa1WHVx8da OuEVOuzJ74OmZdcQi5GXsAz3t0i2ZOP6ROTGKfnQmLTSn/5dHxjC1z2Juwkq14kH tDwY4mJhcPsXK4cww6fTv4QHvnvrUmdi7BdkPr6lUY83YGzKpIQsAOMbX6Eod16L oHfsoyr0xothV0rGvSlKJVuFM/8CAwEAAaOCAdQwggHQMB0GA1UdDgQWBBS2a7sx 2bXuWAGdTTxSbZPCEuSVuDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTMzNzk4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIA ATAOMAwDBAFnj2IDBAFnj2QwDQYJKoZIhvcNAQELBQADggEBAHphaX+jdgh4rQHd FAFTPKdC29sV1Ddb3stlmC784s6K16K5L5W38e/RJu7ggR2qg+VeNVLtGQxhmmTK iimMtNYM0wSJXmaRRizhZZja0xeoNliNp0pUi2bEINxGDyW30zeIxqv89UkRtNTw zFHj/st4WEHqJdqNrFzTQzC6CJ6A8lLspWxDU0EXQ17KQ2BeuwWiXOXt+WxHiqU9 DZhk+1CxLjv2r/9jS4jFZ65ffbSBmO3f5YVUOqqpjtPnI1vG/NzYSaEsbhWR8H9c t/EyjJBNRYiC2WpiP/ShvLOCaMh0rOcUn1tSQakdoKSqWnEHYqov7RRSNEM6r0AE PGyAR2o= -----END CERTIFICATE-----Generated at Wed Jun 17 08:26:28 2026 by rpki-client