$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134409.roa File: AS134409.roa (raw, json) Hash identifier: 2d4dwhJNjSRHhFP6pJQRUwxP9cnaLCYsC3+3mHAA7cM= Subject key identifier: 5E:EC:E9:3E:BE:C0:CE:22:64:4F:B8:07:67:F2:45:77:B7:3B:B3:88 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A3201A32216EB30F0C413F85BBD1B04A24D6EAD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134409.roa Signing time: Thu 08 Oct 2026 02:30:26 +0000 ROA not before: Thu 08 Oct 2026 02:25:26 +0000 ROA not after: Thu 07 Oct 2027 02:30:26 +0000 asID: 134409 IP address blocks: 203.33.98.0/24 maxlen: 24 2001:df7:a940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:32:01:a3:22:16:eb:30:f0:c4:13:f8:5b:bd:1b:04:a2:4d:6e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 8 02:25:26 2026 GMT Not After : Oct 7 02:30:26 2027 GMT Subject: CN=5EECE93EBEC0CE22644FB80767F24577B73BB388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:31:00:4f:c5:60:9b:04:a4:cd:5c:0b:1a: ff:93:87:13:19:2a:d1:95:ba:6d:68:36:2e:79:8c: 55:28:da:ba:13:8b:de:12:89:f5:52:1b:14:b5:6f: 91:43:40:31:96:e2:46:c9:51:76:38:61:da:4f:e0: 18:86:74:76:df:44:2c:ff:e0:3f:ee:b6:7c:fa:0a: ca:41:27:10:fd:92:59:df:bb:c5:1e:eb:e1:c2:b4: 36:45:11:15:2e:da:6a:31:12:ee:82:bd:3b:15:42: e5:89:51:f2:25:c1:7c:71:34:c6:e2:a8:2a:bc:2a: 4b:ff:ef:9c:2d:7b:78:23:e5:ff:1a:51:16:51:cd: 74:a8:dc:08:66:36:93:6a:0c:29:75:72:1c:da:9f: cf:5d:5a:9e:07:bd:a8:4b:db:20:a4:be:c4:c4:71: 23:8d:81:b9:0e:6d:65:78:bf:35:57:18:f1:13:a4: 20:63:15:dc:93:0f:03:f5:10:b4:bc:b5:d4:34:03: df:8c:81:5a:e7:a9:1b:4c:12:b8:33:42:f4:7a:21: c8:23:b7:9e:e9:5d:9d:7d:8f:fe:a3:7e:58:f5:33: ea:59:30:64:90:54:c6:e0:14:72:3a:c3:b0:f5:78: 5f:54:f4:d3:42:b6:96:58:b6:86:16:d9:0c:b1:2d: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EC:E9:3E:BE:C0:CE:22:64:4F:B8:07:67:F2:45:77:B7:3B:B3:88 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.33.98.0/24 IPv6: 2001:df7:a940::/48 Signature Algorithm: sha256WithRSAEncryption 11:1d:a0:0c:2a:b1:e2:53:eb:ab:c8:82:74:3c:0a:2b:04:ea: d1:28:19:98:ef:4a:18:f0:6c:8a:7e:09:59:c5:e1:e7:34:20: df:8b:63:fa:7d:66:fc:e0:36:cc:a0:b3:cd:2a:0c:c1:cf:46: dd:46:07:d7:67:79:7d:e4:bc:cf:1c:61:2d:c7:b3:5c:71:4d: e7:cd:75:c4:52:9b:34:75:77:f8:9e:10:ac:11:a4:b7:1b:45: cc:ff:f5:2c:10:2b:85:14:ce:ee:a3:bd:35:2c:7b:f6:52:60: 7d:3f:ed:90:cf:bb:7b:5e:75:09:2a:4c:a3:26:11:14:91:1e: 26:47:08:0e:14:88:6f:9a:85:23:48:e1:e5:a1:f7:2d:02:3a: 8e:7a:c6:60:0b:1a:97:b5:c1:df:7b:ae:fe:bc:47:42:a1:d9: 75:91:03:c1:91:38:b6:68:ad:42:11:a1:2a:20:1f:74:4f:f2: cf:f3:e5:ee:42:1b:b5:83:7b:c9:42:39:f7:19:60:43:72:79: 11:3b:d5:a5:bd:5c:15:3d:7c:12:3f:64:05:24:da:af:15:fd: 2c:7d:6f:6a:ab:49:ed:d4:b3:9e:01:92:2c:21:a1:26:bb:c7: e0:0d:0f:56:e5:6e:a5:c3:b1:e4:d0:34:45:b3:8d:54:49:b9: 00:b5:6f:3c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWjIBoyIW6zDwxBP4W70bBKJNbq0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwODAyMjUyNloX DTI3MTAwNzAyMzAyNlowMzExMC8GA1UEAxMoNUVFQ0U5M0VCRUMwQ0UyMjY0NEZC ODA3NjdGMjQ1NzdCNzNCQjM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMKPMQBPxWCbBKTNXAsa/5OHExkq0ZW6bWg2LnmMVSjauhOL3hKJ9VIbFLVv kUNAMZbiRslRdjhh2k/gGIZ0dt9ELP/gP+62fPoKykEnEP2SWd+7xR7r4cK0NkUR FS7aajES7oK9OxVC5YlR8iXBfHE0xuKoKrwqS//vnC17eCPl/xpRFlHNdKjcCGY2 k2oMKXVyHNqfz11ange9qEvbIKS+xMRxI42BuQ5tZXi/NVcY8ROkIGMV3JMPA/UQ tLy11DQD34yBWuepG0wSuDNC9HohyCO3nuldnX2P/qN+WPUz6lkwZJBUxuAUcjrD sPV4X1T000K2lli2hhbZDLEti2kCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRe7Ok+ vsDOImRPuAdn8kV3tzuziDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NDA5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAyyFiMA8EAgACMAkDBwAgAQ33qUAwDQYJKoZIhvcNAQELBQADggEBABEd oAwqseJT66vIgnQ8CisE6tEoGZjvShjwbIp+CVnF4ec0IN+LY/p9ZvzgNsygs80q DMHPRt1GB9dneX3kvM8cYS3Hs1xxTefNdcRSmzR1d/ieEKwRpLcbRcz/9SwQK4UU zu6jvTUse/ZSYH0/7ZDPu3tedQkqTKMmERSRHiZHCA4UiG+ahSNI4eWh9y0COo56 xmALGpe1wd97rv68R0Kh2XWRA8GROLZorUIRoSogH3RP8s/z5e5CG7WDe8lCOfcZ YENyeRE71aW9XBU9fBI/ZAUk2q8V/Sx9b2qrSe3Us54BkiwhoSa7x+AND1blbqXD seTQNEWzjVRJuQC1bzw= -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:49 2026 by rpki-client