$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134487.roa File: AS134487.roa (raw, json) Hash identifier: 2XJo+Mteje9BTag3jLXXC5eq4qxia5/iqe4Duj+E6iA= Subject key identifier: 98:BA:52:10:78:EB:54:A3:6E:33:C5:49:8E:27:D6:52:DE:DA:37:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3214CB729FFD1607640804F5706E40D0CDBBDCE3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134487.roa Signing time: Thu 08 Oct 2026 01:36:06 +0000 ROA not before: Thu 08 Oct 2026 01:31:06 +0000 ROA not after: Thu 07 Oct 2027 01:36:06 +0000 asID: 134487 IP address blocks: 163.52.45.0/24 maxlen: 24 2001:df7:67c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:14:cb:72:9f:fd:16:07:64:08:04:f5:70:6e:40:d0:cd:bb:dc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 8 01:31:06 2026 GMT Not After : Oct 7 01:36:06 2027 GMT Subject: CN=98BA521078EB54A36E33C5498E27D652DEDA3740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8e:4a:4f:fe:57:2d:02:25:6f:b5:35:be:c3: 39:4b:c6:b3:55:22:f3:40:26:59:4c:d2:3b:a7:e2: be:e6:ee:91:f8:f2:aa:26:1d:13:31:bc:ee:64:06: 42:b8:d4:e8:77:9c:e6:86:e3:39:29:b3:0b:d1:f9: 4f:c4:a9:55:8e:70:0b:14:81:e9:59:5d:0f:d8:e5: 1d:68:21:a4:13:f7:6b:aa:97:99:7e:4a:92:4e:5c: bc:61:d3:37:41:7e:68:7c:a5:c9:01:42:c7:0f:5b: 63:3e:6b:eb:94:a2:e9:34:b3:dd:7c:2d:2d:85:bf: f8:6a:7e:3e:6b:be:1c:82:ae:88:97:4c:e9:aa:fa: 4b:24:3d:c6:26:bf:ad:4d:06:a8:89:ef:d3:73:04: be:6b:0d:02:84:ac:ac:80:76:a5:3f:ea:4a:0a:2f: 69:1c:86:c5:27:6e:a1:77:6a:f3:72:7f:b9:01:9a: 51:6b:0e:12:73:c9:e7:6d:f8:9c:f2:6c:a3:89:26: 71:f6:62:0e:06:b7:ca:d0:00:69:91:aa:4e:65:bf: 67:7a:37:b6:db:25:8a:01:a4:13:09:d9:3f:84:ad: 0e:e9:ce:ae:08:7f:86:6a:4c:9c:31:f4:d5:3b:03: 13:5a:32:28:92:96:61:7a:2c:51:6b:77:27:d5:9a: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:52:10:78:EB:54:A3:6E:33:C5:49:8E:27:D6:52:DE:DA:37:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.45.0/24 IPv6: 2001:df7:67c0::/48 Signature Algorithm: sha256WithRSAEncryption a2:34:c0:ec:46:b4:9d:22:26:93:b3:42:0f:06:a1:f6:54:35: 5a:d8:e8:47:63:4e:16:d2:53:b8:db:da:b0:19:9b:0c:9d:d6: ac:41:ca:20:d7:42:d8:49:0f:71:cf:99:a3:f0:4f:15:05:a5: 98:fa:19:6b:8d:bd:01:67:5f:93:d1:78:cc:db:0b:13:fa:76: 8d:f0:66:59:e1:79:c1:f3:d5:08:55:18:4d:7a:69:43:c2:e6: 65:ef:33:d6:fb:a5:3f:e4:4a:e3:df:e7:5f:f2:a5:23:dc:e1: 97:08:87:b2:e4:71:c7:c6:c5:6f:77:7d:18:1a:34:e2:9f:64: 76:0b:34:45:f1:e8:2c:78:81:bc:b2:14:2c:46:df:46:eb:4d: 96:ac:75:a3:35:d8:57:a5:10:53:fc:c6:15:be:ff:7a:5f:11: 2e:84:df:94:29:ee:df:73:94:f5:b1:2e:0a:dc:ae:70:a5:ec: 28:d5:92:4e:fe:7d:d4:d7:cb:80:82:82:86:84:e3:be:a2:11: 59:df:82:fc:15:60:c2:07:87:28:f3:49:82:58:3b:bd:a0:5a: fc:e8:28:13:57:0b:d2:98:5c:b8:97:42:2e:64:ef:8b:ee:f6: bd:10:17:67:6b:96:51:78:c5:bb:de:da:69:10:ad:8b:20:8a: 47:a6:9e:a8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMhTLcp/9FgdkCAT1cG5A0M273OMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwODAxMzEwNloX DTI3MTAwNzAxMzYwNlowMzExMC8GA1UEAxMoOThCQTUyMTA3OEVCNTRBMzZFMzND NTQ5OEUyN0Q2NTJERURBMzc0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKOSk/+Vy0CJW+1Nb7DOUvGs1Ui80AmWUzSO6fivubukfjyqiYdEzG87mQG QrjU6Hec5objOSmzC9H5T8SpVY5wCxSB6VldD9jlHWghpBP3a6qXmX5Kkk5cvGHT N0F+aHylyQFCxw9bYz5r65Si6TSz3XwtLYW/+Gp+Pmu+HIKuiJdM6ar6SyQ9xia/ rU0GqInv03MEvmsNAoSsrIB2pT/qSgovaRyGxSduoXdq83J/uQGaUWsOEnPJ5234 nPJso4kmcfZiDga3ytAAaZGqTmW/Z3o3ttsligGkEwnZP4StDunOrgh/hmpMnDH0 1TsDE1oyKJKWYXosUWt3J9Wa6lkCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSYulIQ eOtUo24zxUmOJ9ZS3to3QDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NDg3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozQtMA8EAgACMAkDBwAgAQ33Z8AwDQYJKoZIhvcNAQELBQADggEBAKI0 wOxGtJ0iJpOzQg8GofZUNVrY6EdjThbSU7jb2rAZmwyd1qxByiDXQthJD3HPmaPw TxUFpZj6GWuNvQFnX5PReMzbCxP6do3wZlnhecHz1QhVGE16aUPC5mXvM9b7pT/k SuPf51/ypSPc4ZcIh7LkccfGxW93fRgaNOKfZHYLNEXx6Cx4gbyyFCxG30brTZas daM12FelEFP8xhW+/3pfES6E35Qp7t9zlPWxLgrcrnCl7CjVkk7+fdTXy4CCgoaE 476iEVnfgvwVYMIHhyjzSYJYO72gWvzoKBNXC9KYXLiXQi5k74vu9r0QF2drllF4 xbve2mkQrYsgikemnqg= -----END CERTIFICATE-----Generated at Mon Nov 9 15:04:54 2026 by rpki-client