$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa File: AS134643.roa (raw, json) Hash identifier: DARzx8izw7ix7tr23UOei8yfQZJBpQzfV6duaBSCKPw= Subject key identifier: C3:ED:F6:40:8F:8A:1B:B5:96:39:EF:B1:9A:FD:64:B6:27:D9:6F:B7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7A441368ADEB0A4131402AEBDD788C71F1946A9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa Signing time: Mon 05 Oct 2026 08:03:52 +0000 ROA not before: Mon 05 Oct 2026 07:58:52 +0000 ROA not after: Mon 04 Oct 2027 08:03:52 +0000 asID: 134643 IP address blocks: 103.207.96.0/22 maxlen: 22 103.207.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:44:13:68:ad:eb:0a:41:31:40:2a:eb:dd:78:8c:71:f1:94:6a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 5 07:58:52 2026 GMT Not After : Oct 4 08:03:52 2027 GMT Subject: CN=C3EDF6408F8A1BB59639EFB19AFD64B627D96FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:6e:52:bd:c1:22:0b:2b:61:c5:c7:bb:d0: a0:a2:54:d6:0f:81:84:ae:b8:46:8b:89:0a:9e:01: 7e:1a:13:02:33:a8:33:4c:29:77:76:1d:d9:30:d7: 05:56:5a:7f:0c:97:28:52:3d:ab:f8:8c:eb:7a:52: d9:ed:44:7e:05:b5:1f:e2:71:19:98:29:36:b5:d5: 74:d2:25:f0:70:cd:28:03:c5:91:1e:de:e7:8e:3d: 35:a4:5e:d9:7e:c5:a6:a2:6e:ee:88:d9:60:2a:d4: f4:6a:43:57:94:88:17:f7:e7:2f:ea:fe:29:2b:40: 74:6c:5e:94:c2:ee:b6:03:6f:32:12:aa:90:98:a6: 23:00:98:6c:6f:ec:98:d3:0c:7d:1f:e3:9a:ab:f3: a0:43:32:02:b7:82:ff:cf:7b:79:b6:25:1e:0f:50: 16:98:9a:8e:02:ad:d8:38:23:d4:4c:6e:b9:df:ab: c1:fa:8b:f6:a6:59:61:83:95:8f:f0:c4:c2:6f:e6: 8b:94:77:73:41:cc:70:0c:37:3c:c4:1f:84:8a:e4: ae:03:02:e4:97:fe:7f:97:d5:5d:31:2c:d8:cb:5e: e5:b4:f5:20:e5:eb:bf:2c:ec:88:56:b3:7b:42:c5: f6:d2:31:4c:d0:9e:31:bc:db:0c:f7:76:c4:2b:61: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:ED:F6:40:8F:8A:1B:B5:96:39:EF:B1:9A:FD:64:B6:27:D9:6F:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134643.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 Signature Algorithm: sha256WithRSAEncryption 04:e9:f8:e8:5c:06:a7:ae:30:66:e7:31:76:f0:ef:6d:cc:c7: 8c:a0:f2:d5:46:20:5e:8b:52:92:67:62:16:fd:7b:8f:80:c8: 34:07:bb:48:59:38:8c:ba:fe:a1:e4:29:d1:f8:45:89:75:db: 17:61:60:d5:dc:c1:1a:d0:0f:0e:41:41:8d:63:ac:0b:53:73: cb:b3:b0:99:09:03:0d:7d:d1:64:de:c3:ea:fa:2c:2c:0f:7c: 30:9c:14:ba:98:f5:51:4d:18:d6:95:79:95:3c:c4:b4:84:71: 15:77:1b:ab:2b:90:9d:e4:28:0f:c7:c5:f2:a0:19:1d:81:f6: bb:c4:65:ec:f9:f4:d8:16:b5:52:59:d7:56:9d:bb:6d:3d:f9: 00:3a:1f:ad:d1:88:fa:67:9e:6f:2b:89:2c:02:a2:73:a3:9f: a4:14:9d:2f:60:df:cb:e6:12:34:82:8e:6e:37:ef:26:b6:0d: 4a:ba:5c:aa:a9:a7:43:43:ae:6f:f0:8b:53:1a:6d:0a:91:ff: f9:b4:a3:d3:27:04:fa:69:bf:5e:a6:9e:c6:2a:6e:ee:ae:06: 3e:e8:a5:ad:18:bc:2d:9a:64:a1:88:ba:13:c9:50:dc:c3:50: a1:cc:86:2e:c9:20:29:be:4a:d2:d7:f0:76:be:7c:36:5a:e7: ae:3f:94:db -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUekQTaK3rCkExQCrr3XiMcfGUap8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwNTA3NTg1MloX DTI3MTAwNDA4MDM1MlowMzExMC8GA1UEAxMoQzNFREY2NDA4RjhBMUJCNTk2MzlF RkIxOUFGRDY0QjYyN0Q5NkZCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSIblK9wSILK2HFx7vQoKJU1g+BhK64RouJCp4BfhoTAjOoM0wpd3Yd2TDX BVZafwyXKFI9q/iM63pS2e1EfgW1H+JxGZgpNrXVdNIl8HDNKAPFkR7e5449NaRe 2X7FpqJu7ojZYCrU9GpDV5SIF/fnL+r+KStAdGxelMLutgNvMhKqkJimIwCYbG/s mNMMfR/jmqvzoEMyAreC/897ebYlHg9QFpiajgKt2Dgj1Exuud+rwfqL9qZZYYOV j/DEwm/mi5R3c0HMcAw3PMQfhIrkrgMC5Jf+f5fVXTEs2Mte5bT1IOXrvyzsiFaz e0LF9tIxTNCeMbzbDPd2xCthrLcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTD7fZA j4obtZY577Ga/WS2J9lvtzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ89gMA0GCSqGSIb3DQEBCwUAA4IBAQAE6fjoXAanrjBm5zF28O9tzMeM oPLVRiBei1KSZ2IW/XuPgMg0B7tIWTiMuv6h5CnR+EWJddsXYWDV3MEa0A8OQUGN Y6wLU3PLs7CZCQMNfdFk3sPq+iwsD3wwnBS6mPVRTRjWlXmVPMS0hHEVdxurK5Cd 5CgPx8XyoBkdgfa7xGXs+fTYFrVSWddWnbttPfkAOh+t0Yj6Z55vK4ksAqJzo5+k FJ0vYN/L5hI0go5uN+8mtg1KulyqqadDQ65v8ItTGm0Kkf/5tKPTJwT6ab9epp7G Km7urgY+6KWtGLwtmmShiLoTyVDcw1ChzIYuySApvkrS1/B2vnw2WueuP5Tb -----END CERTIFICATE-----Generated at Mon Nov 9 13:54:57 2026 by rpki-client