$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS134652.roa File: AS134652.roa (raw, json) Hash identifier: M5EL4u8rSJB871PVIcN6B5CaBUiFn8F0cCsy9sCGIEU= Subject key identifier: B2:28:04:BC:27:30:0F:23:EA:52:C0:F3:00:13:1E:6D:6A:9D:D9:C0 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 076C236F25B7A2333F0FCAC42FBF3BBEFD4F2319 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134652.roa Signing time: Wed 04 Nov 2026 02:47:37 +0000 ROA not before: Wed 04 Nov 2026 02:42:37 +0000 ROA not after: Wed 03 Nov 2027 02:47:37 +0000 asID: 134652 IP address blocks: 103.209.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6c:23:6f:25:b7:a2:33:3f:0f:ca:c4:2f:bf:3b:be:fd:4f:23:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Nov 4 02:42:37 2026 GMT Not After : Nov 3 02:47:37 2027 GMT Subject: CN=B22804BC27300F23EA52C0F300131E6D6A9DD9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:57:e8:33:09:d1:a3:8b:2c:46:2f:69:4d: a9:9c:82:40:83:af:20:8f:12:46:2a:9d:d4:34:89: 26:a3:af:72:27:eb:bf:55:3f:d7:b2:28:ad:e1:0f: 51:40:cb:52:f0:26:3f:ba:48:d4:c3:11:1a:cd:ab: a8:4f:49:29:7c:d6:89:e0:f1:fd:08:58:1b:0c:0d: 87:63:fb:7f:a9:dd:6d:66:40:79:11:cb:5e:46:10: 0c:66:f8:86:e3:7a:08:e7:2c:ce:12:93:7c:71:ad: 3f:39:d1:c6:bf:d2:94:68:61:41:0a:32:e0:fc:db: 9b:7f:50:55:c1:d9:a8:b3:0d:a3:53:91:e9:b0:4b: 84:33:17:d6:ae:36:59:76:78:c5:b4:a8:74:b7:56: f1:71:83:ce:50:f5:70:46:ff:b2:12:9e:2f:a7:1d: ac:bd:52:c7:9f:31:98:6c:0b:28:53:99:21:82:dd: 33:7c:63:10:b5:e0:0e:0c:10:ad:7a:a0:99:4f:98: d6:79:39:10:83:92:ec:16:eb:46:1c:cc:d9:a0:24: 2a:cc:67:3a:52:a4:e6:b3:29:59:a7:c2:47:9f:ac: 0a:4d:25:65:81:5f:07:e3:7e:1e:5a:41:2a:04:d6: 70:fb:7d:a6:98:ba:99:ad:c3:41:a1:6a:c9:a6:fe: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:04:BC:27:30:0F:23:EA:52:C0:F3:00:13:1E:6D:6A:9D:D9:C0 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS134652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.8.0/24 Signature Algorithm: sha256WithRSAEncryption 00:bf:98:c5:22:4d:d4:f8:c0:46:94:20:0d:5b:33:c5:ff:06: b4:9d:d0:09:9c:ca:13:77:84:9f:8d:33:86:d7:b9:30:d7:dc: 14:71:90:52:4f:0e:c4:a8:0b:83:82:e5:7a:5f:22:cd:af:be: bc:31:f8:6d:33:b4:da:08:96:a3:5b:bd:82:b5:0f:4d:23:62: 2e:e8:47:1a:c6:08:4d:76:2c:22:ef:cf:07:8e:4f:d3:93:64: b5:42:f0:98:e3:61:80:14:09:2a:fb:8f:5c:16:84:e5:85:d6: 06:5b:21:15:ac:c6:9a:a9:34:c7:16:0c:c4:c3:4a:c3:2c:0d: 23:75:ae:6d:e8:31:51:64:0e:b9:45:c5:19:32:19:56:14:e1: 97:42:50:38:70:2f:4e:c9:18:09:9b:39:a7:92:99:a5:b9:c3: 9f:42:cb:c0:6a:6a:b8:d4:5d:f0:ed:1f:c2:6c:8d:7e:62:f9: b3:64:10:d5:a4:4e:54:08:e2:4d:e7:86:2b:fe:56:dd:96:ad: 69:43:46:c4:54:5a:a8:73:8c:af:7e:71:be:22:ca:e6:16:84: b2:6f:cd:d3:ce:cd:97:dd:d2:1a:af:14:4f:46:36:8a:20:e4: 85:43:94:6a:f2:4c:e1:6a:4d:dd:46:f7:5f:3d:ca:fe:7e:bf: 7c:a6:2c:14 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUB2wjbyW3ojM/D8rEL787vv1PIxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTEwNDAyNDIzN1oX DTI3MTEwMzAyNDczN1owMzExMC8GA1UEAxMoQjIyODA0QkMyNzMwMEYyM0VBNTJD MEYzMDAxMzFFNkQ2QTlERDlDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALT0V+gzCdGjiyxGL2lNqZyCQIOvII8SRiqd1DSJJqOvcifrv1U/17IoreEP UUDLUvAmP7pI1MMRGs2rqE9JKXzWieDx/QhYGwwNh2P7f6ndbWZAeRHLXkYQDGb4 huN6COcszhKTfHGtPznRxr/SlGhhQQoy4Pzbm39QVcHZqLMNo1OR6bBLhDMX1q42 WXZ4xbSodLdW8XGDzlD1cEb/shKeL6cdrL1Sx58xmGwLKFOZIYLdM3xjELXgDgwQ rXqgmU+Y1nk5EIOS7BbrRhzM2aAkKsxnOlKk5rMpWafCR5+sCk0lZYFfB+N+HlpB KgTWcPt9ppi6ma3DQaFqyab+PuUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSyKAS8 JzAPI+pSwPMAEx5tap3ZwDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM0NjUyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ9EIMA0GCSqGSIb3DQEBCwUAA4IBAQAAv5jFIk3U+MBGlCANWzPF/wa0 ndAJnMoTd4SfjTOG17kw19wUcZBSTw7EqAuDguV6XyLNr768MfhtM7TaCJajW72C tQ9NI2Iu6EcaxghNdiwi788Hjk/Tk2S1QvCY42GAFAkq+49cFoTlhdYGWyEVrMaa qTTHFgzEw0rDLA0jda5t6DFRZA65RcUZMhlWFOGXQlA4cC9OyRgJmzmnkpmlucOf QsvAamq41F3w7R/CbI1+YvmzZBDVpE5UCOJN54Yr/lbdlq1pQ0bEVFqoc4yvfnG+ IsrmFoSyb83Tzs2X3dIarxRPRjaKIOSFQ5Rq8kzhak3dRvdfPcr+fr98piwU -----END CERTIFICATE-----Generated at Mon Nov 9 13:14:34 2026 by rpki-client