$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa File: AS139428.roa (raw, json) Hash identifier: hvm+QTP/4DL1arkeY/Y+78M96D8ToATWptwuXvzgU6E= Subject key identifier: 3F:05:68:ED:A1:F8:3B:3A:DC:AF:43:BE:42:5B:94:2E:EB:55:C6:E9 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5FD50F910AB8CB726800A5932640A0DF005A4C5B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa Signing time: Thu 06 Feb 2025 10:44:58 +0000 ROA not before: Thu 06 Feb 2025 10:39:58 +0000 ROA not after: Thu 05 Feb 2026 10:44:58 +0000 asID: 139428 IP address blocks: 157.20.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d5:0f:91:0a:b8:cb:72:68:00:a5:93:26:40:a0:df:00:5a:4c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 6 10:39:58 2025 GMT Not After : Feb 5 10:44:58 2026 GMT Subject: CN=3F0568EDA1F83B3ADCAF43BE425B942EEB55C6E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:b7:b9:a2:80:b8:a0:98:ee:15:02:91:a6: 2c:ab:ba:82:5e:f8:5e:fe:26:31:29:fe:fa:b2:2d: 39:d0:44:54:2f:bc:3f:c1:da:38:37:f7:ea:2f:e0: 7b:c7:21:f7:eb:28:0d:1a:a3:23:06:98:81:6b:a5: b4:33:81:95:ba:75:68:61:69:b2:c3:df:2a:13:30: be:67:9c:07:e5:d9:25:17:ee:28:ee:32:a8:53:57: 50:ab:5b:b1:8e:6b:df:3d:71:85:eb:62:24:29:d3: 5b:eb:8e:15:cc:2c:ef:ce:32:c9:16:24:80:31:99: 0b:94:d5:8d:25:f6:2e:64:5a:bf:97:7b:e1:03:26: 88:2c:a5:12:0d:38:4e:b3:a9:90:b7:53:3d:33:e4: c8:09:ef:58:d2:2b:22:f1:17:2f:f2:1e:7b:52:53: 96:a6:58:00:61:d1:37:43:f7:da:40:87:5a:b2:61: f2:67:2a:10:a7:83:7d:3b:6f:dc:a7:cf:2b:e3:1d: bd:21:bf:32:cd:8d:07:7a:5f:52:e7:ad:e2:57:7a: ec:9f:17:22:9f:08:2b:86:17:1d:46:71:f9:e0:21: 6e:b2:5e:83:66:41:99:33:22:56:56:84:0b:00:ce: 7a:55:4a:d2:9b:9e:0a:55:4e:32:cc:77:ed:c1:9f: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:05:68:ED:A1:F8:3B:3A:DC:AF:43:BE:42:5B:94:2E:EB:55:C6:E9 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS139428.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.176.0/23 Signature Algorithm: sha256WithRSAEncryption 29:8f:b7:0c:30:4a:60:a2:11:70:5d:31:7a:e7:58:06:88:e1: ff:74:a2:70:9d:47:6f:90:be:9f:15:43:dd:e0:85:e9:8d:f8: 1f:bd:68:fa:5f:9c:e5:c8:09:b5:0c:b8:32:72:e1:20:64:8d: b7:f1:63:16:80:ba:eb:09:a0:67:20:a1:fe:ad:a9:d6:a8:8c: 45:74:65:aa:82:bf:0f:fa:0c:98:b4:c1:8a:2c:02:30:cc:66: 9d:9e:5b:23:09:b2:2a:2e:6d:f4:68:c1:80:9f:e8:bc:cc:fa: 82:c7:1f:1d:14:ed:d3:a4:1d:39:33:8b:19:61:bd:87:97:8b: e1:16:89:07:90:85:5b:43:9d:d3:27:8c:cb:32:b9:36:23:6c: 41:6b:79:35:9c:ae:91:cd:e2:eb:da:7c:5f:76:e4:27:fc:01: d8:60:d4:ba:3b:8f:00:11:75:22:3b:3e:cf:45:73:48:53:38: 37:26:70:e5:a3:3e:ef:ee:f0:0d:14:23:e3:e5:27:65:5f:71: b5:c0:37:16:c8:51:b5:d3:55:c4:aa:07:95:d5:53:a9:96:a9: 85:a9:ca:a6:64:52:00:72:8a:f4:e7:d0:b6:41:ce:a1:79:69: bb:50:15:14:b3:ab:d8:f9:2d:4b:96:f9:e9:67:91:78:85:f5: 15:6d:44:02 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUX9UPkQq4y3JoAKWTJkCg3wBaTFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDIwNjEwMzk1OFoX DTI2MDIwNTEwNDQ1OFowMzExMC8GA1UEAxMoM0YwNTY4RURBMUY4M0IzQURDQUY0 M0JFNDI1Qjk0MkVFQjU1QzZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYSt7migLigmO4VApGmLKu6gl74Xv4mMSn++rItOdBEVC+8P8HaODf36i/g e8ch9+soDRqjIwaYgWultDOBlbp1aGFpssPfKhMwvmecB+XZJRfuKO4yqFNXUKtb sY5r3z1xhetiJCnTW+uOFcws784yyRYkgDGZC5TVjSX2LmRav5d74QMmiCylEg04 TrOpkLdTPTPkyAnvWNIrIvEXL/Iee1JTlqZYAGHRN0P32kCHWrJh8mcqEKeDfTtv 3KfPK+MdvSG/Ms2NB3pfUuet4ld67J8XIp8IK4YXHUZx+eAhbrJeg2ZBmTMiVlaE CwDOelVK0pueClVOMsx37cGfLd0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ/BWjt ofg7OtyvQ75CW5Qu61XG6TAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzEzOTQyOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0UsDANBgkqhkiG9w0BAQsFAAOCAQEAKY+3DDBKYKIRcF0xeudY Bojh/3SicJ1Hb5C+nxVD3eCF6Y34H71o+l+c5cgJtQy4MnLhIGSNt/FjFoC66wmg ZyCh/q2p1qiMRXRlqoK/D/oMmLTBiiwCMMxmnZ5bIwmyKi5t9GjBgJ/ovMz6gscf HRTt06QdOTOLGWG9h5eL4RaJB5CFW0Od0yeMyzK5NiNsQWt5NZyukc3i69p8X3bk J/wB2GDUujuPABF1Ijs+z0VzSFM4NyZw5aM+7+7wDRQj4+UnZV9xtcA3FshRtdNV xKoHldVTqZaphanKpmRSAHKK9OfQtkHOoXlpu1AVFLOr2PktS5b56WeReIX1FW1E Ag== -----END CERTIFICATE-----Generated at Tue Nov 4 18:37:19 2025 by rpki-client