$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131775.roa File: AS131775.roa (raw, json) Hash identifier: O6c4GaocB3TJjW9KtybEE75wh+8v0Skphyc6pcjpF2s= Subject key identifier: 07:83:4F:7F:63:52:19:90:49:F3:01:26:D5:E0:9A:DA:E5:B9:5B:F9 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B24596161C56E658DEFF78CD2D9A7C4FDB0722C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131775.roa Signing time: Wed 30 Jul 2025 01:16:09 +0000 ROA not before: Wed 30 Jul 2025 01:11:09 +0000 ROA not after: Wed 29 Jul 2026 01:16:09 +0000 asID: 131775 IP address blocks: 163.227.124.0/24 maxlen: 24 2001:df5:6940::/48 maxlen: 48 2406:f040::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:24:59:61:61:c5:6e:65:8d:ef:f7:8c:d2:d9:a7:c4:fd:b0:72:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 01:11:09 2025 GMT Not After : Jul 29 01:16:09 2026 GMT Subject: CN=07834F7F6352199049F30126D5E09ADAE5B95BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:85:bc:a7:24:0f:00:49:de:85:dc:39:34: fd:db:74:d5:3d:ac:39:44:16:be:14:45:ed:7b:c2: 7e:51:bd:e9:01:fc:36:5a:e7:88:0c:1f:27:38:c2: 13:f5:b6:80:35:35:33:91:4a:1d:7b:76:a2:ed:4a: 63:53:23:f1:99:5b:1f:0a:dd:75:66:4c:fb:dc:81: 2c:5d:fd:97:4f:84:e0:a4:e9:78:71:7e:b1:af:dc: eb:8d:66:20:56:90:8f:a2:5e:81:84:e1:dd:02:92: f8:c8:cd:69:df:ec:28:40:ae:45:ef:3a:86:8d:63: 0b:63:5e:1f:4f:2e:cf:13:8d:fe:4d:95:c7:92:d4: 04:40:f2:32:60:18:b4:40:bb:58:8c:53:b9:77:7d: 3a:52:03:7c:be:ae:4b:b9:78:d5:39:9e:02:ee:68: b0:dc:42:3c:b8:34:c9:7c:eb:b0:aa:b8:e5:b3:04: 47:b7:b9:ae:da:21:76:e2:bd:ef:da:fc:3e:5f:ee: 64:6b:41:8f:32:ef:7c:43:76:a5:73:93:69:c8:e6: 85:c1:c1:2d:10:95:30:3a:f1:62:d0:2f:c6:f0:be: 95:d2:ca:04:14:7c:07:57:21:36:7c:59:0a:1d:11: d9:eb:11:1f:20:f0:52:87:b6:b2:97:ac:ae:0d:31: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:4F:7F:63:52:19:90:49:F3:01:26:D5:E0:9A:DA:E5:B9:5B:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131775.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.227.124.0/24 IPv6: 2001:df5:6940::/48 2406:f040::/32 Signature Algorithm: sha256WithRSAEncryption 61:7e:51:8d:ee:28:51:48:cc:98:b2:ec:ac:ca:e1:07:cc:c9: 57:56:31:e4:23:6d:3a:35:62:43:89:08:72:15:f9:d6:73:3d: 37:0f:4d:30:f8:5a:3f:21:bd:c7:ae:0b:15:ee:e6:d7:a5:68: 6c:4c:fc:7d:79:69:08:e0:47:80:9c:f4:50:0f:08:d9:b5:e0: 7a:32:91:f4:8b:1b:f8:f7:92:80:8f:b7:db:dc:99:53:b6:2b: 3f:33:48:28:e8:d2:1f:fc:71:da:be:73:79:a2:49:85:2c:68: 03:9a:41:43:7f:89:80:d7:68:a3:2c:18:14:a5:96:18:a7:46: ff:3e:ef:ae:9c:60:51:ee:e3:e4:24:71:b2:e8:48:a6:98:12: 41:9e:8e:b3:ed:9d:b5:2f:91:03:cd:9d:02:07:96:43:16:56: 1a:b3:19:3f:75:aa:37:0d:2e:39:80:7c:7d:55:53:1f:e7:bc: 99:be:ef:f0:2b:b2:fe:31:ab:f0:c0:1a:cd:92:ad:62:e6:72: f9:b5:94:ef:83:11:9d:62:11:21:f2:cb:fc:dd:90:3f:65:c4: e4:5e:91:c7:05:3a:01:4c:fa:76:61:47:57:4e:7a:eb:9b:3d: ff:b8:2a:82:60:ad:02:7b:c0:84:61:b7:55:00:80:81:2f:a7: 37:06:7e:da -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUSyRZYWHFbmWN7/eM0tmnxP2wciwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMDAxMTEwOVoX DTI2MDcyOTAxMTYwOVowMzExMC8GA1UEAxMoMDc4MzRGN0Y2MzUyMTk5MDQ5RjMw MTI2RDVFMDlBREFFNUI5NUJGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp7hbynJA8ASd6F3Dk0/dt01T2sOUQWvhRF7XvCflG96QH8NlrniAwfJzjC E/W2gDU1M5FKHXt2ou1KY1Mj8ZlbHwrddWZM+9yBLF39l0+E4KTpeHF+sa/c641m IFaQj6JegYTh3QKS+MjNad/sKECuRe86ho1jC2NeH08uzxON/k2Vx5LUBEDyMmAY tEC7WIxTuXd9OlIDfL6uS7l41TmeAu5osNxCPLg0yXzrsKq45bMER7e5rtohduK9 79r8Pl/uZGtBjzLvfEN2pXOTacjmhcHBLRCVMDrxYtAvxvC+ldLKBBR8B1chNnxZ Ch0R2esRHyDwUoe2spesrg0xJEsCAwEAAaOCAegwggHkMB0GA1UdDgQWBBQHg09/ Y1IZkEnzASbV4Jra5blb+TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTc3NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYw DAQCAAEwBgMEAKPjfDAWBAIAAjAQAwcAIAEN9WlAAwUAJAbwQDANBgkqhkiG9w0B AQsFAAOCAQEAYX5Rje4oUUjMmLLsrMrhB8zJV1Yx5CNtOjViQ4kIchX51nM9Nw9N MPhaPyG9x64LFe7m16VobEz8fXlpCOBHgJz0UA8I2bXgejKR9Isb+PeSgI+329yZ U7YrPzNIKOjSH/xx2r5zeaJJhSxoA5pBQ3+JgNdooywYFKWWGKdG/z7vrpxgUe7j 5CRxsuhIppgSQZ6Os+2dtS+RA82dAgeWQxZWGrMZP3WqNw0uOYB8fVVTH+e8mb7v 8Cuy/jGr8MAazZKtYuZy+bWU74MRnWIRIfLL/N2QP2XE5F6RxwU6AUz6dmFHV056 65s9/7gqgmCtAnvAhGG3VQCAgS+nNwZ+2g== -----END CERTIFICATE-----Generated at Wed Aug 6 03:59:34 2025 by rpki-client