$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136093.roa File: AS136093.roa (raw, json) Hash identifier: dC9aZWSuBiyaXOnYXHpdeq/Ae4T1C1gsigXsH3/iBro= Subject key identifier: 8F:59:39:4E:82:7D:73:A2:74:F5:1B:FA:BA:04:0B:16:9C:DB:1E:88 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 641D0E6D972891D78407C074A4E69D8D6C0A7C36 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136093.roa Signing time: Tue 22 Jul 2025 18:00:00 +0000 ROA not before: Tue 22 Jul 2025 17:55:00 +0000 ROA not after: Tue 21 Jul 2026 18:00:00 +0000 asID: 136093 IP address blocks: 103.41.78.0/23 maxlen: 24 103.175.208.0/23 maxlen: 24 103.220.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1d:0e:6d:97:28:91:d7:84:07:c0:74:a4:e6:9d:8d:6c:0a:7c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 22 17:55:00 2025 GMT Not After : Jul 21 18:00:00 2026 GMT Subject: CN=8F59394E827D73A274F51BFABA040B169CDB1E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:61:19:a7:e9:73:8c:a9:84:69:1f:51:e6: 04:31:14:7a:89:91:cd:58:4e:cc:3b:b2:95:9f:8d: c0:e0:18:00:11:b5:51:84:95:9f:1b:49:dd:fa:ef: 99:ed:da:ea:f0:d1:69:ac:99:01:59:40:b0:b5:36: 14:cf:71:75:5e:b6:3e:98:3b:e4:e1:f5:9a:4b:a9: ba:aa:a4:9f:77:d5:5a:9d:60:28:4b:9d:e0:60:2c: 75:02:76:de:60:00:f0:10:56:e2:17:1e:2f:39:85: ba:d1:d4:c8:e4:e7:b7:5a:4a:7d:e0:69:1a:e3:71: e2:e2:76:68:3b:c5:b1:20:e1:89:52:64:09:17:b4: 05:e4:02:e6:cb:39:b8:ac:f4:ef:c3:17:f8:1d:a5: c5:ea:b9:88:79:8b:da:8d:ea:db:4d:43:9f:d3:da: 8c:e7:96:38:20:0c:64:06:3b:8c:e8:4d:f9:85:88: bb:51:b7:da:bb:cf:44:a4:cb:58:60:ef:ba:3f:e6: 48:d2:97:3b:cb:46:a5:62:4d:4b:d8:ab:6f:f6:ea: 9b:1e:ee:9f:98:32:a0:04:d5:26:09:07:b1:94:24: 77:51:9b:dd:83:19:7c:67:7f:e1:52:7e:0b:ae:64: 81:8d:fb:18:94:70:4d:92:ca:1f:7d:91:8c:99:67: b4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:59:39:4E:82:7D:73:A2:74:F5:1B:FA:BA:04:0B:16:9C:DB:1E:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136093.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.78.0/23 103.175.208.0/23 103.220.216.0/23 Signature Algorithm: sha256WithRSAEncryption 98:4c:db:1a:f0:f1:0c:90:6b:1b:fc:e6:b6:70:36:55:7c:d7: a5:62:c7:96:c3:bb:32:03:e9:f7:19:0b:5e:7c:1d:1e:5c:4d: 92:b4:66:c0:da:2c:9c:03:1d:61:5e:d5:50:22:ef:8b:a9:20: 21:1d:38:78:6c:da:3c:83:c8:d0:54:dd:7b:c0:59:ea:b9:01: 5b:15:b9:04:87:da:0c:ff:b6:02:dc:d7:7e:47:4c:f7:bb:ca: 82:1e:96:6f:50:04:4f:b2:b5:22:15:1a:4a:9d:0a:35:c9:94: ef:b9:5e:cb:7a:99:80:c8:3c:fa:19:11:b3:99:db:bf:bc:20: e9:c0:81:18:e8:6e:9a:7d:08:c9:ce:5c:15:93:4a:1a:f2:c1: dc:06:4e:88:5b:87:6f:91:a8:91:14:9e:5e:4f:fa:90:4e:d5: 3c:9c:eb:cb:1d:b6:98:57:d6:48:79:fb:45:4f:81:d1:c0:df: 51:e7:1d:7d:52:5a:e6:02:75:1d:90:cb:ea:82:64:67:c7:51: af:36:20:f8:6c:64:f8:0f:0a:89:76:a0:52:3e:b8:d8:34:d6: 6b:96:2f:af:c5:74:60:f9:73:88:9f:34:04:e9:63:8f:b3:0a: 08:77:19:dd:7e:fb:59:c4:0d:88:49:2c:ba:7f:7f:3f:9e:1a: 08:22:ef:91 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUZB0ObZcokdeEB8B0pOadjWwKfDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMjE3NTUwMFoX DTI2MDcyMTE4MDAwMFowMzExMC8GA1UEAxMoOEY1OTM5NEU4MjdENzNBMjc0RjUx QkZBQkEwNDBCMTY5Q0RCMUU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp+YRmn6XOMqYRpH1HmBDEUeomRzVhOzDuylZ+NwOAYABG1UYSVnxtJ3frv me3a6vDRaayZAVlAsLU2FM9xdV62Ppg75OH1mkupuqqkn3fVWp1gKEud4GAsdQJ2 3mAA8BBW4hceLzmFutHUyOTnt1pKfeBpGuNx4uJ2aDvFsSDhiVJkCRe0BeQC5ss5 uKz078MX+B2lxeq5iHmL2o3q201Dn9PajOeWOCAMZAY7jOhN+YWIu1G32rvPRKTL WGDvuj/mSNKXO8tGpWJNS9irb/bqmx7un5gyoATVJgkHsZQkd1Gb3YMZfGd/4VJ+ C65kgY37GJRwTZLKH32RjJlntCMCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBSPWTlO gn1zonT1G/q6BAsWnNseiDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjA5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWcpTgMEAWev0AMEAWfc2DANBgkqhkiG9w0BAQsFAAOCAQEAmEzb GvDxDJBrG/zmtnA2VXzXpWLHlsO7MgPp9xkLXnwdHlxNkrRmwNosnAMdYV7VUCLv i6kgIR04eGzaPIPI0FTde8BZ6rkBWxW5BIfaDP+2AtzXfkdM97vKgh6Wb1AET7K1 IhUaSp0KNcmU77ley3qZgMg8+hkRs5nbv7wg6cCBGOhumn0Iyc5cFZNKGvLB3AZO iFuHb5GokRSeXk/6kE7VPJzryx22mFfWSHn7RU+B0cDfUecdfVJa5gJ1HZDL6oJk Z8dRrzYg+Gxk+A8KiXagUj642DTWa5Yvr8V0YPlziJ80BOljj7MKCHcZ3X77WcQN iEksun9/P54aCCLvkQ== -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:41 2025 by rpki-client