$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137946.roa File: AS137946.roa (raw, json) Hash identifier: gws7oeXk5JEo3LqNwTPRaP2uR6K9wPoDQ6DNGbhqjzM= Subject key identifier: 27:AC:70:39:AF:87:81:AA:15:D2:8E:92:2D:C5:15:76:8D:F3:C1:1C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 58253C1904910344C41B5E22AC1E969E2F1F6A2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137946.roa Signing time: Mon 27 Oct 2025 02:36:18 +0000 ROA not before: Mon 27 Oct 2025 02:31:18 +0000 ROA not after: Mon 26 Oct 2026 02:36:18 +0000 asID: 137946 IP address blocks: 2001:df6:3740::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:25:3c:19:04:91:03:44:c4:1b:5e:22:ac:1e:96:9e:2f:1f:6a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 27 02:31:18 2025 GMT Not After : Oct 26 02:36:18 2026 GMT Subject: CN=27AC7039AF8781AA15D28E922DC515768DF3C11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:f8:52:1d:46:14:4c:e4:e3:75:44:9c:ac: ec:72:b0:07:ee:2e:98:e0:cd:8a:27:81:8a:48:f8: f3:f6:e7:7a:29:ef:b0:59:f5:06:9c:a4:f5:7f:f6: 6c:f0:55:5d:66:98:58:83:09:98:b8:67:a3:e9:25: ca:02:a4:d6:dd:50:0e:a0:d9:2f:bb:ea:d7:66:76: 92:8c:79:a6:18:97:3d:4b:70:ea:26:b6:6d:a1:18: c0:f4:18:fe:46:5e:55:8b:fb:b7:d1:c9:78:97:72: 87:d3:e6:8e:f4:ae:74:68:4b:cd:1e:70:64:da:25: a4:04:4f:f3:0c:35:29:34:84:e9:2e:66:ca:c8:36: 03:69:05:d3:3c:aa:d2:b2:1d:05:85:07:dc:cb:97: 52:50:2c:f4:53:a4:77:31:3a:f3:e4:04:eb:00:a3: e6:65:c0:4f:1f:61:57:3d:cc:f6:45:6a:af:56:aa: 5d:3a:9f:bc:c1:da:89:ac:19:a6:fe:0e:fc:21:ee: ab:31:a5:eb:59:b3:69:93:9f:cb:67:20:57:34:80: 1b:51:f3:a8:47:25:9a:0f:85:15:8c:b6:2d:6c:8a: f7:b3:ef:05:8e:4f:3d:58:41:91:16:7a:be:1d:0b: 41:3c:74:4a:6f:6e:af:d5:86:21:8f:d7:19:99:c3: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:70:39:AF:87:81:AA:15:D2:8E:92:2D:C5:15:76:8D:F3:C1:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137946.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:3740::/48 Signature Algorithm: sha256WithRSAEncryption 6b:88:52:8e:85:86:43:cd:9b:e8:22:3d:93:21:1b:ad:42:78: a7:88:8c:9e:8e:a5:6f:a5:63:d7:9f:25:71:67:d0:af:54:3e: 89:21:70:4a:36:76:48:44:8c:15:39:5c:4e:0a:31:45:94:d4: 3a:57:bb:57:92:3f:78:4c:50:75:ce:72:9d:6d:c6:d2:d8:dd: 7f:ec:b1:a4:18:88:92:6a:ed:fc:25:62:87:da:eb:24:69:a2: 0e:4f:bf:b7:1e:25:86:f9:28:3e:54:dc:0c:a7:c3:2e:7f:7d: 26:6f:4d:b9:74:a9:4d:5a:b2:c5:8a:6d:41:8f:ca:58:2f:c4: fc:20:af:f0:32:99:64:5a:6f:ac:39:68:6d:1f:16:8a:19:e6: 7a:df:1c:83:cc:69:f5:70:41:d4:e0:49:86:f7:aa:5e:a4:cd: 8f:13:00:a6:32:59:2f:22:f1:51:c6:f5:d1:62:25:38:ef:39: d6:55:80:b0:c0:d3:30:cd:ab:e2:6b:1c:3e:64:97:b0:fd:47: 2f:f1:26:15:a2:8b:45:03:e0:35:ab:15:7a:01:82:21:c4:7a: 1b:76:37:9e:52:3c:2f:80:35:db:9e:d3:14:69:5e:1e:d8:b8: 65:af:b0:70:79:1a:89:4c:64:99:bd:f1:c3:6c:ef:1a:a2:23: e8:80:da:9c -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWCU8GQSRA0TEG14irB6Wni8faiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNzAyMzExOFoX DTI2MTAyNjAyMzYxOFowMzExMC8GA1UEAxMoMjdBQzcwMzlBRjg3ODFBQTE1RDI4 RTkyMkRDNTE1NzY4REYzQzExQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5L+FIdRhRM5ON1RJys7HKwB+4umODNiieBikj48/bneinvsFn1Bpyk9X/2 bPBVXWaYWIMJmLhno+klygKk1t1QDqDZL7vq12Z2kox5phiXPUtw6ia2baEYwPQY /kZeVYv7t9HJeJdyh9PmjvSudGhLzR5wZNolpARP8ww1KTSE6S5mysg2A2kF0zyq 0rIdBYUH3MuXUlAs9FOkdzE68+QE6wCj5mXATx9hVz3M9kVqr1aqXTqfvMHaiawZ pv4O/CHuqzGl61mzaZOfy2cgVzSAG1HzqEclmg+FFYy2LWyK97PvBY5PPVhBkRZ6 vh0LQTx0Sm9ur9WGIY/XGZnDCb0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQnrHA5 r4eBqhXSjpItxRV2jfPBHDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzk0Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfY3QDANBgkqhkiG9w0BAQsFAAOCAQEAa4hSjoWGQ82b6CI9 kyEbrUJ4p4iMno6lb6Vj158lcWfQr1Q+iSFwSjZ2SESMFTlcTgoxRZTUOle7V5I/ eExQdc5ynW3G0tjdf+yxpBiIkmrt/CVih9rrJGmiDk+/tx4lhvkoPlTcDKfDLn99 Jm9NuXSpTVqyxYptQY/KWC/E/CCv8DKZZFpvrDlobR8Wihnmet8cg8xp9XBB1OBJ hveqXqTNjxMApjJZLyLxUcb10WIlOO851lWAsMDTMM2r4mscPmSXsP1HL/EmFaKL RQPgNasVegGCIcR6G3Y3nlI8L4A1257TFGleHti4Za+wcHkaiUxkmb3xw2zvGqIj 6IDanA== -----END CERTIFICATE-----Generated at Tue Nov 4 02:00:35 2025 by rpki-client