$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa File: AS138050.roa (raw, json) Hash identifier: 3pc+9zLf0Mgq8xwoakq2ztCRmk5LmXuLQdT+ija76XY= Subject key identifier: A9:95:83:15:1D:09:54:32:07:B2:4A:34:57:A6:85:2F:86:7E:95:B8 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 614EA8B8057E5027621523A00E13E7D607FB50F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa Signing time: Mon 02 Jun 2025 01:39:09 +0000 ROA not before: Mon 02 Jun 2025 01:34:09 +0000 ROA not after: Mon 01 Jun 2026 01:39:09 +0000 asID: 138050 IP address blocks: 103.147.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4e:a8:b8:05:7e:50:27:62:15:23:a0:0e:13:e7:d6:07:fb:50:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 01:34:09 2025 GMT Not After : Jun 1 01:39:09 2026 GMT Subject: CN=A99583151D09543207B24A3457A6852F867E95B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:71:fd:a4:c1:44:e3:86:89:a7:57:ef:82: b2:bf:6e:d1:25:c7:83:2e:b0:06:ac:be:5e:ca:e2: 1d:d7:15:1a:f9:9a:b4:32:be:d2:83:bb:51:d5:3b: 2d:44:26:30:6a:9a:35:a1:10:46:dd:cf:77:5b:aa: a8:c2:63:b3:0d:f6:2c:e5:6a:11:49:fc:50:dd:62: 79:bf:b3:13:c3:f0:d2:95:7a:f8:48:1d:e8:c9:5f: 69:73:94:2a:c3:96:c5:12:30:f7:73:9b:c6:ed:5d: d4:24:ff:3e:d7:9a:48:2e:cf:a0:93:6d:35:62:e5: 19:e6:d3:16:96:aa:3b:72:db:bf:f7:d9:9c:7f:da: a8:f6:1a:3b:ce:2c:ec:c7:43:4a:61:e6:da:98:e4: 44:58:1f:35:bf:88:cd:d4:d9:fb:9c:6d:fe:2d:aa: 75:2f:c8:9a:31:61:6b:ce:73:e1:69:8f:dd:40:89: 77:ae:f9:ca:5b:b6:8f:15:3a:79:08:79:54:05:0d: 95:fe:e0:39:e8:8c:c7:52:a9:6d:99:13:76:3c:a3: c6:6e:94:98:be:34:6b:d1:5c:05:3f:9f:4d:2e:1b: 33:d0:2d:2f:89:fb:04:b7:d1:59:55:2a:09:c2:ac: 8b:c8:0b:d9:2b:0a:7e:a4:33:c6:a3:4f:65:4f:b0: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:83:15:1D:09:54:32:07:B2:4A:34:57:A6:85:2F:86:7E:95:B8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.222.0/24 Signature Algorithm: sha256WithRSAEncryption 80:69:e6:92:0c:6e:43:cd:ab:e5:f9:ec:c3:71:aa:a3:5b:ff: c7:d7:1b:47:56:eb:6e:c9:0a:1d:fd:0a:3a:ae:02:43:3a:49: e1:3b:f5:76:cf:b5:24:90:10:93:29:86:59:54:7d:6b:66:5f: 91:78:e1:e6:b8:69:3a:4e:b6:9c:54:d9:f7:8d:86:dd:ee:37: 37:98:6a:6f:8f:09:1f:33:a0:9f:3c:64:78:36:67:27:54:f2: 29:0e:6f:c0:cd:e4:3f:c1:23:99:a7:3e:2a:c8:1d:81:33:89: 32:0f:84:67:5b:d9:36:e4:55:82:64:cd:be:40:c6:79:aa:0a: 5e:f6:cb:bc:de:5c:10:d6:92:2a:3e:c6:78:c8:36:ab:e2:a8: ed:67:ab:db:0a:a2:35:c5:c1:aa:29:9e:bc:74:64:c2:39:ac: 0c:ad:76:d8:eb:29:87:b6:64:b5:2d:2c:64:e6:c9:70:d5:91: 1a:34:ba:a1:b3:b2:d9:91:33:a2:7c:0a:6a:b6:13:59:0e:43: 6f:2f:1f:ee:90:28:3d:d9:f6:db:07:02:26:06:11:27:44:be: 8c:4c:48:2d:5c:e7:be:37:d6:0e:f2:30:68:13:1d:14:a6:b0: bb:f6:b5:ff:ee:ae:5c:d3:76:7d:19:e9:98:5c:b8:53:6c:19: c4:93:a1:fa -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYU6ouAV+UCdiFSOgDhPn1gf7UPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjAxMzQwOVoX DTI2MDYwMTAxMzkwOVowMzExMC8GA1UEAxMoQTk5NTgzMTUxRDA5NTQzMjA3QjI0 QTM0NTdBNjg1MkY4NjdFOTVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTOcf2kwUTjhomnV++Csr9u0SXHgy6wBqy+XsriHdcVGvmatDK+0oO7UdU7 LUQmMGqaNaEQRt3Pd1uqqMJjsw32LOVqEUn8UN1ieb+zE8Pw0pV6+Egd6MlfaXOU KsOWxRIw93Obxu1d1CT/PteaSC7PoJNtNWLlGebTFpaqO3Lbv/fZnH/aqPYaO84s 7MdDSmHm2pjkRFgfNb+IzdTZ+5xt/i2qdS/ImjFha85z4WmP3UCJd675ylu2jxU6 eQh5VAUNlf7gOeiMx1KpbZkTdjyjxm6UmL40a9FcBT+fTS4bM9AtL4n7BLfRWVUq CcKsi8gL2SsKfqQzxqNPZU+wuk8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSplYMV HQlUMgeySjRXpoUvhn6VuDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeT3jANBgkqhkiG9w0BAQsFAAOCAQEAgGnmkgxuQ82r5fnsw3Gq o1v/x9cbR1brbskKHf0KOq4CQzpJ4Tv1ds+1JJAQkymGWVR9a2ZfkXjh5rhpOk62 nFTZ942G3e43N5hqb48JHzOgnzxkeDZnJ1TyKQ5vwM3kP8Ejmac+KsgdgTOJMg+E Z1vZNuRVgmTNvkDGeaoKXvbLvN5cENaSKj7GeMg2q+Ko7Wer2wqiNcXBqimevHRk wjmsDK122Osph7ZktS0sZObJcNWRGjS6obOy2ZEzonwKarYTWQ5Dby8f7pAoPdn2 2wcCJgYRJ0S+jExILVznvjfWDvIwaBMdFKawu/a1/+6uXNN2fRnpmFy4U2wZxJOh +g== -----END CERTIFICATE-----Generated at Mon Jun 16 04:28:35 2025 by rpki-client