$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139381.roa File: AS139381.roa (raw, json) Hash identifier: nJC8lcavk7ZKq+dhFEzKGBAo1h/dKsf2EuEP0Idhowc= Subject key identifier: 0A:3C:48:D0:0B:60:65:9E:70:6E:E9:FC:2C:D5:F8:98:F3:F3:46:21 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38FD5E24978056F4EA7BD55D66C33F785F9BB702 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139381.roa Signing time: Tue 23 Sep 2025 08:00:00 +0000 ROA not before: Tue 23 Sep 2025 07:55:00 +0000 ROA not after: Tue 22 Sep 2026 08:00:00 +0000 asID: 139381 IP address blocks: 202.47.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fd:5e:24:97:80:56:f4:ea:7b:d5:5d:66:c3:3f:78:5f:9b:b7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 23 07:55:00 2025 GMT Not After : Sep 22 08:00:00 2026 GMT Subject: CN=0A3C48D00B60659E706EE9FC2CD5F898F3F34621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:11:72:f4:54:ee:15:51:78:ad:16:d4:9f: d0:c0:89:1c:bf:1a:dd:cf:a0:ef:c4:70:23:77:93: 02:20:89:05:29:72:91:48:70:25:1e:c3:01:3a:3c: 67:37:18:50:92:a5:0c:5e:31:4e:34:f6:25:b9:52: a0:20:ab:60:35:cd:f6:f3:58:c2:8b:9f:58:b8:af: 87:ac:9f:25:70:23:37:4f:46:0b:26:7d:3e:e5:72: 02:84:97:6d:36:aa:5e:45:07:5e:51:b4:12:ed:75: e5:91:0d:71:03:ff:07:18:84:dc:2d:ff:48:72:b1: 1e:07:04:fb:09:e0:5d:16:7f:9c:e2:b7:1e:18:10: 68:b1:8e:e8:7a:d8:d3:7f:fe:61:44:33:e2:d5:33: 74:df:6a:93:53:10:5a:c5:da:02:f9:8d:21:65:65: 97:7b:62:d5:79:59:b9:d9:b8:b9:5a:49:05:9d:0e: 83:ea:b2:86:79:92:26:75:ef:cf:ff:24:53:82:56: 90:1e:54:45:cf:c7:cc:3e:d2:f2:cd:ee:c9:cf:1f: 68:ee:9b:23:51:6b:e3:11:5e:95:0b:74:0c:23:3d: bd:f6:73:57:0b:7e:5d:3d:19:69:fe:f1:a8:bb:d7: fb:fa:84:de:8d:cf:dc:a6:26:ba:08:e3:bb:50:b0: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3C:48:D0:0B:60:65:9E:70:6E:E9:FC:2C:D5:F8:98:F3:F3:46:21 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:d8:ab:41:80:2b:c7:fe:7f:f1:1b:85:53:33:aa:dd:0e:66: f3:0d:18:45:93:f0:c9:ee:96:6e:64:8f:cd:d6:63:d6:0e:70: ce:fd:36:2c:f0:9f:3e:11:f2:91:19:23:14:d6:d5:36:bd:ce: c2:d6:ff:2a:a5:5a:0d:4c:e0:5e:2d:97:c5:34:56:53:39:c3: 66:06:74:b1:ed:c3:6c:c4:0f:46:71:9a:6f:97:a8:10:4d:b5: 2e:7d:02:a6:ab:4f:3c:c2:22:64:55:4b:ae:47:9b:89:5d:f2: 50:8e:0a:c4:0f:52:09:29:67:c7:42:a1:fe:f7:1d:22:0e:0a: e9:59:34:f0:de:9b:9d:8b:eb:88:3d:f3:62:55:dc:00:53:71: 7d:98:54:fc:84:eb:c2:ee:c4:9e:f9:b6:8d:96:0e:fd:6e:7b: f5:10:93:be:1e:a4:6d:32:b1:ad:54:99:12:18:16:0d:5a:01: 21:0b:a5:a0:7c:84:6b:9e:8b:d7:4c:ef:f7:5b:fc:9e:80:d4: d0:b8:03:03:e2:0a:58:22:cc:b1:3e:86:74:00:bb:ab:8e:b2: c3:f0:66:e5:70:3f:40:99:5f:ff:e4:2b:d1:32:5c:90:d3:ee: 67:37:cc:6e:58:74:1a:1f:8d:da:5c:63:d3:da:ab:c5:83:ae: ef:c9:c0:57 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUOP1eJJeAVvTqe9VdZsM/eF+btwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMzA3NTUwMFoX DTI2MDkyMjA4MDAwMFowMzExMC8GA1UEAxMoMEEzQzQ4RDAwQjYwNjU5RTcwNkVF OUZDMkNENUY4OThGM0YzNDYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5YEXL0VO4VUXitFtSf0MCJHL8a3c+g78RwI3eTAiCJBSlykUhwJR7DATo8 ZzcYUJKlDF4xTjT2JblSoCCrYDXN9vNYwoufWLivh6yfJXAjN09GCyZ9PuVyAoSX bTaqXkUHXlG0Eu115ZENcQP/BxiE3C3/SHKxHgcE+wngXRZ/nOK3HhgQaLGO6HrY 03/+YUQz4tUzdN9qk1MQWsXaAvmNIWVll3ti1XlZudm4uVpJBZ0Og+qyhnmSJnXv z/8kU4JWkB5URc/HzD7S8s3uyc8faO6bI1Fr4xFelQt0DCM9vfZzVwt+XT0Zaf7x qLvX+/qE3o3P3KYmugjju1CwTBECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQKPEjQ C2BlnnBu6fws1fiY8/NGITAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcovvDANBgkqhkiG9w0BAQsFAAOCAQEAf9irQYArx/5/8RuFUzOq 3Q5m8w0YRZPwye6WbmSPzdZj1g5wzv02LPCfPhHykRkjFNbVNr3Owtb/KqVaDUzg Xi2XxTRWUznDZgZ0se3DbMQPRnGab5eoEE21Ln0CpqtPPMIiZFVLrkebiV3yUI4K xA9SCSlnx0Kh/vcdIg4K6Vk08N6bnYvriD3zYlXcAFNxfZhU/ITrwu7Envm2jZYO /W579RCTvh6kbTKxrVSZEhgWDVoBIQuloHyEa56L10zv91v8noDU0LgDA+IKWCLM sT6GdAC7q46yw/Bm5XA/QJlf/+Qr0TJckNPuZzfMblh0Gh+N2lxj09qrxYOu78nA Vw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:28 2025 by rpki-client