$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139388.roa File: AS139388.roa (raw, json) Hash identifier: Q6bvHQaL58J4Myc64hlL5P25kmExJjgm4zByT4qcdGs= Subject key identifier: F0:60:4F:5D:8F:1E:43:C7:95:A3:A9:29:2E:6C:64:20:C6:B6:C5:33 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 228110B4F6F11C1F3749E7A467F18D96E54D1577 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139388.roa Signing time: Mon 20 Oct 2025 03:00:00 +0000 ROA not before: Mon 20 Oct 2025 02:55:00 +0000 ROA not after: Mon 19 Oct 2026 03:00:00 +0000 asID: 139388 IP address blocks: 160.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:81:10:b4:f6:f1:1c:1f:37:49:e7:a4:67:f1:8d:96:e5:4d:15:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 20 02:55:00 2025 GMT Not After : Oct 19 03:00:00 2026 GMT Subject: CN=F0604F5D8F1E43C795A3A9292E6C6420C6B6C533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:85:2f:3d:6e:07:8e:fa:be:42:45:f2:bb: 9a:6e:39:41:81:2b:d6:c6:00:e5:44:5e:5a:26:29: ff:10:c2:5b:fe:a1:d2:96:92:fc:09:cc:63:01:4a: 43:95:93:76:80:96:0c:af:26:00:78:84:ed:43:a4: 1a:9d:d0:41:7a:02:78:2c:3b:f0:bb:35:7d:12:e3: 2a:66:03:ca:de:c7:4b:22:59:c0:20:8d:ef:8f:b3: 62:5c:39:eb:79:dc:5b:18:01:56:42:ec:66:d8:72: fa:37:d3:d3:3d:87:37:b5:fa:eb:ef:20:7f:b3:9c: d0:f0:d4:fb:26:b0:54:7d:44:23:78:97:d3:34:3b: 70:1f:11:9f:7b:f5:f3:20:99:e2:32:bf:04:16:be: 64:62:d3:57:2a:c9:f0:76:d2:db:7c:d9:d3:6e:d5: 06:34:64:3c:c7:20:e9:6d:bb:9e:dc:d6:3a:6a:9b: 41:a0:12:29:64:c2:f4:51:b3:05:3f:e3:03:41:82: 9a:50:02:a6:54:e1:4c:f5:4a:0b:62:bf:2f:72:db: 9e:21:5b:3c:8e:ff:fb:52:aa:f8:41:ec:a8:db:70: 32:19:b5:70:fa:b8:c4:d4:a3:65:0c:3b:aa:0f:b6: 9e:fe:30:6a:6f:1a:0d:e4:07:80:42:e6:5a:25:cf: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:4F:5D:8F:1E:43:C7:95:A3:A9:29:2E:6C:64:20:C6:B6:C5:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139388.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.223.0/24 Signature Algorithm: sha256WithRSAEncryption 83:5e:98:05:13:76:e1:99:9a:0e:33:0b:bb:45:15:9a:a3:a5: 1b:98:b4:3a:ef:bd:af:8f:8f:cb:b8:35:2f:e0:6f:c2:c1:3e: 15:e6:8b:97:1e:c3:eb:45:a7:72:bd:01:67:f8:a0:4a:80:1e: a4:2c:2a:eb:f1:03:94:a6:5c:a0:99:0b:b9:05:a5:68:6e:fe: 16:81:4d:fd:bc:92:a8:7b:68:67:65:2d:60:01:52:ba:19:e7: db:5e:9f:82:fd:0f:36:22:45:71:e3:fa:5b:cb:f7:f0:5a:df: 96:fc:9d:c4:18:ca:0a:7b:ab:44:93:1c:7e:43:59:32:af:ba: 12:d2:b5:4a:80:ea:27:9d:06:52:f3:52:5d:0d:51:84:09:7d: 83:84:54:41:e9:3d:f3:7b:43:b7:0f:ea:80:25:91:06:c5:94: b2:3e:12:ba:25:9e:6d:26:9b:01:c6:36:6a:06:99:70:70:f1: a3:fc:49:70:da:9d:fc:1f:55:f5:59:9c:bb:b4:c5:9e:ea:a2: 71:f5:9b:4e:46:b8:92:20:c3:57:ad:28:81:9c:a9:a8:22:0c: 33:7c:7a:32:b9:17:c5:07:97:67:fc:1e:a3:10:cc:ce:c8:36: 8c:e3:ad:4b:5e:cb:ce:59:c5:72:86:04:c0:3d:52:22:72:29: 97:7b:df:c6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUIoEQtPbxHB83SeekZ/GNluVNFXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMDAyNTUwMFoX DTI2MTAxOTAzMDAwMFowMzExMC8GA1UEAxMoRjA2MDRGNUQ4RjFFNDNDNzk1QTNB OTI5MkU2QzY0MjBDNkI2QzUzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmqhS89bgeO+r5CRfK7mm45QYEr1sYA5UReWiYp/xDCW/6h0paS/AnMYwFK Q5WTdoCWDK8mAHiE7UOkGp3QQXoCeCw78Ls1fRLjKmYDyt7HSyJZwCCN74+zYlw5 63ncWxgBVkLsZthy+jfT0z2HN7X66+8gf7Oc0PDU+yawVH1EI3iX0zQ7cB8Rn3v1 8yCZ4jK/BBa+ZGLTVyrJ8HbS23zZ027VBjRkPMcg6W27ntzWOmqbQaASKWTC9FGz BT/jA0GCmlACplThTPVKC2K/L3LbniFbPI7/+1Kq+EHsqNtwMhm1cPq4xNSjZQw7 qg+2nv4wam8aDeQHgELmWiXPecsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTwYE9d jx5Dx5WjqSkubGQgxrbFMzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAU3zANBgkqhkiG9w0BAQsFAAOCAQEAg16YBRN24ZmaDjMLu0UV mqOlG5i0Ou+9r4+Py7g1L+BvwsE+FeaLlx7D60Wncr0BZ/igSoAepCwq6/EDlKZc oJkLuQWlaG7+FoFN/bySqHtoZ2UtYAFSuhnn216fgv0PNiJFceP6W8v38Frflvyd xBjKCnurRJMcfkNZMq+6EtK1SoDqJ50GUvNSXQ1RhAl9g4RUQek983tDtw/qgCWR BsWUsj4SuiWebSabAcY2agaZcHDxo/xJcNqd/B9V9Vmcu7TFnuqicfWbTka4kiDD V60ogZypqCIMM3x6MrkXxQeXZ/weoxDMzsg2jOOtS17LzlnFcoYEwD1SInIpl3vf xg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:34 2025 by rpki-client