$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139389.roa File: AS139389.roa (raw, json) Hash identifier: RQtD9qIaZKzgeOB2pihEfemfAjoEafONY+OD1D8HRDo= Subject key identifier: EF:8E:0D:24:35:1E:62:CC:1C:03:D7:B6:B9:0B:A2:8F:99:C5:35:AA Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 754996605863E6228677FC53908575FADC1D220C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139389.roa Signing time: Thu 05 Jun 2025 04:29:57 +0000 ROA not before: Thu 05 Jun 2025 04:24:57 +0000 ROA not after: Thu 04 Jun 2026 04:29:57 +0000 asID: 139389 IP address blocks: 103.143.70.0/23 maxlen: 24 2405:4a40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:49:96:60:58:63:e6:22:86:77:fc:53:90:85:75:fa:dc:1d:22:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 04:24:57 2025 GMT Not After : Jun 4 04:29:57 2026 GMT Subject: CN=EF8E0D24351E62CC1C03D7B6B90BA28F99C535AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:be:50:c5:94:fc:c3:3d:52:ca:33:4c:23: 51:31:70:e6:ee:c2:8d:c2:91:f0:88:a9:00:c8:cc: a7:e0:22:1a:54:26:ba:cc:8b:9a:30:22:0a:fd:f0: 87:a3:bd:4a:27:e3:dc:17:be:7f:d4:81:23:c6:13: bf:02:8c:cd:23:13:60:f5:a6:e8:6c:74:a1:c2:c5: 87:76:0e:a7:64:9c:2f:55:00:17:3a:b7:46:94:95: 3d:a9:63:f4:88:72:fa:57:0e:81:0a:e5:99:ab:a4: b7:f7:f1:4e:15:8a:60:40:f6:8f:de:7d:70:c3:e8: e1:0b:b1:e3:e7:16:49:fc:e4:0c:6d:2e:be:42:3d: 24:a0:0d:58:0b:d7:06:ad:cb:84:95:90:f7:32:29: 5e:43:0c:43:36:b4:62:5c:60:86:7f:f2:3c:e6:f6: bb:03:b9:53:e3:87:ee:4c:7c:96:5e:fc:ec:19:fb: 61:2d:0b:8e:5e:11:4f:d9:c8:19:52:5d:32:2b:96: ba:60:48:29:96:c6:c8:ab:e2:06:b8:cf:c2:35:9c: 2f:cd:0d:5c:30:ce:7b:57:00:a7:f5:5f:51:50:27: 7c:28:a7:8d:cb:0d:2a:a8:fe:0b:27:49:74:cc:77: 61:21:58:43:30:85:e4:4e:8b:06:68:48:13:d1:fe: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:0D:24:35:1E:62:CC:1C:03:D7:B6:B9:0B:A2:8F:99:C5:35:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.70.0/23 IPv6: 2405:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 95:fb:09:7d:da:0c:a6:1d:d1:3a:c9:08:4b:ef:a0:b4:1a:80: 2f:9f:7f:69:87:55:0f:6f:50:cd:92:52:95:a3:b6:d2:c0:79: f6:58:52:13:14:51:db:11:ab:07:8e:f3:bc:64:95:5c:37:f9: 44:c5:d0:b5:34:ca:22:23:ec:b7:31:a5:e4:1d:36:b9:7d:d8: 9f:22:fb:ec:37:b1:47:e9:2b:d3:ea:54:f0:ec:f2:a2:79:09: c8:60:be:8c:04:4b:7c:fb:f7:01:5c:b7:91:3e:3a:3f:39:b5: f9:d0:a5:3b:ee:96:02:6e:84:6c:11:60:98:c1:85:82:35:fb: fb:91:d1:50:3f:e9:e0:65:0a:28:9c:cc:38:8f:f7:8d:0d:cc: 37:d3:90:b0:5e:4d:0e:2e:e7:cf:97:16:b4:20:29:ea:f2:40: 47:24:03:24:fb:16:b0:56:77:87:01:f8:5a:9b:66:4c:58:34: 75:f0:08:ca:f2:d4:70:dc:c6:8f:fa:fa:d4:1f:8c:b7:d1:7a: f0:8e:92:67:01:6a:d7:18:ee:ea:2d:ef:d4:de:c4:a0:e2:1d: 50:f7:c2:1f:9e:f2:40:04:2a:71:20:95:c3:ef:e3:a2:3e:8d: bc:54:58:30:ba:8c:be:fa:aa:0b:27:3f:06:ba:7c:a2:fb:73: 8c:4e:01:51 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUdUmWYFhj5iKGd/xTkIV1+twdIgwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTA0MjQ1N1oX DTI2MDYwNDA0Mjk1N1owMzExMC8GA1UEAxMoRUY4RTBEMjQzNTFFNjJDQzFDMDNE N0I2QjkwQkEyOEY5OUM1MzVBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrBvlDFlPzDPVLKM0wjUTFw5u7CjcKR8IipAMjMp+AiGlQmusyLmjAiCv3w h6O9Sifj3Be+f9SBI8YTvwKMzSMTYPWm6Gx0ocLFh3YOp2ScL1UAFzq3RpSVPalj 9Ihy+lcOgQrlmaukt/fxThWKYED2j959cMPo4Qux4+cWSfzkDG0uvkI9JKANWAvX Bq3LhJWQ9zIpXkMMQza0Ylxghn/yPOb2uwO5U+OH7kx8ll787Bn7YS0Ljl4RT9nI GVJdMiuWumBIKZbGyKviBrjPwjWcL80NXDDOe1cAp/VfUVAnfCinjcsNKqj+CydJ dMx3YSFYQzCF5E6LBmhIE9H+ybkCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTvjg0k NR5izBwD17a5C6KPmcU1qjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWePRjANBAIAAjAHAwUAJAVKQDANBgkqhkiG9w0BAQsFAAOCAQEA lfsJfdoMph3ROskIS++gtBqAL59/aYdVD29QzZJSlaO20sB59lhSExRR2xGrB47z vGSVXDf5RMXQtTTKIiPstzGl5B02uX3YnyL77DexR+kr0+pU8OzyonkJyGC+jARL fPv3AVy3kT46Pzm1+dClO+6WAm6EbBFgmMGFgjX7+5HRUD/p4GUKKJzMOI/3jQ3M N9OQsF5NDi7nz5cWtCAp6vJARyQDJPsWsFZ3hwH4WptmTFg0dfAIyvLUcNzGj/r6 1B+Mt9F68I6SZwFq1xju6i3v1N7EoOIdUPfCH57yQAQqcSCVw+/joj6NvFRYMLqM vvqqCyc/Brp8ovtzjE4BUQ== -----END CERTIFICATE-----Generated at Mon Jun 16 00:19:19 2025 by rpki-client