$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139400.roa File: AS139400.roa (raw, json) Hash identifier: fSCLQKjucH5W/7lgI3UfutmMTVZeQR3/mCQ52uCAPB4= Subject key identifier: BF:B2:89:96:52:34:3C:DF:C8:11:02:77:07:7A:C7:B2:68:6C:AB:C1 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 154ED7C561174A08D8A03D4DEBCDCE820CDE3F15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139400.roa Signing time: Fri 07 Feb 2025 09:37:25 +0000 ROA not before: Fri 07 Feb 2025 09:32:25 +0000 ROA not after: Fri 06 Feb 2026 09:37:25 +0000 asID: 139400 IP address blocks: 103.143.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4e:d7:c5:61:17:4a:08:d8:a0:3d:4d:eb:cd:ce:82:0c:de:3f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 09:32:25 2025 GMT Not After : Feb 6 09:37:25 2026 GMT Subject: CN=BFB2899652343CDFC8110277077AC7B2686CABC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:ad:13:09:f2:4b:59:0a:bc:40:2d:00:02: b1:5b:25:93:1a:ef:7f:51:ca:1b:c2:be:5e:94:2f: 49:2b:c7:26:26:dd:43:68:49:b0:ab:bb:86:d6:b6: cc:87:44:2a:98:dd:74:3c:80:96:44:fd:ae:46:b9: 84:e4:b9:f8:36:2a:93:d3:52:e6:97:14:db:05:5d: c3:35:68:56:2e:ad:bd:f7:11:45:fd:4a:31:76:2c: b4:37:a1:10:07:69:e6:72:19:9d:0a:7c:a0:1e:47: 65:76:4c:3f:57:61:1c:08:8f:08:37:2e:a5:08:24: 29:c9:fd:6c:ad:07:c9:9b:ec:c7:50:13:e9:bf:eb: 7c:4b:e5:47:bc:de:27:3d:c4:2c:66:d0:e3:e9:4e: ed:54:de:c1:02:cf:62:22:b8:d0:25:cc:0c:b0:31: 65:6f:44:e9:1c:25:50:7f:d8:4b:4c:b6:03:a1:d8: 97:a8:ad:66:81:38:5b:b0:d3:91:18:6f:69:52:79: 1d:69:6e:4e:55:dc:b8:9f:2f:db:56:ff:bb:a7:d0: 19:e7:91:b2:0d:d4:7e:da:ee:de:13:b0:ed:d9:6a: 99:6a:38:63:e0:40:ce:b5:46:57:14:ec:4a:f2:8c: 88:d8:65:15:17:58:46:a6:fd:00:7c:46:f1:b9:6f: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:89:96:52:34:3C:DF:C8:11:02:77:07:7A:C7:B2:68:6C:AB:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 Signature Algorithm: sha256WithRSAEncryption 94:f7:49:4a:ef:c3:7c:fd:6e:a9:a3:9e:04:8f:fc:20:3c:8b: 1b:d9:86:2f:b5:7d:65:e2:86:f9:26:87:05:6d:a9:62:36:a7: 98:87:ab:3e:00:b7:ad:b7:19:5d:d9:9c:10:6a:d2:43:69:3b: dd:cb:4f:ac:0a:ab:08:63:ea:82:38:07:90:6d:9a:e8:c4:2a: 99:f4:c8:ad:44:1e:51:50:90:40:31:45:24:26:97:cd:83:68: cf:bf:de:5f:8f:45:f8:42:1d:05:a7:77:f3:9d:d9:a5:a6:d9: 96:7b:8f:41:9c:70:90:0d:3b:bd:45:34:78:e2:77:fc:ee:9a: e9:54:c4:4a:24:51:04:e5:90:56:f5:51:fd:6e:62:70:ec:4b: 4c:4e:9c:c6:7d:9f:a8:93:84:04:49:35:eb:7e:6b:61:c0:23: 60:89:5a:de:6a:e3:dd:42:07:fe:54:7c:ca:46:24:79:f5:81: 4d:ce:0a:9d:d6:85:9e:63:1c:c4:68:f0:f6:f0:f5:3b:38:dc: 92:10:81:d9:f5:fa:c7:3f:d9:22:fd:dc:ad:56:18:b1:d2:89: a7:ac:cc:7c:59:b2:6d:df:b4:73:0d:c0:b3:10:7b:15:1f:2f: bc:f7:a4:ca:6a:f3:13:9e:89:53:09:b7:0c:9e:1a:05:85:28: ba:21:4b:57 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUFU7XxWEXSgjYoD1N683OggzePxUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwNzA5MzIyNVoX DTI2MDIwNjA5MzcyNVowMzExMC8GA1UEAxMoQkZCMjg5OTY1MjM0M0NERkM4MTEw Mjc3MDc3QUM3QjI2ODZDQUJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2UrRMJ8ktZCrxALQACsVslkxrvf1HKG8K+XpQvSSvHJibdQ2hJsKu7hta2 zIdEKpjddDyAlkT9rka5hOS5+DYqk9NS5pcU2wVdwzVoVi6tvfcRRf1KMXYstDeh EAdp5nIZnQp8oB5HZXZMP1dhHAiPCDcupQgkKcn9bK0HyZvsx1AT6b/rfEvlR7ze Jz3ELGbQ4+lO7VTewQLPYiK40CXMDLAxZW9E6RwlUH/YS0y2A6HYl6itZoE4W7DT kRhvaVJ5HWluTlXcuJ8v21b/u6fQGeeRsg3Uftru3hOw7dlqmWo4Y+BAzrVGVxTs SvKMiNhlFRdYRqb9AHxG8blv2vUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS/somW UjQ838gRAncHeseyaGyrwTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQwMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWePqjANBgkqhkiG9w0BAQsFAAOCAQEAlPdJSu/DfP1uqaOeBI/8 IDyLG9mGL7V9ZeKG+SaHBW2pYjanmIerPgC3rbcZXdmcEGrSQ2k73ctPrAqrCGPq gjgHkG2a6MQqmfTIrUQeUVCQQDFFJCaXzYNoz7/eX49F+EIdBad3853ZpabZlnuP QZxwkA07vUU0eOJ3/O6a6VTESiRRBOWQVvVR/W5icOxLTE6cxn2fqJOEBEk1635r YcAjYIla3mrj3UIH/lR8ykYkefWBTc4KndaFnmMcxGjw9vD1OzjckhCB2fX6xz/Z Iv3crVYYsdKJp6zMfFmybd+0cw3AsxB7FR8vvPekymrzE56JUwm3DJ4aBYUouiFL Vw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:48 2025 by rpki-client