$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139433.roa File: AS139433.roa (raw, json) Hash identifier: 9h2cpzXbDFExFon+4aVKW2hQy/9RulGmS/gvs0B+4TQ= Subject key identifier: 08:41:37:B8:A2:BA:88:3A:4C:61:DA:96:FE:00:4F:0C:3F:B5:FC:90 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A1D493ECD760573B8292AEB38CC57AD9FEE2A93 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139433.roa Signing time: Wed 17 Sep 2025 10:00:00 +0000 ROA not before: Wed 17 Sep 2025 09:55:00 +0000 ROA not after: Wed 16 Sep 2026 10:00:00 +0000 asID: 139433 IP address blocks: 2406:6d40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1d:49:3e:cd:76:05:73:b8:29:2a:eb:38:cc:57:ad:9f:ee:2a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 09:55:00 2025 GMT Not After : Sep 16 10:00:00 2026 GMT Subject: CN=084137B8A2BA883A4C61DA96FE004F0C3FB5FC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:dd:07:bd:32:3c:6f:51:da:77:38:b0:0a: 59:6c:fc:70:22:8f:d8:56:2a:45:65:7d:2b:fc:17: 74:81:16:4d:41:4b:33:aa:19:54:f9:2e:a3:8c:e0: f3:44:25:67:53:01:31:4f:58:e6:f9:aa:37:5d:b8: 51:1b:2e:b9:85:8b:6d:74:d0:95:7a:79:fa:74:90: 88:fe:de:8a:b8:e4:f4:45:c6:b0:07:cd:e4:cb:c1: fe:29:d8:fd:5c:4e:7f:63:50:6d:4c:3c:cf:b5:21: fa:90:4b:8a:73:5b:83:4d:e4:75:45:16:25:5e:b9: 88:45:8c:c5:a8:72:d7:57:c8:45:35:85:30:87:3b: 51:ec:7f:ee:fc:32:99:66:a9:54:88:d7:ab:10:bf: 50:5c:81:09:45:22:f9:75:28:e8:df:4c:71:b3:17: 60:10:f5:51:06:08:b4:a9:ae:cd:c8:11:bd:c4:2b: 51:27:7f:dc:29:74:43:24:eb:b8:6d:e3:1b:63:7f: 8f:3f:58:fb:b5:d8:5d:55:0a:ea:6b:0d:91:68:88: 22:43:e8:c6:9f:3e:d3:3a:01:52:5c:56:46:cc:76: 17:b2:b1:94:b2:cd:7e:4d:89:4f:a6:12:93:15:21: 89:1a:ac:2c:77:56:04:7a:a0:b9:f4:c0:ee:1e:31: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:41:37:B8:A2:BA:88:3A:4C:61:DA:96:FE:00:4F:0C:3F:B5:FC:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 4c:87:5c:47:59:35:31:2e:fa:b1:80:7a:39:49:b7:a0:79:9a: f9:f8:56:32:82:a9:49:1a:79:fa:77:fd:f1:fe:63:35:9e:ae: 65:84:51:ae:55:f5:88:a5:e3:85:0f:1e:eb:62:af:f8:18:e7: d6:91:2a:e6:df:ce:e2:ad:55:78:36:bd:1f:27:a2:cf:13:93: 60:f2:ba:68:76:4f:13:ee:a2:8b:66:1c:41:4c:82:09:d9:7c: fe:27:80:53:66:cb:c6:a6:b1:c8:41:4c:23:f2:da:ca:d8:b2: 14:5e:da:97:c1:05:de:9a:7d:87:ad:f2:5f:32:a4:47:07:b6: 08:5a:ab:92:68:1f:cd:5c:a8:b0:f5:bc:8e:60:b3:6a:11:4c: cb:de:54:73:b8:c3:a1:ab:0e:91:37:f0:e1:6f:4e:d0:95:bb: af:72:03:ec:17:13:10:a3:a0:de:93:39:ba:c0:d5:ec:b8:1e: fd:65:fa:ef:a0:41:da:fe:ff:4b:d3:e2:2d:e2:f9:e1:84:67: 3f:c4:6e:f7:60:83:3f:5c:b2:77:96:8a:8d:84:13:98:d9:6a: 50:ef:5c:b0:bf:ae:87:80:82:aa:01:a3:6b:95:51:88:60:78: 79:93:04:6a:78:7f:35:37:20:26:33:fa:51:13:19:e1:8c:4a: b3:f7:9d:43 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUCh1JPs12BXO4KSrrOMxXrZ/uKpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNzA5NTUwMFoX DTI2MDkxNjEwMDAwMFowMzExMC8GA1UEAxMoMDg0MTM3QjhBMkJBODgzQTRDNjFE QTk2RkUwMDRGMEMzRkI1RkM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJn3Qe9MjxvUdp3OLAKWWz8cCKP2FYqRWV9K/wXdIEWTUFLM6oZVPkuo4zg 80QlZ1MBMU9Y5vmqN124URsuuYWLbXTQlXp5+nSQiP7eirjk9EXGsAfN5MvB/inY /VxOf2NQbUw8z7Uh+pBLinNbg03kdUUWJV65iEWMxahy11fIRTWFMIc7Uex/7vwy mWapVIjXqxC/UFyBCUUi+XUo6N9McbMXYBD1UQYItKmuzcgRvcQrUSd/3Cl0QyTr uG3jG2N/jz9Y+7XYXVUK6msNkWiIIkPoxp8+0zoBUlxWRsx2F7KxlLLNfk2JT6YS kxUhiRqsLHdWBHqgufTA7h4x1GECAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQIQTe4 orqIOkxh2pb+AE8MP7X8kDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQGbUAwDQYJKoZIhvcNAQELBQADggEBAEyHXEdZNTEu+rGAejlJ t6B5mvn4VjKCqUkaefp3/fH+YzWermWEUa5V9Yil44UPHutir/gY59aRKubfzuKt VXg2vR8nos8Tk2Dyumh2TxPuootmHEFMggnZfP4ngFNmy8amschBTCPy2srYshRe 2pfBBd6afYet8l8ypEcHtghaq5JoH81cqLD1vI5gs2oRTMveVHO4w6GrDpE38OFv TtCVu69yA+wXExCjoN6TObrA1ey4Hv1l+u+gQdr+/0vT4i3i+eGEZz/Ebvdggz9c sneWio2EE5jZalDvXLC/roeAgqoBo2uVUYhgeHmTBGp4fzU3ICYz+lETGeGMSrP3 nUM= -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:40 2025 by rpki-client