
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
File: AS139932.roa (raw, json)
Hash identifier: R9CFl3urKVoZmK40sxoak2jCMUWUaCpNA1+plL7zEK8=
Subject key identifier: 61:6C:F4:40:5A:51:5D:E1:A0:BA:5E:CA:89:85:70:75:34:6E:37:58
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4C3B075A925C50CF7BF7BE65708D4D52975EA631
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
Signing time: Fri 26 Sep 2025 04:00:00 +0000
ROA not before: Fri 26 Sep 2025 03:55:00 +0000
ROA not after: Fri 25 Sep 2026 04:00:00 +0000
asID: 139932
IP address blocks: 103.146.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3b:07:5a:92:5c:50:cf:7b:f7:be:65:70:8d:4d:52:97:5e:a6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Sep 26 03:55:00 2025 GMT
Not After : Sep 25 04:00:00 2026 GMT
Subject: CN=616CF4405A515DE1A0BA5ECA89857075346E3758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:fc:73:f9:42:76:2f:71:7e:82:da:3e:8d:
cc:f5:fd:51:91:d6:02:99:f2:fc:6f:d0:6a:2b:a0:
e8:c2:ff:19:b6:fa:69:10:68:bf:30:1b:81:b8:c1:
14:1f:b0:ee:7e:da:08:3f:16:d5:c7:3c:ae:28:89:
07:11:b3:66:8f:9d:ba:73:b2:8c:db:2a:14:4b:07:
37:95:02:25:c8:0b:28:95:1e:bb:a9:48:1f:d3:08:
3b:a5:6b:75:a2:a3:6c:73:54:f4:11:6c:4d:76:c3:
ab:d9:af:36:7f:42:27:2d:2b:27:59:08:0d:03:d5:
3d:54:9f:00:61:8f:8c:bc:39:b9:12:81:0f:8e:db:
ce:84:81:45:e1:c9:bb:c0:f1:35:60:fd:a4:e2:f1:
cf:04:21:33:67:e7:8b:3c:3d:97:a3:3b:a2:3a:22:
4a:f1:66:a4:f6:7a:69:48:43:c3:b8:d8:5d:31:07:
0b:da:cc:04:46:4f:c8:57:a9:3a:c4:28:86:19:18:
99:b0:ef:1a:67:41:77:2c:bc:82:e1:ae:7f:84:4e:
dd:ee:ab:da:62:0b:0f:e9:83:14:db:61:9a:8a:57:
d1:17:6c:99:f9:34:09:02:a7:fe:85:84:62:72:38:
2a:d6:f2:3b:dd:7e:50:ac:92:1a:6c:52:6f:a1:72:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6C:F4:40:5A:51:5D:E1:A0:BA:5E:CA:89:85:70:75:34:6E:37:58
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.74.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4d:70:9f:40:28:39:93:d5:a4:92:d0:77:c7:ee:86:60:f3:
84:f5:ec:a2:0e:36:6f:71:84:e2:2e:fe:90:24:3a:77:40:dd:
4d:27:75:a0:d8:1d:22:14:44:6a:a2:f2:b6:10:88:58:01:87:
90:b2:88:f8:18:2c:d9:9a:b8:c7:fd:a0:35:65:1c:bf:d1:4b:
1b:7a:29:d7:73:a0:b7:14:cc:b8:49:ab:72:a6:27:bb:8c:ea:
3d:ae:11:79:27:98:be:da:ff:73:58:e0:a5:6a:1c:47:96:e9:
ff:c6:b3:02:c8:64:fb:03:95:b4:56:0c:95:16:f2:36:d6:11:
74:96:91:c8:78:9e:9e:23:e5:9a:aa:2e:df:29:1a:5f:52:69:
2c:4b:0f:60:01:11:41:f9:8f:af:e5:18:c9:fc:eb:11:f6:74:
2d:af:38:18:be:2b:88:99:21:52:6f:a0:b5:26:c4:d3:36:e7:
e2:4c:92:70:c3:ff:9c:25:70:43:97:58:8c:2e:28:b1:a5:d8:
a0:9e:20:56:95:14:fa:69:97:cf:f0:7c:dc:88:50:78:ac:b5:
b2:42:0e:86:66:7c:36:1f:d5:9d:1b:79:5b:e1:e4:0f:dd:e3:
66:7f:da:b6:cf:a8:46:e8:3f:e3:63:6d:f2:a8:fb:42:ac:25:
30:2a:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:31:40 2025 by rpki-client