$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139953.roa File: AS139953.roa (raw, json) Hash identifier: Ga3Iu8Z50M5cgbGS0E6XScc82O7gOUttrg0g75aEESc= Subject key identifier: 52:C9:33:17:BF:D5:B4:0B:F1:DC:C0:A5:9A:4B:ED:52:60:87:22:98 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F94282B435E0D931E2CF74FDE6198078BF2811F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139953.roa Signing time: Mon 29 Sep 2025 08:00:00 +0000 ROA not before: Mon 29 Sep 2025 07:55:00 +0000 ROA not after: Mon 28 Sep 2026 08:00:00 +0000 asID: 139953 IP address blocks: 103.147.80.0/23 maxlen: 24 2405:b240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:94:28:2b:43:5e:0d:93:1e:2c:f7:4f:de:61:98:07:8b:f2:81:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 29 07:55:00 2025 GMT Not After : Sep 28 08:00:00 2026 GMT Subject: CN=52C93317BFD5B40BF1DCC0A59A4BED5260872298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:ff:ce:5c:e8:d0:da:ce:cb:3b:4a:a6:4a: 65:6b:2d:f2:99:89:09:49:00:d9:0b:60:9e:38:d9: 07:87:65:df:f9:1e:52:99:d3:80:60:5e:82:93:40: c7:16:10:f7:d8:a6:c2:63:81:18:26:c2:f1:e7:90: 88:55:ea:ef:16:f5:e7:a3:bf:28:9e:bb:35:14:fc: 8d:23:f7:ff:83:60:b9:29:b4:27:69:db:82:10:be: a8:af:f3:2a:6b:39:5e:78:40:da:be:e8:95:60:30: 82:06:72:8d:e5:5e:c7:86:0a:d5:92:ad:7a:ff:b6: 28:9d:6d:1b:51:7c:f4:53:5c:2a:a0:00:9d:4f:d7: ca:d0:a1:ba:0d:5f:49:73:f7:70:a9:db:36:df:1f: 08:40:71:02:2c:76:64:5a:2b:7d:7d:b6:38:dd:fc: 8c:7a:10:85:42:ce:04:74:70:f6:97:20:c7:72:6c: 56:6f:e2:f1:40:ef:c0:65:1c:71:db:fb:56:93:25: 32:e4:d8:37:bc:59:4d:5f:3b:2a:9a:3d:d8:bd:4d: 69:9e:1e:4a:30:0e:82:06:6e:56:21:f4:b5:ef:1a: 88:4c:50:e1:47:71:67:d5:06:a4:bd:8e:3e:60:30: b3:8c:ca:c0:ae:eb:d7:a2:a8:67:58:0b:66:2f:b9: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:33:17:BF:D5:B4:0B:F1:DC:C0:A5:9A:4B:ED:52:60:87:22:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139953.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.80.0/23 IPv6: 2405:b240::/32 Signature Algorithm: sha256WithRSAEncryption 1d:8f:ce:4a:2b:47:f4:72:5a:08:93:cc:8a:35:fd:c5:bb:77: a3:85:be:96:86:e0:87:a2:d8:e7:6f:b5:d4:1a:46:a8:66:f0: fb:8a:07:2f:37:23:fb:0f:08:45:19:d8:a6:8b:7c:e0:ce:89: b1:22:cf:46:f1:a1:00:a1:36:2a:c8:13:9c:89:2d:68:7b:f1: ab:69:05:bf:3b:35:69:10:fa:55:3d:8f:fe:b4:b6:d5:8e:6e: 23:5a:84:c1:f2:ea:dd:f7:5b:80:e7:4c:3d:27:df:94:09:3f: d8:4c:a4:37:9d:0f:65:a9:72:dd:99:d0:50:62:2c:ff:40:43: 45:51:38:65:75:60:5a:19:b9:cb:37:85:2a:58:7d:bb:be:a0: 71:2d:1d:f8:68:24:52:2d:9e:ee:c6:e4:ea:87:55:c0:8b:ba: 4e:a9:90:eb:5b:73:7e:d2:fd:de:42:11:76:b3:5e:b3:d8:90: d5:53:ef:3e:10:7d:41:a3:01:b3:34:5c:63:89:f8:ae:e7:c7: e8:c6:47:b8:6e:4e:e6:ad:44:9c:61:3d:1b:3a:06:b5:65:06: 61:3d:d2:bc:92:f7:3c:1d:c2:c5:12:86:cb:05:83:4b:1f:e6: 1d:59:c3:82:68:c3:83:a9:a9:01:86:bd:3c:42:0f:33:00:d3: e9:40:c8:9b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUD5QoK0NeDZMeLPdP3mGYB4vygR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyOTA3NTUwMFoX DTI2MDkyODA4MDAwMFowMzExMC8GA1UEAxMoNTJDOTMzMTdCRkQ1QjQwQkYxREND MEE1OUE0QkVENTI2MDg3MjI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgE/85c6NDazss7SqZKZWst8pmJCUkA2QtgnjjZB4dl3/keUpnTgGBegpNA xxYQ99imwmOBGCbC8eeQiFXq7xb156O/KJ67NRT8jSP3/4NguSm0J2nbghC+qK/z Kms5XnhA2r7olWAwggZyjeVex4YK1ZKtev+2KJ1tG1F89FNcKqAAnU/XytChug1f SXP3cKnbNt8fCEBxAix2ZForfX22ON38jHoQhULOBHRw9pcgx3JsVm/i8UDvwGUc cdv7VpMlMuTYN7xZTV87Kpo92L1NaZ4eSjAOggZuViH0te8aiExQ4UdxZ9UGpL2O PmAws4zKwK7r16KoZ1gLZi+50ikCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBRSyTMX v9W0C/HcwKWaS+1SYIcimDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeTUDANBAIAAjAHAwUAJAWyQDANBgkqhkiG9w0BAQsFAAOCAQEA HY/OSitH9HJaCJPMijX9xbt3o4W+lobgh6LY52+11BpGqGbw+4oHLzcj+w8IRRnY pot84M6JsSLPRvGhAKE2KsgTnIktaHvxq2kFvzs1aRD6VT2P/rS21Y5uI1qEwfLq 3fdbgOdMPSfflAk/2EykN50PZaly3ZnQUGIs/0BDRVE4ZXVgWhm5yzeFKlh9u76g cS0d+GgkUi2e7sbk6odVwIu6TqmQ61tzftL93kIRdrNes9iQ1VPvPhB9QaMBszRc Y4n4rufH6MZHuG5O5q1EnGE9GzoGtWUGYT3SvJL3PB3CxRKGywWDSx/mHVnDgmjD g6mpAYa9PEIPMwDT6UDImw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:29 2025 by rpki-client