$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139977.roa File: AS139977.roa (raw, json) Hash identifier: vMZT7YIUsDzZsPEsuufMECDQAZ4ngHoknbt8Xvnywpc= Subject key identifier: D5:B2:E2:43:D8:C4:95:EF:B1:D3:0B:0E:58:DB:CC:99:53:7D:94:85 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 04F565B38FF4CDCD7DE6994AA8570897A108F337 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139977.roa Signing time: Tue 03 Feb 2026 05:00:00 +0000 ROA not before: Tue 03 Feb 2026 04:55:00 +0000 ROA not after: Tue 02 Feb 2027 05:00:00 +0000 asID: 139977 IP address blocks: 103.148.2.0/23 maxlen: 24 2405:c640::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f5:65:b3:8f:f4:cd:cd:7d:e6:99:4a:a8:57:08:97:a1:08:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 3 04:55:00 2026 GMT Not After : Feb 2 05:00:00 2027 GMT Subject: CN=D5B2E243D8C495EFB1D30B0E58DBCC99537D9485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:15:b4:74:f4:1a:a8:87:2d:21:9b:0a:6e: 02:6a:d6:f0:d7:1c:11:e7:42:84:c7:ea:e6:3a:ef: c9:1a:fe:a1:1f:3b:9e:86:68:00:19:c6:2f:ac:28: 9e:61:b9:0c:11:80:89:e8:7d:d4:ca:4e:b1:cf:91: 69:70:ea:eb:10:b7:04:4c:0c:9d:7e:ed:c1:d7:83: cd:41:18:69:52:a1:01:7d:3f:2d:3e:4f:0b:2b:9f: c8:e7:1f:2c:fc:57:47:e8:16:d9:2f:68:7c:ba:09: 0b:31:79:56:7b:8a:17:84:e1:f9:08:32:8c:73:00: 37:b9:51:d4:59:c3:64:81:5a:fa:71:90:2d:64:ab: d0:eb:d1:cb:a9:0e:ef:e6:11:a2:08:df:41:22:58: 41:c6:02:52:9b:20:03:52:8e:cd:71:c2:c7:af:77: 32:d7:7e:8a:2e:11:6f:f3:00:09:95:90:8c:48:a4: 42:65:4c:b2:24:3a:ca:da:91:7b:1f:7a:cd:2e:8e: 6c:22:e5:50:6a:8f:51:1f:d1:ae:b9:ef:5d:b6:6a: d7:23:b2:17:0e:e0:83:26:0b:0e:eb:1f:52:7c:c1: 77:f1:c0:c8:10:78:08:c2:5c:63:cc:1a:5d:e4:3e: 50:3b:56:4d:fa:e3:f1:9c:65:5c:9f:48:cc:bd:55: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:E2:43:D8:C4:95:EF:B1:D3:0B:0E:58:DB:CC:99:53:7D:94:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139977.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.2.0/23 IPv6: 2405:c640::/32 Signature Algorithm: sha256WithRSAEncryption 03:78:b3:20:f9:08:77:60:dc:45:48:a3:1d:64:22:4b:47:c5: 1c:0b:3b:fb:64:a0:76:4d:eb:65:d8:5c:99:7a:33:e0:dd:ba: a2:44:f9:42:c0:6f:dc:fd:6e:65:09:57:30:93:b9:62:59:5e: ad:e5:58:67:02:77:1e:72:aa:c7:61:bb:bf:50:42:57:d9:27: 45:ab:11:7b:da:6d:08:ef:f6:a0:d5:3d:74:00:82:da:d4:75: 7e:f9:b8:76:86:ad:c0:83:30:a6:c8:e7:0a:41:a6:db:74:2e: a1:ad:5c:9a:2c:2c:8c:53:bd:74:ff:96:49:06:6f:34:34:55: e6:f5:e6:9f:a6:12:9d:5f:3d:fd:df:82:85:42:22:28:30:ca: 64:eb:a6:ab:bf:6b:58:9c:71:ab:88:6f:85:81:35:9a:7b:ee: c8:4a:ea:94:e0:c4:09:24:c1:03:a5:b7:6d:3c:b4:e3:88:c3: 10:b4:59:4b:0c:6f:92:30:b7:d1:16:af:46:e6:14:89:1f:43: e0:c0:e9:f7:7c:7d:e7:be:ba:c1:85:28:44:52:cd:52:ab:f3: b3:cc:24:24:7e:0a:e1:9c:36:dd:09:83:9c:9a:f6:21:13:d9: 1b:05:03:b1:f0:8f:52:f3:5b:d6:5a:82:4a:0b:48:a5:7a:45: 6a:25:b2:d8 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUBPVls4/0zc195plKqFcIl6EI8zcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMzA0NTUwMFoX DTI3MDIwMjA1MDAwMFowMzExMC8GA1UEAxMoRDVCMkUyNDNEOEM0OTVFRkIxRDMw QjBFNThEQkNDOTk1MzdEOTQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7wFbR09Bqohy0hmwpuAmrW8NccEedChMfq5jrvyRr+oR87noZoABnGL6wo nmG5DBGAieh91MpOsc+RaXDq6xC3BEwMnX7twdeDzUEYaVKhAX0/LT5PCyufyOcf LPxXR+gW2S9ofLoJCzF5VnuKF4Th+QgyjHMAN7lR1FnDZIFa+nGQLWSr0OvRy6kO 7+YRogjfQSJYQcYCUpsgA1KOzXHCx693Mtd+ii4Rb/MACZWQjEikQmVMsiQ6ytqR ex96zS6ObCLlUGqPUR/RrrnvXbZq1yOyFw7ggyYLDusfUnzBd/HAyBB4CMJcY8wa XeQ+UDtWTfrj8ZxlXJ9IzL1VV80CAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTVsuJD 2MSV77HTCw5Y28yZU32UhTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWeUAjANBAIAAjAHAwUAJAXGQDANBgkqhkiG9w0BAQsFAAOCAQEA A3izIPkId2DcRUijHWQiS0fFHAs7+2Sgdk3rZdhcmXoz4N26okT5QsBv3P1uZQlX MJO5YllereVYZwJ3HnKqx2G7v1BCV9knRasRe9ptCO/2oNU9dACC2tR1fvm4doat wIMwpsjnCkGm23Quoa1cmiwsjFO9dP+WSQZvNDRV5vXmn6YSnV89/d+ChUIiKDDK ZOumq79rWJxxq4hvhYE1mnvuyErqlODECSTBA6W3bTy044jDELRZSwxvkjC30Rav RuYUiR9D4MDp93x95766wYUoRFLNUqvzs8wkJH4K4Zw23QmDnJr2IRPZGwUDsfCP UvNb1lqCSgtIpXpFaiWy2A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:38 2026 by rpki-client