$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140002.roa File: AS140002.roa (raw, json) Hash identifier: mEjFJFGfPCp/zLHsyj/0xZLyjqhoyOiA8/VuhD6PI/0= Subject key identifier: B8:30:2D:74:78:7B:47:5E:5E:05:F3:EA:58:30:B1:36:23:5C:20:1A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62E07CD5153E2503BFFA45EF78E532FA06055E12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140002.roa Signing time: Tue 03 Jun 2025 21:00:00 +0000 ROA not before: Tue 03 Jun 2025 20:55:00 +0000 ROA not after: Tue 02 Jun 2026 21:00:00 +0000 asID: 140002 IP address blocks: 103.148.78.0/24 maxlen: 24 203.119.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e0:7c:d5:15:3e:25:03:bf:fa:45:ef:78:e5:32:fa:06:05:5e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 20:55:00 2025 GMT Not After : Jun 2 21:00:00 2026 GMT Subject: CN=B8302D74787B475E5E05F3EA5830B136235C201A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:22:84:c2:63:22:15:dc:35:90:94:86:f8: 89:8c:54:d6:f7:18:6f:d6:5f:ef:78:b2:7e:3d:70: cf:95:77:2e:53:4b:6a:2c:d1:e5:42:0c:77:57:15: 16:ea:31:55:8a:59:61:86:85:78:cc:44:62:7e:3f: b2:5f:b1:f6:34:30:0b:76:1e:b6:bb:0b:b2:61:96: b9:63:09:ac:f9:85:d8:3d:46:9d:45:df:f5:e4:ad: c6:aa:6a:4f:07:87:8f:9b:8e:17:9a:85:49:1c:55: aa:cd:63:57:ab:92:1a:e9:0a:a5:b1:0c:db:0a:4f: ee:06:77:2b:2a:b5:a4:cb:b7:b9:27:a1:a3:7e:a3: bc:44:4e:ab:76:8f:cf:d3:1b:d8:3f:08:88:fd:a1: a0:c3:27:2b:0c:45:97:96:86:c7:95:50:85:ff:00: e4:01:a7:a1:b0:a7:72:75:5d:c8:7d:1f:81:5d:7b: 97:1e:10:f5:ae:0e:58:c6:5c:e5:23:59:82:04:77: 56:41:5f:6c:bf:1f:41:c7:59:0b:b9:f6:ee:21:ae: fe:70:40:52:84:3a:b3:38:fc:fb:bf:b6:9a:a0:b2: 98:5c:72:8f:b0:4a:47:21:d7:f9:c3:f0:c0:6b:6c: 5e:19:5f:fa:f2:1e:9c:4d:7b:b8:38:25:89:45:30: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:30:2D:74:78:7B:47:5E:5E:05:F3:EA:58:30:B1:36:23:5C:20:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140002.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.78.0/24 203.119.13.0/24 Signature Algorithm: sha256WithRSAEncryption 43:fd:01:ad:85:7c:14:6c:35:8a:26:c2:89:35:3c:4c:c0:84: 49:7e:57:09:95:29:00:c8:c8:be:49:48:9f:d8:96:73:06:81: aa:32:14:cc:4c:82:05:fe:c4:73:6a:20:b4:65:a2:6b:44:b8: 8e:21:28:d3:14:a2:22:a6:30:d2:1c:01:c7:22:5b:ba:66:1b: 3a:0f:f2:4c:2a:7e:e9:79:17:d0:5b:32:1f:ac:51:24:50:42: c6:95:04:16:7b:d0:a4:fc:8f:ef:10:c7:11:d6:d8:ee:0b:21: 2f:43:51:73:9b:6d:ab:80:88:60:41:b0:9a:9f:be:47:e7:83: c2:19:85:53:93:bf:fc:6a:5d:af:7e:2b:13:38:47:03:9b:c5: 37:be:04:96:20:29:f8:a1:aa:88:8b:e3:47:fa:68:e2:30:a1: 14:37:eb:24:d8:4e:b7:a5:b1:e1:93:05:03:97:b9:b8:75:c0: 20:cc:9e:e0:c0:df:7e:58:8f:8a:d5:a1:43:80:29:82:82:b0: f0:72:ef:0b:e8:f1:b0:ac:c7:e9:73:34:23:34:3e:43:7a:cc: ab:6d:b0:ee:97:3f:d8:da:10:c7:1a:6a:99:8b:32:19:d6:74: bc:5f:fe:4d:90:76:ab:f9:78:77:3b:cf:f4:37:a7:bb:40:d9: f6:84:34:5e -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUYuB81RU+JQO/+kXveOUy+gYFXhIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIwNTUwMFoX DTI2MDYwMjIxMDAwMFowMzExMC8GA1UEAxMoQjgzMDJENzQ3ODdCNDc1RTVFMDVG M0VBNTgzMEIxMzYyMzVDMjAxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR7IoTCYyIV3DWQlIb4iYxU1vcYb9Zf73iyfj1wz5V3LlNLaizR5UIMd1cV FuoxVYpZYYaFeMxEYn4/sl+x9jQwC3YetrsLsmGWuWMJrPmF2D1GnUXf9eStxqpq TweHj5uOF5qFSRxVqs1jV6uSGukKpbEM2wpP7gZ3Kyq1pMu3uSeho36jvEROq3aP z9Mb2D8IiP2hoMMnKwxFl5aGx5VQhf8A5AGnobCncnVdyH0fgV17lx4Q9a4OWMZc 5SNZggR3VkFfbL8fQcdZC7n27iGu/nBAUoQ6szj8+7+2mqCymFxyj7BKRyHX+cPw wGtsXhlf+vIenE17uDgliUUwU/kCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBS4MC10 eHtHXl4F8+pYMLE2I1wgGjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAwMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeUTgMEAMt3DTANBgkqhkiG9w0BAQsFAAOCAQEAQ/0BrYV8FGw1 iibCiTU8TMCESX5XCZUpAMjIvklIn9iWcwaBqjIUzEyCBf7Ec2ogtGWia0S4jiEo 0xSiIqYw0hwBxyJbumYbOg/yTCp+6XkX0FsyH6xRJFBCxpUEFnvQpPyP7xDHEdbY 7gshL0NRc5ttq4CIYEGwmp++R+eDwhmFU5O//Gpdr34rEzhHA5vFN74EliAp+KGq iIvjR/po4jChFDfrJNhOt6Wx4ZMFA5e5uHXAIMye4MDffliPitWhQ4ApgoKw8HLv C+jxsKzH6XM0IzQ+Q3rMq22w7pc/2NoQxxpqmYsyGdZ0vF/+TZB2q/l4dzvP9Den u0DZ9oQ0Xg== -----END CERTIFICATE-----Generated at Sun Jun 15 19:28:04 2025 by rpki-client