$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140003.roa File: AS140003.roa (raw, json) Hash identifier: v1X95335QCRQNA4py38bFNFQhrbuel1d1w8YWO7b48I= Subject key identifier: 5E:3A:70:40:DC:D5:4F:7C:1F:E0:FC:54:EE:EF:94:CC:2F:F7:17:23 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BC9076A976A15131659FC8EB88A4B9B57B0C4EA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140003.roa Signing time: Thu 05 Jun 2025 02:00:00 +0000 ROA not before: Thu 05 Jun 2025 01:55:00 +0000 ROA not after: Thu 04 Jun 2026 02:00:00 +0000 asID: 140003 IP address blocks: 203.119.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c9:07:6a:97:6a:15:13:16:59:fc:8e:b8:8a:4b:9b:57:b0:c4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 01:55:00 2025 GMT Not After : Jun 4 02:00:00 2026 GMT Subject: CN=5E3A7040DCD54F7C1FE0FC54EEEF94CC2FF71723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:28:0a:ce:55:e9:be:73:5b:7b:7b:e1:3a: 19:c4:b6:84:eb:44:a0:37:aa:1d:2c:17:f1:2f:bb: 92:c6:3f:40:03:28:8a:c4:db:2c:fe:ce:a1:24:69: 36:70:4f:e9:3f:32:18:89:bb:79:87:a6:d8:7a:92: 21:d7:31:d5:e6:5f:26:f9:a3:0f:87:ad:ce:40:bc: 84:cb:1e:e9:85:e6:6e:ed:e5:49:2b:34:33:db:90: 0e:4f:db:d9:0d:f6:97:fd:79:35:93:da:b0:ce:f5: 35:94:e2:c6:4e:2e:7e:11:9c:b7:21:e3:36:73:40: bc:35:47:dc:5c:41:7d:2a:54:ca:7c:e0:5b:fa:71: 45:62:c2:71:f9:ef:ca:d8:9c:8c:77:77:eb:91:fe: a7:2d:1f:0c:37:80:60:0b:fa:bd:c2:35:ed:d5:ad: c2:ea:22:d4:70:26:16:d1:bb:28:d5:e4:ff:e2:31: 47:ef:4e:aa:91:38:68:8a:3a:98:eb:91:c2:af:f9: 65:8c:ad:81:bd:c1:0c:0c:63:9d:d5:90:2e:85:d8: 75:3f:00:dd:b6:f6:94:f3:00:f9:17:58:e6:8a:07: c8:6d:6f:5d:26:d5:7a:db:35:4a:3d:c4:ad:bc:f4: 10:74:09:a2:ab:5c:49:2e:1c:99:fa:ed:94:ba:7e: a2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3A:70:40:DC:D5:4F:7C:1F:E0:FC:54:EE:EF:94:CC:2F:F7:17:23 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.119.13.0/24 Signature Algorithm: sha256WithRSAEncryption 12:25:3f:cc:2a:38:7d:99:b2:b1:69:6c:5a:da:28:34:37:23: 72:c8:cd:9f:2f:ba:ad:75:98:ee:96:cb:dc:33:13:d6:9c:f9: 11:07:9f:87:02:b5:a7:6e:52:8e:e9:0b:3b:4e:6f:b2:28:42: 48:e4:c7:35:d8:e6:99:85:d5:10:36:10:10:b0:f7:73:7b:69: d6:d6:a9:b5:59:a8:a4:c0:a8:b5:07:f3:ec:3e:1d:3e:6d:5f: 0b:b0:ba:c9:be:6f:f7:3f:79:dd:80:a5:21:21:4d:8a:db:b0: b4:13:f5:d2:3e:7f:96:e9:af:a4:95:cc:99:e0:10:4e:4c:29: a0:5a:09:1a:92:5f:cb:1f:75:d8:75:f6:bd:b6:7a:6a:f8:cc: c4:fd:87:c2:20:38:2b:f2:a1:d9:94:9c:6c:87:1a:f4:a3:3c: d8:86:b1:f6:67:0b:d8:35:a9:1f:86:78:b5:41:fd:ab:12:a6: 5b:46:d8:c3:22:0c:1b:91:d1:8a:f5:eb:9e:66:26:4f:4f:9b: fe:3e:73:2e:bb:25:2c:9e:a2:52:1a:10:f6:46:4c:7a:1a:12: 5b:6c:5d:d6:0c:be:2e:9c:07:a0:a8:5f:00:1a:ba:3f:65:f0: 88:ae:5a:b3:a1:c8:25:49:c1:fc:d0:72:08:0f:31:95:4c:97: 05:02:af:d3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUO8kHapdqFRMWWfyOuIpLm1ewxOowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTAxNTUwMFoX DTI2MDYwNDAyMDAwMFowMzExMC8GA1UEAxMoNUUzQTcwNDBEQ0Q1NEY3QzFGRTBG QzU0RUVFRjk0Q0MyRkY3MTcyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkmKArOVem+c1t7e+E6GcS2hOtEoDeqHSwX8S+7ksY/QAMoisTbLP7OoSRp NnBP6T8yGIm7eYem2HqSIdcx1eZfJvmjD4etzkC8hMse6YXmbu3lSSs0M9uQDk/b 2Q32l/15NZPasM71NZTixk4ufhGctyHjNnNAvDVH3FxBfSpUynzgW/pxRWLCcfnv yticjHd365H+py0fDDeAYAv6vcI17dWtwuoi1HAmFtG7KNXk/+IxR+9OqpE4aIo6 mOuRwq/5ZYytgb3BDAxjndWQLoXYdT8A3bb2lPMA+RdY5ooHyG1vXSbVets1Sj3E rbz0EHQJoqtcSS4cmfrtlLp+ogsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBReOnBA 3NVPfB/g/FTu75TML/cXIzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAwMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMt3DTANBgkqhkiG9w0BAQsFAAOCAQEAEiU/zCo4fZmysWlsWtoo NDcjcsjNny+6rXWY7pbL3DMT1pz5EQefhwK1p25SjukLO05vsihCSOTHNdjmmYXV EDYQELD3c3tp1taptVmopMCotQfz7D4dPm1fC7C6yb5v9z953YClISFNituwtBP1 0j5/lumvpJXMmeAQTkwpoFoJGpJfyx912HX2vbZ6avjMxP2HwiA4K/Kh2ZScbIca 9KM82Iax9mcL2DWpH4Z4tUH9qxKmW0bYwyIMG5HRivXrnmYmT0+b/j5zLrslLJ6i UhoQ9kZMehoSW2xd1gy+LpwHoKhfABq6P2XwiK5as6HIJUnB/NByCA8xlUyXBQKv 0w== -----END CERTIFICATE-----Generated at Mon Jun 16 04:22:19 2025 by rpki-client