$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147113.roa File: AS147113.roa (raw, json) Hash identifier: 4rx2xQk0WJ23vVzT6J0j5SzvqEKaA2Zez5Uf+bLHMpw= Subject key identifier: B2:31:45:7E:88:6E:09:85:D0:D9:6E:81:9D:69:71:7B:79:FB:37:71 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E35F64B68B520B2E393808861674FAAA5C873F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147113.roa Signing time: Mon 03 Nov 2025 05:00:00 +0000 ROA not before: Mon 03 Nov 2025 04:55:00 +0000 ROA not after: Mon 02 Nov 2026 05:00:00 +0000 asID: 147113 IP address blocks: 103.173.72.0/24 maxlen: 24 103.177.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:35:f6:4b:68:b5:20:b2:e3:93:80:88:61:67:4f:aa:a5:c8:73:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 3 04:55:00 2025 GMT Not After : Nov 2 05:00:00 2026 GMT Subject: CN=B231457E886E0985D0D96E819D69717B79FB3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:dd:c9:bf:69:01:3b:5f:a2:f8:1d:82:1b: 18:5b:6b:ca:72:73:4d:fb:fc:ff:86:e4:fe:79:23: 18:da:1e:2f:a8:55:17:23:18:e8:d6:32:94:7e:b5: 8b:d2:f3:93:19:55:2b:70:fe:37:4f:fa:2c:d1:68: 4b:c0:3f:df:6a:93:a1:11:5f:21:ec:9b:a6:60:64: 96:ff:7d:e6:a5:fc:6c:3f:2c:2e:90:bf:66:05:2f: de:11:99:2d:f1:cf:c6:a6:ad:d6:f6:51:59:e4:8f: 18:35:6a:60:8e:29:45:38:95:24:62:8a:ad:5f:84: 15:f0:d5:ae:d8:89:1c:74:ff:0e:6c:ad:fe:bf:18: 65:7f:c0:f5:1a:4f:5e:56:4b:7b:aa:9e:14:9c:41: 13:a0:3a:a2:1a:98:2f:2f:3b:ca:63:11:cf:5e:01: 47:f3:39:bb:76:d1:66:ac:15:c1:3e:74:cd:09:af: f3:c5:da:3a:e5:d8:fb:7e:e5:d3:77:ff:66:83:7f: a9:d7:14:71:e0:d2:60:3c:fc:a5:e5:c7:72:60:d3: ea:84:8e:2a:1f:ed:1d:cc:cd:60:9f:97:86:40:88: ad:ea:71:79:9f:1f:fc:e1:f1:4b:63:1d:09:27:0c: 02:17:a2:85:09:9d:2f:8a:38:66:e9:f1:e1:7b:94: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:31:45:7E:88:6E:09:85:D0:D9:6E:81:9D:69:71:7B:79:FB:37:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147113.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.72.0/24 103.177.199.0/24 Signature Algorithm: sha256WithRSAEncryption 43:e8:38:26:05:49:97:06:34:0e:4d:93:c5:4c:52:ae:97:ed: f9:ec:c3:da:ed:6e:87:22:48:c8:11:55:01:e0:c7:74:17:6d: b6:83:86:ea:9a:0c:d8:d4:05:c9:9e:4c:1f:9e:26:6b:6c:34: c8:d7:52:43:00:35:27:2f:e6:81:60:87:13:08:15:de:b4:92: c9:c8:26:8b:fa:54:86:4c:42:95:56:3a:5b:93:a9:aa:09:0c: d0:d3:b0:d8:55:ad:be:8f:95:81:a2:ba:2b:aa:84:16:b5:1d: 8e:c1:cf:a0:de:62:04:83:17:ac:49:68:fe:8e:53:ff:29:f7: 0b:f5:5f:15:d3:a4:f7:d0:ed:a3:a3:7d:e2:df:40:78:65:6c: 6b:ff:77:31:5d:01:d0:2d:48:47:4a:b9:c9:2d:4c:f3:24:7a: d4:83:6f:45:17:99:77:40:84:0d:0a:ff:14:51:63:14:98:88: f7:d5:46:13:bd:94:f2:5a:29:f4:fe:39:c8:c6:f5:1b:23:6a: b1:c1:b1:a1:81:47:3f:4c:9c:65:99:49:2e:d4:0d:9e:58:52: 47:ed:f3:f8:fe:2a:c3:fc:39:c8:83:df:02:62:b1:40:4d:5c: e3:b3:68:1b:3b:71:c1:48:83:8f:bd:c5:64:a7:16:10:89:08: 8b:b5:41:27 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUTjX2S2i1ILLjk4CIYWdPqqXIc/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwMzA0NTUwMFoX DTI2MTEwMjA1MDAwMFowMzExMC8GA1UEAxMoQjIzMTQ1N0U4ODZFMDk4NUQwRDk2 RTgxOUQ2OTcxN0I3OUZCMzc3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIB3cm/aQE7X6L4HYIbGFtrynJzTfv8/4bk/nkjGNoeL6hVFyMY6NYylH61 i9LzkxlVK3D+N0/6LNFoS8A/32qToRFfIeybpmBklv995qX8bD8sLpC/ZgUv3hGZ LfHPxqat1vZRWeSPGDVqYI4pRTiVJGKKrV+EFfDVrtiJHHT/Dmyt/r8YZX/A9RpP XlZLe6qeFJxBE6A6ohqYLy87ymMRz14BR/M5u3bRZqwVwT50zQmv88XaOuXY+37l 03f/ZoN/qdcUceDSYDz8peXHcmDT6oSOKh/tHczNYJ+XhkCIrepxeZ8f/OHxS2Md CScMAheihQmdL4o4Zunx4XuUzScCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBSyMUV+ iG4JhdDZboGdaXF7efs3cTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzExMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGetSAMEAGexxzANBgkqhkiG9w0BAQsFAAOCAQEAQ+g4JgVJlwY0 Dk2TxUxSrpft+ezD2u1uhyJIyBFVAeDHdBdttoOG6poM2NQFyZ5MH54ma2w0yNdS QwA1Jy/mgWCHEwgV3rSSycgmi/pUhkxClVY6W5OpqgkM0NOw2FWtvo+VgaK6K6qE FrUdjsHPoN5iBIMXrElo/o5T/yn3C/VfFdOk99Dto6N94t9AeGVsa/93MV0B0C1I R0q5yS1M8yR61INvRReZd0CEDQr/FFFjFJiI99VGE72U8lop9P45yMb1GyNqscGx oYFHP0ycZZlJLtQNnlhSR+3z+P4qw/w5yIPfAmKxQE1c47NoGztxwUiDj73FZKcW EIkIi7VBJw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:39 2025 by rpki-client