$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa File: AS147139.roa (raw, json) Hash identifier: hqXhZmeMPluA5JcNXyE3REf58/oz+6zWBmsNFzaE64w= Subject key identifier: 34:C1:0E:F2:DA:E5:3D:16:3D:84:85:48:7B:54:EB:FC:F4:DE:55:6C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78A1A575D62A221D77900191CFEBA475A1FA1703 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa Signing time: Mon 06 Apr 2026 04:00:00 +0000 ROA not before: Mon 06 Apr 2026 03:55:00 +0000 ROA not after: Mon 05 Apr 2027 04:00:00 +0000 asID: 147139 IP address blocks: 103.177.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a1:a5:75:d6:2a:22:1d:77:90:01:91:cf:eb:a4:75:a1:fa:17:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 03:55:00 2026 GMT Not After : Apr 5 04:00:00 2027 GMT Subject: CN=34C10EF2DAE53D163D8485487B54EBFCF4DE556C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:73:da:07:59:67:db:1c:67:a1:ef:b0:3a: 11:af:70:68:cf:5c:5e:2f:ac:37:ff:2c:12:b8:c3: 95:c7:c5:47:9e:ad:3d:bb:f7:26:5c:00:6c:15:7c: df:3f:15:56:85:5b:81:e2:02:08:6e:a9:14:d4:95: 27:51:be:34:3a:03:5c:87:66:97:7e:4a:62:63:d6: 8c:d2:b0:b3:b4:5a:db:d7:2d:28:b0:02:fd:49:88: 81:b5:de:67:54:26:ff:6d:ac:27:08:64:52:33:f2: 60:65:49:50:b9:3e:e8:ef:ec:de:ce:b5:68:ef:a5: 31:62:31:d6:ec:2e:b8:9e:ad:f3:d3:02:4e:d7:aa: c7:22:ba:99:80:13:39:2a:e6:11:52:ae:0b:5b:49: 11:0a:2e:92:53:90:e8:b7:45:64:63:69:e4:a3:2c: cf:b8:ca:bc:c7:43:1c:2d:39:aa:98:70:d2:c9:30: 58:83:27:0c:0d:15:c5:05:bb:ae:9a:a0:dc:65:d4: 48:a7:8c:42:d7:18:90:c2:46:3c:44:ba:c5:78:86: 11:b4:78:d7:63:f5:0b:1f:54:5e:66:b9:47:c8:1a: a8:87:bd:fb:3d:cb:82:97:ed:14:4d:6b:20:1b:68: 3c:65:3a:da:a1:eb:65:22:73:e4:e8:17:65:7e:9f: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C1:0E:F2:DA:E5:3D:16:3D:84:85:48:7B:54:EB:FC:F4:DE:55:6C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.20.0/23 Signature Algorithm: sha256WithRSAEncryption 44:bf:d7:fd:79:db:de:34:0d:1e:4e:4e:b5:ad:ed:5a:56:ab: 63:a4:b4:db:53:b6:2c:b8:a9:12:07:87:2b:97:c0:c7:bb:57: 5f:48:05:df:78:14:d8:3e:c6:84:54:66:a9:e1:e0:8e:e9:5f: 32:26:b1:12:8c:36:43:44:a9:60:8b:ae:a7:23:7a:a0:63:1b: 6d:39:fd:47:fc:64:03:0e:ce:3b:c0:cf:b8:95:04:c3:2a:c9: 5b:b6:f0:e4:e5:09:78:bb:1b:33:6c:e7:9c:2e:21:b6:a6:d7: 07:65:99:49:01:2e:f6:53:af:1d:be:eb:92:9a:da:85:f6:60: f3:e3:ab:b3:91:6e:c0:67:b2:2e:e0:dc:83:d6:77:f5:31:07: b7:74:68:14:73:22:24:2c:d6:ff:bb:68:eb:2f:e4:8a:c5:cc: 2d:ef:7f:aa:0a:c7:f3:52:6e:cb:6b:35:11:87:d6:fc:2b:00: f6:8a:15:3f:3c:8f:2a:1c:fe:16:1c:c1:5c:33:b1:57:ad:9c: 18:04:30:3a:4e:c9:52:fb:31:c5:58:f4:b5:b3:c2:79:af:51: 80:8f:41:91:76:5c:f3:02:5c:16:01:96:66:49:53:58:da:dc: f8:5b:22:9f:8b:b3:02:98:49:4e:f3:b2:23:c3:fd:4e:12:7a: 31:34:65:73 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeKGlddYqIh13kAGRz+ukdaH6FwMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjAzNTUwMFoX DTI3MDQwNTA0MDAwMFowMzExMC8GA1UEAxMoMzRDMTBFRjJEQUU1M0QxNjNEODQ4 NTQ4N0I1NEVCRkNGNERFNTU2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3wc9oHWWfbHGeh77A6Ea9waM9cXi+sN/8sErjDlcfFR56tPbv3JlwAbBV8 3z8VVoVbgeICCG6pFNSVJ1G+NDoDXIdml35KYmPWjNKws7Ra29ctKLAC/UmIgbXe Z1Qm/22sJwhkUjPyYGVJULk+6O/s3s61aO+lMWIx1uwuuJ6t89MCTteqxyK6mYAT OSrmEVKuC1tJEQouklOQ6LdFZGNp5KMsz7jKvMdDHC05qphw0skwWIMnDA0VxQW7 rpqg3GXUSKeMQtcYkMJGPES6xXiGEbR412P1Cx9UXma5R8gaqIe9+z3LgpftFE1r IBtoPGU62qHrZSJz5OgXZX6fFo8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ0wQ7y 2uU9Fj2EhUh7VOv89N5VbDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWexFDANBgkqhkiG9w0BAQsFAAOCAQEARL/X/Xnb3jQNHk5Ota3t WlarY6S021O2LLipEgeHK5fAx7tXX0gF33gU2D7GhFRmqeHgjulfMiaxEow2Q0Sp YIuupyN6oGMbbTn9R/xkAw7OO8DPuJUEwyrJW7bw5OUJeLsbM2znnC4htqbXB2WZ SQEu9lOvHb7rkprahfZg8+Ors5FuwGeyLuDcg9Z39TEHt3RoFHMiJCzW/7to6y/k isXMLe9/qgrH81Juy2s1EYfW/CsA9ooVPzyPKhz+FhzBXDOxV62cGAQwOk7JUvsx xVj0tbPCea9RgI9BkXZc8wJcFgGWZklTWNrc+Fsin4uzAphJTvOyI8P9ThJ6MTRl cw== -----END CERTIFICATE-----Generated at Fri Apr 17 08:17:14 2026 by rpki-client