$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147157.roa File: AS147157.roa (raw, json) Hash identifier: sTDdSc0xJqSoGiDJ4Px97AC1qP6+8sTGYOQ2oFCwB0E= Subject key identifier: 3F:A2:B9:12:53:76:0A:7B:40:69:38:50:68:B5:21:A4:3E:BF:C4:A6 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23FBB223FF912E23A18C793DF34EF5D0AD9165CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147157.roa Signing time: Wed 02 Jul 2025 03:25:20 +0000 ROA not before: Wed 02 Jul 2025 03:20:20 +0000 ROA not after: Wed 01 Jul 2026 03:25:20 +0000 asID: 147157 IP address blocks: 103.177.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fb:b2:23:ff:91:2e:23:a1:8c:79:3d:f3:4e:f5:d0:ad:91:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 03:20:20 2025 GMT Not After : Jul 1 03:25:20 2026 GMT Subject: CN=3FA2B91253760A7B4069385068B521A43EBFC4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:67:df:2d:4b:90:1b:58:c6:07:7b:d6:40: ff:8d:1a:31:61:bb:b9:ed:6c:66:b9:98:7d:e8:d3: fe:3d:26:97:17:5f:3b:54:db:be:af:3d:4d:27:d0: 23:1d:56:7f:13:de:c8:93:07:76:d8:36:37:a5:0d: b8:4b:6d:ea:e9:27:07:93:8e:74:e6:3d:4b:f4:c4: 58:5a:14:a7:f6:20:8b:ed:a2:bf:cc:bc:fd:f3:4e: 60:21:b7:50:88:21:36:50:3e:a4:60:be:c2:ce:62: f4:cf:10:63:6b:ba:07:83:81:a8:a0:d5:c8:86:9b: 77:27:db:8d:fd:27:93:46:14:e9:c1:23:3f:14:63: 4a:e0:09:4f:ec:3e:2d:18:f9:dd:b6:e4:d7:47:d0: 00:e9:76:09:17:ad:0f:90:8b:0a:7b:d1:f2:a5:11: 13:27:34:1c:7e:ed:17:64:9b:83:86:b2:94:36:c9: 81:d3:3a:f9:5e:e3:40:4d:09:9e:4d:f3:19:1c:c0: b8:2f:2a:27:8f:18:3a:db:b9:e8:35:03:77:10:83: 4b:d2:4f:9d:ff:bc:9d:bd:b7:b3:95:e7:fd:c6:68: 2d:bb:ea:d6:d7:f2:a0:d8:7e:cd:0d:e9:0c:95:45: 65:46:c0:b4:a6:5e:05:e2:23:e2:5a:d1:25:a8:62: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:B9:12:53:76:0A:7B:40:69:38:50:68:B5:21:A4:3E:BF:C4:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147157.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.140.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:bf:10:c5:cc:f8:09:fa:27:8b:1d:91:59:42:1f:f6:e1:3a: be:aa:5e:bb:68:52:c1:12:26:ae:0d:d3:cf:4c:58:8c:d0:11: 74:05:e3:1c:c3:bf:02:33:fd:96:b6:7c:20:24:f8:bf:91:21: ac:d0:70:a3:1b:ed:eb:93:4e:84:78:fb:5e:bc:a1:c5:3c:c4: 41:42:49:2b:44:98:b2:10:67:84:07:60:a1:1c:ce:5d:7e:96: d3:f3:83:ff:50:2e:5a:e5:df:e9:f1:be:06:40:f2:52:04:36: af:c2:77:cd:b0:f0:8d:4d:54:f6:19:d6:ae:70:b8:2b:9c:68: 9c:ff:0d:11:fd:0d:3c:2a:d0:55:69:da:c7:de:fb:6c:29:f4: 97:18:34:bd:ce:0f:4d:4f:46:5c:3a:29:55:2f:f0:fa:1f:e9: c1:4f:bb:2a:7c:28:7c:28:dc:2e:2e:9a:ef:0b:ed:cf:72:f1: 77:64:13:73:ff:22:c6:23:7e:a9:50:d9:4c:95:85:14:52:fd: 1d:cc:5c:07:63:69:b6:ac:7b:fa:c3:37:4c:41:f9:a4:64:91: a8:b7:4c:42:c0:bf:7b:4f:9c:f5:3c:a0:c5:f8:4e:c4:8f:71: 25:30:bc:a5:ee:a2:c0:dd:56:45:98:22:cf:5d:5b:68:85:9d: dc:0c:36:ab -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUI/uyI/+RLiOhjHk980710K2RZcowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMjAzMjAyMFoX DTI2MDcwMTAzMjUyMFowMzExMC8GA1UEAxMoM0ZBMkI5MTI1Mzc2MEE3QjQwNjkz ODUwNjhCNTIxQTQzRUJGQzRBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCtZ98tS5AbWMYHe9ZA/40aMWG7ue1sZrmYfejT/j0mlxdfO1Tbvq89TSfQ Ix1WfxPeyJMHdtg2N6UNuEtt6uknB5OOdOY9S/TEWFoUp/Ygi+2iv8y8/fNOYCG3 UIghNlA+pGC+ws5i9M8QY2u6B4OBqKDVyIabdyfbjf0nk0YU6cEjPxRjSuAJT+w+ LRj53bbk10fQAOl2CRetD5CLCnvR8qUREyc0HH7tF2Sbg4aylDbJgdM6+V7jQE0J nk3zGRzAuC8qJ48YOtu56DUDdxCDS9JPnf+8nb23s5Xn/cZoLbvq1tfyoNh+zQ3p DJVFZUbAtKZeBeIj4lrRJahi5+8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ/orkS U3YKe0BpOFBotSGkPr/EpjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWexjDANBgkqhkiG9w0BAQsFAAOCAQEAPr8Qxcz4Cfonix2RWUIf 9uE6vqpeu2hSwRImrg3Tz0xYjNARdAXjHMO/AjP9lrZ8ICT4v5EhrNBwoxvt65NO hHj7XryhxTzEQUJJK0SYshBnhAdgoRzOXX6W0/OD/1AuWuXf6fG+BkDyUgQ2r8J3 zbDwjU1U9hnWrnC4K5xonP8NEf0NPCrQVWnax977bCn0lxg0vc4PTU9GXDopVS/w +h/pwU+7KnwofCjcLi6a7wvtz3Lxd2QTc/8ixiN+qVDZTJWFFFL9HcxcB2Nptqx7 +sM3TEH5pGSRqLdMQsC/e0+c9TygxfhOxI9xJTC8pe6iwN1WRZgiz11baIWd3Aw2 qw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:13 2025 by rpki-client