$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131745.roa File: AS131745.roa (raw, json) Hash identifier: rPpquKOLcpKaCrr7wDazFParH2hEfXr/QkuS6F1EMy4= Subject key identifier: F2:68:65:C1:46:DD:C1:8F:FB:65:23:83:4B:44:7B:6D:26:E8:2F:91 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B904846B054D43B5ED2604BB10BF0EA6327331F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131745.roa Signing time: Wed 06 Aug 2025 07:00:00 +0000 ROA not before: Wed 06 Aug 2025 06:55:00 +0000 ROA not after: Wed 05 Aug 2026 07:00:00 +0000 asID: 131745 IP address blocks: 103.241.192.0/24 maxlen: 24 2400:85e0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:90:48:46:b0:54:d4:3b:5e:d2:60:4b:b1:0b:f0:ea:63:27:33:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 6 06:55:00 2025 GMT Not After : Aug 5 07:00:00 2026 GMT Subject: CN=F26865C146DDC18FFB6523834B447B6D26E82F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:7f:05:25:cd:75:cb:f8:e6:af:3d:0e:20: 56:e6:58:36:ae:f5:ba:1f:82:70:55:f8:64:2d:6a: e3:78:56:ad:41:9c:c8:be:45:5f:85:fd:46:ef:17: ce:c1:e4:00:3a:50:87:4d:af:de:c5:51:03:96:2a: 99:78:57:42:a2:b0:c8:4b:96:c6:71:36:54:5f:32: f2:7a:82:20:a2:31:13:a0:f9:05:5c:e4:36:f6:2e: b0:9f:6c:8b:66:e7:12:88:eb:71:03:70:4c:01:d5: 3d:6f:6d:64:88:08:e7:a0:bd:3b:cc:9d:a4:1f:f0: e2:ac:3b:bd:61:95:c0:83:8e:c2:47:0c:3f:ef:a5: 4e:fa:ee:01:be:f9:2c:0b:71:a2:88:2a:e6:c1:6f: 45:96:05:eb:06:ba:ea:cc:2a:7c:70:c5:62:b2:6a: d4:1a:33:26:c1:f2:df:ee:43:54:00:1a:c7:fd:95: 5e:fe:30:91:b4:85:28:e7:95:4d:9c:8a:20:d0:41: 89:6b:60:4c:d9:1c:29:6b:5e:36:3f:ab:f4:e3:4d: fb:4e:65:e3:9d:aa:40:ba:44:3d:5e:ab:a0:88:55: 66:34:63:50:e0:f4:3f:82:7b:b8:fe:77:cc:b7:53: 08:d6:94:d1:57:4b:5d:a2:b0:7a:4e:77:fd:8e:dc: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:68:65:C1:46:DD:C1:8F:FB:65:23:83:4B:44:7B:6D:26:E8:2F:91 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131745.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.192.0/24 IPv6: 2400:85e0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:ad:f9:ca:d8:53:95:3f:ee:38:64:7e:6c:0c:af:d6:0e:47: 4f:ce:e2:e6:51:05:7d:ca:0f:d8:d4:43:0a:02:39:cb:15:a6: 07:7a:20:f9:1c:b2:91:17:0e:56:c6:4e:70:3f:fc:5a:fc:08: 30:72:bd:68:fc:ba:ad:21:48:b7:cb:6a:83:32:12:06:4a:b4: 7c:8c:53:9e:ca:df:c7:c1:32:f0:8b:ae:bf:98:a8:5d:45:e4: 69:ed:43:fe:f7:69:ee:13:f5:26:0e:5d:59:6c:63:a8:73:83: 3e:e4:16:e1:dc:cb:e6:d2:2e:43:67:72:37:2e:24:a6:af:1c: 77:2d:41:8c:3d:fd:97:3e:d0:4b:8f:32:2b:3d:bc:a9:b4:e9: 63:ec:2f:cd:a3:22:31:32:62:06:62:56:56:70:bf:54:55:f4: 20:01:16:d3:07:a1:fb:3d:76:af:35:9f:8f:28:e5:c8:f7:03: e4:08:2b:9d:72:3e:d5:63:d9:5d:14:30:c1:6d:5c:89:fe:4e: 7f:c7:dd:90:a5:fb:9f:c6:ce:b5:74:a0:90:a8:a4:69:5f:4a: 59:42:a4:28:90:68:2a:c2:16:62:5c:85:21:9d:b4:96:21:6f: 16:e0:51:d2:bc:54:82:b9:c2:1b:8f:a9:4e:97:3b:af:f3:b8: 97:4a:9a:ca -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUW5BIRrBU1Dte0mBLsQvw6mMnMx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNjA2NTUwMFoX DTI2MDgwNTA3MDAwMFowMzExMC8GA1UEAxMoRjI2ODY1QzE0NkREQzE4RkZCNjUy MzgzNEI0NDdCNkQyNkU4MkY5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOtfwUlzXXL+OavPQ4gVuZYNq71uh+CcFX4ZC1q43hWrUGcyL5FX4X9Ru8X zsHkADpQh02v3sVRA5YqmXhXQqKwyEuWxnE2VF8y8nqCIKIxE6D5BVzkNvYusJ9s i2bnEojrcQNwTAHVPW9tZIgI56C9O8ydpB/w4qw7vWGVwIOOwkcMP++lTvruAb75 LAtxoogq5sFvRZYF6wa66swqfHDFYrJq1BozJsHy3+5DVAAax/2VXv4wkbSFKOeV TZyKINBBiWtgTNkcKWteNj+r9ONN+05l452qQLpEPV6roIhVZjRjUOD0P4J7uP53 zLdTCNaU0VdLXaKwek53/Y7co4UCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTyaGXB Rt3Bj/tlI4NLRHttJugvkTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTc0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAGfxwDANBAIAAjAHAwUAJACF4DANBgkqhkiG9w0BAQsFAAOCAQEA fa35ythTlT/uOGR+bAyv1g5HT87i5lEFfcoP2NRDCgI5yxWmB3og+RyykRcOVsZO cD/8WvwIMHK9aPy6rSFIt8tqgzISBkq0fIxTnsrfx8Ey8Iuuv5ioXUXkae1D/vdp 7hP1Jg5dWWxjqHODPuQW4dzL5tIuQ2dyNy4kpq8cdy1BjD39lz7QS48yKz28qbTp Y+wvzaMiMTJiBmJWVnC/VFX0IAEW0weh+z12rzWfjyjlyPcD5AgrnXI+1WPZXRQw wW1cif5Of8fdkKX7n8bOtXSgkKikaV9KWUKkKJBoKsIWYlyFIZ20liFvFuBR0rxU grnCG4+pTpc7r/O4l0qayg== -----END CERTIFICATE-----Generated at Sat Aug 23 08:54:40 2025 by rpki-client