$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa File: AS131759.roa (raw, json) Hash identifier: w8ftdcoxdSYV95pyF9hE3dwmIjzAzWdmFRVHs7oK56I= Subject key identifier: E0:74:CE:72:38:F2:11:83:D2:14:B2:97:DA:EE:FE:B1:43:1F:36:18 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49DFA8D783CE1C64690B57439C59528E3735C316 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa Signing time: Mon 16 Jun 2025 04:58:33 +0000 ROA not before: Mon 16 Jun 2025 04:53:33 +0000 ROA not after: Mon 15 Jun 2026 04:58:33 +0000 asID: 131759 IP address blocks: 103.244.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:df:a8:d7:83:ce:1c:64:69:0b:57:43:9c:59:52:8e:37:35:c3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 16 04:53:33 2025 GMT Not After : Jun 15 04:58:33 2026 GMT Subject: CN=E074CE7238F21183D214B297DAEEFEB1431F3618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:ce:39:ba:2f:ac:2c:32:2b:62:16:d9:3f: 02:88:d6:1c:f4:8b:68:b5:ba:99:18:1b:1b:c4:0e: 6f:18:b2:da:20:1d:30:af:3a:fa:db:9a:63:1c:c9: fa:57:40:ff:97:88:c4:6b:0a:c3:34:20:72:5b:40: 38:eb:59:14:39:e2:83:8d:64:79:28:a2:ad:f2:ef: 1d:cc:b4:af:aa:5d:d5:2f:1c:f4:a6:05:72:b3:bd: 35:10:03:ab:92:30:7e:57:72:74:3d:38:be:b5:6b: 6d:f9:70:f8:85:7d:a7:ab:90:c0:b2:ae:62:84:51: 56:2f:19:3b:db:33:7b:9c:43:13:4c:0c:ed:bd:dc: c5:3d:95:91:03:c8:15:e1:7e:2d:53:79:44:88:88: 60:3c:9e:38:93:02:e4:cf:e6:9d:1d:05:74:cd:2d: 62:1d:b2:c4:f5:aa:78:78:56:ef:35:49:ef:6b:62: f3:fa:3c:3e:fe:eb:f3:91:49:90:11:43:e8:85:f9: 6f:79:08:b7:76:00:ab:9b:7f:7a:7e:b7:88:13:bf: fb:db:e9:9f:8a:ab:bc:b0:6d:14:bb:7c:28:23:65: 7d:47:a9:92:c6:b4:ef:bf:b3:e2:f6:fb:79:6a:4a: 5c:81:02:2a:64:67:fb:09:3a:83:05:6f:28:39:69: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:CE:72:38:F2:11:83:D2:14:B2:97:DA:EE:FE:B1:43:1F:36:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131759.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:ac:50:65:f7:03:d1:86:da:03:6c:e9:a7:2e:b7:f1:8d:9c: e4:40:06:9b:79:a5:30:c9:20:39:5e:91:0b:da:75:fa:80:2e: ee:59:0d:e5:82:8f:83:b1:08:35:41:e3:0c:37:6b:85:df:22: e4:ca:72:ef:1c:1a:ac:da:21:67:71:00:da:46:69:37:9f:0e: 22:7c:df:92:54:54:88:00:d7:45:7e:d5:70:87:82:7d:d3:0a: 4f:3f:f3:ea:ac:da:2b:61:aa:8c:9f:53:43:28:58:12:14:db: 30:4b:a4:3c:22:88:60:e9:e2:c9:f1:68:4c:d5:1a:e2:8e:7d: 05:d6:05:f8:aa:30:c7:46:cb:74:c8:a4:d2:b7:a7:1a:b1:62: 5c:9e:2f:96:4e:27:2b:74:31:fe:7b:45:58:fe:0a:ec:8c:fa: 79:3a:a0:31:3d:69:ba:f2:28:0f:85:af:8a:a7:36:b7:01:9c: b3:21:00:1f:20:13:82:b1:d6:3d:b2:8b:7c:b0:74:12:c0:63: 5b:bc:1b:71:60:a8:8e:4f:b4:15:b2:0b:ea:a0:b6:86:88:d2: 2b:94:6b:37:8d:7d:bd:da:ad:ec:87:98:c9:be:9a:7a:96:19: 52:ca:3f:ad:e7:11:c0:d5:c3:6e:47:76:9d:54:37:49:f6:5e: c2:3f:aa:c2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSd+o14POHGRpC1dDnFlSjjc1wxYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNjA0NTMzM1oX DTI2MDYxNTA0NTgzM1owMzExMC8GA1UEAxMoRTA3NENFNzIzOEYyMTE4M0QyMTRC Mjk3REFFRUZFQjE0MzFGMzYxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFSzjm6L6wsMitiFtk/AojWHPSLaLW6mRgbG8QObxiy2iAdMK86+tuaYxzJ +ldA/5eIxGsKwzQgcltAOOtZFDnig41keSiirfLvHcy0r6pd1S8c9KYFcrO9NRAD q5IwfldydD04vrVrbflw+IV9p6uQwLKuYoRRVi8ZO9sze5xDE0wM7b3cxT2VkQPI FeF+LVN5RIiIYDyeOJMC5M/mnR0FdM0tYh2yxPWqeHhW7zVJ72ti8/o8Pv7r85FJ kBFD6IX5b3kIt3YAq5t/en63iBO/+9vpn4qrvLBtFLt8KCNlfUepksa077+z4vb7 eWpKXIECKmRn+wk6gwVvKDlpm58CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTgdM5y OPIRg9IUspfa7v6xQx82GDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTc1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf0zDANBgkqhkiG9w0BAQsFAAOCAQEAPaxQZfcD0YbaA2zppy63 8Y2c5EAGm3mlMMkgOV6RC9p1+oAu7lkN5YKPg7EINUHjDDdrhd8i5Mpy7xwarNoh Z3EA2kZpN58OInzfklRUiADXRX7VcIeCfdMKTz/z6qzaK2GqjJ9TQyhYEhTbMEuk PCKIYOniyfFoTNUa4o59BdYF+Kowx0bLdMik0renGrFiXJ4vlk4nK3Qx/ntFWP4K 7Iz6eTqgMT1puvIoD4Wviqc2twGcsyEAHyATgrHWPbKLfLB0EsBjW7wbcWCojk+0 FbIL6qC2hojSK5RrN419vdqt7IeYyb6aepYZUso/recRwNXDbkd2nVQ3SfZewj+q wg== -----END CERTIFICATE-----Generated at Sun Jun 29 12:08:13 2025 by rpki-client