$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa File: AS133823.roa (raw, json) Hash identifier: ZVm+thUyIoJLy9OrkrT35pOb6DjLL+eELC8czHQ07fY= Subject key identifier: 00:5B:52:5E:1E:DC:F5:62:4F:DC:06:84:6C:F7:69:CA:EE:96:E2:83 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1FAABFEBABC3CB42ACDD17947909C530459B81EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa Signing time: Fri 19 Sep 2025 09:00:00 +0000 ROA not before: Fri 19 Sep 2025 08:55:00 +0000 ROA not after: Fri 18 Sep 2026 09:00:00 +0000 asID: 133823 IP address blocks: 103.161.140.0/24 maxlen: 24 103.161.141.0/24 maxlen: 24 103.162.130.0/24 maxlen: 24 103.162.131.0/24 maxlen: 24 103.211.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:aa:bf:eb:ab:c3:cb:42:ac:dd:17:94:79:09:c5:30:45:9b:81:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 08:55:00 2025 GMT Not After : Sep 18 09:00:00 2026 GMT Subject: CN=005B525E1EDCF5624FDC06846CF769CAEE96E283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:0b:21:8e:56:f4:f8:27:7c:6d:e3:a8:3b: 99:67:c4:29:e9:b7:78:9b:6b:fc:84:ca:28:69:23: f0:18:50:ae:b8:b8:94:06:82:8d:6e:c7:76:b9:48: fb:16:c8:54:59:3b:2c:31:cd:6d:f2:c2:c4:fa:cd: 3f:63:ac:1b:fb:b2:0b:97:a2:06:2a:5c:ad:a9:2e: ab:1b:f1:9a:38:e7:22:48:1e:98:ee:94:ff:30:de: 7f:8f:94:d6:fc:85:65:ac:74:7f:de:7b:ce:8e:a2: 8d:df:82:60:c9:aa:20:c2:47:9e:6a:0a:63:57:d7: a1:da:0f:26:32:72:7a:6b:ef:04:63:bc:f7:ac:92: 95:a8:1f:36:0d:07:18:36:d7:2c:4e:52:0e:c6:ab: 69:48:61:21:24:2f:e2:29:dd:5a:fe:98:cd:e0:18: 10:86:a3:10:ad:86:54:b6:4e:ef:8e:71:1d:c2:ca: 59:63:34:7e:5f:08:d4:f6:8b:73:5d:2a:82:87:76: f6:f5:c3:5e:ba:53:62:76:af:2e:a6:a2:78:4d:e2: d1:de:7d:1f:eb:34:8f:19:69:b0:95:c9:86:99:8a: 6f:66:7a:b8:4f:b3:6d:d6:7c:8a:30:5b:5e:fc:73: 6f:12:cc:39:dd:4f:bb:b2:13:08:61:bf:c0:fb:21: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:52:5E:1E:DC:F5:62:4F:DC:06:84:6C:F7:69:CA:EE:96:E2:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133823.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.140.0/23 103.162.130.0/23 103.211.232.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:35:2c:b6:eb:fe:0a:00:76:39:09:5a:7d:76:37:5e:f7:3c: 7a:e2:33:8c:0a:62:bf:4b:87:e9:e8:52:1e:24:9c:5b:21:89: 1e:d7:f6:9e:97:20:8d:cf:b5:ab:c4:6e:1c:0c:17:28:7c:6b: d4:38:f4:dd:7e:c7:dc:c0:0f:3d:74:85:8c:b5:ad:d0:3a:c5: 97:90:cd:b4:10:d5:df:73:fe:fa:99:7e:be:bb:49:7b:c0:70: 10:a0:79:f7:b5:01:f4:5f:04:d8:3b:21:b1:5c:ec:88:2a:d1: fb:d6:17:c4:86:03:40:96:02:d7:d8:b0:5e:85:fc:c5:3d:21: 87:bc:11:01:bb:3e:00:8e:ab:38:e0:57:d7:7a:92:79:52:67: cb:3b:8f:22:c6:4b:3d:68:29:45:87:ec:9f:2b:d7:56:1e:3a: 3d:7a:75:89:0f:2d:80:e9:2f:15:d4:1f:1c:ac:f1:bb:7c:01: a5:2b:f2:c4:c7:72:8f:d8:a6:68:09:50:9e:e4:15:86:5d:7d: 41:66:b6:4b:06:46:6c:14:81:da:29:e8:60:e6:58:52:b7:31: 63:60:63:e2:55:43:c5:ba:ef:85:54:be:33:86:82:e9:6b:1c: 00:4f:6f:12:14:e5:23:7c:0e:20:09:12:b2:ca:25:f5:98:a2: 1b:67:cf:23 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUH6q/66vDy0Ks3ReUeQnFMEWbge4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxOTA4NTUwMFoX DTI2MDkxODA5MDAwMFowMzExMC8GA1UEAxMoMDA1QjUyNUUxRURDRjU2MjRGREMw Njg0NkNGNzY5Q0FFRTk2RTI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMClCyGOVvT4J3xt46g7mWfEKem3eJtr/ITKKGkj8BhQrri4lAaCjW7HdrlI +xbIVFk7LDHNbfLCxPrNP2OsG/uyC5eiBipcrakuqxvxmjjnIkgemO6U/zDef4+U 1vyFZax0f957zo6ijd+CYMmqIMJHnmoKY1fXodoPJjJyemvvBGO896ySlagfNg0H GDbXLE5SDsaraUhhISQv4indWv6YzeAYEIajEK2GVLZO745xHcLKWWM0fl8I1PaL c10qgod29vXDXrpTYnavLqaieE3i0d59H+s0jxlpsJXJhpmKb2Z6uE+zbdZ8ijBb XvxzbxLMOd1Pu7ITCGG/wPshSIkCAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQAW1Je Htz1Yk/cBoRs92nK7pbigzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMzgyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWehjAMEAWeiggMEAmfT6DANBgkqhkiG9w0BAQsFAAOCAQEAXDUs tuv+CgB2OQlafXY3Xvc8euIzjApiv0uH6ehSHiScWyGJHtf2npcgjc+1q8RuHAwX KHxr1Dj03X7H3MAPPXSFjLWt0DrFl5DNtBDV33P++pl+vrtJe8BwEKB597UB9F8E 2DshsVzsiCrR+9YXxIYDQJYC19iwXoX8xT0hh7wRAbs+AI6rOOBX13qSeVJnyzuP IsZLPWgpRYfsnyvXVh46PXp1iQ8tgOkvFdQfHKzxu3wBpSvyxMdyj9imaAlQnuQV hl19QWa2SwZGbBSB2inoYOZYUrcxY2Bj4lVDxbrvhVS+M4aC6WscAE9vEhTlI3wO IAkSssol9ZiiG2fPIw== -----END CERTIFICATE-----Generated at Mon Oct 20 03:03:31 2025 by rpki-client