$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa File: AS139983.roa (raw, json) Hash identifier: nqN+uE6Q8Ts7LP0oCLIQoKWM8QWxzH3hEYB+KDm0T20= Subject key identifier: 03:B2:98:0B:72:C3:4C:D1:79:62:A1:C5:B9:F2:14:BB:40:52:A6:AB Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1485EEB69FA4991ED7D75658AB40FC077ADA6BDD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa Signing time: Mon 05 May 2025 03:22:19 +0000 ROA not before: Mon 05 May 2025 03:17:19 +0000 ROA not after: Mon 04 May 2026 03:22:19 +0000 asID: 139983 IP address blocks: 103.148.48.0/23 maxlen: 24 103.167.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:85:ee:b6:9f:a4:99:1e:d7:d7:56:58:ab:40:fc:07:7a:da:6b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 5 03:17:19 2025 GMT Not After : May 4 03:22:19 2026 GMT Subject: CN=03B2980B72C34CD17962A1C5B9F214BB4052A6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:87:44:61:3d:fb:92:30:d2:12:ff:8e:0e: df:40:07:9e:01:52:4c:56:a8:9d:10:99:9b:9b:d5: b6:4b:a8:e2:73:cf:97:c3:4f:29:03:75:3d:26:b4: 6f:92:61:7b:ea:a4:30:00:d1:5e:ed:38:7a:34:d5: 76:c7:95:72:d2:cc:f6:8a:62:fc:5b:8f:54:81:0f: 8b:ce:0b:14:5e:c3:2d:f9:5e:8d:fb:06:66:86:b7: f6:98:86:c2:bd:f6:ae:8b:28:13:c6:72:bf:78:63: 9b:e6:03:ae:72:8a:63:b2:42:73:81:e3:40:19:c9: 8b:82:bc:72:12:c3:82:93:78:45:42:91:88:2a:34: 21:db:e4:e0:dd:78:e3:ed:80:af:b0:3e:d0:95:cd: 25:cc:15:e2:4d:db:79:0a:7a:1b:b2:96:f5:f9:37: 95:70:86:50:05:e2:2b:97:23:f8:9c:67:47:ee:07: fa:9b:37:15:a9:a5:13:c0:26:bd:60:66:86:fc:11: c2:d6:21:67:ee:97:44:d6:32:ff:56:b5:61:fd:51: 17:c9:19:85:2a:10:0d:ee:74:45:c9:9a:d3:75:a7: 27:1b:14:cf:15:f0:db:c8:d1:25:16:85:7c:6d:39: d2:b0:b6:2b:7a:70:cd:bb:c8:34:7d:02:ef:42:69: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B2:98:0B:72:C3:4C:D1:79:62:A1:C5:B9:F2:14:BB:40:52:A6:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.48.0/23 103.167.222.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d0:51:73:0d:e3:a0:50:0b:2e:c9:02:09:32:00:b0:6e:ff: 83:1a:8a:fc:2c:6d:70:cf:05:21:1d:f2:b7:68:41:33:32:1c: b4:11:90:bf:19:27:4f:4b:a4:f2:b1:d9:61:1b:f6:d1:2b:e3: aa:5d:26:f2:b2:6b:aa:27:30:8d:55:c2:d7:7c:e4:84:7a:6c: ea:96:ca:5d:b3:6d:15:66:15:58:f7:f0:8a:ea:30:81:52:66: df:b9:05:6d:db:a8:c3:f7:35:fb:7b:d9:a4:b7:4c:79:2b:3f: 3d:a8:45:39:31:29:b9:63:f2:36:9c:d1:3c:90:e4:f2:a3:29: ea:b0:6b:30:65:f4:07:24:fb:ae:91:48:59:e9:ca:53:77:54: f7:5e:8a:93:52:ec:78:94:42:d8:0a:98:d8:ea:3f:05:2e:28: 24:d7:40:aa:28:0e:fc:4a:31:45:be:e7:d1:81:f4:11:38:0a: 23:c3:24:26:d7:b7:81:9f:2c:1c:db:3c:34:ff:6a:d7:32:7a: a9:6e:5d:9c:e8:3e:07:59:08:b3:41:d5:82:c2:7e:6a:9e:90: bc:e6:55:ac:ff:b8:0b:a8:84:42:0c:73:55:a0:dc:b0:c8:fe: 3e:82:2d:47:b8:9a:27:d4:86:2e:ff:c1:40:fc:b9:bf:0d:e2: 23:1d:75:13 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUFIXutp+kmR7X11ZYq0D8B3raa90wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNTAzMTcxOVoX DTI2MDUwNDAzMjIxOVowMzExMC8GA1UEAxMoMDNCMjk4MEI3MkMzNENEMTc5NjJB MUM1QjlGMjE0QkI0MDUyQTZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcNh0RhPfuSMNIS/44O30AHngFSTFaonRCZm5vVtkuo4nPPl8NPKQN1PSa0 b5Jhe+qkMADRXu04ejTVdseVctLM9opi/FuPVIEPi84LFF7DLflejfsGZoa39piG wr32rosoE8Zyv3hjm+YDrnKKY7JCc4HjQBnJi4K8chLDgpN4RUKRiCo0Idvk4N14 4+2Ar7A+0JXNJcwV4k3beQp6G7KW9fk3lXCGUAXiK5cj+JxnR+4H+ps3FamlE8Am vWBmhvwRwtYhZ+6XRNYy/1a1Yf1RF8kZhSoQDe50Rcma03WnJxsUzxXw28jRJRaF fG050rC2K3pwzbvINH0C70JpLF0CAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQDspgL csNM0XliocW58hS7QFKmqzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk4My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAWeUMAMEAGen3jANBgkqhkiG9w0BAQsFAAOCAQEAMdBRcw3joFAL LskCCTIAsG7/gxqK/CxtcM8FIR3yt2hBMzIctBGQvxknT0uk8rHZYRv20Svjql0m 8rJrqicwjVXC13zkhHps6pbKXbNtFWYVWPfwiuowgVJm37kFbduow/c1+3vZpLdM eSs/PahFOTEpuWPyNpzRPJDk8qMp6rBrMGX0ByT7rpFIWenKU3dU916Kk1LseJRC 2AqY2Oo/BS4oJNdAqigO/EoxRb7n0YH0ETgKI8MkJte3gZ8sHNs8NP9q1zJ6qW5d nOg+B1kIs0HVgsJ+ap6QvOZVrP+4C6iEQgxzVaDcsMj+PoItR7iaJ9SGLv/BQPy5 vw3iIx11Ew== -----END CERTIFICATE-----Generated at Mon May 5 19:04:35 2025 by rpki-client