$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147141.roa File: AS147141.roa (raw, json) Hash identifier: qIZEobULq6JzYbPkLuKubGZzLd55k6BCyzjwt3Lfom0= Subject key identifier: 7D:A6:7E:94:C0:09:EB:85:AF:AB:22:0C:38:A0:61:E4:47:6C:A4:29 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B22CBE8359224C6D3C0F32B806876A08E054312 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147141.roa Signing time: Mon 16 Jun 2025 08:00:00 +0000 ROA not before: Mon 16 Jun 2025 07:55:00 +0000 ROA not after: Mon 15 Jun 2026 08:00:00 +0000 asID: 147141 IP address blocks: 103.176.94.0/24 maxlen: 24 103.176.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:22:cb:e8:35:92:24:c6:d3:c0:f3:2b:80:68:76:a0:8e:05:43:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 16 07:55:00 2025 GMT Not After : Jun 15 08:00:00 2026 GMT Subject: CN=7DA67E94C009EB85AFAB220C38A061E4476CA429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:ed:13:19:cf:62:fd:a3:56:9a:06:7d:8f: df:83:b9:59:30:e8:75:76:63:ec:86:f0:2e:6f:c4: 1b:1a:f9:d2:7c:e2:db:7e:91:09:20:a0:40:3e:db: c5:46:0e:e8:6d:98:80:57:7c:90:c0:ff:93:b7:22: 13:4d:a2:71:80:45:6c:0f:e1:f9:21:15:2c:8c:4b: e3:be:2d:63:89:bb:00:40:c1:60:37:b9:99:02:e8: cb:90:81:c2:77:be:84:69:63:5e:da:60:ac:dc:a6: 83:44:4d:4b:e3:20:41:c8:0a:39:d2:0b:40:02:d1: 54:8b:15:32:bd:80:bd:66:81:58:63:62:c5:df:1d: 41:22:b7:10:74:db:50:32:9b:87:ee:f6:35:a1:cd: c8:43:c6:05:9a:33:78:c3:c6:20:76:5b:c8:2e:b6: c4:5d:07:da:47:93:1b:55:c6:19:9e:2f:32:fd:de: ae:16:30:2a:d9:2f:ba:6c:53:66:ec:93:b6:72:3d: ec:c2:10:52:b5:b8:c2:aa:a6:e6:fe:d4:13:50:d8: 0e:33:52:6f:a7:93:51:3a:89:54:c5:ef:9a:1b:46: 68:e8:4c:88:bf:f0:1c:10:2a:7a:7b:5a:27:73:4d: b3:94:0c:53:22:0a:74:3b:51:fe:a6:c1:ef:37:c8: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A6:7E:94:C0:09:EB:85:AF:AB:22:0C:38:A0:61:E4:47:6C:A4:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.94.0/23 Signature Algorithm: sha256WithRSAEncryption 46:e9:3d:06:72:c3:27:18:2b:be:4a:37:fe:b3:f5:4e:0a:53: 11:70:50:5d:68:73:b7:a9:96:a8:12:57:c7:f5:ca:ab:9a:40: 14:27:59:f8:ba:bc:fc:19:4a:8f:04:01:65:a2:f7:6a:b7:4c: e0:94:11:ea:d1:ce:e2:58:d7:61:5f:96:a6:d7:99:75:6e:03: 75:f1:bd:b1:8a:ba:6d:38:31:83:f7:8b:04:29:c1:95:6c:33: 43:59:da:7e:85:0a:2c:dd:ec:fb:b4:53:6a:85:30:e7:f9:8f: db:9a:0e:3d:f5:f5:bc:de:d2:64:bf:e3:1b:c2:54:f8:49:b9: b6:23:86:3f:dc:4d:5a:05:0b:1f:14:2c:d3:df:29:1e:58:36: 40:34:6a:b0:e6:8b:00:31:79:3a:57:a8:65:1d:72:56:98:92: af:64:af:ab:93:e4:2a:e9:17:89:71:d2:2d:58:79:e7:53:6a: fd:8b:71:94:0a:36:18:77:ff:2f:ff:0e:35:15:7b:f8:6f:3f: e0:58:93:67:e8:4b:b3:d1:75:0d:9f:fa:2e:63:bd:72:1f:95: ef:75:07:1b:4b:a1:84:27:fa:89:9a:14:03:85:d3:cd:b8:1a: bd:4c:18:95:7d:61:96:09:d3:f6:52:92:ec:74:f5:bf:35:d5: 1f:34:f5:2e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUSyLL6DWSJMbTwPMrgGh2oI4FQxIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNjA3NTUwMFoX DTI2MDYxNTA4MDAwMFowMzExMC8GA1UEAxMoN0RBNjdFOTRDMDA5RUI4NUFGQUIy MjBDMzhBMDYxRTQ0NzZDQTQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkd7RMZz2L9o1aaBn2P34O5WTDodXZj7IbwLm/EGxr50nzi236RCSCgQD7b xUYO6G2YgFd8kMD/k7ciE02icYBFbA/h+SEVLIxL474tY4m7AEDBYDe5mQLoy5CB wne+hGljXtpgrNymg0RNS+MgQcgKOdILQALRVIsVMr2AvWaBWGNixd8dQSK3EHTb UDKbh+72NaHNyEPGBZozeMPGIHZbyC62xF0H2keTG1XGGZ4vMv3erhYwKtkvumxT ZuyTtnI97MIQUrW4wqqm5v7UE1DYDjNSb6eTUTqJVMXvmhtGaOhMiL/wHBAqenta J3NNs5QMUyIKdDtR/qbB7zfIEg0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBR9pn6U wAnrha+rIgw4oGHkR2ykKTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE0MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWewXjANBgkqhkiG9w0BAQsFAAOCAQEARuk9BnLDJxgrvko3/rP1 TgpTEXBQXWhzt6mWqBJXx/XKq5pAFCdZ+Lq8/BlKjwQBZaL3ardM4JQR6tHO4ljX YV+WpteZdW4DdfG9sYq6bTgxg/eLBCnBlWwzQ1nafoUKLN3s+7RTaoUw5/mP25oO PfX1vN7SZL/jG8JU+Em5tiOGP9xNWgULHxQs098pHlg2QDRqsOaLADF5OleoZR1y VpiSr2Svq5PkKukXiXHSLVh551Nq/YtxlAo2GHf/L/8ONRV7+G8/4FiTZ+hLs9F1 DZ/6LmO9ch+V73UHG0uhhCf6iZoUA4XTzbgavUwYlX1hlgnT9lKS7HT1vzXVHzT1 Lg== -----END CERTIFICATE-----Generated at Sun Jun 29 12:11:37 2025 by rpki-client