$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136877.roa File: AS136877.roa (raw, json) Hash identifier: tVRzLBbZyud6/kVc29AcBwK5806TEu56fW/CTOfqx/Y= Subject key identifier: C8:7E:EB:03:AD:E1:7F:F7:FC:F1:3E:FD:AB:55:59:21:0D:B4:3B:8B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26FEDF14E0AA9DE171A4EA6E661EB4C6301B710E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136877.roa Signing time: Thu 03 Jul 2025 02:53:55 +0000 ROA not before: Thu 03 Jul 2025 02:48:55 +0000 ROA not after: Thu 02 Jul 2026 02:53:55 +0000 asID: 136877 IP address blocks: 103.106.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fe:df:14:e0:aa:9d:e1:71:a4:ea:6e:66:1e:b4:c6:30:1b:71:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 02:48:55 2025 GMT Not After : Jul 2 02:53:55 2026 GMT Subject: CN=C87EEB03ADE17FF7FCF13EFDAB5559210DB43B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:39:1a:4f:0b:ba:6e:e4:1f:f8:c3:83:a6: e8:2a:06:64:14:46:25:9f:aa:8c:7c:c8:d3:f0:9f: 26:de:a7:dc:19:b4:53:11:7e:3a:47:07:18:36:6c: 97:24:39:0f:67:94:f8:17:9b:50:20:7f:5c:ee:e2: e9:e4:66:18:64:03:71:79:47:97:b5:75:aa:a8:f2: 70:c5:b5:4d:b8:d7:74:1f:d4:f9:bc:c2:cf:f0:38: 95:67:ce:08:e6:6a:51:4b:af:25:a5:35:02:e4:30: c6:0e:47:d6:17:78:98:d0:4e:0c:ec:f9:d5:8f:8f: 4a:ec:cc:35:fa:df:f5:58:03:6b:94:40:ea:19:3b: a2:db:49:22:ee:8b:1a:2f:c1:bf:e8:91:02:32:7a: ce:6f:a2:b2:43:06:88:74:51:5c:f0:2a:d0:96:5a: 3f:67:76:a8:cd:fe:12:24:78:2f:ae:73:8f:65:fb: 05:f9:91:8a:94:65:d9:74:69:7b:09:29:cb:67:6e: e4:3b:3e:db:56:59:f0:78:55:b1:4d:95:1e:30:31: 2c:e9:0d:94:43:eb:dd:d9:d0:8a:15:07:f0:f7:e0: 07:78:72:b0:19:6f:b3:dc:2b:6d:ec:af:aa:a9:7c: 91:f8:c7:ff:b3:8d:95:cf:b3:a1:5c:ad:37:ae:33: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:EB:03:AD:E1:7F:F7:FC:F1:3E:FD:AB:55:59:21:0D:B4:3B:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136877.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.80.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:92:dc:3a:e5:6a:f4:d1:8d:16:da:ac:e0:9e:4b:33:1f:87: b6:48:ad:b8:64:42:bb:e4:71:5c:93:2d:4c:bf:38:32:b6:79: 58:21:80:c7:39:d1:7c:f1:0c:a2:49:ff:3c:ca:f4:4c:1b:da: c6:a0:68:d0:dd:47:6c:96:7b:a0:8e:bc:23:2c:44:a2:59:3b: 34:50:7c:5b:d1:3e:00:c1:84:de:da:20:61:88:fd:be:75:d9: 4a:91:f1:25:53:0e:1c:bf:d2:62:91:7c:a7:78:d0:97:dd:12: 07:a3:21:09:9c:dc:4e:1d:c9:43:1f:7d:9f:65:e3:cc:3c:a7: 71:15:ca:b3:2e:47:ee:72:c0:60:05:3d:c3:d0:b1:42:70:00: 7e:bf:c0:2a:2a:ed:c3:4d:e7:cd:1f:74:b4:cf:e6:6b:f2:fb: a8:60:51:aa:90:6e:13:da:f0:c7:46:97:b0:07:ce:b6:da:cf: 89:df:a4:4d:53:16:16:ee:58:27:9b:a9:0f:04:e3:6b:70:49: 2a:fd:1a:6a:aa:22:75:58:71:ff:46:89:7a:3a:04:5b:71:6c: 31:d0:d8:71:7a:20:98:16:93:73:36:30:81:b7:81:ba:56:4b: 2f:2e:fd:fb:59:b8:e1:4c:ad:a4:a7:6d:71:72:30:d3:16:c4: 67:ca:42:9b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJv7fFOCqneFxpOpuZh60xjAbcQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMzAyNDg1NVoX DTI2MDcwMjAyNTM1NVowMzExMC8GA1UEAxMoQzg3RUVCMDNBREUxN0ZGN0ZDRjEz RUZEQUI1NTU5MjEwREI0M0I4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFCORpPC7pu5B/4w4Om6CoGZBRGJZ+qjHzI0/CfJt6n3Bm0UxF+OkcHGDZs lyQ5D2eU+BebUCB/XO7i6eRmGGQDcXlHl7V1qqjycMW1TbjXdB/U+bzCz/A4lWfO COZqUUuvJaU1AuQwxg5H1hd4mNBODOz51Y+PSuzMNfrf9VgDa5RA6hk7ottJIu6L Gi/Bv+iRAjJ6zm+iskMGiHRRXPAq0JZaP2d2qM3+EiR4L65zj2X7BfmRipRl2XRp ewkpy2du5Ds+21ZZ8HhVsU2VHjAxLOkNlEPr3dnQihUH8PfgB3hysBlvs9wrbeyv qql8kfjH/7ONlc+zoVytN64z+zkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTIfusD reF/9/zxPv2rVVkhDbQ7izAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNjg3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdqUDANBgkqhkiG9w0BAQsFAAOCAQEAHZLcOuVq9NGNFtqs4J5L Mx+HtkituGRCu+RxXJMtTL84MrZ5WCGAxznRfPEMokn/PMr0TBvaxqBo0N1HbJZ7 oI68IyxEolk7NFB8W9E+AMGE3togYYj9vnXZSpHxJVMOHL/SYpF8p3jQl90SB6Mh CZzcTh3JQx99n2XjzDyncRXKsy5H7nLAYAU9w9CxQnAAfr/AKirtw03nzR90tM/m a/L7qGBRqpBuE9rwx0aXsAfOttrPid+kTVMWFu5YJ5upDwTja3BJKv0aaqoidVhx /0aJejoEW3FsMdDYcXogmBaTczYwgbeBulZLLy79+1m44UytpKdtcXIw0xbEZ8pC mw== -----END CERTIFICATE-----Generated at Mon Jul 21 00:00:29 2025 by rpki-client