$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137358.roa File: AS137358.roa (raw, json) Hash identifier: sgXAJuw41KRqqIGCK7gfMc2nhAOPmJNn5UT5Yh/UKmI= Subject key identifier: 30:16:98:26:EB:B5:44:2C:66:15:91:CF:B1:ED:11:AE:1D:71:BB:81 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05DF2890B673B7CA79EDDA90E06732DE110FF4FC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137358.roa Signing time: Wed 09 Jul 2025 04:00:00 +0000 ROA not before: Wed 09 Jul 2025 03:55:00 +0000 ROA not after: Wed 08 Jul 2026 04:00:00 +0000 asID: 137358 IP address blocks: 103.115.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:28:90:b6:73:b7:ca:79:ed:da:90:e0:67:32:de:11:0f:f4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 9 03:55:00 2025 GMT Not After : Jul 8 04:00:00 2026 GMT Subject: CN=30169826EBB5442C661591CFB1ED11AE1D71BB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:4a:ba:a6:42:ab:21:c6:64:f1:14:d1:92: 8d:64:d7:c0:5f:5e:07:13:87:3c:33:4b:6a:95:07: 65:6d:37:93:67:22:d2:8f:07:aa:da:ee:19:c4:b4: 3b:ec:08:4d:2d:f9:49:f3:d3:ae:b8:bc:0f:9d:54: 75:6e:a4:84:0c:fb:46:e4:78:44:b9:a0:78:43:9e: 88:5a:5c:e9:2b:3f:13:5a:7f:2d:b8:37:58:4a:c3: e2:1e:2d:f3:c0:a1:85:2f:e8:86:87:58:ca:f9:f2: 2f:92:9b:1c:42:65:e9:31:9c:2a:f1:55:38:26:d0: 56:d3:a8:b5:dd:89:11:f8:a4:50:e2:a9:a1:62:87: a5:9e:4a:c4:34:f3:a4:de:da:49:1c:04:f1:98:52: e1:17:8d:64:9f:34:55:98:75:7e:a6:15:0a:ce:96: b5:23:c3:a4:a3:f0:fe:05:92:76:25:2c:6b:9d:8a: 02:86:41:3a:72:a1:82:8a:f4:27:ea:20:5a:dd:a4: d3:d8:83:68:3a:7c:49:a3:1d:1a:25:11:02:98:35: a2:7e:df:3a:b3:b5:22:41:72:1c:f0:3b:ac:55:63: 6c:76:85:57:3f:38:a9:fa:43:a6:a9:22:83:24:0b: c9:db:8d:ca:eb:24:70:ad:38:5a:e5:a6:c8:9a:22: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:98:26:EB:B5:44:2C:66:15:91:CF:B1:ED:11:AE:1D:71:BB:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137358.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.176.0/22 Signature Algorithm: sha256WithRSAEncryption 45:fc:1c:c8:7a:09:b5:d3:7a:9b:d0:99:5f:e7:47:96:7e:90: 31:55:e7:c8:1e:3d:86:05:ff:ce:1e:7c:f7:ed:21:88:98:bb: e4:d1:94:3f:37:14:2d:66:1e:6d:e2:86:a4:71:e9:8e:dd:f0: 18:1d:5b:a1:85:63:c2:b2:d5:b9:0c:63:a1:9a:b7:09:56:ff: 52:a3:29:a4:f1:19:55:e1:ca:49:2f:49:41:ee:72:32:bf:bc: ad:2b:01:fe:d1:7f:4f:3d:9f:ac:6f:b6:b5:56:9e:6e:78:88: 8f:06:5f:9a:54:2a:6d:5f:90:18:b1:a2:ce:00:45:6f:8b:53: 87:7f:80:69:35:f0:9d:e1:1a:3c:58:11:ca:f7:1b:00:f1:29: 99:1f:a5:3e:bf:bb:55:70:26:0d:bd:9d:29:1d:e5:05:3c:0b: 53:44:5e:40:6b:e5:26:4e:50:07:fc:11:52:7d:3d:27:da:3c: 56:48:df:08:45:70:c9:48:6f:4e:61:43:f6:92:3a:33:02:7b: d9:ca:70:91:82:26:31:bd:e7:a7:a3:5c:37:95:c7:b3:ca:00: f3:64:50:14:04:46:84:da:59:64:24:53:7d:b3:bb:bf:1f:33: 8b:a4:30:bc:30:f9:54:64:f2:de:68:43:d0:f8:2c:69:48:52: d3:1e:8c:b6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBd8okLZzt8p57dqQ4Gcy3hEP9PwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwOTAzNTUwMFoX DTI2MDcwODA0MDAwMFowMzExMC8GA1UEAxMoMzAxNjk4MjZFQkI1NDQyQzY2MTU5 MUNGQjFFRDExQUUxRDcxQkI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNWSrqmQqshxmTxFNGSjWTXwF9eBxOHPDNLapUHZW03k2ci0o8HqtruGcS0 O+wITS35SfPTrri8D51UdW6khAz7RuR4RLmgeEOeiFpc6Ss/E1p/Lbg3WErD4h4t 88ChhS/ohodYyvnyL5KbHEJl6TGcKvFVOCbQVtOotd2JEfikUOKpoWKHpZ5KxDTz pN7aSRwE8ZhS4ReNZJ80VZh1fqYVCs6WtSPDpKPw/gWSdiUsa52KAoZBOnKhgor0 J+ogWt2k09iDaDp8SaMdGiURApg1on7fOrO1IkFyHPA7rFVjbHaFVz84qfpDpqki gyQLyduNyuskcK04WuWmyJoijpcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQwFpgm 67VELGYVkc+x7RGuHXG7gTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM1OC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdzsDANBgkqhkiG9w0BAQsFAAOCAQEARfwcyHoJtdN6m9CZX+dH ln6QMVXnyB49hgX/zh589+0hiJi75NGUPzcULWYebeKGpHHpjt3wGB1boYVjwrLV uQxjoZq3CVb/UqMppPEZVeHKSS9JQe5yMr+8rSsB/tF/Tz2frG+2tVaebniIjwZf mlQqbV+QGLGizgBFb4tTh3+AaTXwneEaPFgRyvcbAPEpmR+lPr+7VXAmDb2dKR3l BTwLU0ReQGvlJk5QB/wRUn09J9o8VkjfCEVwyUhvTmFD9pI6MwJ72cpwkYImMb3n p6NcN5XHs8oA82RQFARGhNpZZCRTfbO7vx8zi6QwvDD5VGTy3mhD0PgsaUhS0x6M tg== -----END CERTIFICATE-----Generated at Mon Jul 21 00:00:21 2025 by rpki-client