$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140009.roa File: AS140009.roa (raw, json) Hash identifier: jReYGfd6hbtXslZ+biMHIyxlCBeCExbabbd6XYHeSw4= Subject key identifier: CD:62:F1:D8:78:71:5E:CE:02:9D:33:3D:61:99:45:3C:1C:71:7A:0D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 605A36A8B2B6A33094A8BED9EF5F9C4B8AAED5D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140009.roa Signing time: Fri 04 Jul 2025 07:00:00 +0000 ROA not before: Fri 04 Jul 2025 06:55:00 +0000 ROA not after: Fri 03 Jul 2026 07:00:00 +0000 asID: 140009 IP address blocks: 103.149.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5a:36:a8:b2:b6:a3:30:94:a8:be:d9:ef:5f:9c:4b:8a:ae:d5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 06:55:00 2025 GMT Not After : Jul 3 07:00:00 2026 GMT Subject: CN=CD62F1D878715ECE029D333D6199453C1C717A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:16:34:d4:73:92:35:fc:9f:5a:97:1b:56: f8:60:d1:cd:22:fa:e3:db:ec:61:c0:3a:0a:95:c1: fb:72:ce:b1:72:bd:25:93:09:6e:c6:e1:29:f2:f5: ea:8b:a3:fd:c4:26:3d:26:8a:1d:12:c2:f3:f9:19: 10:4a:2a:c8:27:3d:00:23:34:35:db:05:e2:e8:dc: 43:7a:4d:a4:13:a3:a6:00:bd:33:30:eb:14:83:1c: eb:36:bd:78:49:bd:c0:05:86:89:67:65:1e:7f:4a: 16:f4:4d:e0:30:a0:43:f6:be:2c:a9:ea:89:7f:b1: 1b:54:01:a1:56:20:71:14:07:bd:30:87:5a:a4:a2: 9b:0f:1b:fc:48:c4:d9:75:4b:ff:8e:41:f3:03:2c: fe:20:4b:08:b0:f7:27:9f:99:bc:95:a1:e0:1b:71: e3:1e:76:48:bb:fc:b2:57:d8:48:25:25:d4:88:5e: 51:b3:5a:9f:be:ec:72:46:1a:f7:2c:97:23:7e:7d: 06:0c:e4:95:83:8b:93:e8:61:28:bb:b8:91:e3:c0: 97:e4:27:fe:99:e4:f3:b6:3d:44:71:1d:ed:ab:44: 08:f6:69:ec:6a:4b:26:37:b5:25:b5:ab:dc:72:12: dd:87:f0:8d:63:93:31:6e:d8:29:ef:24:b8:5a:a9: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:F1:D8:78:71:5E:CE:02:9D:33:3D:61:99:45:3C:1C:71:7A:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.18.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:57:cc:8c:10:8e:d0:eb:67:63:12:cc:82:d6:30:62:f8:b2: e4:38:98:41:58:b0:8d:7c:d9:03:61:10:72:65:a6:cc:fb:79: 89:f1:b5:cd:61:9a:4c:00:ff:d2:60:5e:77:62:be:4f:e6:53: 7f:33:c4:40:dc:71:c1:81:2b:1b:3b:fd:d2:fc:c3:91:f1:48: 8e:1f:10:79:f5:81:e9:b0:16:fa:b1:a9:2a:a0:84:d0:2d:3f: bc:36:ea:4c:b0:97:61:87:2f:22:6f:4a:bd:49:ea:68:e0:67: 80:64:07:a9:e7:e3:f4:e4:73:54:01:25:5e:ce:74:92:d0:9d: 97:6a:35:6a:7d:42:e2:82:05:77:78:ef:ef:25:41:65:a8:e3: 87:c0:f0:00:7d:6f:f3:42:ad:87:bc:70:93:8e:b4:a3:e3:a9: 7b:33:76:76:7b:b8:42:58:88:66:f3:07:71:6e:55:1d:20:12: f9:d5:c3:fd:14:35:93:38:6f:e8:fd:a8:aa:89:96:a6:ac:a3: 7a:a2:8f:62:30:28:2c:a3:0e:18:d2:e2:a7:4d:f4:89:ae:64: ca:dd:86:2e:f0:11:73:de:74:3a:73:ec:8c:f7:58:63:18:ec: e2:ec:74:b1:83:65:87:c2:ca:36:d2:92:b5:44:bf:ab:8b:90: a7:7b:82:d6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYFo2qLK2ozCUqL7Z71+cS4qu1dYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNDA2NTUwMFoX DTI2MDcwMzA3MDAwMFowMzExMC8GA1UEAxMoQ0Q2MkYxRDg3ODcxNUVDRTAyOUQz MzNENjE5OTQ1M0MxQzcxN0EwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbRFjTUc5I1/J9alxtW+GDRzSL649vsYcA6CpXB+3LOsXK9JZMJbsbhKfL1 6ouj/cQmPSaKHRLC8/kZEEoqyCc9ACM0NdsF4ujcQ3pNpBOjpgC9MzDrFIMc6za9 eEm9wAWGiWdlHn9KFvRN4DCgQ/a+LKnqiX+xG1QBoVYgcRQHvTCHWqSimw8b/EjE 2XVL/45B8wMs/iBLCLD3J5+ZvJWh4Btx4x52SLv8slfYSCUl1IheUbNan77sckYa 9yyXI359BgzklYOLk+hhKLu4kePAl+Qn/pnk87Y9RHEd7atECPZp7GpLJje1JbWr 3HIS3YfwjWOTMW7YKe8kuFqpCHUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTNYvHY eHFezgKdMz1hmUU8HHF6DTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDAwOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeVEjANBgkqhkiG9w0BAQsFAAOCAQEAOlfMjBCO0OtnYxLMgtYw Yviy5DiYQViwjXzZA2EQcmWmzPt5ifG1zWGaTAD/0mBed2K+T+ZTfzPEQNxxwYEr Gzv90vzDkfFIjh8QefWB6bAW+rGpKqCE0C0/vDbqTLCXYYcvIm9KvUnqaOBngGQH qefj9ORzVAElXs50ktCdl2o1an1C4oIFd3jv7yVBZajjh8DwAH1v80Kth7xwk460 o+OpezN2dnu4QliIZvMHcW5VHSAS+dXD/RQ1kzhv6P2oqomWpqyjeqKPYjAoLKMO GNLip030ia5kyt2GLvARc950OnPsjPdYYxjs4ux0sYNlh8LKNtKStUS/q4uQp3uC 1g== -----END CERTIFICATE-----Generated at Sun Jul 20 20:57:45 2025 by rpki-client