$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS137346.roa File: AS137346.roa (raw, json) Hash identifier: PdCcl7m4oX+SJS93oiHUxTuOW/ltjw+gLpTGiEDO7T8= Subject key identifier: 1E:35:95:1D:1A:D0:1A:26:E7:1D:73:18:88:80:7B:D2:D7:5A:54:5F Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 689193EDE5377D111FE530E933D6E5709516A563 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS137346.roa Signing time: Tue 08 Jul 2025 06:42:44 +0000 ROA not before: Tue 08 Jul 2025 06:37:44 +0000 ROA not after: Tue 07 Jul 2026 06:42:44 +0000 asID: 137346 IP address blocks: 115.178.123.0/24 maxlen: 24 115.178.124.0/24 maxlen: 24 115.178.125.0/24 maxlen: 24 115.178.126.0/24 maxlen: 24 115.178.127.0/24 maxlen: 24 116.66.205.0/24 maxlen: 24 182.23.171.0/24 maxlen: 24 202.87.187.0/24 maxlen: 24 223.27.147.0/24 maxlen: 24 223.27.155.0/24 maxlen: 24 2402:3700::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 08:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:91:93:ed:e5:37:7d:11:1f:e5:30:e9:33:d6:e5:70:95:16:a5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Jul 8 06:37:44 2025 GMT Not After : Jul 7 06:42:44 2026 GMT Subject: CN=1E35951D1AD01A26E71D731888807BD2D75A545F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:36:99:5c:05:d2:98:df:12:09:9f:0a:3a: c7:b4:34:2b:68:00:b2:d1:6f:3f:5b:aa:84:74:c9: f4:da:0f:27:54:29:d0:9b:e6:fd:55:96:99:44:ba: 53:d7:d1:37:28:bf:6b:3e:6e:92:a6:fa:c1:0d:a1: bf:0d:9c:48:75:5b:67:d1:c9:0c:a9:63:9f:e7:3d: c1:bf:c2:07:90:fc:ed:8d:3a:cc:a0:8e:61:a6:7c: e8:50:de:1b:39:a9:cd:f2:57:77:8a:41:dd:fe:ed: 68:95:0e:66:9c:fc:3d:e9:7d:6d:aa:87:32:01:9d: 74:53:74:fb:8d:32:47:83:71:58:a3:2d:55:52:06: 07:89:f4:fa:2b:7d:3b:38:79:9d:97:00:2d:e0:b3: 75:23:0e:b6:6d:37:53:84:75:8b:b0:3d:40:8b:e3: f6:20:45:ee:5a:78:5d:d6:6c:be:c9:88:95:13:0a: 4c:19:f2:e4:02:6a:20:0e:7e:cf:54:d0:13:de:dd: 79:ec:18:4f:e5:c9:6f:b5:63:71:f7:04:77:ed:89: c0:6f:43:22:54:68:44:a4:f2:99:27:23:de:e3:c8: 30:a9:65:29:5e:8f:7e:e8:7d:0a:94:03:7c:f3:bf: ab:b2:b3:92:83:e2:8b:24:b8:7d:0f:c6:b0:9b:41: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:95:1D:1A:D0:1A:26:E7:1D:73:18:88:80:7B:D2:D7:5A:54:5F X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS137346.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.123.0-115.178.127.255 116.66.205.0/24 182.23.171.0/24 202.87.187.0/24 223.27.147.0/24 223.27.155.0/24 IPv6: 2402:3700::/32 Signature Algorithm: sha256WithRSAEncryption 8f:3d:df:3c:c6:93:65:6b:da:fe:11:4b:67:a0:1a:eb:05:bc: 5e:9b:a8:e1:81:39:31:ff:cd:d6:24:75:46:17:11:38:b0:68: 53:b2:38:7c:d8:b2:18:3e:43:78:a4:39:f6:91:97:74:ed:58: 2c:5a:a5:bb:36:d8:71:4b:9d:63:3e:82:0c:3a:e2:2d:75:c5: a4:e3:c2:e9:df:cf:0f:d6:6f:bc:5f:0d:89:c0:e5:6b:9a:5c: 1e:ef:4e:b1:27:9d:49:15:1e:22:43:aa:c9:ea:e2:5e:4c:29: 4b:58:5a:fc:78:24:cd:91:e0:59:74:da:0b:ad:48:fb:78:83: 98:9a:aa:d6:29:29:e7:46:bf:90:60:89:e6:1e:50:af:d5:71: 93:69:53:d6:d0:0c:e1:96:e8:1e:d1:28:b5:5d:b0:94:a1:2d: 16:1a:d9:70:dd:81:0c:3c:bb:55:76:aa:78:46:62:b4:30:5a: 5f:29:a7:87:e0:30:2b:c9:cb:ed:7a:24:57:b1:fe:f6:27:bc: e5:06:4c:c5:98:42:c5:b6:9f:92:5a:82:0e:8a:90:6e:d0:53: 47:a4:1c:8c:1e:13:4e:48:bd:44:3b:d7:c2:6e:18:01:67:97: 8d:6c:a8:f7:ef:01:60:6c:42:bf:b4:2c:1f:9b:ed:f0:a7:5b: c5:69:37:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaJGT7eU3fREf5TDpM9blcJUWpWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTA3MDgwNjM3NDRaFw0yNjA3MDcwNjQyNDRaMDMxMTAvBgNV BAMTKDFFMzU5NTFEMUFEMDFBMjZFNzFENzMxODg4ODA3QkQyRDc1QTU0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rTaZXAXSmN8SCZ8KOse0NCto ALLRbz9bqoR0yfTaDydUKdCb5v1VlplEulPX0Tcov2s+bpKm+sENob8NnEh1W2fR yQypY5/nPcG/wgeQ/O2NOsygjmGmfOhQ3hs5qc3yV3eKQd3+7WiVDmac/D3pfW2q hzIBnXRTdPuNMkeDcVijLVVSBgeJ9PorfTs4eZ2XAC3gs3UjDrZtN1OEdYuwPUCL 4/YgRe5aeF3WbL7JiJUTCkwZ8uQCaiAOfs9U0BPe3XnsGE/lyW+1Y3H3BHfticBv QyJUaESk8pknI97jyDCpZSlej37ofQqUA3zzv6uys5KD4oskuH0PxrCbQb/dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHjWVHRrQGibnHXMYiIB70tdaVF8wHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzEzNzM0Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBUBggrBgEFBQcBBwEB/wRFMEMwMgQCAAEwLDAMAwQAc7J7AwQHc7IAAwQA dELNAwQAtherAwQAyle7AwQA3xuTAwQA3xubMA0EAgACMAcDBQAkAjcAMA0GCSqG SIb3DQEBCwUAA4IBAQCPPd88xpNla9r+EUtnoBrrBbxem6jhgTkx/83WJHVGFxE4 sGhTsjh82LIYPkN4pDn2kZd07VgsWqW7NthxS51jPoIMOuItdcWk48Lp388P1m+8 Xw2JwOVrmlwe706xJ51JFR4iQ6rJ6uJeTClLWFr8eCTNkeBZdNoLrUj7eIOYmqrW KSnnRr+QYInmHlCv1XGTaVPW0Azhluge0Si1XbCUoS0WGtlw3YEMPLtVdqp4RmK0 MFpfKaeH4DArycvteiRXsf72J7zlBkzFmELFtp+SWoIOipBu0FNHpByMHhNOSL1E O9fCbhgBZ5eNbKj37wFgbEK/tCwfm+3wp1vFaTeG -----END CERTIFICATE-----Generated at Sat Jul 26 19:55:49 2025 by rpki-client