$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa File: AS131705.roa (raw, json) Hash identifier: rNw38RODYxzrmm1keE5z4T+LE1a/96KnRnt5/oNJW20= Subject key identifier: 00:0A:2C:DD:86:BF:40:CB:D5:1D:A6:3E:6E:52:FE:E9:BF:53:69:3D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2740677FA53B0D306973CC04915C98572BD1E02A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa Signing time: Tue 13 May 2025 08:00:00 +0000 ROA not before: Tue 13 May 2025 07:55:00 +0000 ROA not after: Tue 12 May 2026 08:00:00 +0000 asID: 131705 IP address blocks: 103.23.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:40:67:7f:a5:3b:0d:30:69:73:cc:04:91:5c:98:57:2b:d1:e0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 13 07:55:00 2025 GMT Not After : May 12 08:00:00 2026 GMT Subject: CN=000A2CDD86BF40CBD51DA63E6E52FEE9BF53693D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:a7:fe:f1:bf:8a:cd:1d:1a:53:30:58:c8: 2d:30:62:67:54:c6:c3:20:fd:71:b1:ef:25:c5:cf: 05:94:78:dd:89:1b:6f:e0:bf:e4:55:e5:6f:34:2e: a6:f1:4e:73:f5:0d:ae:d1:db:49:b7:b6:b0:49:07: f5:12:a7:a0:c2:90:03:89:67:58:76:29:ca:55:fd: 8b:01:2e:02:0d:0d:79:b8:d1:16:0a:ff:48:d9:2e: e1:3c:d4:51:9a:bf:52:87:dc:80:ec:77:d8:e9:2f: 5d:c4:20:3a:14:f3:3b:80:ba:77:2a:b0:d4:54:75: 06:aa:cb:49:dc:e4:5d:5e:2a:08:d2:1d:6e:3a:14: 0c:fd:8e:19:1b:ea:3e:85:74:6f:7d:65:fc:2c:1b: 75:6c:8b:c5:94:ff:be:f6:bb:dd:0a:9d:c7:5e:a4: 1b:55:a5:10:23:c4:b7:09:22:f3:c2:6f:2e:0e:80: 14:29:9e:99:e4:6a:d3:fa:52:60:90:0e:07:9e:ec: 9a:47:a5:39:a0:de:98:52:7c:62:59:29:00:62:5d: df:3e:60:c0:34:bc:20:1a:8f:41:29:b0:e0:5a:a5: 72:a6:f0:5f:d6:68:b1:57:f1:f3:65:69:99:16:31: 6b:4c:a5:62:12:ef:95:ad:6e:9e:e1:e3:4a:55:87: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:2C:DD:86:BF:40:CB:D5:1D:A6:3E:6E:52:FE:E9:BF:53:69:3D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.196.0/23 Signature Algorithm: sha256WithRSAEncryption 45:77:1c:f4:b4:6a:cb:07:46:24:93:3d:03:01:76:b0:fb:0b: 66:e7:77:c2:b5:7d:c7:c8:ed:63:e4:1f:4e:11:78:64:36:4c: ba:4a:3d:a5:a3:e1:34:e6:43:6b:50:0b:7e:0e:50:6f:83:c8: b6:b5:8d:a1:75:5f:d2:51:8c:87:28:95:10:24:ac:b4:f4:08: 60:6e:01:c7:8c:56:44:21:f4:01:8c:b1:f3:7d:ed:e7:23:0a: 50:0a:5c:51:39:07:f6:b7:7e:59:ed:69:1b:f5:00:be:41:77: eb:ab:8e:98:5c:d5:33:c5:61:64:1c:6d:e0:12:b6:91:99:8b: e8:74:f9:d5:41:21:25:b4:58:b9:92:bc:c2:d6:d1:5f:d3:48: 90:1b:7f:f9:56:cb:e1:a0:fb:6c:b5:81:c1:e1:99:be:54:04: 53:eb:6f:e0:47:b0:18:8a:88:fd:4d:79:52:0c:83:45:a1:94: fa:fe:dd:6d:27:30:1d:bd:5f:0c:f3:67:e6:c0:6e:9a:30:38: 9b:47:2d:02:14:c0:e3:df:d8:f1:9a:09:de:4e:ad:6d:81:c3: eb:f5:a9:47:6d:8d:5f:f7:f4:04:47:82:f0:85:71:d0:0b:09: 2a:a3:a7:d6:0e:f2:3f:89:b3:eb:6c:1e:78:ab:65:e6:ad:1a: bb:66:24:14 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJ0Bnf6U7DTBpc8wEkVyYVyvR4CowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxMzA3NTUwMFoX DTI2MDUxMjA4MDAwMFowMzExMC8GA1UEAxMoMDAwQTJDREQ4NkJGNDBDQkQ1MURB NjNFNkU1MkZFRTlCRjUzNjkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuYp/7xv4rNHRpTMFjILTBiZ1TGwyD9cbHvJcXPBZR43Ykbb+C/5FXlbzQu pvFOc/UNrtHbSbe2sEkH9RKnoMKQA4lnWHYpylX9iwEuAg0NebjRFgr/SNku4TzU UZq/UofcgOx32OkvXcQgOhTzO4C6dyqw1FR1BqrLSdzkXV4qCNIdbjoUDP2OGRvq PoV0b31l/CwbdWyLxZT/vva73Qqdx16kG1WlECPEtwki88JvLg6AFCmemeRq0/pS YJAOB57smkelOaDemFJ8YlkpAGJd3z5gwDS8IBqPQSmw4FqlcqbwX9ZosVfx82Vp mRYxa0ylYhLvla1unuHjSlWHTVkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQACizd hr9Ay9Udpj5uUv7pv1NpPTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzMTcwNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWcXxDANBgkqhkiG9w0BAQsFAAOCAQEARXcc9LRqywdGJJM9AwF2 sPsLZud3wrV9x8jtY+QfThF4ZDZMuko9paPhNOZDa1ALfg5Qb4PItrWNoXVf0lGM hyiVECSstPQIYG4Bx4xWRCH0AYyx833t5yMKUApcUTkH9rd+We1pG/UAvkF366uO mFzVM8VhZBxt4BK2kZmL6HT51UEhJbRYuZK8wtbRX9NIkBt/+VbL4aD7bLWBweGZ vlQEU+tv4EewGIqI/U15UgyDRaGU+v7dbScwHb1fDPNn5sBumjA4m0ctAhTA49/Y 8ZoJ3k6tbYHD6/WpR22NX/f0BEeC8IVx0AsJKqOn1g7yP4mz62weeKtl5q0au2Yk FA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:16 2025 by rpki-client