$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136938.roa File: AS136938.roa (raw, json) Hash identifier: kt17huIuPGexlkaf8oZocNO8S5AMPbIAnLia0m/qXy0= Subject key identifier: 19:F8:24:0A:B2:FB:B7:5A:36:6F:57:21:84:3F:E3:84:41:E0:65:9F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4837A68B2AEBCC81A97BAF1743C5A5AAE837E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136938.roa Signing time: Mon 06 Oct 2025 05:04:22 +0000 ROA not before: Mon 06 Oct 2025 04:59:22 +0000 ROA not after: Mon 05 Oct 2026 05:04:22 +0000 asID: 136938 IP address blocks: 203.18.104.0/24 maxlen: 24 2001:df6:940::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:37:a6:8b:2a:eb:cc:81:a9:7b:af:17:43:c5:a5:aa:e8:37:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 6 04:59:22 2025 GMT Not After : Oct 5 05:04:22 2026 GMT Subject: CN=19F8240AB2FBB75A366F5721843FE38441E0659F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:0e:0c:d7:59:d0:0b:c6:58:62:9a:6e:35: aa:2a:7e:c8:a1:76:fe:a4:81:86:57:8a:71:ba:9a: 03:8e:bf:41:eb:be:04:e7:92:f0:40:45:28:93:31: fb:d0:c8:6d:ef:15:91:2c:13:00:7a:ec:b6:d3:0d: 89:bc:00:1d:cd:80:72:01:05:b8:78:4f:62:cf:d2: 8b:ea:ee:e3:39:25:ae:75:23:57:51:e4:b0:42:4d: e6:49:5e:ed:a6:ec:2b:62:b6:08:02:c8:82:e8:00: ea:72:69:48:35:72:e0:bf:89:7d:52:37:cc:31:48: 4a:b8:1f:59:13:aa:6b:cc:a2:85:5c:6b:2c:d8:aa: f5:48:e8:de:12:e5:3f:8e:f1:e3:67:04:ab:73:e4: 8a:05:fc:e9:4e:89:6a:0c:ee:9e:d9:87:01:23:25: 18:6b:b8:56:bf:2c:d5:86:f2:81:7a:bf:67:75:e6: 8c:67:2a:28:b9:e0:e4:8b:ee:f1:15:11:1b:00:dd: 27:c9:28:79:41:f3:f7:ef:c4:9d:82:d3:a4:cd:80: b4:52:5d:bf:65:32:f8:a5:4a:fc:b5:d8:4a:86:27: 65:c9:81:42:56:3e:c6:2c:3d:b7:dd:39:1c:63:a0: 93:48:9d:4a:91:99:0e:a7:da:a0:26:6a:8d:df:c6: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:24:0A:B2:FB:B7:5A:36:6F:57:21:84:3F:E3:84:41:E0:65:9F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.18.104.0/24 IPv6: 2001:df6:940::/48 Signature Algorithm: sha256WithRSAEncryption 02:90:16:b6:87:45:e2:0a:46:27:0b:43:97:2e:c7:6e:a9:03: a5:bf:ad:46:8a:e7:58:f2:f8:be:ba:9b:12:33:e2:56:52:a7: 65:fc:48:e5:c6:56:f7:82:1b:9e:58:5c:a9:90:63:42:ed:f7: f7:ee:9c:a8:1a:3d:ee:c5:f2:46:86:35:66:db:08:9f:6e:29: 71:97:d1:6a:4a:16:d8:2e:7d:ff:a2:5a:a3:e6:c3:1b:d3:2e: 2b:11:4b:32:5c:fc:21:a0:cf:d4:c6:71:af:26:a5:7b:1f:58: 80:be:f9:2a:e9:b8:32:62:76:9a:a8:1f:2f:fe:d1:ab:47:c8: 9c:01:74:c2:50:f1:4c:3d:e4:59:dd:06:99:ac:82:ea:72:36: 15:78:70:81:c5:a7:02:bc:75:85:88:d5:cc:27:a9:f8:3a:f1: f4:44:19:c5:1d:76:e7:ae:a1:20:28:b9:05:0c:b6:af:47:ff: b1:a0:20:29:da:5c:33:38:97:09:2b:df:77:f7:44:48:fe:0f: 18:40:d0:35:5b:a6:50:4d:d0:a4:ff:91:2c:16:1e:f1:4b:f5: d3:5b:6d:f5:d8:a7:24:a4:e0:0d:48:89:65:ce:a7:1a:c8:3f: 70:69:ef:7d:9f:b3:f3:19:20:a5:06:b6:77:c9:b7:06:d5:a6: 25:aa:b0:3b -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgITSDemiyrrzIGpe68XQ8Wlqug35DANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUxMDA2MDQ1OTIyWhcN MjYxMDA1MDUwNDIyWjAzMTEwLwYDVQQDEygxOUY4MjQwQUIyRkJCNzVBMzY2RjU3 MjE4NDNGRTM4NDQxRTA2NTlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1QODNdZ0AvGWGKabjWqKn7IoXb+pIGGV4pxupoDjr9B674E55LwQEUokzH7 0Mht7xWRLBMAeuy20w2JvAAdzYByAQW4eE9iz9KL6u7jOSWudSNXUeSwQk3mSV7t puwrYrYIAsiC6ADqcmlINXLgv4l9UjfMMUhKuB9ZE6przKKFXGss2Kr1SOjeEuU/ jvHjZwSrc+SKBfzpTolqDO6e2YcBIyUYa7hWvyzVhvKBer9ndeaMZyooueDki+7x FREbAN0nySh5QfP378SdgtOkzYC0Ul2/ZTL4pUr8tdhKhidlyYFCVj7GLD233Tkc Y6CTSJ1KkZkOp9qgJmqN38ZQHwIDAQABo4IB4TCCAd0wHQYDVR0OBBYEFBn4JAqy +7daNm9XIYQ/44RB4GWfMB8GA1UdIwQYMBaAFLqPd9IeWP6ck5prcOJYVhfhgzdr MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzovL3JlcG8t cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JBOEY3N0QyMUU1OEZFOUM5 MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggr BgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdF RjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3VvOTMwaDVZX3B5VG1tdHc0bGhX Ri1HRE4ycy5jZXIwVAYIKwYBBQUHAQsESDBGMEQGCCsGAQUFBzALhjhyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FTMTM2OTM4LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyxJoMA8EAgACMAkDBwAgAQ32CUAwDQYJKoZIhvcNAQELBQADggEB AAKQFraHReIKRicLQ5cux26pA6W/rUaK51jy+L66mxIz4lZSp2X8SOXGVveCG55Y XKmQY0Lt9/funKgaPe7F8kaGNWbbCJ9uKXGX0WpKFtguff+iWqPmwxvTLisRSzJc /CGgz9TGca8mpXsfWIC++SrpuDJidpqoHy/+0atHyJwBdMJQ8Uw95FndBpmsgupy NhV4cIHFpwK8dYWI1cwnqfg68fREGcUddueuoSAouQUMtq9H/7GgICnaXDM4lwkr 33f3REj+DxhA0DVbplBN0KT/kSwWHvFL9dNbbfXYpySk4A1IiWXOpxrIP3Bp732f s/MZIKUGtnfJtwbVpiWqsDs= -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:27 2025 by rpki-client