$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139653.roa File: AS139653.roa (raw, json) Hash identifier: 8iiU0wN5c+uYJOjH6FHuX+n8II3Te8NIsCgfBzRc7vg= Subject key identifier: A6:05:BB:6D:63:6A:C9:75:AC:BB:A5:6D:E2:9A:C1:10:E7:F3:14:45 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 278D3386F889E0FA634468E7D5785C52EC148A5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139653.roa Signing time: Wed 27 Aug 2025 04:19:38 +0000 ROA not before: Wed 27 Aug 2025 04:14:38 +0000 ROA not after: Wed 26 Aug 2026 04:19:38 +0000 asID: 139653 IP address blocks: 49.213.58.0/23 maxlen: 24 2001:df5:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8d:33:86:f8:89:e0:fa:63:44:68:e7:d5:78:5c:52:ec:14:8a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 27 04:14:38 2025 GMT Not After : Aug 26 04:19:38 2026 GMT Subject: CN=A605BB6D636AC975ACBBA56DE29AC110E7F31445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:4f:31:a1:05:d3:9c:1b:cd:94:a5:20:80: ed:84:44:d7:8c:3d:4c:b3:ca:b3:6a:a4:5d:32:03: a1:f7:d9:d0:98:a8:07:5e:ad:37:bc:88:d2:49:5b: 5c:86:b9:f5:3a:eb:2b:99:63:5d:1e:f3:9a:0e:08: 01:10:74:1a:cd:27:c7:bb:c7:63:20:df:d6:7d:9c: 55:1a:54:8d:db:6d:fa:26:14:ce:b9:c7:ec:bc:39: e8:56:80:a3:6d:6c:97:b2:2c:7b:57:f2:0d:9d:e6: ab:8b:f3:ea:4d:dd:f8:83:0d:92:2b:f7:fe:a3:ad: 65:7e:56:51:7a:91:2a:06:f0:07:e6:73:cc:e7:1e: cc:3b:ce:ff:1f:e4:a1:0b:79:96:06:9f:aa:e1:02: e0:e7:2b:04:67:fc:c1:06:71:88:9e:87:b8:41:61: 1a:13:aa:46:22:45:8c:eb:83:76:47:61:a0:88:96: 53:78:6a:c1:6d:1b:3a:9b:dc:13:81:9a:b6:a1:f3: 9a:ec:8b:59:3b:9e:56:80:01:48:31:c7:78:3b:3a: 7e:cd:65:29:35:04:0a:d1:6c:9c:f7:c7:93:b0:bd: 83:dd:da:b8:ca:1e:2f:a9:08:e2:30:48:53:09:24: a4:1d:5b:bd:0c:58:90:ce:a5:37:00:80:a5:68:d5: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:BB:6D:63:6A:C9:75:AC:BB:A5:6D:E2:9A:C1:10:E7:F3:14:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.213.58.0/23 IPv6: 2001:df5:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 7d:8a:82:b7:6a:33:ac:9a:77:32:f6:50:8f:e0:8a:12:00:1a: d0:32:a1:e2:95:a3:f3:df:de:e7:0f:83:74:55:35:05:cd:ad: 2a:99:11:8b:0d:d0:1e:46:80:ec:b0:b5:a9:47:9a:4f:5f:6c: f4:20:bd:9b:e4:f9:8c:5e:5d:d9:5a:91:01:ff:07:fb:5f:75: e0:3d:58:63:ef:79:35:06:46:9c:ae:34:80:eb:c4:4e:03:8b: b1:84:f8:66:f4:65:07:ae:f5:0a:4f:d0:06:9e:0f:04:40:da: 7c:9a:cc:18:b2:5b:a5:56:ff:fb:57:a6:67:3c:c8:2d:59:74: ba:c8:c0:0b:fe:1a:fe:22:94:cd:3f:3b:cf:32:ac:ee:18:fe: 63:1a:87:ec:c9:1d:54:66:09:c6:0a:71:ac:b0:0f:aa:02:1c: 13:c8:2b:0c:35:34:ee:65:b4:a2:55:f1:bc:1d:ea:d0:a8:be: 74:ff:59:ea:0e:80:2a:72:ad:54:0f:e6:e0:31:51:79:dd:98: 52:e3:2e:90:52:d4:29:03:a8:02:fd:8f:c0:1f:b3:b3:e4:13: e5:e0:2d:9d:3b:7b:0c:f3:be:12:16:f2:33:15:35:18:e2:0a: c1:9d:cd:63:46:7e:79:e9:0b:48:94:fe:e6:26:13:a0:43:50: 3c:41:fb:a4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUJ40zhviJ4PpjRGjn1XhcUuwUilwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyNzA0MTQzOFoX DTI2MDgyNjA0MTkzOFowMzExMC8GA1UEAxMoQTYwNUJCNkQ2MzZBQzk3NUFDQkJB NTZERTI5QUMxMTBFN0YzMTQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKgvTzGhBdOcG82UpSCA7YRE14w9TLPKs2qkXTIDoffZ0JioB16tN7yI0klb XIa59TrrK5ljXR7zmg4IARB0Gs0nx7vHYyDf1n2cVRpUjdtt+iYUzrnH7Lw56FaA o21sl7Ise1fyDZ3mq4vz6k3d+IMNkiv3/qOtZX5WUXqRKgbwB+ZzzOcezDvO/x/k oQt5lgafquEC4OcrBGf8wQZxiJ6HuEFhGhOqRiJFjOuDdkdhoIiWU3hqwW0bOpvc E4GatqHzmuyLWTueVoABSDHHeDs6fs1lKTUECtFsnPfHk7C9g93auMoeL6kI4jBI UwkkpB1bvQxYkM6lNwCApWjVgSsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSmBbtt Y2rJday7pW3imsEQ5/MURTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTY1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEATHVOjAPBAIAAjAJAwcAIAEN9f/AMA0GCSqGSIb3DQEBCwUAA4IB AQB9ioK3ajOsmncy9lCP4IoSABrQMqHilaPz397nD4N0VTUFza0qmRGLDdAeRoDs sLWpR5pPX2z0IL2b5PmMXl3ZWpEB/wf7X3XgPVhj73k1BkacrjSA68ROA4uxhPhm 9GUHrvUKT9AGng8EQNp8mswYslulVv/7V6ZnPMgtWXS6yMAL/hr+IpTNPzvPMqzu GP5jGofsyR1UZgnGCnGssA+qAhwTyCsMNTTuZbSiVfG8HerQqL50/1nqDoAqcq1U D+bgMVF53ZhS4y6QUtQpA6gC/Y/AH7Oz5BPl4C2dO3sM874SFvIzFTUY4grBnc1j Rn556QtIlP7mJhOgQ1A8Qfuk -----END CERTIFICATE-----Generated at Fri Sep 5 08:20:08 2025 by rpki-client