$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa File: AS140389.roa (raw, json) Hash identifier: a9UD+BRPTX9VtmncpJnpO9KPMbYQpayw6qXXS1Ofoqw= Subject key identifier: 2A:68:93:00:A6:C7:60:72:1E:0F:E1:C5:DF:2F:80:2C:D6:40:13:F0 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C49CF9A5D4A8E2A348A33B2F449B7071B7B1142 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa Signing time: Thu 26 Jun 2025 07:00:00 +0000 ROA not before: Thu 26 Jun 2025 06:55:00 +0000 ROA not after: Thu 25 Jun 2026 07:00:00 +0000 asID: 140389 IP address blocks: 103.7.184.0/23 maxlen: 24 103.147.32.0/23 maxlen: 24 103.253.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 23:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:49:cf:9a:5d:4a:8e:2a:34:8a:33:b2:f4:49:b7:07:1b:7b:11:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 26 06:55:00 2025 GMT Not After : Jun 25 07:00:00 2026 GMT Subject: CN=2A689300A6C760721E0FE1C5DF2F802CD64013F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:9c:59:38:75:79:8b:0e:07:77:9d:92:f7: 8d:98:f1:8f:d1:60:38:a8:12:5e:3e:97:2d:42:21: ce:5f:00:98:1a:5e:45:7b:31:9f:03:34:11:6b:77: 30:6e:82:a5:32:91:49:52:9d:e1:e6:a4:bc:a3:d6: 10:5d:89:54:23:77:ad:7c:2e:3e:93:d4:37:68:aa: c5:e2:6c:0a:d9:07:7b:85:34:c9:b8:95:23:df:23: 15:e0:32:b5:10:2e:96:90:93:e5:6f:a7:3c:83:fe: cf:1a:83:27:5b:28:98:b9:b5:a3:6a:d9:9c:50:04: c4:65:13:ce:97:fc:cb:61:71:1a:d5:38:38:a7:49: 31:9a:7a:5d:39:0e:7d:48:a3:51:de:47:45:2c:1c: f4:82:37:16:5a:24:84:86:3e:d0:06:c1:78:cb:da: dc:15:1d:06:ad:27:51:96:49:af:27:ef:bc:af:6b: eb:f4:dc:ea:e2:94:94:d8:da:ba:52:66:7d:78:e5: 4c:8f:c0:b3:cc:6a:bb:92:65:c6:83:e1:80:80:94: 08:a3:99:56:48:84:fb:22:94:06:15:a0:54:a3:1c: e9:70:23:45:35:77:8c:74:55:d5:66:7d:3b:3a:d5: ca:d6:f4:b3:4e:2b:8a:a8:67:79:fe:ff:76:b9:f1: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:93:00:A6:C7:60:72:1E:0F:E1:C5:DF:2F:80:2C:D6:40:13:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.184.0/23 103.147.32.0/23 103.253.244.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:99:2f:79:9e:c3:1c:31:53:d1:9a:8e:4c:4d:7e:18:04:8d: 38:5d:f2:cb:69:4e:b2:86:b3:a6:b7:c4:c2:f5:44:fd:fc:22: 2a:e1:98:2a:d0:bb:f8:fe:f3:7a:a2:d8:8a:32:5b:33:2b:e6: 35:ec:36:01:b9:2d:ef:d6:36:85:5b:73:d1:cb:58:e8:b0:fe: 0e:de:e5:cd:b2:93:84:1e:cd:5d:ba:a9:e7:bc:95:43:92:0b: 3c:79:2b:90:08:3a:70:54:75:bd:68:68:fd:4b:f2:f8:6e:1b: f9:44:3a:61:7e:2f:5a:20:da:d9:00:05:3d:23:18:8e:0d:37: cf:c3:2a:b8:bc:d3:37:40:ff:79:bf:61:4c:8d:2e:27:5a:80: 30:cf:d9:c0:ee:87:25:65:b9:98:1e:3e:87:86:b4:09:ca:57: 1a:8d:14:77:76:ae:61:11:81:b8:eb:b5:aa:ed:2d:f2:49:d5: dd:f7:6a:74:fe:53:80:a0:46:a0:e4:3a:b5:10:b7:4e:3d:63: e5:1a:03:8f:5f:41:93:e2:80:6f:8e:e9:28:50:b8:18:57:9a: 44:da:18:36:d5:6f:13:c1:cd:9a:be:92:cc:24:f4:93:e9:7a: 69:73:5b:66:f2:94:e2:68:e0:bd:f2:a4:ec:fc:a5:da:98:d6: 42:f9:8c:0d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUfEnPml1Kjio0ijOy9Em3Bxt7EUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyNjA2NTUwMFoX DTI2MDYyNTA3MDAwMFowMzExMC8GA1UEAxMoMkE2ODkzMDBBNkM3NjA3MjFFMEZF MUM1REYyRjgwMkNENjQwMTNGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAJnFk4dXmLDgd3nZL3jZjxj9FgOKgSXj6XLUIhzl8AmBpeRXsxnwM0EWt3 MG6CpTKRSVKd4eakvKPWEF2JVCN3rXwuPpPUN2iqxeJsCtkHe4U0ybiVI98jFeAy tRAulpCT5W+nPIP+zxqDJ1somLm1o2rZnFAExGUTzpf8y2FxGtU4OKdJMZp6XTkO fUijUd5HRSwc9II3FlokhIY+0AbBeMva3BUdBq0nUZZJryfvvK9r6/Tc6uKUlNja ulJmfXjlTI/As8xqu5JlxoPhgICUCKOZVkiE+yKUBhWgVKMc6XAjRTV3jHRV1WZ9 OzrVytb0s04riqhnef7/drnxQIECAwEAAaOCAdwwggHYMB0GA1UdDgQWBBQqaJMA psdgch4P4cXfL4As1kAT8DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDM4OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBow GAQCAAEwEgMEAWcHuAMEAWeTIAMEAWf99DANBgkqhkiG9w0BAQsFAAOCAQEALZkv eZ7DHDFT0ZqOTE1+GASNOF3yy2lOsoazprfEwvVE/fwiKuGYKtC7+P7zeqLYijJb MyvmNew2Abkt79Y2hVtz0ctY6LD+Dt7lzbKThB7NXbqp57yVQ5ILPHkrkAg6cFR1 vWho/Uvy+G4b+UQ6YX4vWiDa2QAFPSMYjg03z8MquLzTN0D/eb9hTI0uJ1qAMM/Z wO6HJWW5mB4+h4a0CcpXGo0Ud3auYRGBuOu1qu0t8knV3fdqdP5TgKBGoOQ6tRC3 Tj1j5RoDj19Bk+KAb47pKFC4GFeaRNoYNtVvE8HNmr6SzCT0k+l6aXNbZvKU4mjg vfKk7Pyl2pjWQvmMDQ== -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:58 2025 by rpki-client