$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS140101.roa File: AS140101.roa (raw, json) Hash identifier: HPtBYJGHxBigyPTA82Ng2/uxJ30oiLY2swxJNqQYTFI= Subject key identifier: 20:15:21:97:C5:2A:A9:4E:BA:A5:B0:82:10:0C:64:CF:C7:67:EC:AA Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5081B06E30C6CF3C78B793C3D2DE033B569F9697 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS140101.roa Signing time: Tue 09 Sep 2025 06:46:15 +0000 ROA not before: Tue 09 Sep 2025 06:41:15 +0000 ROA not after: Tue 08 Sep 2026 06:46:15 +0000 asID: 140101 IP address blocks: 165.99.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:81:b0:6e:30:c6:cf:3c:78:b7:93:c3:d2:de:03:3b:56:9f:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Sep 9 06:41:15 2025 GMT Not After : Sep 8 06:46:15 2026 GMT Subject: CN=20152197C52AA94EBAA5B082100C64CFC767ECAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:3d:c3:00:b6:40:48:14:07:1c:13:9e:24: 81:4a:33:01:60:1f:ab:c0:6d:31:50:9a:87:d2:6d: f8:c6:d5:19:cd:f1:cb:ea:f0:f1:90:87:3f:13:18: 57:b1:59:f5:4a:87:89:48:f6:34:32:f0:cb:33:8b: 17:a4:a1:93:3b:57:4d:7e:88:8e:da:bb:81:21:ea: b4:56:5b:d3:00:ac:c4:09:11:cf:e4:d3:6c:59:9c: b8:34:28:af:df:dc:6e:a8:14:e4:33:72:81:94:c9: 9b:a4:70:a7:75:33:c1:bb:f6:8b:b5:3c:1e:cb:39: 0a:a7:8e:fe:46:37:3d:9c:0d:a9:50:75:83:23:bd: cc:23:42:cb:a0:b8:70:bc:ea:79:88:53:4e:3a:21: 6b:d8:dd:f2:0b:81:69:1c:f0:2b:f4:f9:8f:d8:ce: 16:c1:02:fc:9d:a1:7e:59:32:aa:3c:af:11:24:7e: 07:9b:77:a6:1c:8a:b0:0b:dd:6f:bf:1a:e2:1d:00: 53:df:9b:28:90:65:d1:24:56:db:e1:bc:b3:26:eb: 32:23:fa:7d:4e:2a:6a:ba:10:06:04:09:16:9f:b7: a8:5a:1c:28:1e:35:de:72:eb:c5:bf:c3:da:c6:74: c9:77:c0:d0:dc:ae:4f:29:30:14:59:29:18:5f:fb: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:21:97:C5:2A:A9:4E:BA:A5:B0:82:10:0C:64:CF:C7:67:EC:AA X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS140101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.28.0/23 Signature Algorithm: sha256WithRSAEncryption 97:b1:11:16:36:12:b5:14:b2:19:9c:9c:28:74:88:da:3e:c9: d9:9f:a9:8c:5d:7a:11:f3:5f:e1:d5:99:9a:05:44:d5:2f:9c: 66:97:1c:7c:c8:49:02:94:47:ed:ad:e0:c2:12:4a:ba:b0:35: 03:ca:82:78:e8:b1:99:bb:80:bb:ca:e6:60:ec:c0:17:a3:4c: 2f:3a:37:12:87:3e:61:62:e9:21:91:bb:07:ad:4b:60:3b:b5: 39:97:36:3d:2b:a0:36:bc:6e:1d:60:d5:9a:54:84:80:75:c0: 27:c9:a2:b8:9d:5c:ee:67:cd:35:b2:24:8c:f8:1b:fb:39:66: c7:43:c8:3c:df:57:e0:a2:d3:45:9e:c5:ed:8f:f0:50:71:3b: d6:88:a1:7b:1c:92:2b:1c:93:ff:04:34:e8:a4:c3:ce:4b:3f: ec:6a:3c:62:55:21:93:34:c9:d6:dd:a1:ed:7a:85:96:e7:f5: 73:62:26:a9:04:93:d8:5d:b7:ba:8b:1d:03:39:81:40:fe:3f: bd:0a:64:94:79:8a:2b:f5:a7:de:1a:05:69:74:f5:a0:6b:4c: eb:79:28:db:41:6c:fb:e5:c2:02:39:6a:58:57:44:57:3b:11: 45:4d:a0:0e:bb:8c:f1:b8:6c:56:f8:75:a0:ce:ce:7b:44:77: 23:0b:bd:fc -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUUIGwbjDGzzx4t5PD0t4DO1aflpcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDkwOTA2NDExNVoX DTI2MDkwODA2NDYxNVowMzExMC8GA1UEAxMoMjAxNTIxOTdDNTJBQTk0RUJBQTVC MDgyMTAwQzY0Q0ZDNzY3RUNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8uPcMAtkBIFAccE54kgUozAWAfq8BtMVCah9Jt+MbVGc3xy+rw8ZCHPxMY V7FZ9UqHiUj2NDLwyzOLF6ShkztXTX6Ijtq7gSHqtFZb0wCsxAkRz+TTbFmcuDQo r9/cbqgU5DNygZTJm6Rwp3Uzwbv2i7U8Hss5CqeO/kY3PZwNqVB1gyO9zCNCy6C4 cLzqeYhTTjoha9jd8guBaRzwK/T5j9jOFsEC/J2hflkyqjyvESR+B5t3phyKsAvd b78a4h0AU9+bKJBl0SRW2+G8sybrMiP6fU4qaroQBgQJFp+3qFocKB413nLrxb/D 2sZ0yXfA0NyuTykwFFkpGF/7mlkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQgFSGX xSqpTrqlsIIQDGTPx2fsqjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MDEwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAaVjHDANBgkqhkiG9w0BAQsFAAOCAQEAl7ERFjYStRSyGZycKHSI 2j7J2Z+pjF16EfNf4dWZmgVE1S+cZpccfMhJApRH7a3gwhJKurA1A8qCeOixmbuA u8rmYOzAF6NMLzo3Eoc+YWLpIZG7B61LYDu1OZc2PSugNrxuHWDVmlSEgHXAJ8mi uJ1c7mfNNbIkjPgb+zlmx0PIPN9X4KLTRZ7F7Y/wUHE71oihexySKxyT/wQ06KTD zks/7Go8YlUhkzTJ1t2h7XqFluf1c2ImqQST2F23uosdAzmBQP4/vQpklHmKK/Wn 3hoFaXT1oGtM63ko20Fs++XCAjlqWFdEVzsRRU2gDruM8bhsVvh1oM7Oe0R3Iwu9 /A== -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:09 2025 by rpki-client