$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa File: AS141613.roa (raw, json) Hash identifier: JryUUukv7S7JhMBzC+b0Sqw90PV9HIeg+7Srmuj5IuU= Subject key identifier: 40:87:36:BF:F1:B0:98:66:A8:57:15:7C:33:D6:4A:A3:F9:09:00:AF Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B21B358BAAE9D69EFCB52DD18893CFB58137812 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa Signing time: Wed 17 Sep 2025 07:00:00 +0000 ROA not before: Wed 17 Sep 2025 06:55:00 +0000 ROA not after: Wed 16 Sep 2026 07:00:00 +0000 asID: 141613 IP address blocks: 2001:df1:9d40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:b3:58:ba:ae:9d:69:ef:cb:52:dd:18:89:3c:fb:58:13:78:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 06:55:00 2025 GMT Not After : Sep 16 07:00:00 2026 GMT Subject: CN=408736BFF1B09866A857157C33D64AA3F90900AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:e4:26:75:61:ab:a5:00:3f:bf:61:ad:c6: 94:c1:eb:6d:4a:19:ea:9d:28:b0:05:37:02:fe:3e: e5:fc:58:15:14:ae:13:2f:cd:05:a1:ae:0f:24:5a: 99:31:1d:c2:99:06:3b:01:ad:db:40:39:52:32:7b: 8c:90:a5:cc:58:ba:9c:18:52:cd:c0:2d:7e:43:da: aa:dc:72:07:aa:ab:e2:73:9e:b2:c4:07:93:2a:02: c2:6c:d6:fa:75:8f:c9:4f:3c:e0:d2:35:a4:f4:26: 59:19:ff:aa:5b:ba:a1:e1:f2:04:d3:00:70:d3:0c: 2e:47:2e:ab:21:ee:84:99:b6:45:4a:1f:ad:28:4a: d4:96:79:87:21:54:d6:19:db:d6:73:b5:db:b7:4c: 8e:3c:25:80:03:5f:36:af:03:1d:0c:7b:32:21:34: 5c:21:36:66:35:12:0f:e9:62:b8:62:60:d4:4a:7d: e6:61:31:1f:23:78:d0:5c:24:77:7c:68:80:46:5e: 12:94:ba:07:ce:1d:0b:ad:e7:c9:57:85:76:06:a2: 7a:40:70:5d:5a:4c:c2:3d:f1:31:e4:5b:4f:6b:03: 77:3d:1f:6a:80:c1:0b:d6:a1:89:99:50:1b:0b:ea: ac:e7:ac:06:d2:e1:de:e6:85:67:58:e9:60:e3:bd: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:87:36:BF:F1:B0:98:66:A8:57:15:7C:33:D6:4A:A3:F9:09:00:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141613.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9d40::/48 Signature Algorithm: sha256WithRSAEncryption 26:90:b7:ac:62:1a:36:68:df:f8:51:f8:5a:39:8b:26:65:91: d9:de:50:6d:1f:f9:7e:e0:c4:32:9e:6f:3b:60:d5:7a:44:60: 1d:10:0a:e4:4b:0d:45:e8:7c:a3:32:bf:52:f1:ed:9b:c4:67: 77:68:80:d1:0b:9f:24:0f:62:1c:4b:8e:ee:79:03:67:4d:a9: e3:56:f8:d7:67:f8:e2:52:61:4a:9c:ae:40:42:39:9d:34:a9: 2e:1a:4c:56:5e:40:93:5b:e5:47:b9:6a:8f:eb:de:24:02:0e: 41:a2:c9:60:f6:b8:34:42:f6:05:06:0b:4c:d1:bc:f0:03:6e: 41:d7:29:21:8b:e0:b5:a2:19:d6:c2:3b:a6:2f:29:b6:6c:6e: aa:90:28:ab:47:6f:a7:a5:80:b2:8c:ba:76:51:a7:47:d9:74: ad:50:04:4f:f7:c4:90:9b:9e:e7:2d:9b:dc:92:9a:96:99:ad: ce:35:93:08:7f:03:0b:6e:bd:bb:61:8d:df:11:0b:c4:b4:aa: 6c:4c:a2:95:ef:8c:d4:3f:75:db:43:5b:fb:bb:ae:b5:4f:fe: 8a:a7:d7:69:76:22:51:43:62:4d:de:14:0e:b0:b7:e6:c0:cf: dd:d5:8d:47:2e:b7:d1:82:0d:ee:c6:c7:38:82:b1:4a:db:69: 1c:93:db:94 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUWyGzWLqunWnvy1LdGIk8+1gTeBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNzA2NTUwMFoX DTI2MDkxNjA3MDAwMFowMzExMC8GA1UEAxMoNDA4NzM2QkZGMUIwOTg2NkE4NTcx NTdDMzNENjRBQTNGOTA5MDBBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiR5CZ1YaulAD+/Ya3GlMHrbUoZ6p0osAU3Av4+5fxYFRSuEy/NBaGuDyRa mTEdwpkGOwGt20A5UjJ7jJClzFi6nBhSzcAtfkPaqtxyB6qr4nOessQHkyoCwmzW +nWPyU884NI1pPQmWRn/qlu6oeHyBNMAcNMMLkcuqyHuhJm2RUofrShK1JZ5hyFU 1hnb1nO127dMjjwlgANfNq8DHQx7MiE0XCE2ZjUSD+liuGJg1Ep95mExHyN40Fwk d3xogEZeEpS6B84dC63nyVeFdgaiekBwXVpMwj3xMeRbT2sDdz0faoDBC9ahiZlQ GwvqrOesBtLh3uaFZ1jpYOO9jzUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBRAhza/ 8bCYZqhXFXwz1kqj+QkArzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYxMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGdQDANBgkqhkiG9w0BAQsFAAOCAQEAJpC3rGIaNmjf+FH4 WjmLJmWR2d5QbR/5fuDEMp5vO2DVekRgHRAK5EsNReh8ozK/UvHtm8Rnd2iA0Quf JA9iHEuO7nkDZ02p41b412f44lJhSpyuQEI5nTSpLhpMVl5Ak1vlR7lqj+veJAIO QaLJYPa4NEL2BQYLTNG88ANuQdcpIYvgtaIZ1sI7pi8ptmxuqpAoq0dvp6WAsoy6 dlGnR9l0rVAET/fEkJue5y2b3JKalpmtzjWTCH8DC269u2GN3xELxLSqbEyile+M 1D9120Nb+7uutU/+iqfXaXYiUUNiTd4UDrC35sDP3dWNRy630YIN7sbHOIKxSttp HJPblA== -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:06 2025 by rpki-client