$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141907.roa File: AS141907.roa (raw, json) Hash identifier: yMAxWDADhbV7wq9yHd11BVh5zdPhR6XgiAnIHluruDE= Subject key identifier: 09:9B:FD:9C:C1:4C:66:87:E4:84:F8:95:B1:AE:95:9A:E5:48:14:AE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45A2470E6BEF1E1266D41CF92A2F1570C6B3F6C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141907.roa Signing time: Fri 15 Aug 2025 07:52:29 +0000 ROA not before: Fri 15 Aug 2025 07:47:29 +0000 ROA not after: Fri 14 Aug 2026 07:52:29 +0000 asID: 141907 IP address blocks: 202.51.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a2:47:0e:6b:ef:1e:12:66:d4:1c:f9:2a:2f:15:70:c6:b3:f6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 07:47:29 2025 GMT Not After : Aug 14 07:52:29 2026 GMT Subject: CN=099BFD9CC14C6687E484F895B1AE959AE54814AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:34:d7:38:a0:92:34:47:f4:88:28:13:92: e8:43:27:57:1d:d3:1c:32:eb:85:84:1d:72:60:b5: e8:a5:ca:05:0d:39:a9:00:e0:bb:4d:38:28:2e:ea: 68:df:7b:3e:d7:ee:64:fb:18:fc:49:76:78:bb:35: ff:86:ba:58:02:01:cd:60:98:a7:d0:c8:5b:6d:60: fc:8d:d0:cd:a6:f7:9e:92:87:de:4d:3f:2f:46:72: a5:96:c4:72:cd:07:a4:88:32:de:e5:3e:04:84:af: 0c:60:52:d1:eb:bc:04:08:b3:41:0a:bd:18:69:76: 42:40:dc:75:63:f0:5a:5a:ff:7f:c9:f2:b6:64:82: 5a:3a:81:f8:e2:83:d5:b8:fd:87:45:44:96:aa:eb: 93:5b:6a:5b:99:93:18:4f:02:b0:01:c0:d6:e6:e9: 40:7e:c1:b1:2d:5d:a5:9b:15:63:63:35:fe:d5:9a: cd:dd:ce:4e:c5:00:0c:85:dc:27:59:f9:6e:56:5f: a1:b6:bb:87:14:29:90:86:da:a6:9b:36:9f:ef:18: 9b:a9:bf:56:a1:25:3e:47:3c:67:ad:d4:fd:85:77: 49:de:44:74:99:02:0c:e1:07:a6:76:28:be:7f:da: 5f:a1:7c:a1:49:c6:9b:38:0e:ca:c7:be:44:09:0b: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:FD:9C:C1:4C:66:87:E4:84:F8:95:B1:AE:95:9A:E5:48:14:AE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.218.0/24 Signature Algorithm: sha256WithRSAEncryption 60:f1:57:b4:e4:36:76:b1:32:d1:9a:c0:62:5d:37:31:4c:37: 1d:db:58:d1:c0:00:cf:80:46:53:25:29:50:96:6b:47:a7:f7: 27:2f:e2:6b:97:7f:ae:60:54:2b:ca:4e:59:21:6f:15:d9:52: 7a:2c:b8:fe:b9:03:e4:63:26:55:9a:92:cc:0c:ab:d3:2d:31: 4c:27:06:13:74:b4:28:a0:4a:09:3b:39:63:39:9d:62:fd:ba: a5:23:0e:36:ea:f2:7f:93:cb:0b:d7:68:86:51:45:5f:9c:1e: 14:36:b8:ec:56:37:af:19:7c:6c:70:ef:e4:d2:80:66:d9:48: b1:2d:ec:73:6d:8d:d9:b3:63:f5:8a:2b:fa:d5:10:eb:87:6d: 06:2b:ec:c6:97:0a:a9:c1:3c:84:21:fe:0c:16:c2:53:bb:02: 65:4b:3d:32:9e:9f:f7:9f:f0:e5:b1:f8:3e:3b:b7:4c:50:75: 5d:42:9b:e9:a8:e3:78:81:54:cd:aa:49:52:fb:24:f4:03:fb: 08:0a:84:a4:4b:b0:a4:82:ec:4e:9a:d5:f0:fa:e9:b0:39:02: 38:62:95:0d:96:d8:fe:27:df:51:b5:f4:65:cd:d5:80:58:94: 46:9d:82:5b:24:cc:af:eb:7e:e6:c7:74:0a:fd:31:ff:d3:d6: 7f:d2:6e:b0 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURaJHDmvvHhJm1Bz5Ki8VcMaz9sgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTA3NDcyOVoX DTI2MDgxNDA3NTIyOVowMzExMC8GA1UEAxMoMDk5QkZEOUNDMTRDNjY4N0U0ODRG ODk1QjFBRTk1OUFFNTQ4MTRBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSINNc4oJI0R/SIKBOS6EMnVx3THDLrhYQdcmC16KXKBQ05qQDgu004KC7q aN97PtfuZPsY/El2eLs1/4a6WAIBzWCYp9DIW21g/I3Qzab3npKH3k0/L0ZypZbE cs0HpIgy3uU+BISvDGBS0eu8BAizQQq9GGl2QkDcdWPwWlr/f8nytmSCWjqB+OKD 1bj9h0VElqrrk1tqW5mTGE8CsAHA1ubpQH7BsS1dpZsVY2M1/tWazd3OTsUADIXc J1n5blZfoba7hxQpkIbapps2n+8Ym6m/VqElPkc8Z63U/YV3Sd5EdJkCDOEHpnYo vn/aX6F8oUnGmzgOyse+RAkLUmMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQJm/2c wUxmh+SE+JWxrpWa5UgUrjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMoz2jANBgkqhkiG9w0BAQsFAAOCAQEAYPFXtOQ2drEy0ZrAYl03 MUw3HdtY0cAAz4BGUyUpUJZrR6f3Jy/ia5d/rmBUK8pOWSFvFdlSeiy4/rkD5GMm VZqSzAyr0y0xTCcGE3S0KKBKCTs5YzmdYv26pSMONuryf5PLC9dohlFFX5weFDa4 7FY3rxl8bHDv5NKAZtlIsS3sc22N2bNj9Yor+tUQ64dtBivsxpcKqcE8hCH+DBbC U7sCZUs9Mp6f95/w5bH4Pju3TFB1XUKb6ajjeIFUzapJUvsk9AP7CAqEpEuwpILs TprV8PrpsDkCOGKVDZbY/iffUbX0Zc3VgFiURp2CWyTMr+t+5sd0Cv0x/9PWf9Ju sA== -----END CERTIFICATE-----Generated at Sat Aug 23 07:11:46 2025 by rpki-client