$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa File: AS141914.roa (raw, json) Hash identifier: DQzACB9DqIp7mpM0ZhCJRjycQWzRe8A3LYtmrjyYNJw= Subject key identifier: 17:D6:43:25:1E:B7:44:CB:E4:80:26:08:6C:FE:0B:A1:36:12:5C:59 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7915A210C2A9CF599A5E47C09106FFB7D8DDA87B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa Signing time: Tue 19 Aug 2025 04:17:18 +0000 ROA not before: Tue 19 Aug 2025 04:12:18 +0000 ROA not after: Tue 18 Aug 2026 04:17:18 +0000 asID: 141914 IP address blocks: 103.165.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:a2:10:c2:a9:cf:59:9a:5e:47:c0:91:06:ff:b7:d8:dd:a8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 04:12:18 2025 GMT Not After : Aug 18 04:17:18 2026 GMT Subject: CN=17D643251EB744CBE48026086CFE0BA136125C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:c1:e2:90:dc:61:1f:28:17:8a:80:5d:7a: 10:52:d2:34:d9:0d:fd:3f:87:9f:5f:8c:b6:62:2b: 37:7c:c9:2c:d1:ee:47:4e:1c:e7:95:53:55:46:38: 25:de:79:0e:46:c1:be:c6:b3:2e:16:a9:10:ba:c7: f8:c7:a0:36:d3:e6:92:36:dd:02:d6:1c:fc:a9:d2: 84:35:e6:54:dc:61:c9:88:35:fe:85:e6:4d:61:58: f2:ce:0c:d0:9f:0a:53:70:47:ed:a4:3a:b2:7f:92: e6:59:1b:9f:0c:de:bc:2a:79:c4:7b:b1:1a:72:60: 81:e0:8a:0f:08:c8:f2:95:8f:b8:ab:4d:1b:7b:d4: 37:8d:3a:59:30:3b:01:a0:d4:0f:a4:da:dd:f9:36: fc:d1:85:31:ea:35:60:b4:c4:7a:3a:5a:95:b3:a5: 8c:f5:6c:e7:08:85:4d:bc:d9:22:13:69:c6:7e:1f: d1:8c:a0:86:b3:89:10:37:5f:5e:69:8d:19:f2:b0: 33:37:9e:ea:18:ac:c0:97:1b:e2:54:d6:3b:60:8d: 48:e0:f7:96:74:41:09:63:65:94:2a:e3:0c:bd:2f: cc:85:2d:42:3e:3c:18:f9:76:43:0c:1f:70:7d:73: 74:83:d9:55:4e:5b:0d:a6:d9:08:12:fd:a5:0e:54: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:43:25:1E:B7:44:CB:E4:80:26:08:6C:FE:0B:A1:36:12:5C:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:c0:d5:40:18:32:d7:79:98:88:b6:2c:55:06:8b:3f:7d:fb: 25:1d:6a:76:d1:92:51:7b:42:24:e7:80:89:79:37:16:6a:f9: 9b:61:27:64:6a:88:4d:e1:91:92:08:e2:d7:3d:5f:a0:e3:01: 7d:a8:2d:e8:91:62:0d:b8:21:a6:f2:1f:71:ad:8d:e7:50:ba: 76:26:0e:8e:0c:f5:60:03:ca:28:d9:60:5e:ab:d0:aa:dd:1c: 3a:37:f2:c0:36:27:61:c9:06:b9:f4:71:ea:a7:95:5d:c1:a4: c3:aa:41:b3:8f:19:45:ca:35:38:34:d9:56:89:e5:b5:23:be: 8d:2c:16:16:f6:c7:fa:08:8f:6e:fe:b8:57:f6:80:25:7d:43: 36:e3:88:5a:f6:44:0e:78:70:64:c0:a8:10:1a:d2:95:22:ff: a6:c4:f5:48:1b:d5:f0:6c:d6:03:e4:19:b0:e5:6d:0e:6d:3c: 97:6e:24:08:8e:66:cf:ec:f1:f7:70:ef:43:37:e8:dd:d5:1f: b7:a7:72:c9:55:b9:a5:db:4d:27:8e:1b:64:65:89:76:4c:d5: f2:fe:10:08:74:2b:e1:2e:0d:d1:99:be:ab:aa:83:11:f5:df: 76:49:ec:d3:8b:35:51:e0:7e:54:90:ec:5d:79:47:1f:36:39: 0e:a5:e2:69 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUeRWiEMKpz1maXkfAkQb/t9jdqHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTA0MTIxOFoX DTI2MDgxODA0MTcxOFowMzExMC8GA1UEAxMoMTdENjQzMjUxRUI3NDRDQkU0ODAy NjA4NkNGRTBCQTEzNjEyNUM1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEsweKQ3GEfKBeKgF16EFLSNNkN/T+Hn1+MtmIrN3zJLNHuR04c55VTVUY4 Jd55DkbBvsazLhapELrH+MegNtPmkjbdAtYc/KnShDXmVNxhyYg1/oXmTWFY8s4M 0J8KU3BH7aQ6sn+S5lkbnwzevCp5xHuxGnJggeCKDwjI8pWPuKtNG3vUN406WTA7 AaDUD6Ta3fk2/NGFMeo1YLTEejpalbOljPVs5wiFTbzZIhNpxn4f0YyghrOJEDdf XmmNGfKwMzee6hiswJcb4lTWO2CNSOD3lnRBCWNllCrjDL0vzIUtQj48GPl2Qwwf cH1zdIPZVU5bDabZCBL9pQ5US4kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQX1kMl HrdEy+SAJghs/guhNhJcWTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkxNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGelATANBgkqhkiG9w0BAQsFAAOCAQEAO8DVQBgy13mYiLYsVQaL P337JR1qdtGSUXtCJOeAiXk3Fmr5m2EnZGqITeGRkgji1z1foOMBfagt6JFiDbgh pvIfca2N51C6diYOjgz1YAPKKNlgXqvQqt0cOjfywDYnYckGufRx6qeVXcGkw6pB s48ZRco1ODTZVonltSO+jSwWFvbH+giPbv64V/aAJX1DNuOIWvZEDnhwZMCoEBrS lSL/psT1SBvV8GzWA+QZsOVtDm08l24kCI5mz+zx93DvQzfo3dUft6dyyVW5pdtN J44bZGWJdkzV8v4QCHQr4S4N0Zm+q6qDEfXfdkns04s1UeB+VJDsXXlHHzY5DqXi aQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:06 2025 by rpki-client