$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa File: AS140012.roa (raw, json) Hash identifier: kR1U8UD7GSHrxbRpIPPmI3cqxC1o9PH/BxgAYArdGr4= Subject key identifier: 38:5E:5B:7B:F3:4C:DE:6C:97:81:18:A9:52:16:E0:65:8C:ED:A7:D7 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 15FC706BF9F47B1A8ADF8C69B89BE5C25108F70D Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa Signing time: Tue 22 Sep 2026 03:08:39 +0000 ROA not before: Tue 22 Sep 2026 03:03:39 +0000 ROA not after: Tue 21 Sep 2027 03:08:39 +0000 asID: 140012 IP address blocks: 161.248.164.0/24 maxlen: 24 161.248.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fc:70:6b:f9:f4:7b:1a:8a:df:8c:69:b8:9b:e5:c2:51:08:f7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Sep 22 03:03:39 2026 GMT Not After : Sep 21 03:08:39 2027 GMT Subject: CN=385E5B7BF34CDE6C978118A95216E0658CEDA7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:13:1a:56:2e:2d:92:6e:17:b0:9d:25:b2: 83:29:41:48:ea:91:2f:89:95:88:02:d6:91:e1:15: 33:f3:fc:ec:5f:89:e8:2c:ca:04:22:b6:30:1f:bf: 8d:ca:0d:e8:16:71:eb:80:a2:56:db:50:62:ad:49: ce:a7:b0:c6:78:09:59:d6:70:4b:a4:60:da:b9:d5: ba:d1:4d:0a:b8:5b:96:a4:b3:a4:9e:a7:bf:d7:b0: 37:86:b1:31:61:df:de:f2:c7:3f:c3:ed:74:a7:33: 75:62:ae:db:e3:81:93:9b:88:a4:61:26:88:50:dd: 88:cf:c4:1a:85:f2:8f:94:ad:96:b7:aa:dd:7d:36: 64:45:d2:d9:51:2b:06:fe:73:64:ba:f2:1e:24:fa: 02:87:20:30:9b:c7:6d:28:77:16:26:e3:d9:eb:43: 4c:cc:a8:01:7d:ed:01:54:59:3f:87:90:f0:e9:8b: 95:0f:01:ab:14:0e:11:eb:f7:c1:1b:b6:57:cb:30: 69:ab:f0:81:97:8d:6e:bd:e9:90:6c:42:b4:c4:b3: 1c:0d:b8:24:dc:f5:70:a6:2e:8c:0b:44:6f:87:e8: c7:67:08:0e:0a:82:c3:0e:81:6d:ad:6b:70:77:da: 22:7a:1e:f2:8d:28:cc:64:b8:da:ad:bf:46:2b:5e: 31:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:5B:7B:F3:4C:DE:6C:97:81:18:A9:52:16:E0:65:8C:ED:A7:D7 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.164.0/23 Signature Algorithm: sha256WithRSAEncryption 56:b3:4d:78:72:2a:ef:1d:ff:9a:ac:0f:93:19:2f:44:fa:b7: 46:2d:8f:20:09:cf:47:d9:3d:a6:12:00:da:1c:4d:ec:5d:17: b8:58:0c:66:cb:ae:e0:a8:49:5e:1d:ad:d0:6d:06:df:66:1a: 34:75:3c:6f:b8:b1:e5:d4:22:64:5e:ef:6f:4e:ed:60:8e:fa: 02:1c:f5:76:29:76:13:26:9d:d5:47:2d:3d:3f:4a:7f:e1:f7: ee:7f:7e:fe:b1:b3:1e:75:bb:df:f9:9d:42:ee:66:b4:21:29: 13:ac:be:3b:ca:2b:98:76:7d:1a:02:92:92:b5:10:f4:50:1e: 6c:01:73:0a:43:de:fa:61:be:c9:b2:24:d1:ee:52:11:e5:0e: 7d:82:85:3e:12:d3:37:d8:12:21:cf:7a:53:1a:e1:09:d9:ef: 71:20:62:4d:15:fb:a0:ef:d0:22:98:50:53:0f:8e:7f:c5:5d: 6f:01:11:c1:40:2c:cd:64:19:7c:fa:f4:6b:ad:4e:25:9c:23: 3c:eb:fb:60:ee:2e:67:9a:72:39:66:33:d2:08:a9:8e:27:86: 71:18:d6:51:c3:ee:80:8e:43:ef:9c:52:fa:04:82:50:5e:2f: ae:bb:3c:2f:de:88:88:61:18:bc:91:6c:20:ef:a9:eb:40:de: a1:06:c4:2f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFfxwa/n0exqK34xpuJvlwlEI9w0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDkyMjAzMDMzOVoX DTI3MDkyMTAzMDgzOVowMzExMC8GA1UEAxMoMzg1RTVCN0JGMzRDREU2Qzk3ODEx OEE5NTIxNkUwNjU4Q0VEQTdENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVNExpWLi2SbhewnSWygylBSOqRL4mViALWkeEVM/P87F+J6CzKBCK2MB+/ jcoN6BZx64CiVttQYq1JzqewxngJWdZwS6Rg2rnVutFNCrhblqSzpJ6nv9ewN4ax MWHf3vLHP8PtdKczdWKu2+OBk5uIpGEmiFDdiM/EGoXyj5Stlreq3X02ZEXS2VEr Bv5zZLryHiT6AocgMJvHbSh3Fibj2etDTMyoAX3tAVRZP4eQ8OmLlQ8BqxQOEev3 wRu2V8swaavwgZeNbr3pkGxCtMSzHA24JNz1cKYujAtEb4fox2cIDgqCww6Bba1r cHfaInoe8o0ozGS42q2/RiteMYECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ4Xlt7 80zebJeBGKlSFuBljO2n1zAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQwMDEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBofikMA0GCSqGSIb3DQEBCwUAA4IBAQBWs014cirvHf+arA+TGS9E+rdG LY8gCc9H2T2mEgDaHE3sXRe4WAxmy67gqEleHa3QbQbfZho0dTxvuLHl1CJkXu9v Tu1gjvoCHPV2KXYTJp3VRy09P0p/4ffuf37+sbMedbvf+Z1C7ma0ISkTrL47yiuY dn0aApKStRD0UB5sAXMKQ976Yb7JsiTR7lIR5Q59goU+EtM32BIhz3pTGuEJ2e9x IGJNFfug79AimFBTD45/xV1vARHBQCzNZBl8+vRrrU4lnCM86/tg7i5nmnI5ZjPS CKmOJ4ZxGNZRw+6AjkPvnFL6BIJQXi+uuzwv3oiIYRi8kWwg76nrQN6hBsQv -----END CERTIFICATE-----Generated at Wed Sep 23 19:13:02 2026 by rpki-client