$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS141889.roa File: AS141889.roa (raw, json) Hash identifier: iOVlwLtx427Z4LrVxMyzNwZU8Gy7cKmwSAYsM0XDFiY= Subject key identifier: EC:71:B8:CE:56:52:7D:FB:8E:E5:1B:0D:1C:A9:67:89:94:E1:D3:4C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 74C10F75963EA1EFBFE5433AD46E1EE40BCE2896 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141889.roa Signing time: Fri 03 Jul 2026 03:21:56 +0000 ROA not before: Fri 03 Jul 2026 03:16:56 +0000 ROA not after: Fri 02 Jul 2027 03:21:56 +0000 asID: 141889 IP address blocks: 162.4.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c1:0f:75:96:3e:a1:ef:bf:e5:43:3a:d4:6e:1e:e4:0b:ce:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jul 3 03:16:56 2026 GMT Not After : Jul 2 03:21:56 2027 GMT Subject: CN=EC71B8CE56527DFB8EE51B0D1CA9678994E1D34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:f1:89:bf:4c:07:74:2f:b8:c8:68:88:65: df:33:1d:ae:1d:bb:d9:7c:d9:2d:9c:90:62:25:a4: d8:ba:06:c4:fa:4a:ee:5c:c7:3a:d9:ee:14:84:61: 6d:64:a8:4b:f9:90:6d:de:4e:69:f0:1e:6c:f9:3d: d3:1b:e0:33:66:7a:86:e7:7f:03:fb:2e:b2:b4:3b: e5:06:83:b8:bd:a7:34:25:bf:80:ff:68:64:5a:10: fb:3f:3f:72:44:cf:8c:d5:c0:40:6c:db:9b:77:c0: 6b:32:3e:6f:62:bb:b8:81:1a:75:59:d8:10:37:9c: 91:e2:73:7b:f4:56:7c:1d:e7:fb:8f:6b:b7:94:27: 75:e2:98:b0:14:b0:e6:e4:a7:23:dc:32:65:81:dd: 38:8a:06:08:57:fc:4d:73:25:f7:e2:22:41:5b:7d: 4d:0f:33:45:2c:61:22:3a:5f:d7:fe:23:02:f5:ab: f1:92:54:08:3e:18:c2:a5:13:09:34:a2:97:ad:83: e1:df:2f:eb:8d:68:4f:21:74:c5:ae:72:1d:23:15: 6a:0f:71:2b:75:53:33:aa:07:82:6a:98:14:a7:8f: 31:34:d1:a9:06:b3:d7:29:d4:87:57:47:b8:4f:b9: 68:b8:41:90:3c:83:92:8d:bc:e5:00:87:dd:94:86: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:71:B8:CE:56:52:7D:FB:8E:E5:1B:0D:1C:A9:67:89:94:E1:D3:4C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141889.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.243.0/24 Signature Algorithm: sha256WithRSAEncryption 47:40:af:45:b9:4b:e1:5d:18:00:2d:37:ad:07:2c:29:83:a8: 19:0a:a2:e2:b2:d4:d2:cc:bc:be:f7:49:d7:5e:c4:06:0f:c8: f0:09:e4:d5:54:ef:f0:bc:e9:f7:f8:5c:e4:6e:d7:f3:92:87: 61:22:9d:0d:46:26:7c:38:db:e7:61:60:d1:47:73:63:75:0e: f4:86:f2:82:17:1b:6c:6b:9c:d2:67:2b:43:22:fa:d4:1d:dd: 50:48:41:0e:31:7b:ee:67:c3:63:51:30:bf:eb:31:4c:83:91: 1b:4b:bd:23:27:65:8e:61:d0:87:66:aa:c8:23:61:0d:34:c9: 6a:98:84:3c:64:22:93:d7:66:51:c9:1e:53:77:03:b0:a3:8c: f1:0c:74:0f:db:c6:5a:08:55:d0:52:83:27:5e:7a:34:99:5a: 03:e6:bd:67:a7:a9:e5:ea:e8:58:0e:a3:fe:2f:bd:3a:ae:79: b9:02:69:85:c3:c3:e9:92:88:1c:c9:19:bf:11:10:81:7c:bf: 5c:61:bd:15:78:48:47:08:c0:a6:7c:80:f2:4c:2e:8e:26:c0: 06:c8:60:8b:7f:fc:35:df:22:85:34:34:9f:a8:38:cf:40:6c: 79:cd:c1:e0:ba:15:c3:d3:84:5c:1d:05:fd:f4:a3:0b:d6:5d: f2:5c:10:c3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdMEPdZY+oe+/5UM61G4e5AvOKJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDcwMzAzMTY1NloX DTI3MDcwMjAzMjE1NlowMzExMC8GA1UEAxMoRUM3MUI4Q0U1NjUyN0RGQjhFRTUx QjBEMUNBOTY3ODk5NEUxRDM0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9Q8Ym/TAd0L7jIaIhl3zMdrh272XzZLZyQYiWk2LoGxPpK7lzHOtnuFIRh bWSoS/mQbd5OafAebPk90xvgM2Z6hud/A/susrQ75QaDuL2nNCW/gP9oZFoQ+z8/ ckTPjNXAQGzbm3fAazI+b2K7uIEadVnYEDeckeJze/RWfB3n+49rt5QndeKYsBSw 5uSnI9wyZYHdOIoGCFf8TXMl9+IiQVt9TQ8zRSxhIjpf1/4jAvWr8ZJUCD4YwqUT CTSil62D4d8v641oTyF0xa5yHSMVag9xK3VTM6oHgmqYFKePMTTRqQaz1ynUh1dH uE+5aLhBkDyDko285QCH3ZSGGzsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTscbjO VlJ9+47lGw0cqWeJlOHTTDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQxODg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTzMA0GCSqGSIb3DQEBCwUAA4IBAQBHQK9FuUvhXRgALTetBywpg6gZ CqListTSzLy+90nXXsQGD8jwCeTVVO/wvOn3+FzkbtfzkodhIp0NRiZ8ONvnYWDR R3NjdQ70hvKCFxtsa5zSZytDIvrUHd1QSEEOMXvuZ8NjUTC/6zFMg5EbS70jJ2WO YdCHZqrII2ENNMlqmIQ8ZCKT12ZRyR5TdwOwo4zxDHQP28ZaCFXQUoMnXno0mVoD 5r1np6nl6uhYDqP+L706rnm5AmmFw8PpkogcyRm/ERCBfL9cYb0VeEhHCMCmfIDy TC6OJsAGyGCLf/w13yKFNDSfqDjPQGx5zcHguhXD04RcHQX99KML1l3yXBDD -----END CERTIFICATE-----Generated at Fri Jul 24 02:15:23 2026 by rpki-client