$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141073.roa File: AS141073.roa (raw, json) Hash identifier: ZDacrQiGQUIK+d+TIDXVleIouYGwdcevJ7ZZAevQ/BY= Subject key identifier: 08:7C:A3:F3:11:48:C5:7F:0E:1A:99:1E:2B:80:FD:F4:46:47:A8:39 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 482AFFF8A4941CAF0570CA81EF9C1E210354EB40 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141073.roa Signing time: Mon 29 Jun 2026 03:57:26 +0000 ROA not before: Mon 29 Jun 2026 03:52:26 +0000 ROA not after: Mon 28 Jun 2027 03:57:26 +0000 asID: 141073 IP address blocks: 59.153.24.0/23 maxlen: 24 103.229.200.0/23 maxlen: 24 2001:df7:240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2a:ff:f8:a4:94:1c:af:05:70:ca:81:ef:9c:1e:21:03:54:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 03:52:26 2026 GMT Not After : Jun 28 03:57:26 2027 GMT Subject: CN=087CA3F31148C57F0E1A991E2B80FDF44647A839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:16:47:27:ea:c1:9c:61:d3:ff:fc:fa:f9:04: b9:2b:d8:89:8b:ab:cd:a9:16:27:ae:6f:36:56:f7: 05:65:64:0e:87:1d:99:7a:ad:03:d6:4d:34:7b:5d: 38:e0:e1:ea:93:6a:08:f6:5f:f7:82:a9:e8:2d:2c: ba:71:dc:fc:ab:05:fb:06:79:ae:4d:1f:5f:bb:86: dd:c7:a2:e5:a6:95:fd:a8:fa:7c:b8:c2:53:c1:e3: e1:6a:e9:76:a8:be:4f:8e:f5:0b:e8:17:2b:2f:b7: ff:71:6e:93:43:3a:c2:8b:f0:8b:6f:21:67:bb:3e: 8a:d5:ae:a2:c4:a6:e7:d7:71:25:a6:df:42:53:43: a0:93:ae:c8:01:67:0e:c6:7c:bc:6f:0f:1f:04:86: 9e:5f:51:e6:01:4d:a3:cd:e5:64:88:5b:1d:3c:26: a7:28:eb:ec:2f:6c:90:44:9d:c0:30:5b:bd:c6:6a: c8:05:57:ab:d5:f3:1e:92:d1:37:91:89:d3:aa:0f: 74:d5:eb:bb:68:da:59:21:29:7a:84:91:ff:9c:12: 13:3e:53:0d:50:ff:cc:0a:40:cc:14:d9:89:fd:e6: d6:34:00:d4:68:e6:45:b3:75:68:62:6c:62:2f:18: ec:5b:56:fd:04:24:e1:8d:00:36:4a:12:18:09:4b: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:A3:F3:11:48:C5:7F:0E:1A:99:1E:2B:80:FD:F4:46:47:A8:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.24.0/23 103.229.200.0/23 IPv6: 2001:df7:240::/48 Signature Algorithm: sha256WithRSAEncryption 95:4e:da:b2:0f:57:24:84:e6:2a:8d:88:0c:fa:63:e8:bc:2e: db:a2:0d:e7:59:cb:d6:d4:7f:60:99:0e:37:c4:73:99:14:c4: 73:d9:94:fe:dc:3d:68:ae:27:2e:58:f3:8b:0f:6c:5e:ee:b4: f8:18:f0:bb:a1:cc:13:a7:02:e3:32:85:7d:8d:49:60:8c:5e: c1:94:fd:98:79:36:f6:45:90:7a:c5:ea:c1:18:76:ef:8d:ee: c8:41:ff:12:9c:e0:87:f0:3f:e2:d0:03:a0:34:ee:42:85:54: e0:02:f6:ca:a5:bf:5b:ae:fe:0f:6d:51:5b:6f:47:bb:19:e5: d7:79:c3:7f:ef:d0:0b:bd:82:71:9d:99:7d:7b:2f:25:5e:03: c9:24:36:04:c0:f0:6a:d3:bd:23:fe:33:9e:b7:1c:c3:66:52: f4:8c:af:57:53:58:8f:48:04:d3:d4:b1:7a:b2:a3:f9:d0:64: 3a:2e:fe:a9:c6:43:5c:d6:93:79:d5:1d:08:fe:dd:ad:a4:81: e2:98:38:68:6e:0e:51:c3:15:70:78:66:89:89:23:72:9c:cc: 41:cf:ee:15:92:59:c9:f8:e9:1b:87:9f:c4:eb:8e:77:e2:25: b3:48:a4:6e:08:25:f8:32:fd:32:5b:c9:3d:6d:6b:bc:e0:7c: e3:68:b9:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUSCr/+KSUHK8FcMqB75weIQNU60AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTAzNTIyNloX DTI3MDYyODAzNTcyNlowMzExMC8GA1UEAxMoMDg3Q0EzRjMxMTQ4QzU3RjBFMUE5 OTFFMkI4MEZERjQ0NjQ3QTgzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUWRyfqwZxh0//8+vkEuSvYiYurzakWJ65vNlb3BWVkDocdmXqtA9ZNNHtd OODh6pNqCPZf94Kp6C0sunHc/KsF+wZ5rk0fX7uG3cei5aaV/aj6fLjCU8Hj4Wrp dqi+T471C+gXKy+3/3Fuk0M6wovwi28hZ7s+itWuosSm59dxJabfQlNDoJOuyAFn DsZ8vG8PHwSGnl9R5gFNo83lZIhbHTwmpyjr7C9skESdwDBbvcZqyAVXq9XzHpLR N5GJ06oPdNXru2jaWSEpeoSR/5wSEz5TDVD/zApAzBTZif3m1jQA1GjmRbN1aGJs Yi8Y7FtW/QQk4Y0ANkoSGAlLNqUCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBQIfKPz EUjFfw4amR4rgP30RkeoOTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBO5kYAwQBZ+XIMA8EAgACMAkDBwAgAQ33AkAwDQYJKoZIhvcNAQELBQAD ggEBAJVO2rIPVySE5iqNiAz6Y+i8LtuiDedZy9bUf2CZDjfEc5kUxHPZlP7cPWiu Jy5Y84sPbF7utPgY8LuhzBOnAuMyhX2NSWCMXsGU/Zh5NvZFkHrF6sEYdu+N7shB /xKc4IfwP+LQA6A07kKFVOAC9sqlv1uu/g9tUVtvR7sZ5dd5w3/v0Au9gnGdmX17 LyVeA8kkNgTA8GrTvSP+M563HMNmUvSMr1dTWI9IBNPUsXqyo/nQZDou/qnGQ1zW k3nVHQj+3a2kgeKYOGhuDlHDFXB4ZomJI3KczEHP7hWSWcn46RuHn8TrjnfiJbNI pG4IJfgy/TJbyT1ta7zgfONouag= -----END CERTIFICATE-----Generated at Thu Jul 23 23:51:14 2026 by rpki-client