$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141673.roa File: AS141673.roa (raw, json) Hash identifier: W/JXVk6uEpOQsU5pGDYZnkgN2N7safncBE6QUO5iFHc= Subject key identifier: 8F:48:64:44:A9:4B:DE:D4:CA:1F:D4:29:7C:45:CA:82:26:44:5E:52 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 18E12D05CD14ED2CAC86B9C2A2DC7637E5190EA1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141673.roa Signing time: Mon 21 Sep 2026 03:48:20 +0000 ROA not before: Mon 21 Sep 2026 03:43:20 +0000 ROA not after: Mon 20 Sep 2027 03:48:20 +0000 asID: 141673 IP address blocks: 103.13.232.0/23 maxlen: 24 103.210.52.0/23 maxlen: 24 202.58.64.0/21 maxlen: 24 2001:df2:3ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e1:2d:05:cd:14:ed:2c:ac:86:b9:c2:a2:dc:76:37:e5:19:0e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 21 03:43:20 2026 GMT Not After : Sep 20 03:48:20 2027 GMT Subject: CN=8F486444A94BDED4CA1FD4297C45CA8226445E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:d5:2c:29:27:be:53:45:31:3a:a7:a1:46: ac:bc:ad:35:97:b2:2c:e4:83:88:f2:9c:9b:7e:ec: 29:dc:64:fa:0b:6c:bf:0c:9c:a0:ba:e2:85:ca:87: c1:cf:44:27:f4:2b:d7:ee:d2:e5:66:68:e8:45:4b: 4c:9f:42:ad:c5:f4:89:8c:b3:7f:b8:9b:93:c0:24: af:ef:55:4f:cf:f8:4e:af:14:f3:ca:9c:15:80:d0: cc:74:f8:43:23:35:df:11:2f:11:ed:27:5c:96:46: 76:5d:5c:f4:a5:f1:6c:43:06:3b:fa:97:12:60:6c: af:33:8c:1c:05:38:a4:b2:41:a0:54:23:88:dd:96: 87:57:82:81:db:26:d2:cf:7c:9a:07:72:cb:88:97: 67:9e:b2:6b:d2:c6:fc:34:79:c4:c5:40:e1:fe:c7: ea:30:f3:03:c7:94:8d:1f:7f:c9:93:00:53:a8:bb: fe:d3:55:15:b2:09:3a:64:9e:d7:6f:40:bf:78:53: 0d:ad:fd:69:db:57:5c:8e:cf:ab:ff:d5:ba:37:32: ae:23:c0:ef:e7:27:54:87:e8:24:16:89:d5:18:56: 34:d8:0b:ff:b2:58:e9:45:38:66:6f:07:c8:32:bb: 7b:f8:67:b4:06:5e:f1:03:18:09:00:9d:5f:f7:ad: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:64:44:A9:4B:DE:D4:CA:1F:D4:29:7C:45:CA:82:26:44:5E:52 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.232.0/23 103.210.52.0/23 202.58.64.0/21 IPv6: 2001:df2:3ec0::/48 Signature Algorithm: sha256WithRSAEncryption 56:35:b7:2f:8d:bd:e7:9f:12:13:72:c8:17:b2:be:c5:f4:ad: 5b:85:da:a4:e7:7b:19:d2:8a:69:77:bd:13:16:62:f0:38:fc: 7c:c2:d7:aa:d8:74:90:b6:a1:3c:39:b5:d1:22:31:af:69:dd: 41:8d:c2:7a:b7:71:33:58:2a:52:ac:68:73:ec:07:1e:9c:27: eb:45:19:a2:c4:75:1a:ad:db:12:dd:37:1f:49:45:03:8b:a5: 6e:b2:d0:69:8b:a8:41:db:80:4b:96:08:f9:e3:5e:55:c0:64: 83:52:58:67:71:d6:42:35:de:2c:ef:8e:57:4d:3f:3d:ed:4a: 34:9a:bb:c4:78:42:7d:3c:af:eb:22:66:fe:17:7e:51:43:2c: e0:54:c4:b8:9d:05:5b:b3:74:23:6f:9b:2d:c1:59:6c:ac:d5: d1:91:c6:d6:22:d8:f7:c8:71:75:25:15:b2:78:06:72:90:5f: cd:85:f4:a3:5d:53:3c:b0:d7:0f:92:a7:cb:c7:0c:b6:99:74: 16:54:67:74:88:f3:2d:7f:e2:9d:f5:12:54:3e:aa:8c:1e:5c: f5:ee:41:ff:58:d9:0c:38:cb:03:11:35:5d:52:40:fd:63:22: 76:a9:58:34:e3:46:7c:c5:a6:ea:4f:d8:46:19:26:13:6b:43: 97:94:65:48 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUGOEtBc0U7SyshrnCotx2N+UZDqEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkyMTAzNDMyMFoX DTI3MDkyMDAzNDgyMFowMzExMC8GA1UEAxMoOEY0ODY0NDRBOTRCREVENENBMUZE NDI5N0M0NUNBODIyNjQ0NUU1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4h1SwpJ75TRTE6p6FGrLytNZeyLOSDiPKcm37sKdxk+gtsvwycoLrihcqH wc9EJ/Qr1+7S5WZo6EVLTJ9CrcX0iYyzf7ibk8Akr+9VT8/4Tq8U88qcFYDQzHT4 QyM13xEvEe0nXJZGdl1c9KXxbEMGO/qXEmBsrzOMHAU4pLJBoFQjiN2Wh1eCgdsm 0s98mgdyy4iXZ56ya9LG/DR5xMVA4f7H6jDzA8eUjR9/yZMAU6i7/tNVFbIJOmSe 129Av3hTDa39adtXXI7Pq//VujcyriPA7+cnVIfoJBaJ1RhWNNgL/7JY6UU4Zm8H yDK7e/hntAZe8QMYCQCdX/ethw0CAwEAAaOCAekwggHlMB0GA1UdDgQWBBSPSGRE qUve1Mof1Cl8RcqCJkReUjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIA ATASAwQBZw3oAwQBZ9I0AwQDyjpAMA8EAgACMAkDBwAgAQ3yPsAwDQYJKoZIhvcN AQELBQADggEBAFY1ty+NveefEhNyyBeyvsX0rVuF2qTnexnSiml3vRMWYvA4/HzC 16rYdJC2oTw5tdEiMa9p3UGNwnq3cTNYKlKsaHPsBx6cJ+tFGaLEdRqt2xLdNx9J RQOLpW6y0GmLqEHbgEuWCPnjXlXAZINSWGdx1kI13izvjldNPz3tSjSau8R4Qn08 r+siZv4XflFDLOBUxLidBVuzdCNvmy3BWWys1dGRxtYi2PfIcXUlFbJ4BnKQX82F 9KNdUzyw1w+Sp8vHDLaZdBZUZ3SI8y1/4p31ElQ+qoweXPXuQf9Y2Qw4ywMRNV1S QP1jInapWDTjRnzFpupP2EYZJhNrQ5eUZUg= -----END CERTIFICATE-----Generated at Wed Sep 23 22:10:06 2026 by rpki-client