$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141889.roa File: AS141889.roa (raw, json) Hash identifier: 9tCBEfq4Sj7q//3ncqRRuhaeP9XlB2VPFo0fB5lsMMU= Subject key identifier: E2:96:F2:42:7E:3B:0D:85:3E:BB:75:5C:A8:BD:BF:6C:D0:ED:A0:DE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0E69DC807CA2977D729C0FCED1FAFAD647C44AFE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141889.roa Signing time: Fri 03 Jul 2026 03:24:51 +0000 ROA not before: Fri 03 Jul 2026 03:19:51 +0000 ROA not after: Fri 02 Jul 2027 03:24:51 +0000 asID: 141889 IP address blocks: 103.163.13.0/24 maxlen: 24 2402:63a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:dc:80:7c:a2:97:7d:72:9c:0f:ce:d1:fa:fa:d6:47:c4:4a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 3 03:19:51 2026 GMT Not After : Jul 2 03:24:51 2027 GMT Subject: CN=E296F2427E3B0D853EBB755CA8BDBF6CD0EDA0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:50:23:ff:eb:a7:74:6f:2a:fb:f5:99:44: aa:24:aa:31:ff:20:70:67:43:57:54:80:40:a5:91: 4d:a6:ea:af:64:c8:c3:85:ec:66:c8:6f:78:16:bb: 61:a4:e5:03:22:7b:f6:66:95:d8:e7:09:4c:f7:a4: a1:3b:92:88:24:55:cb:1d:46:f0:d5:1b:7a:61:b0: 94:bc:13:df:13:7b:89:5e:85:63:8f:4a:7f:d4:71: c6:37:66:b9:76:29:7c:32:b7:9b:9c:53:a2:f1:62: a1:39:d5:be:1b:0f:38:69:c7:61:db:2f:18:f2:4f: b9:c3:77:f1:be:c0:c2:47:40:ea:1b:37:32:c4:05: fa:96:26:ac:ce:e5:f2:7d:69:3b:bb:6d:f4:e9:fc: e1:65:c1:9c:83:09:76:50:41:a4:68:61:a4:7c:c0: ad:4b:60:2c:92:1f:18:30:04:11:90:3d:dc:12:16: c5:65:08:0c:04:bf:e3:44:6d:d4:64:32:55:97:37: 6c:c6:d0:a0:8a:dc:7c:5c:4d:83:26:82:3c:99:73: aa:60:fb:b1:9d:98:eb:32:e0:c6:bf:20:03:fd:42: c9:33:1e:35:fa:86:dc:9b:4c:d0:06:52:75:49:33: 52:e7:99:fd:83:18:e0:76:24:7f:80:d5:c6:ed:51: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:F2:42:7E:3B:0D:85:3E:BB:75:5C:A8:BD:BF:6C:D0:ED:A0:DE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141889.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.13.0/24 IPv6: 2402:63a0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:38:bc:ac:53:ed:44:c2:e7:a5:e6:45:4a:b3:01:b6:3c:63: 36:76:4b:db:c4:f9:06:12:d2:9c:07:b0:77:e7:a8:f3:e0:da: 33:9a:04:46:5a:32:85:5a:49:4c:d1:3d:36:97:dd:46:36:91: 6a:69:8d:f1:8c:3a:59:eb:78:85:fb:b2:cc:c9:81:86:dd:c2: 8c:f6:03:e9:63:bf:9e:c0:49:b5:46:36:08:c7:2a:3d:e2:be: 35:a5:bd:4d:18:f6:84:f2:bf:f0:02:34:17:a2:14:32:14:68: a6:11:9a:b2:1f:04:73:37:bd:e0:78:54:41:6e:46:c8:ae:08: 5d:54:20:cb:1e:3b:91:81:3d:1c:ef:92:03:9e:bc:20:c6:8b: f1:e5:9b:db:c9:e0:7c:a6:f1:3c:c7:a6:a8:38:27:a7:5f:99: f2:67:bd:40:5e:1c:1e:98:d0:da:e3:a1:a6:97:af:b0:50:57: 50:05:a7:a0:2b:a7:79:26:d1:39:37:c9:6c:0e:00:d3:9a:9a: 81:86:86:fc:87:5b:41:ca:2b:de:b5:4b:7a:78:69:82:f8:47: 86:5a:d8:4e:68:8d:6d:8f:cb:31:fa:42:4e:f9:ad:e1:92:b3: 49:83:2e:74:7d:78:aa:7f:88:36:e0:fa:41:fe:77:64:12:f1: 4b:d7:53:86 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUDmncgHyil31ynA/O0fr61kfESv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcwMzAzMTk1MVoX DTI3MDcwMjAzMjQ1MVowMzExMC8GA1UEAxMoRTI5NkYyNDI3RTNCMEQ4NTNFQkI3 NTVDQThCREJGNkNEMEVEQTBERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOwSUCP/66d0byr79ZlEqiSqMf8gcGdDV1SAQKWRTabqr2TIw4XsZshveBa7 YaTlAyJ79maV2OcJTPekoTuSiCRVyx1G8NUbemGwlLwT3xN7iV6FY49Kf9Rxxjdm uXYpfDK3m5xTovFioTnVvhsPOGnHYdsvGPJPucN38b7AwkdA6hs3MsQF+pYmrM7l 8n1pO7tt9On84WXBnIMJdlBBpGhhpHzArUtgLJIfGDAEEZA93BIWxWUIDAS/40Rt 1GQyVZc3bMbQoIrcfFxNgyaCPJlzqmD7sZ2Y6zLgxr8gA/1CyTMeNfqG3JtM0AZS dUkzUueZ/YMY4HYkf4DVxu1R1tUCAwEAAaOCAdswggHXMB0GA1UdDgQWBBTilvJC fjsNhT67dVyovb9s0O2g3jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxODg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQAZ6MNMA0EAgACMAcDBQAkAmOgMA0GCSqGSIb3DQEBCwUAA4IBAQCOOLys U+1Ewuel5kVKswG2PGM2dkvbxPkGEtKcB7B356jz4NozmgRGWjKFWklM0T02l91G NpFqaY3xjDpZ63iF+7LMyYGG3cKM9gPpY7+ewEm1RjYIxyo94r41pb1NGPaE8r/w AjQXohQyFGimEZqyHwRzN73geFRBbkbIrghdVCDLHjuRgT0c75IDnrwgxovx5Zvb yeB8pvE8x6aoOCenX5nyZ71AXhwemNDa46Gml6+wUFdQBaegK6d5JtE5N8lsDgDT mpqBhob8h1tByivetUt6eGmC+EeGWthOaI1tj8sx+kJO+a3hkrNJgy50fXiqf4g2 4PpB/ndkEvFL11OG -----END CERTIFICATE-----Generated at Thu Jul 23 23:50:19 2026 by rpki-client