$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141977.roa File: AS141977.roa (raw, json) Hash identifier: 9DWQHYmxc+vUsrElJIROiLaNG9v6A1pdtfQshPNInvw= Subject key identifier: 98:2B:5D:E5:05:8F:67:15:6E:E9:AD:A9:33:CC:B2:64:AE:3C:EE:8F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 77BDF6C97D6634D5608FD902F96B9B9F690446F7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141977.roa Signing time: Wed 22 Jul 2026 06:18:14 +0000 ROA not before: Wed 22 Jul 2026 06:13:14 +0000 ROA not after: Wed 21 Jul 2027 06:18:14 +0000 asID: 141977 IP address blocks: 103.167.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bd:f6:c9:7d:66:34:d5:60:8f:d9:02:f9:6b:9b:9f:69:04:46:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 22 06:13:14 2026 GMT Not After : Jul 21 06:18:14 2027 GMT Subject: CN=982B5DE5058F67156EE9ADA933CCB264AE3CEE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:6f:64:32:ea:7b:c8:ed:4c:3f:81:24:df: 6d:8d:85:a4:43:83:09:cc:d3:2f:4b:d5:13:84:dd: 5f:e6:07:fd:c5:1c:ce:eb:cd:96:c1:87:4c:46:70: d3:6e:91:9d:27:86:a6:d4:be:36:5f:dd:32:0c:b3: 1c:8b:3e:14:ac:25:21:82:e9:d5:96:fc:e3:59:b1: f2:ed:f1:bd:da:55:95:9b:b5:fc:a1:fb:60:b4:70: 50:4c:be:c8:e7:d3:5b:aa:a4:9b:f2:a6:fb:86:a3: 5e:8c:22:7f:ae:81:c9:97:de:e8:2f:34:5d:58:f3: 6f:bc:b9:87:2d:12:9f:26:11:ec:89:86:8b:3d:8f: 28:54:be:69:86:e2:bd:2e:3d:57:4c:67:01:16:a6: 46:09:87:39:3e:3c:6d:d0:c6:93:02:57:c1:d7:ff: c1:d7:24:16:bb:e5:53:60:3f:03:7a:55:49:58:13: a9:a7:38:db:5b:38:f9:96:2c:37:03:dd:9d:28:65: 16:c8:72:b0:ab:43:ef:e6:a4:05:fa:d0:bf:d2:13: 34:cc:5d:ef:ea:18:5f:f5:1c:a1:1f:8d:ad:d9:92: 2f:36:ef:fd:c2:3d:45:cb:f0:21:2f:2e:3b:a0:a2: 15:87:a5:46:82:e8:1c:fe:69:6c:fb:d9:07:fe:5e: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:5D:E5:05:8F:67:15:6E:E9:AD:A9:33:CC:B2:64:AE:3C:EE:8F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141977.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.24.0/24 Signature Algorithm: sha256WithRSAEncryption 11:cc:6b:b2:ef:37:7b:e6:d0:58:82:b9:fe:47:47:a6:50:f3: d7:45:c2:76:1d:f4:c9:18:b2:17:b2:c7:e8:e0:b3:e7:97:2e: b8:85:2f:09:3a:74:e9:45:33:dc:79:93:bd:f8:42:4f:fa:58: b9:5d:0d:b5:78:2e:61:de:fd:f5:ee:f3:12:81:5b:0b:9f:83: eb:03:f1:a8:4a:47:73:97:fc:4f:e0:22:0c:82:97:82:63:1c: 23:c3:7f:70:cd:50:d3:15:da:fc:bd:70:27:0a:6c:76:ce:3c: 0a:7e:9b:d0:ea:98:50:16:b3:b7:76:54:1d:6e:32:cd:0a:05: a5:d2:64:42:47:8e:79:6b:55:57:f4:b4:a4:e5:6c:46:93:cd: 3c:b5:9c:b6:6a:3f:74:d8:cf:51:de:1e:84:41:16:67:34:82: d2:ca:9c:4d:4e:d4:a0:eb:79:34:79:74:b8:e0:1c:d7:2e:24: 9a:62:97:6a:a3:b3:c9:36:31:b6:7a:17:5a:7c:98:62:8a:ea: 68:14:ca:61:01:31:60:4f:af:9b:d4:46:87:a0:2c:3a:ee:67: ce:5e:22:2e:f0:65:90:ce:f6:b6:4e:68:2b:f5:85:b3:13:34: b3:9f:6d:54:73:f0:66:42:65:03:58:b2:f6:97:2a:cb:af:93: ef:c4:0f:22 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUd732yX1mNNVgj9kC+Wubn2kERvcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcyMjA2MTMxNFoX DTI3MDcyMTA2MTgxNFowMzExMC8GA1UEAxMoOTgyQjVERTUwNThGNjcxNTZFRTlB REE5MzNDQ0IyNjRBRTNDRUU4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZNb2Qy6nvI7Uw/gSTfbY2FpEODCczTL0vVE4TdX+YH/cUczuvNlsGHTEZw 026RnSeGptS+Nl/dMgyzHIs+FKwlIYLp1Zb841mx8u3xvdpVlZu1/KH7YLRwUEy+ yOfTW6qkm/Km+4ajXowif66ByZfe6C80XVjzb7y5hy0SnyYR7ImGiz2PKFS+aYbi vS49V0xnARamRgmHOT48bdDGkwJXwdf/wdckFrvlU2A/A3pVSVgTqac421s4+ZYs NwPdnShlFshysKtD7+akBfrQv9ITNMxd7+oYX/UcoR+NrdmSLzbv/cI9RcvwIS8u O6CiFYelRoLoHP5pbPvZB/5ehQMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSYK13l BY9nFW7prakzzLJkrjzujzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6cYMA0GCSqGSIb3DQEBCwUAA4IBAQARzGuy7zd75tBYgrn+R0emUPPX RcJ2HfTJGLIXssfo4LPnly64hS8JOnTpRTPceZO9+EJP+li5XQ21eC5h3v317vMS gVsLn4PrA/GoSkdzl/xP4CIMgpeCYxwjw39wzVDTFdr8vXAnCmx2zjwKfpvQ6phQ FrO3dlQdbjLNCgWl0mRCR455a1VX9LSk5WxGk808tZy2aj902M9R3h6EQRZnNILS ypxNTtSg63k0eXS44BzXLiSaYpdqo7PJNjG2ehdafJhiiupoFMphATFgT6+b1EaH oCw67mfOXiIu8GWQzva2Tmgr9YWzEzSzn21Uc/BmQmUDWLL2lyrLr5PvxA8i -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:05 2026 by rpki-client