$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141979.roa File: AS141979.roa (raw, json) Hash identifier: /dG0e4cR/F4OKzC/BKXml7kBkx6eqQVk3QMqpVBZPd4= Subject key identifier: 54:63:45:54:3E:F9:C8:3D:5A:DB:5F:62:46:35:87:36:B9:D7:67:91 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 70DFC4F9D5F7AB9EB7ED4E5475CE45D26D423ED5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141979.roa Signing time: Tue 23 Jun 2026 02:22:08 +0000 ROA not before: Tue 23 Jun 2026 02:17:08 +0000 ROA not after: Tue 22 Jun 2027 02:22:08 +0000 asID: 141979 IP address blocks: 103.167.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:c4:f9:d5:f7:ab:9e:b7:ed:4e:54:75:ce:45:d2:6d:42:3e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 23 02:17:08 2026 GMT Not After : Jun 22 02:22:08 2027 GMT Subject: CN=546345543EF9C83D5ADB5F6246358736B9D76791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:93:40:7f:48:89:24:69:a9:20:05:75:ec: 34:8d:e6:e5:ca:eb:87:ff:71:49:a3:15:dd:7f:42: ad:0d:65:c0:0d:47:36:4c:7d:d8:7a:78:5e:5c:eb: c3:5b:ce:75:ec:d3:a3:fd:99:7f:39:b2:53:9b:b0: e4:d5:c6:0c:55:cc:3f:f7:a5:4c:da:1d:bc:e7:f7: ea:de:db:3e:1d:1d:f8:c5:14:c5:3e:e7:36:02:c3: e3:17:d2:c4:64:ab:7a:1a:4d:41:e1:70:9c:dc:18: d2:c5:28:19:8c:b6:29:28:0c:41:43:04:34:a6:00: ac:1c:88:ba:bb:29:31:60:ce:4f:0f:cc:98:70:08: 8d:4c:cc:8c:34:d6:39:0b:7e:40:a2:1c:5b:b8:7f: 71:4b:4f:42:50:a5:d4:75:9e:c5:8e:90:f2:6d:a3: 9f:5f:04:90:ba:54:fb:c0:18:45:eb:69:cf:2b:5f: 82:70:9a:c6:36:77:de:8c:e3:9f:11:fc:0b:a1:ac: 71:b5:f0:e2:26:87:60:d4:b6:fa:94:13:54:5f:29: 12:0d:af:e6:c7:4c:5a:48:c9:9a:b2:82:c3:92:07: 77:15:47:d0:5c:bd:ac:32:fd:53:83:b8:04:94:b6: 09:da:8a:d5:b8:3c:84:00:a0:8e:24:be:20:e2:20: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:63:45:54:3E:F9:C8:3D:5A:DB:5F:62:46:35:87:36:B9:D7:67:91 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.108.0/23 Signature Algorithm: sha256WithRSAEncryption a7:6d:25:11:75:86:16:06:e4:64:da:e6:18:25:81:54:ff:e6: f0:76:6d:ce:c5:7a:b7:fb:2f:aa:d5:b8:ec:2e:41:d3:3d:ee: d8:5e:13:d7:51:83:23:5f:6b:40:09:c4:56:ed:54:e7:ef:37: 7a:86:a4:50:6e:43:46:46:b9:9f:89:06:6f:1a:f8:a4:62:e6: 1f:b4:59:3b:c5:12:88:e4:37:3e:0e:b2:27:ee:ae:5e:79:b5: f3:54:20:9e:94:54:f0:b8:ca:af:ad:cc:3a:9a:f8:3a:1d:f7: fc:7a:fc:40:56:3f:17:37:d9:53:f0:4c:55:02:6b:78:98:3a: ba:cb:01:3c:d0:d3:b4:8f:f3:7a:ee:1e:dc:bd:08:b1:db:71: ec:09:a8:b9:05:7f:00:92:3e:16:3c:6b:f3:bc:55:79:24:e2: e1:b8:a8:38:27:5c:35:48:40:63:ab:61:6f:25:d6:17:21:8f: 6e:44:67:73:82:fe:d0:4a:ff:e4:6e:d5:56:ae:52:14:e3:df: fb:0b:08:9b:86:33:c7:e1:fc:86:a1:72:a1:bb:1a:07:92:69: 0e:d8:2e:b6:cb:53:a6:21:27:43:f7:11:ff:94:bd:84:07:ba: 09:7f:74:c2:e5:c2:27:50:cc:f5:df:3c:99:0d:92:01:8e:4e: fa:43:2b:5b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcN/E+dX3q5637U5Udc5F0m1CPtUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyMzAyMTcwOFoX DTI3MDYyMjAyMjIwOFowMzExMC8GA1UEAxMoNTQ2MzQ1NTQzRUY5QzgzRDVBREI1 RjYyNDYzNTg3MzZCOUQ3Njc5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdWk0B/SIkkaakgBXXsNI3m5crrh/9xSaMV3X9CrQ1lwA1HNkx92Hp4Xlzr w1vOdezTo/2ZfzmyU5uw5NXGDFXMP/elTNodvOf36t7bPh0d+MUUxT7nNgLD4xfS xGSrehpNQeFwnNwY0sUoGYy2KSgMQUMENKYArByIurspMWDOTw/MmHAIjUzMjDTW OQt+QKIcW7h/cUtPQlCl1HWexY6Q8m2jn18EkLpU+8AYRetpzytfgnCaxjZ33ozj nxH8C6GscbXw4iaHYNS2+pQTVF8pEg2v5sdMWkjJmrKCw5IHdxVH0Fy9rDL9U4O4 BJS2CdqK1bg8hACgjiS+IOIgRRMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRUY0VU PvnIPVrbX2JGNYc2uddnkTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTc5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6dsMA0GCSqGSIb3DQEBCwUAA4IBAQCnbSURdYYWBuRk2uYYJYFU/+bw dm3OxXq3+y+q1bjsLkHTPe7YXhPXUYMjX2tACcRW7VTn7zd6hqRQbkNGRrmfiQZv GvikYuYftFk7xRKI5Dc+DrIn7q5eebXzVCCelFTwuMqvrcw6mvg6Hff8evxAVj8X N9lT8ExVAmt4mDq6ywE80NO0j/N67h7cvQix23HsCai5BX8Akj4WPGvzvFV5JOLh uKg4J1w1SEBjq2FvJdYXIY9uRGdzgv7QSv/kbtVWrlIU49/7CwibhjPH4fyGoXKh uxoHkmkO2C62y1OmISdD9xH/lL2EB7oJf3TC5cInUMz13zyZDZIBjk76Qytb -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:04 2026 by rpki-client