$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141986.roa File: AS141986.roa (raw, json) Hash identifier: ljH5j9vFihjn4jSUFsSGjm6xMklMezsN+ItlkQYNMiE= Subject key identifier: 77:C1:FB:F4:BC:60:87:61:95:FF:B1:3C:10:61:B8:7E:07:20:B6:CC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 054BEA541357464292116C8905B0B22E1941D15B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141986.roa Signing time: Fri 10 Jul 2026 07:30:28 +0000 ROA not before: Fri 10 Jul 2026 07:25:28 +0000 ROA not after: Fri 09 Jul 2027 07:30:28 +0000 asID: 141986 IP address blocks: 103.167.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4b:ea:54:13:57:46:42:92:11:6c:89:05:b0:b2:2e:19:41:d1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jul 10 07:25:28 2026 GMT Not After : Jul 9 07:30:28 2027 GMT Subject: CN=77C1FBF4BC60876195FFB13C1061B87E0720B6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:c9:c7:98:74:54:1a:71:7a:d6:29:7d:1d: e2:f4:7f:4d:56:a4:89:4d:7b:fa:91:0d:83:56:85: 5d:8b:b4:b4:8d:c4:34:7a:6a:cd:d7:13:4c:0d:95: 57:43:96:ce:98:cb:3f:4b:45:6f:da:18:d2:90:95: c4:11:c9:03:b4:ee:9d:d0:94:75:9e:60:4d:cf:c3: 9e:3c:90:87:38:a5:33:51:6f:00:f5:96:73:7d:c6: 89:cb:c3:3a:0e:68:e3:53:f0:a2:00:af:b9:d5:87: f0:c5:06:4b:18:5b:2e:41:0a:cb:35:fe:1b:42:85: 0d:03:82:52:a3:9f:1b:6f:7f:b3:f7:33:b7:0c:1d: a5:4b:d2:a9:e9:ae:86:4c:ff:ce:e5:b1:02:4e:2e: 62:3a:32:3b:00:29:04:10:5a:45:8b:d6:a1:48:ee: 15:2d:f6:f3:e8:f6:9f:29:3d:f6:63:27:67:fb:93: 81:31:6c:a8:6b:3a:00:48:f2:93:b5:be:9f:07:44: ca:f3:3b:a5:c9:45:67:69:92:d7:7c:21:6c:98:f2: 9d:41:1b:b9:6f:53:56:a2:e4:3d:b3:38:53:4f:90: d0:b4:d2:f5:74:dc:74:af:9f:4c:63:70:80:2c:18: 16:2f:85:ab:fd:6e:db:47:7a:cf:55:d7:61:4a:48: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C1:FB:F4:BC:60:87:61:95:FF:B1:3C:10:61:B8:7E:07:20:B6:CC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141986.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.220.0/23 Signature Algorithm: sha256WithRSAEncryption a8:95:bf:03:7f:6c:48:0f:e0:c8:33:fe:9b:e5:a4:df:51:63: 23:d5:d3:f5:d1:fe:35:47:73:d8:25:c4:4a:9b:64:94:8d:1a: ad:5b:89:33:c7:43:3b:ad:55:c8:59:73:eb:4f:34:ae:26:3a: 5e:84:55:df:bd:b0:c0:88:57:bf:72:40:4f:91:8d:75:87:26: 86:62:a0:c3:55:7f:37:14:39:3e:6e:da:bd:80:f9:78:74:2c: 77:d7:d5:f8:ea:16:6a:ae:fe:7b:88:05:be:7e:ab:80:2e:09: 4e:54:f3:c3:71:ef:f2:24:a5:4a:c7:aa:87:92:af:a9:01:ac: 19:cc:13:59:8f:81:84:21:aa:d1:cf:74:e7:89:c0:7f:5d:e0: 6d:29:6d:8f:f4:0d:a1:e4:2d:36:7e:2c:9f:4f:a8:18:1e:c9: f8:ef:a1:bb:b7:79:c4:e7:ac:e2:22:16:cc:54:38:88:66:d5: 87:e1:00:83:bf:7a:e0:f8:d0:69:48:1a:d0:65:db:db:7f:a5: b1:91:d8:b2:c5:f3:57:fa:c8:8d:4a:23:7d:a0:7e:98:13:43: 87:24:20:9c:1e:1c:bd:e0:31:a4:bb:eb:96:0e:52:75:84:2b: 62:6f:18:0b:e1:19:4b:9e:ba:d2:56:f6:82:18:d1:7b:1c:a3: 4c:1e:4b:c8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBUvqVBNXRkKSEWyJBbCyLhlB0VswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDcxMDA3MjUyOFoX DTI3MDcwOTA3MzAyOFowMzExMC8GA1UEAxMoNzdDMUZCRjRCQzYwODc2MTk1RkZC MTNDMTA2MUI4N0UwNzIwQjZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM8yceYdFQacXrWKX0d4vR/TVakiU17+pENg1aFXYu0tI3ENHpqzdcTTA2V V0OWzpjLP0tFb9oY0pCVxBHJA7TundCUdZ5gTc/DnjyQhzilM1FvAPWWc33GicvD Og5o41PwogCvudWH8MUGSxhbLkEKyzX+G0KFDQOCUqOfG29/s/cztwwdpUvSqemu hkz/zuWxAk4uYjoyOwApBBBaRYvWoUjuFS328+j2nyk99mMnZ/uTgTFsqGs6AEjy k7W+nwdEyvM7pclFZ2mS13whbJjynUEbuW9TVqLkPbM4U0+Q0LTS9XTcdK+fTGNw gCwYFi+Fq/1u20d6z1XXYUpIpdsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBR3wfv0 vGCHYZX/sTwQYbh+ByC2zDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTg2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6fcMA0GCSqGSIb3DQEBCwUAA4IBAQColb8Df2xID+DIM/6b5aTfUWMj 1dP10f41R3PYJcRKm2SUjRqtW4kzx0M7rVXIWXPrTzSuJjpehFXfvbDAiFe/ckBP kY11hyaGYqDDVX83FDk+btq9gPl4dCx319X46hZqrv57iAW+fquALglOVPPDce/y JKVKx6qHkq+pAawZzBNZj4GEIarRz3TnicB/XeBtKW2P9A2h5C02fiyfT6gYHsn4 76G7t3nE56ziIhbMVDiIZtWH4QCDv3rg+NBpSBrQZdvbf6WxkdiyxfNX+siNSiN9 oH6YE0OHJCCcHhy94DGku+uWDlJ1hCtibxgL4RlLnrrSVvaCGNF7HKNMHkvI -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:05 2026 by rpki-client