$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa File: AS141376.roa (raw, json) Hash identifier: 7umq8s/UNVwV75lTtTVdyS8ZT8XZuQTO/vpH86JC56U= Subject key identifier: D9:22:5C:F8:8D:3F:D0:D8:F8:A2:5F:13:9F:ED:A7:B8:8B:72:99:D5 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0C99822F4E74E4EA4A276EEBE8E103B374739117 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa Signing time: Fri 13 Mar 2026 02:30:33 +0000 ROA not before: Fri 13 Mar 2026 02:25:33 +0000 ROA not after: Fri 12 Mar 2027 02:30:33 +0000 asID: 141376 IP address blocks: 163.128.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:99:82:2f:4e:74:e4:ea:4a:27:6e:eb:e8:e1:03:b3:74:73:91:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 02:25:33 2026 GMT Not After : Mar 12 02:30:33 2027 GMT Subject: CN=D9225CF88D3FD0D8F8A25F139FEDA7B88B7299D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:76:7b:c1:42:8e:97:76:d6:da:52:fc:c1: 85:34:31:4b:a6:1d:79:81:bf:67:ed:ae:73:fa:ba: 1c:56:23:ba:38:37:4f:b4:61:fb:3f:b8:69:be:92: e1:64:bd:80:f0:3c:53:f5:54:8e:3b:ae:5d:1a:a0: f7:d8:ad:85:2d:51:14:3c:5f:7f:ca:c0:0d:a0:44: 04:29:fb:3e:06:f6:ea:b0:dd:ed:38:92:36:1e:44: a3:ba:87:ad:62:d5:47:96:fc:a1:aa:6f:5e:cd:7a: 9e:37:41:23:bf:ed:87:28:30:20:15:a2:25:71:3b: e0:cb:45:00:bb:55:67:be:13:94:94:7c:bf:b6:1d: db:9a:fb:69:36:bf:1e:3d:60:be:d1:c1:ac:3f:49: 64:93:34:f8:f8:26:51:ce:ff:b6:5b:60:3a:d8:11: ac:e6:89:83:e0:30:07:70:df:7f:60:bd:58:2d:c5: 57:d8:cf:9e:d1:1e:c1:2e:d5:00:de:8b:ec:03:83: 53:53:0b:56:6f:44:22:1a:29:31:51:63:e5:63:f7: 06:b9:76:b2:cc:1f:cf:1e:05:94:97:46:33:2b:37: de:73:ff:27:15:ae:b6:96:59:06:f7:d9:50:d4:e1: fc:0c:a1:21:53:3a:be:3f:58:97:99:67:a4:19:c8: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:5C:F8:8D:3F:D0:D8:F8:A2:5F:13:9F:ED:A7:B8:8B:72:99:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.35.0/24 Signature Algorithm: sha256WithRSAEncryption 09:9a:db:58:c7:15:6d:f5:de:8c:14:94:15:fe:21:c1:07:77: 5e:6b:be:16:b1:2f:ba:80:bc:d0:60:dd:72:a6:9e:bd:b2:e6: f5:76:4d:e7:90:0d:21:50:2b:7c:90:53:0e:54:dc:08:a1:2f: 4c:ba:6b:f6:63:d5:28:d4:14:6f:ce:21:50:d3:8b:0d:b4:38: 1c:76:b8:d9:9e:24:1b:3d:2a:63:cd:a0:17:ce:42:4e:3c:1b: d8:fd:1f:1b:3a:af:52:69:e8:05:44:e0:c3:13:26:06:8f:b7: 54:e3:31:80:a4:94:23:6c:25:66:5b:a7:09:4d:d2:73:5e:8b: 35:c8:28:30:9a:f8:23:43:32:e1:6d:21:af:3a:3a:3a:98:b3: f4:ad:50:d9:df:6d:97:14:5f:5c:8c:f0:8d:f8:7a:69:48:e2: ab:9a:29:f2:07:74:c7:40:98:d0:58:9d:9d:4d:6d:48:eb:7b: ed:89:0f:c3:2c:6c:22:e8:16:7f:54:3b:e4:6e:1d:79:71:3d: 1d:ee:07:ab:ec:f5:e6:5d:a0:4c:dd:f3:46:58:4f:f4:a9:79: a4:c3:72:53:cd:c9:ae:3c:cb:67:52:3f:32:3c:a7:67:39:e1: 05:89:ba:4c:e8:90:3f:0c:81:d5:dc:5a:19:ca:56:aa:6c:a0: 4c:15:66:60 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDJmCL0505OpKJ27r6OEDs3RzkRcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzAyMjUzM1oX DTI3MDMxMjAyMzAzM1owMzExMC8GA1UEAxMoRDkyMjVDRjg4RDNGRDBEOEY4QTI1 RjEzOUZFREE3Qjg4QjcyOTlENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMl0dnvBQo6XdtbaUvzBhTQxS6YdeYG/Z+2uc/q6HFYjujg3T7Rh+z+4ab6S 4WS9gPA8U/VUjjuuXRqg99ithS1RFDxff8rADaBEBCn7Pgb26rDd7TiSNh5Eo7qH rWLVR5b8oapvXs16njdBI7/thygwIBWiJXE74MtFALtVZ74TlJR8v7Yd25r7aTa/ Hj1gvtHBrD9JZJM0+PgmUc7/tltgOtgRrOaJg+AwB3Dff2C9WC3FV9jPntEewS7V AN6L7AODU1MLVm9EIhopMVFj5WP3Brl2sswfzx4FlJdGMys33nP/JxWutpZZBvfZ UNTh/AyhIVM6vj9Yl5lnpBnIoWECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTZIlz4 jT/Q2PiiXxOf7ae4i3KZ1TAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTM3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKOAIzANBgkqhkiG9w0BAQsFAAOCAQEACZrbWMcVbfXejBSUFf4h wQd3Xmu+FrEvuoC80GDdcqaevbLm9XZN55ANIVArfJBTDlTcCKEvTLpr9mPVKNQU b84hUNOLDbQ4HHa42Z4kGz0qY82gF85CTjwb2P0fGzqvUmnoBUTgwxMmBo+3VOMx gKSUI2wlZlunCU3Sc16LNcgoMJr4I0My4W0hrzo6Opiz9K1Q2d9tlxRfXIzwjfh6 aUjiq5op8gd0x0CY0FidnU1tSOt77YkPwyxsIugWf1Q75G4deXE9He4Hq+z15l2g TN3zRlhP9Kl5pMNyU83JrjzLZ1I/MjynZznhBYm6TOiQPwyB1dxaGcpWqmygTBVm YA== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:52 2026 by rpki-client