$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa File: AS140012.roa (raw, json) Hash identifier: BGEsK6/YCxWO2Y1HaixYjYjKqfvxZqp2x8yRluNRNaw= Subject key identifier: E4:DA:00:34:60:53:AE:87:3C:67:A7:12:2E:05:AC:52:7C:BD:AF:6C Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 0832250FCDB9B9CBD3F52645633BA6E81BDCB214 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa Signing time: Fri 14 Aug 2026 08:47:18 +0000 ROA not before: Fri 14 Aug 2026 08:42:18 +0000 ROA not after: Fri 13 Aug 2027 08:47:18 +0000 asID: 140012 IP address blocks: 161.248.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:32:25:0f:cd:b9:b9:cb:d3:f5:26:45:63:3b:a6:e8:1b:dc:b2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 14 08:42:18 2026 GMT Not After : Aug 13 08:47:18 2027 GMT Subject: CN=E4DA00346053AE873C67A7122E05AC527CBDAF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:af:b0:c8:88:98:de:25:89:93:c6:32:81: 8f:86:c6:6c:46:ca:c0:19:ad:07:fe:9c:1c:a8:56: 1c:b3:3c:fa:de:7e:81:0c:22:55:ba:e1:4f:f9:14: 18:71:42:de:95:39:74:63:d8:0b:6d:5a:7d:de:83: 9f:e8:aa:99:e4:39:af:eb:64:a2:32:a7:d8:9d:89: f8:bc:22:79:f7:cc:d9:72:4d:04:d1:24:58:b1:e7: 7c:de:26:b3:98:4d:7b:af:d3:bf:97:5a:e7:e9:7e: 4c:49:23:5d:42:cf:3a:7d:55:61:b5:14:8b:93:07: a7:d4:94:c6:fe:ba:6c:da:ff:86:11:93:d8:cd:8e: 72:94:4c:bf:82:4d:99:40:b1:b7:bd:a2:87:e9:c1: 4a:cd:63:37:98:04:60:54:9f:ed:d0:3e:86:98:2c: 61:06:9d:81:bf:08:c7:cc:03:2d:54:ba:29:a2:0f: f5:0a:ac:12:c6:67:c4:59:ac:72:a8:a7:75:db:cd: 89:54:5e:57:e8:6e:49:b7:91:0f:98:d5:6c:73:cd: 15:df:30:38:25:47:14:10:d2:3e:ad:c0:5e:ef:90: f5:95:ec:5b:83:83:df:cd:e3:04:65:ec:ef:15:13: fa:7a:cf:12:2c:7d:d5:d5:73:aa:8c:25:6f:60:16: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:00:34:60:53:AE:87:3C:67:A7:12:2E:05:AC:52:7C:BD:AF:6C X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS140012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.165.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:f3:72:64:bc:9d:70:51:28:82:64:43:02:f3:68:1b:96:7e: 8b:71:ca:d0:7b:24:01:5a:da:68:5a:30:16:99:50:76:31:21: 71:09:3d:f8:cd:76:3e:15:30:64:1e:f7:63:45:56:e2:9b:58: e3:c8:55:8e:f9:1f:3f:cc:69:32:9a:38:e5:21:62:f4:0a:e2: 84:e6:7e:89:c2:eb:7b:a9:04:6f:1d:fe:3c:e7:71:71:e8:fd: 2e:c8:ec:61:c2:29:6b:c4:1f:ca:d1:16:38:c2:2c:ca:fc:34: 82:4c:4d:bb:c8:d1:c9:63:f0:c3:b7:34:4a:a1:4d:3d:93:09: 1d:c2:9a:e2:73:ec:4f:0f:61:76:79:5b:e9:cf:42:b7:85:d6: 96:d6:36:f7:93:ff:7f:77:2e:d0:c6:c6:ac:28:6b:f6:dd:89: 31:14:c5:56:2f:9c:aa:10:23:05:7c:6d:eb:c9:3b:ff:c6:0e: 5c:f4:f3:63:7b:d3:d6:4f:97:db:98:25:20:25:bd:d8:45:f8: c6:90:e8:0d:f6:88:32:a1:f4:f9:59:ae:41:ee:4c:82:22:d8: 9c:5f:6c:7a:9a:67:41:9f:54:0d:e0:10:61:94:e9:ab:9b:4b: b9:d7:c7:06:ce:e9:dc:f2:d6:dc:19:5c:d1:7f:5d:47:aa:8c: dd:5c:db:c7 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCDIlD825ucvT9SZFYzum6BvcshQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgxNDA4NDIxOFoX DTI3MDgxMzA4NDcxOFowMzExMC8GA1UEAxMoRTREQTAwMzQ2MDUzQUU4NzNDNjdB NzEyMkUwNUFDNTI3Q0JEQUY2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANItr7DIiJjeJYmTxjKBj4bGbEbKwBmtB/6cHKhWHLM8+t5+gQwiVbrhT/kU GHFC3pU5dGPYC21afd6Dn+iqmeQ5r+tkojKn2J2J+LwieffM2XJNBNEkWLHnfN4m s5hNe6/Tv5da5+l+TEkjXULPOn1VYbUUi5MHp9SUxv66bNr/hhGT2M2OcpRMv4JN mUCxt72ih+nBSs1jN5gEYFSf7dA+hpgsYQadgb8Ix8wDLVS6KaIP9QqsEsZnxFms cqinddvNiVReV+huSbeRD5jVbHPNFd8wOCVHFBDSPq3AXu+Q9ZXsW4OD383jBGXs 7xUT+nrPEix91dVzqowlb2AWhgUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTk2gA0 YFOuhzxnpxIuBaxSfL2vbDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQwMDEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAofilMA0GCSqGSIb3DQEBCwUAA4IBAQAc83JkvJ1wUSiCZEMC82gbln6L ccrQeyQBWtpoWjAWmVB2MSFxCT34zXY+FTBkHvdjRVbim1jjyFWO+R8/zGkymjjl IWL0CuKE5n6Jwut7qQRvHf4853Fx6P0uyOxhwilrxB/K0RY4wizK/DSCTE27yNHJ Y/DDtzRKoU09kwkdwpric+xPD2F2eVvpz0K3hdaW1jb3k/9/dy7QxsasKGv23Ykx FMVWL5yqECMFfG3ryTv/xg5c9PNje9PWT5fbmCUgJb3YRfjGkOgN9ogyofT5Wa5B 7kyCIticX2x6mmdBn1QN4BBhlOmrm0u518cGzunc8tbcGVzRf11HqozdXNvH -----END CERTIFICATE-----Generated at Thu Sep 3 21:55:24 2026 by rpki-client