$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS141073.roa File: AS141073.roa (raw, json) Hash identifier: BuxgqrqrV82hvfNVz3MuDJSYYbbB2AlQLbgh/BDLvmw= Subject key identifier: 41:8D:E5:F4:2A:FA:AE:BC:BE:C5:4A:B3:9C:99:88:07:21:DA:50:59 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 75E3D02C310EDBC920637C0FA55318DB76279133 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141073.roa Signing time: Sat 27 Jun 2026 07:49:22 +0000 ROA not before: Sat 27 Jun 2026 07:44:22 +0000 ROA not after: Sat 26 Jun 2027 07:49:22 +0000 asID: 141073 IP address blocks: 162.4.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:d0:2c:31:0e:db:c9:20:63:7c:0f:a5:53:18:db:76:27:91:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Jun 27 07:44:22 2026 GMT Not After : Jun 26 07:49:22 2027 GMT Subject: CN=418DE5F42AFAAEBCBEC54AB39C99880721DA5059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:6d:7b:b5:49:8a:fc:70:95:74:93:dc:a7: 1c:5d:f5:7c:a6:52:b5:c3:7b:ae:7d:9f:cc:88:bc: 7b:d3:4f:5c:24:15:01:0a:b6:77:1f:4d:39:6a:03: 37:a5:b7:ce:c7:f5:b2:c7:56:1a:4b:06:5d:74:41: fd:e9:90:e7:04:1d:41:70:7f:10:43:cf:e2:ca:da: 37:46:e4:20:0f:03:4b:e9:4f:fc:ea:7f:f8:f2:c0: 99:bd:4a:55:92:58:e1:5b:ed:15:d6:80:13:76:84: 61:35:25:c6:10:e2:64:fe:20:c4:d9:bf:61:e3:c5: aa:67:f1:4b:10:91:71:69:20:1e:b1:52:d4:81:3a: 7d:27:a8:d8:74:86:f9:62:05:ec:48:e0:eb:70:37: d3:04:10:e0:84:98:28:9f:4b:64:a3:e3:a8:84:84: ad:41:0b:a4:31:bb:b7:1b:88:df:6f:64:0f:e5:fb: dc:83:51:fd:5e:b9:b6:9d:96:26:fe:df:d1:06:7f: 94:94:ec:3f:47:04:40:8c:0c:99:42:dd:27:6f:db: 3c:1a:bc:80:59:51:dd:45:0f:91:da:c5:c2:38:42: e2:00:8c:58:c1:f0:60:4a:11:09:f3:e7:e4:ed:98: b3:1c:98:7d:1d:86:51:35:6b:64:4f:9a:54:a3:45: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8D:E5:F4:2A:FA:AE:BC:BE:C5:4A:B3:9C:99:88:07:21:DA:50:59 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.86.0/23 Signature Algorithm: sha256WithRSAEncryption af:fe:47:02:95:ce:1c:2a:3d:9f:dd:83:56:7a:d5:80:39:ad: 39:9b:24:fb:7c:a5:27:d9:5d:22:a1:82:86:01:07:39:ea:1c: 59:d0:88:de:b7:3c:1a:d2:93:ac:50:0a:45:5c:ff:ee:32:f8: 10:f3:27:4e:ce:bb:56:65:f4:2f:c7:0a:3b:41:5e:65:00:d5: 6f:3f:d5:49:d5:52:83:9f:16:d2:48:8d:f0:78:7f:ed:4f:be: 61:28:74:e6:8e:e7:f1:47:e7:30:bd:9d:34:d2:d0:34:31:b6: 7a:d1:cb:3b:fe:0e:30:42:1b:8e:a7:74:c8:09:71:0c:35:fe: d9:0c:37:b6:b7:bc:c0:46:69:e0:2c:71:85:88:cd:b1:a3:a3: f5:ce:1a:0d:5d:f8:2d:fc:b3:21:bf:10:8c:8c:92:23:a6:6a: 9b:dd:12:d9:d0:99:fd:6e:17:81:07:df:04:ed:da:3b:61:c8: f3:d0:56:eb:25:71:34:6b:f8:23:fc:29:93:a7:07:96:0c:7a: 10:1e:64:c9:39:ce:91:d1:c7:98:6b:c0:e5:7c:fd:dc:0a:14: f5:0b:d7:c9:18:ed:cc:c2:b2:42:15:da:64:42:05:d5:ab:bb: 15:f0:5a:a8:ec:7a:b2:bc:38:47:ce:1f:bc:2e:bb:58:f2:48: b2:df:2d:49 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdePQLDEO28kgY3wPpVMY23YnkTMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDYyNzA3NDQyMloX DTI3MDYyNjA3NDkyMlowMzExMC8GA1UEAxMoNDE4REU1RjQyQUZBQUVCQ0JFQzU0 QUIzOUM5OTg4MDcyMURBNTA1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM65bXu1SYr8cJV0k9ynHF31fKZStcN7rn2fzIi8e9NPXCQVAQq2dx9NOWoD N6W3zsf1ssdWGksGXXRB/emQ5wQdQXB/EEPP4sraN0bkIA8DS+lP/Op/+PLAmb1K VZJY4VvtFdaAE3aEYTUlxhDiZP4gxNm/YePFqmfxSxCRcWkgHrFS1IE6fSeo2HSG +WIF7Ejg63A30wQQ4ISYKJ9LZKPjqISErUELpDG7txuI329kD+X73INR/V65tp2W Jv7f0QZ/lJTsP0cEQIwMmULdJ2/bPBq8gFlR3UUPkdrFwjhC4gCMWMHwYEoRCfPn 5O2YsxyYfR2GUTVrZE+aVKNFWUUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRBjeX0 KvquvL7FSrOcmYgHIdpQWTAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQxMDczLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogRWMA0GCSqGSIb3DQEBCwUAA4IBAQCv/kcClc4cKj2f3YNWetWAOa05 myT7fKUn2V0ioYKGAQc56hxZ0Ijetzwa0pOsUApFXP/uMvgQ8ydOzrtWZfQvxwo7 QV5lANVvP9VJ1VKDnxbSSI3weH/tT75hKHTmjufxR+cwvZ000tA0MbZ60cs7/g4w QhuOp3TICXEMNf7ZDDe2t7zARmngLHGFiM2xo6P1zhoNXfgt/LMhvxCMjJIjpmqb 3RLZ0Jn9bheBB98E7do7Ycjz0FbrJXE0a/gj/CmTpweWDHoQHmTJOc6R0ceYa8Dl fP3cChT1C9fJGO3MwrJCFdpkQgXVq7sV8Fqo7HqyvDhHzh+8LrtY8kiy3y1J -----END CERTIFICATE-----Generated at Sun Jul 19 11:45:33 2026 by rpki-client