$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa File: AS141607.roa (raw, json) Hash identifier: TIelvPE8zVLlcvG2/gCAfLHQUX+ihPgYtBKtmDjSogY= Subject key identifier: EC:EA:73:FA:5D:AE:72:2F:65:10:9C:61:CB:D9:14:F1:03:14:27:38 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57E5739BEE0B95F8602B073F426465A4979B8EF9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa Signing time: Tue 01 Jul 2025 08:00:00 +0000 ROA not before: Tue 01 Jul 2025 07:55:00 +0000 ROA not after: Tue 30 Jun 2026 08:00:00 +0000 asID: 141607 IP address blocks: 103.160.68.0/23 maxlen: 24 2400:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e5:73:9b:ee:0b:95:f8:60:2b:07:3f:42:64:65:a4:97:9b:8e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 07:55:00 2025 GMT Not After : Jun 30 08:00:00 2026 GMT Subject: CN=ECEA73FA5DAE722F65109C61CBD914F103142738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:ea:47:9c:e6:a7:a8:6e:03:17:d4:95:c5: 37:18:b7:ce:aa:a7:32:05:c5:d8:5c:fd:49:b7:e0: 63:0c:9e:09:cb:1e:d6:e8:01:d7:95:71:ab:77:7e: 82:ab:d3:6a:7d:34:77:e0:f4:76:e6:14:84:17:76: 6f:ab:5f:71:df:ca:3d:e7:00:26:c6:83:52:7f:88: 3e:65:20:d5:76:c8:57:c5:24:75:a6:d9:bc:25:e3: fd:24:3e:b2:ca:f4:77:c6:63:35:dc:c2:be:30:c6: aa:df:8b:b3:fb:d5:44:26:ec:e4:84:64:37:b8:1a: ec:c8:a0:70:81:27:ba:3c:75:94:d1:f0:b3:30:53: 02:c8:3f:5c:91:0f:15:07:81:49:90:cf:c6:94:3c: 32:16:37:eb:c3:c2:10:38:fa:df:e5:6e:8d:11:08: 88:a0:8a:cf:91:a2:d8:0e:b7:0e:1a:4d:1b:35:d3: 11:f8:c6:31:99:89:c8:cd:79:54:34:cf:27:75:ec: da:4d:af:ee:2a:f4:1c:1b:7a:ab:b1:59:65:e1:a5: 31:20:db:2c:3c:0f:cf:2b:b4:7b:dd:ec:5e:05:4d: a0:da:5d:82:ce:bc:9e:7d:9b:f3:35:17:a4:14:ec: e1:7a:80:af:cc:67:57:f8:b3:ef:77:89:45:18:3f: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EA:73:FA:5D:AE:72:2F:65:10:9C:61:CB:D9:14:F1:03:14:27:38 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.68.0/23 IPv6: 2400:f060::/32 Signature Algorithm: sha256WithRSAEncryption 2c:91:69:6b:77:b7:91:8f:cf:49:85:8a:04:84:09:35:47:61: b0:4c:f5:61:72:4f:4e:94:19:f6:f1:cb:61:dd:c1:d1:04:84: 63:a4:81:b1:13:b5:f6:a7:c2:88:37:f7:7e:b4:25:09:f5:b3: 38:26:a2:a7:b3:b4:fe:a6:d7:c0:98:e5:d4:48:88:96:c2:bb: c2:c0:03:22:53:bd:67:09:4c:b9:63:90:d8:b6:01:64:dd:05: f0:4c:3a:f7:5a:b9:06:36:54:e2:17:ad:11:4b:9b:9f:b5:fb: 31:72:35:03:74:e4:bc:85:3f:36:1d:ae:31:f7:e6:4d:a3:c8: 3a:6d:b0:7d:81:28:ba:86:1f:db:ed:6c:e0:a8:f1:57:5d:51: 36:0c:6d:3e:b6:79:8f:63:2f:22:32:94:2e:5a:fc:7f:78:f8: b7:78:9b:0c:da:7d:7f:66:6b:6e:00:54:ae:0a:1f:a6:24:b2: 14:e3:16:3a:3f:68:38:28:72:d5:5c:a4:70:01:65:a4:55:74: 8c:e0:50:a8:d2:dd:3b:2f:c7:6b:44:7c:49:07:a8:61:bb:fa: 88:d8:83:17:ef:f1:02:b5:3e:2f:9c:29:db:3a:ff:c5:ff:29: 99:25:48:97:a6:ef:00:a6:cf:fa:44:37:87:89:73:ff:d7:d2: f9:c7:47:6d -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUV+Vzm+4LlfhgKwc/QmRlpJebjvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMTA3NTUwMFoX DTI2MDYzMDA4MDAwMFowMzExMC8GA1UEAxMoRUNFQTczRkE1REFFNzIyRjY1MTA5 QzYxQ0JEOTE0RjEwMzE0MjczODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEX6kec5qeobgMX1JXFNxi3zqqnMgXF2Fz9SbfgYwyeCcse1ugB15Vxq3d+ gqvTan00d+D0duYUhBd2b6tfcd/KPecAJsaDUn+IPmUg1XbIV8UkdabZvCXj/SQ+ ssr0d8ZjNdzCvjDGqt+Ls/vVRCbs5IRkN7ga7MigcIEnujx1lNHwszBTAsg/XJEP FQeBSZDPxpQ8MhY368PCEDj63+VujREIiKCKz5Gi2A63DhpNGzXTEfjGMZmJyM15 VDTPJ3Xs2k2v7ir0HBt6q7FZZeGlMSDbLDwPzyu0e93sXgVNoNpdgs68nn2b8zUX pBTs4XqAr8xnV/iz73eJRRg/O7cCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBTs6nP6 Xa5yL2UQnGHL2RTxAxQnODAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYwNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAWegRDANBAIAAjAHAwUAJADwYDANBgkqhkiG9w0BAQsFAAOCAQEA LJFpa3e3kY/PSYWKBIQJNUdhsEz1YXJPTpQZ9vHLYd3B0QSEY6SBsRO19qfCiDf3 frQlCfWzOCaip7O0/qbXwJjl1EiIlsK7wsADIlO9ZwlMuWOQ2LYBZN0F8Ew691q5 BjZU4hetEUubn7X7MXI1A3TkvIU/Nh2uMffmTaPIOm2wfYEouoYf2+1s4KjxV11R NgxtPrZ5j2MvIjKULlr8f3j4t3ibDNp9f2ZrbgBUrgofpiSyFOMWOj9oOChy1Vyk cAFlpFV0jOBQqNLdOy/Ha0R8SQeoYbv6iNiDF+/xArU+L5wp2zr/xf8pmSVIl6bv AKbP+kQ3h4lz/9fS+cdHbQ== -----END CERTIFICATE-----Generated at Tue Oct 28 13:39:10 2025 by rpki-client