$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141631.roa File: AS141631.roa (raw, json) Hash identifier: Kclm02T4O8EVYT/6gVG9z3n77DUe2Dmqf8ccCfJe7a8= Subject key identifier: 73:35:DF:1D:51:41:68:6C:15:57:82:08:15:81:01:FE:22:5B:12:7C Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A2C0532703D3BDD3E248C0221EE03F968585F41 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141631.roa Signing time: Wed 15 Oct 2025 07:54:03 +0000 ROA not before: Wed 15 Oct 2025 07:49:03 +0000 ROA not after: Wed 14 Oct 2026 07:54:03 +0000 asID: 141631 IP address blocks: 103.140.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2c:05:32:70:3d:3b:dd:3e:24:8c:02:21:ee:03:f9:68:58:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 07:49:03 2025 GMT Not After : Oct 14 07:54:03 2026 GMT Subject: CN=7335DF1D5141686C15578208158101FE225B127C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:68:61:3a:41:19:f0:26:81:ac:67:a1:90: 86:34:8d:49:a7:5c:a5:ef:55:ae:4c:80:86:84:3b: 0a:62:b9:68:3d:31:31:fa:24:70:df:50:8e:e6:7a: 33:0a:30:75:c3:64:f9:7e:30:09:64:75:76:db:27: 71:d9:6e:06:36:0a:97:d0:37:87:f4:fb:d8:f5:ab: 7e:9a:6e:e5:7c:42:74:a7:0f:b6:8c:22:41:72:c5: 6c:d4:ce:a5:30:30:20:49:30:ae:c8:a5:73:11:fc: c2:a3:f1:3f:4c:74:e1:83:35:3c:ce:af:0f:f9:8c: 8a:16:20:15:94:78:5a:1e:e9:04:9a:98:e5:18:7d: 1d:93:8c:23:e6:e1:3e:d7:6d:35:fa:af:ee:44:44: c9:0d:7a:b0:ae:8c:90:f3:13:c5:ad:14:c5:8b:a3: 59:9d:00:e3:10:7d:41:52:59:e5:c9:70:71:8a:a4: 33:a8:35:c5:3d:f3:b5:dc:83:7f:a3:a3:91:b7:20: 30:28:7c:d6:7a:61:a6:bc:9c:d5:4c:85:fe:2b:f4: 2a:d3:56:6e:9f:4a:c8:5f:a8:22:9f:d2:0e:41:dd: 5c:29:80:12:5e:b8:9a:99:a3:5f:e2:eb:9d:ae:b6: 81:e4:92:d0:67:14:5d:4f:41:08:0a:69:ac:0d:31: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:DF:1D:51:41:68:6C:15:57:82:08:15:81:01:FE:22:5B:12:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.20.0/24 Signature Algorithm: sha256WithRSAEncryption 10:4f:2c:90:0f:bb:54:c4:8c:7f:55:74:63:1f:c0:5f:57:d7: d1:41:b9:12:86:11:e8:af:2d:0e:77:a9:29:6c:ba:0e:7d:e0: 64:5c:ab:43:ae:48:0e:9b:55:db:ef:34:d7:e2:2a:c0:11:89: dd:e5:3b:45:44:c2:23:c3:6b:1f:25:8b:2f:61:16:33:26:23: 8c:0e:b9:fb:a8:39:7f:9d:d1:8b:42:19:6e:1d:37:54:e6:9a: 51:2f:0f:61:54:03:6f:93:17:1b:9a:f1:6c:78:13:3f:74:95: b7:e6:0c:be:52:5c:bf:2b:ff:06:30:c5:e2:27:2d:11:9b:a7: 6f:ac:0d:11:f3:98:7a:f2:68:0f:7a:57:0a:e0:aa:b7:d7:2a: e3:c4:a2:81:8c:aa:9d:4d:ea:31:05:2c:79:d2:81:f9:ff:e1: 60:4d:2d:58:f6:dd:4f:86:11:c1:e9:b9:21:3a:fc:83:e8:ab: 4c:50:bb:98:85:be:cd:d8:64:7a:14:c7:96:8a:46:9f:01:d2: 11:94:e8:b8:9f:2a:d8:02:c9:55:fe:a3:7f:67:1d:e8:7b:58: 7e:7f:ee:6c:9c:3a:ad:99:44:a6:39:72:0c:da:9d:b0:84:47: 22:c2:12:33:f5:76:73:82:b7:5f:5d:52:82:6b:96:90:ec:8f: ce:89:70:8b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWiwFMnA9O90+JIwCIe4D+WhYX0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNTA3NDkwM1oX DTI2MTAxNDA3NTQwM1owMzExMC8GA1UEAxMoNzMzNURGMUQ1MTQxNjg2QzE1NTc4 MjA4MTU4MTAxRkUyMjVCMTI3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWqaGE6QRnwJoGsZ6GQhjSNSadcpe9VrkyAhoQ7CmK5aD0xMfokcN9QjuZ6 MwowdcNk+X4wCWR1dtsncdluBjYKl9A3h/T72PWrfppu5XxCdKcPtowiQXLFbNTO pTAwIEkwrsilcxH8wqPxP0x04YM1PM6vD/mMihYgFZR4Wh7pBJqY5Rh9HZOMI+bh PtdtNfqv7kREyQ16sK6MkPMTxa0UxYujWZ0A4xB9QVJZ5clwcYqkM6g1xT3ztdyD f6OjkbcgMCh81nphpryc1UyF/iv0KtNWbp9KyF+oIp/SDkHdXCmAEl64mpmjX+Lr na62geSS0GcUXU9BCApprA0xd5kCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRzNd8d UUFobBVXgggVgQH+IlsSfDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeMFDANBgkqhkiG9w0BAQsFAAOCAQEAEE8skA+7VMSMf1V0Yx/A X1fX0UG5EoYR6K8tDnepKWy6Dn3gZFyrQ65IDptV2+801+IqwBGJ3eU7RUTCI8Nr HyWLL2EWMyYjjA65+6g5f53Ri0IZbh03VOaaUS8PYVQDb5MXG5rxbHgTP3SVt+YM vlJcvyv/BjDF4ictEZunb6wNEfOYevJoD3pXCuCqt9cq48SigYyqnU3qMQUsedKB +f/hYE0tWPbdT4YRwem5ITr8g+irTFC7mIW+zdhkehTHlopGnwHSEZTouJ8q2ALJ Vf6jf2cd6HtYfn/ubJw6rZlEpjlyDNqdsIRHIsISM/V2c4K3X11SgmuWkOyPzolw iw== -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:17 2025 by rpki-client