$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141891.roa File: AS141891.roa (raw, json) Hash identifier: EjcptA57Q5st6dIBveGuOxbl+czFBrgy7GD4rYuwxg0= Subject key identifier: 37:E2:1C:77:F3:C0:79:FA:E1:1C:C6:CB:18:59:68:9D:9D:10:A1:F4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F704A1CB8FFE2F0D802231286584A1ACAB063EA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141891.roa Signing time: Wed 24 Sep 2025 07:12:32 +0000 ROA not before: Wed 24 Sep 2025 07:07:32 +0000 ROA not after: Wed 23 Sep 2026 07:12:32 +0000 asID: 141891 IP address blocks: 103.163.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:70:4a:1c:b8:ff:e2:f0:d8:02:23:12:86:58:4a:1a:ca:b0:63:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 24 07:07:32 2025 GMT Not After : Sep 23 07:12:32 2026 GMT Subject: CN=37E21C77F3C079FAE11CC6CB1859689D9D10A1F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:8b:1a:e8:9c:0d:59:4f:c8:75:3a:07:48: 87:9d:3f:0b:09:55:8e:d1:1b:e4:e7:42:42:b5:10: fd:f3:8f:09:66:1b:7c:f4:3e:98:69:99:c8:c4:a3: e6:e7:4c:b7:40:ca:2b:ce:88:7b:e5:cd:8a:be:ea: 08:9d:70:1e:3a:02:2c:a1:59:23:e1:ba:ca:74:cc: bb:fe:ad:90:43:26:60:23:f6:2b:20:2d:42:2c:92: 01:c5:4d:70:22:93:06:e0:08:25:d1:e5:bc:f5:3e: 03:18:4d:54:18:c5:cb:5c:75:a3:56:30:b4:60:4a: d1:71:c8:2e:8d:25:b6:48:16:e9:a0:44:54:f7:3d: 86:76:2b:fb:63:b4:ab:7b:67:3f:d6:6d:52:43:0f: fb:e8:b5:21:df:e1:0c:41:b8:bc:e4:2f:c6:41:c1: 2e:b7:eb:43:4c:81:4d:39:40:3a:4b:af:24:95:46: bf:4c:b1:a1:f3:2e:bb:45:ac:7d:14:95:47:90:c9: bf:f1:ac:80:0f:d2:94:c2:72:de:93:47:97:2a:a9: e7:bb:c6:b1:c3:11:e9:e6:54:c5:18:fb:89:d2:b6: da:66:57:8d:fa:26:ce:42:11:f1:df:e5:81:e6:91: 9a:07:8f:84:e4:ec:ba:d8:47:c5:75:36:9c:23:67: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E2:1C:77:F3:C0:79:FA:E1:1C:C6:CB:18:59:68:9D:9D:10:A1:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141891.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.174.0/23 Signature Algorithm: sha256WithRSAEncryption 39:19:b1:1d:9e:c1:e5:c3:bd:42:3b:35:cb:68:e7:ed:f1:6e: e3:58:48:59:c6:b0:05:da:46:d4:ca:7c:ff:ca:ed:6b:a7:03: 85:5d:b9:4e:d9:b2:8e:ac:da:7a:87:2e:e1:03:cb:ea:f2:b0: 92:d7:c3:a2:75:44:47:ad:63:3c:f1:e3:b4:c4:f6:36:34:29: 55:b9:eb:54:3c:fc:3e:32:95:79:47:0c:9c:ed:0d:48:01:b5: 4d:d3:f5:9e:b9:ad:06:ad:39:d6:c1:dd:c6:06:66:83:b8:a8: 37:af:40:37:c5:c0:86:59:1e:56:51:36:ba:22:44:8e:ad:96: 9f:fb:34:33:5b:e9:9e:c3:0d:35:07:08:a7:e6:54:61:37:c9: a5:9c:c0:fa:30:4c:7f:e4:5e:e8:ed:04:b3:cc:79:b7:63:1c: b0:7e:b4:2f:3a:c8:2b:26:05:af:f1:ea:c9:4f:9f:13:7e:93: 20:96:66:81:13:88:ea:9d:65:b4:69:1b:3e:dc:da:ea:d2:a2: 91:c9:d9:a6:8b:43:9d:df:5b:a2:fa:51:cc:80:b3:16:bd:a9: 0f:f9:a6:24:a3:c3:37:8e:e7:31:c2:99:1f:0e:23:7a:14:59: 5c:cb:05:2f:2c:1c:b1:33:e7:8e:34:ae:c5:6c:d9:8b:6e:61: 1a:cc:44:2c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUf3BKHLj/4vDYAiMShlhKGsqwY+owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNDA3MDczMloX DTI2MDkyMzA3MTIzMlowMzExMC8GA1UEAxMoMzdFMjFDNzdGM0MwNzlGQUUxMUND NkNCMTg1OTY4OUQ5RDEwQTFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeQixronA1ZT8h1OgdIh50/CwlVjtEb5OdCQrUQ/fOPCWYbfPQ+mGmZyMSj 5udMt0DKK86Ie+XNir7qCJ1wHjoCLKFZI+G6ynTMu/6tkEMmYCP2KyAtQiySAcVN cCKTBuAIJdHlvPU+AxhNVBjFy1x1o1YwtGBK0XHILo0ltkgW6aBEVPc9hnYr+2O0 q3tnP9ZtUkMP++i1Id/hDEG4vOQvxkHBLrfrQ0yBTTlAOkuvJJVGv0yxofMuu0Ws fRSVR5DJv/GsgA/SlMJy3pNHlyqp57vGscMR6eZUxRj7idK22mZXjfomzkIR8d/l geaRmgePhOTsuthHxXU2nCNnf2MCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ34hx3 88B5+uEcxssYWWidnRCh9DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTg5MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWejrjANBgkqhkiG9w0BAQsFAAOCAQEAORmxHZ7B5cO9Qjs1y2jn 7fFu41hIWcawBdpG1Mp8/8rta6cDhV25Ttmyjqzaeocu4QPL6vKwktfDonVER61j PPHjtMT2NjQpVbnrVDz8PjKVeUcMnO0NSAG1TdP1nrmtBq051sHdxgZmg7ioN69A N8XAhlkeVlE2uiJEjq2Wn/s0M1vpnsMNNQcIp+ZUYTfJpZzA+jBMf+Re6O0Es8x5 t2McsH60LzrIKyYFr/HqyU+fE36TIJZmgROI6p1ltGkbPtza6tKikcnZpotDnd9b ovpRzICzFr2pD/mmJKPDN47nMcKZHw4jehRZXMsFLywcsTPnjjSuxWzZi25hGsxE LA== -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:19 2025 by rpki-client