$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS140421.roa File: AS140421.roa (raw, json) Hash identifier: 4eYpelzRlfn/JSekFeK7MGqHpXTMYSIlvgvlpip/4os= Subject key identifier: EA:7F:A7:84:95:57:C2:FA:69:6E:AC:02:C6:18:5A:75:C4:57:48:FA Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 0E1BE037A59270D23235DB3D74B344170B87268F Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS140421.roa Signing time: Fri 13 Mar 2026 05:02:29 +0000 ROA not before: Fri 13 Mar 2026 04:57:29 +0000 ROA not after: Fri 12 Mar 2027 05:02:29 +0000 asID: 140421 IP address blocks: 202.87.177.0/24 maxlen: 24 202.87.180.0/24 maxlen: 24 202.87.181.0/24 maxlen: 24 202.87.182.0/24 maxlen: 24 202.87.183.0/24 maxlen: 24 202.87.185.0/24 maxlen: 24 202.87.186.0/24 maxlen: 24 202.87.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 14:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1b:e0:37:a5:92:70:d2:32:35:db:3d:74:b3:44:17:0b:87:26:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Mar 13 04:57:29 2026 GMT Not After : Mar 12 05:02:29 2027 GMT Subject: CN=EA7FA7849557C2FA696EAC02C6185A75C45748FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1f:53:82:c8:74:ec:08:18:6c:fc:5f:8e:59: da:12:6b:be:ed:49:8b:7d:6c:10:dc:98:79:f5:35: 34:be:3d:09:25:d2:b8:66:9b:1b:87:e9:fa:f2:0e: fa:66:21:56:fc:74:d9:2c:37:fd:e8:4c:4c:c0:c1: b6:18:db:ad:d0:39:34:10:03:05:9c:f5:ae:7d:3c: a3:41:b7:54:2a:f4:dc:07:c7:45:f3:c4:3a:61:20: 63:e8:71:76:45:e1:58:f8:0b:26:26:c5:42:98:2a: db:95:77:74:bf:1c:3d:54:40:7c:20:cd:cf:65:df: 62:ae:02:dc:e3:ab:7f:03:19:50:ff:27:e4:a0:89: f3:f0:cc:4d:72:ce:8c:6c:99:be:50:9b:ca:ec:15: 0d:22:13:53:5b:db:b4:41:fc:1b:d0:1e:2d:ff:a7: bb:ea:2f:39:39:03:63:f6:86:0c:e4:94:56:a0:ba: db:60:e1:ae:23:52:34:f1:9a:03:15:27:9b:bc:93: c7:68:5b:09:02:3d:df:2a:47:c3:3c:29:b6:d6:4b: 2b:6c:2e:2b:44:5e:c2:6f:bf:49:29:72:23:38:38: 7d:d4:9b:8e:de:4a:4c:f8:60:c9:63:79:8c:23:93: 9e:32:4e:89:7c:54:a4:3d:17:b0:cf:55:1b:ce:6c: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:A7:84:95:57:C2:FA:69:6E:AC:02:C6:18:5A:75:C4:57:48:FA X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS140421.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.177.0/24 202.87.180.0/22 202.87.185.0-202.87.186.255 202.87.189.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f6:ff:22:59:bd:5b:47:de:7a:ff:4b:41:52:7e:76:73:d9: 07:5c:cb:f0:23:4d:56:e5:60:94:a5:c9:c9:9a:be:30:45:f3: c7:58:af:13:06:99:42:9c:9b:c3:c1:f8:05:44:b0:74:0e:02: f4:cb:35:9f:2a:e4:99:a1:cb:ad:68:6b:65:5d:cf:f1:c8:d8: d7:12:37:38:45:e6:06:f3:b4:4d:f3:49:16:53:73:7d:9d:0d: b1:e7:90:b6:c4:27:eb:f9:a8:55:15:6e:11:71:9d:6d:75:34: 7e:96:3f:f0:c7:70:eb:c3:92:3b:1a:a5:2b:10:f1:d6:58:5d: 7b:2d:ee:0d:08:35:a3:72:ee:89:3c:cd:88:ef:8b:06:13:3e: 7f:90:e3:e9:6a:c9:72:82:0e:e2:c1:de:98:87:0a:b5:99:51: cd:a0:9d:bd:94:ef:65:4d:7d:58:51:ab:c5:f3:de:f3:cf:81: 2f:a6:ef:8f:7b:ac:4c:3c:2a:ef:e5:bf:f9:a4:42:b4:7b:01: 21:14:80:12:ae:13:c3:41:e5:7d:92:5d:40:26:12:ac:dc:76: 75:67:cf:24:d6:5c:67:e3:66:ea:1b:5d:39:fd:80:4e:02:01: 32:7e:e7:4b:0b:88:74:6c:79:cc:54:65:fd:ea:2b:eb:92:17: 8e:ba:12:1c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUDhvgN6WScNIyNds9dLNEFwuHJo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNjAzMTMwNDU3MjlaFw0yNzAzMTIwNTAyMjlaMDMxMTAvBgNV BAMTKEVBN0ZBNzg0OTU1N0MyRkE2OTZFQUMwMkM2MTg1QTc1QzQ1NzQ4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwH1OCyHTsCBhs/F+OWdoSa77t SYt9bBDcmHn1NTS+PQkl0rhmmxuH6fryDvpmIVb8dNksN/3oTEzAwbYY263QOTQQ AwWc9a59PKNBt1Qq9NwHx0XzxDphIGPocXZF4Vj4CyYmxUKYKtuVd3S/HD1UQHwg zc9l32KuAtzjq38DGVD/J+SgifPwzE1yzoxsmb5Qm8rsFQ0iE1Nb27RB/BvQHi3/ p7vqLzk5A2P2hgzklFaguttg4a4jUjTxmgMVJ5u8k8doWwkCPd8qR8M8KbbWSyts LitEXsJvv0kpciM4OH3Um47eSkz4YMljeYwjk54yTol8VKQ9F7DPVRvObBmTAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQU6n+nhJVXwvppbqwCxhhadcRXSPowHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzE0MDQyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAMpXsQMEAspXtDAMAwQA yle5AwQAyle6AwQAyle9MA0GCSqGSIb3DQEBCwUAA4IBAQBr9v8iWb1bR956/0tB Un52c9kHXMvwI01W5WCUpcnJmr4wRfPHWK8TBplCnJvDwfgFRLB0DgL0yzWfKuSZ ocutaGtlXc/xyNjXEjc4ReYG87RN80kWU3N9nQ2x55C2xCfr+ahVFW4RcZ1tdTR+ lj/wx3Drw5I7GqUrEPHWWF17Le4NCDWjcu6JPM2I74sGEz5/kOPpaslygg7iwd6Y hwq1mVHNoJ29lO9lTX1YUavF897zz4Evpu+Pe6xMPCrv5b/5pEK0ewEhFIASrhPD QeV9kl1AJhKs3HZ1Z88k1lxn42bqG105/YBOAgEyfudLC4h0bHnMVGX96ivrkheO uhIc -----END CERTIFICATE-----Generated at Tue Mar 24 08:29:55 2026 by rpki-client