$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS141696.roa File: AS141696.roa (raw, json) Hash identifier: Hql6Vo9X5MIGD22588w3JcmNEaKK8bRcAw0dwaYS1Rw= Subject key identifier: 30:AB:82:D0:58:42:0B:25:8A:B3:11:ED:5B:0B:94:E4:E1:E7:BF:7A Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 478A6CD5FEEA7A8AC9FF5ECA1569413DBF3C83D8 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141696.roa Signing time: Mon 31 Aug 2026 07:16:42 +0000 ROA not before: Mon 31 Aug 2026 07:11:42 +0000 ROA not after: Mon 30 Aug 2027 07:16:42 +0000 asID: 141696 IP address blocks: 160.236.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8a:6c:d5:fe:ea:7a:8a:c9:ff:5e:ca:15:69:41:3d:bf:3c:83:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Aug 31 07:11:42 2026 GMT Not After : Aug 30 07:16:42 2027 GMT Subject: CN=30AB82D058420B258AB311ED5B0B94E4E1E7BF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:4a:ac:fc:21:6e:79:4c:f2:de:85:a0:80: ca:51:36:ec:22:12:60:c5:c4:37:9f:ff:32:79:83: 63:7b:65:4a:b3:c9:07:9e:99:54:77:19:a4:8a:94: 32:a1:d1:2d:d6:11:3a:b7:98:52:c2:c8:7f:ac:00: 10:73:6b:f3:f2:18:76:d6:85:e1:0c:1d:9c:7b:9b: a8:f3:43:b3:35:ba:8a:72:4d:28:b3:f1:06:86:f6: ae:3c:7f:47:1c:86:18:09:01:bb:ba:ab:60:27:ca: 12:4c:d6:00:fe:ca:4a:7d:90:44:6d:f2:1c:44:b5: 30:8b:95:4e:3b:82:27:22:a1:47:1a:d7:46:b3:39: 5a:1f:f6:cf:6d:3e:1e:e8:6c:e3:b0:31:72:32:c5: 30:3f:9e:8f:58:15:db:cc:3b:b9:d6:98:21:a9:07: 17:98:f5:3a:f7:bb:7d:5b:25:41:e1:9d:b8:c5:28: 31:25:98:81:5e:58:60:14:e5:e0:4d:3f:75:c0:26: ac:f9:77:a0:0d:17:dd:44:30:57:17:2c:c7:24:ea: 12:67:23:a3:4d:93:09:cf:aa:cb:b2:aa:4d:4b:c6: af:d9:c1:5b:2c:df:f3:84:fa:36:a0:54:29:de:c4: e4:65:0f:97:a9:07:0b:c0:a8:e0:c3:f7:0d:07:e1: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AB:82:D0:58:42:0B:25:8A:B3:11:ED:5B:0B:94:E4:E1:E7:BF:7A X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.229.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:83:77:ad:04:1e:79:97:d0:75:54:5f:35:52:67:3b:3f:d2: af:37:f9:4c:4b:1d:d1:99:e4:8e:05:88:03:03:f8:d4:3a:b0: 3d:fd:d2:8f:7b:67:83:a9:1a:ab:1e:56:86:d0:84:e0:bd:0d: 01:aa:b2:1b:3a:d2:c8:fb:4c:bc:cf:14:61:3d:08:aa:db:0d: 92:bb:7b:eb:20:6e:5b:d0:66:27:1b:fe:49:03:e1:39:2b:d0: e9:80:73:23:65:9d:e5:7e:98:99:f0:92:a6:ce:c7:ab:e8:8f: 9c:8d:e1:b0:dc:15:65:1b:a4:cd:16:b5:ab:b4:cb:2d:98:c2: 6e:39:86:b4:b7:69:aa:88:99:ae:6a:62:0e:36:7e:48:45:c2: 28:de:51:c0:af:ba:fe:dd:8c:e4:0d:bf:85:51:1a:cb:45:e0: 91:31:30:71:41:28:df:63:da:26:3d:7c:e0:1f:e9:3a:ee:7f: e3:fa:a8:e6:0c:99:4e:44:0b:db:f7:3f:d0:64:e9:83:75:c5: 41:94:bf:d2:0f:01:03:57:e8:a3:41:3a:7b:60:68:84:c7:86: 74:ba:6a:78:40:a0:bd:dc:8e:dc:b5:fc:87:48:fb:40:85:48: e8:1b:4b:25:2d:ed:a8:16:85:1c:a7:8f:81:49:b7:af:fc:29: 23:cf:8d:28 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUR4ps1f7qeorJ/17KFWlBPb88g9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDgzMTA3MTE0MloX DTI3MDgzMDA3MTY0MlowMzExMC8GA1UEAxMoMzBBQjgyRDA1ODQyMEIyNThBQjMx MUVENUIwQjk0RTRFMUU3QkY3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7USqz8IW55TPLehaCAylE27CISYMXEN5//MnmDY3tlSrPJB56ZVHcZpIqU MqHRLdYROreYUsLIf6wAEHNr8/IYdtaF4QwdnHubqPNDszW6inJNKLPxBob2rjx/ RxyGGAkBu7qrYCfKEkzWAP7KSn2QRG3yHES1MIuVTjuCJyKhRxrXRrM5Wh/2z20+ Huhs47AxcjLFMD+ej1gV28w7udaYIakHF5j1Ove7fVslQeGduMUoMSWYgV5YYBTl 4E0/dcAmrPl3oA0X3UQwVxcsxyTqEmcjo02TCc+qy7KqTUvGr9nBWyzf84T6NqBU Kd7E5GUPl6kHC8Co4MP3DQfhkLUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQwq4LQ WEILJYqzEe1bC5Tk4ee/ejAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQxNjk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAoOzlMA0GCSqGSIb3DQEBCwUAA4IBAQBOg3etBB55l9B1VF81Umc7P9Kv N/lMSx3RmeSOBYgDA/jUOrA9/dKPe2eDqRqrHlaG0ITgvQ0BqrIbOtLI+0y8zxRh PQiq2w2Su3vrIG5b0GYnG/5JA+E5K9DpgHMjZZ3lfpiZ8JKmzser6I+cjeGw3BVl G6TNFrWrtMstmMJuOYa0t2mqiJmuamIONn5IRcIo3lHAr7r+3YzkDb+FURrLReCR MTBxQSjfY9omPXzgH+k67n/j+qjmDJlORAvb9z/QZOmDdcVBlL/SDwEDV+ijQTp7 YGiEx4Z0ump4QKC93I7ctfyHSPtAhUjoG0slLe2oFoUcp4+BSbev/Ckjz40o -----END CERTIFICATE-----Generated at Thu Sep 17 08:16:00 2026 by rpki-client