
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa
File: AS140411.roa (raw, json)
Hash identifier: n6egRxT1YSJYboQA3KMsthquvgsakaqVteuQXdZmhTY=
Subject key identifier: 52:C7:07:25:1F:16:79:B2:E5:9B:D2:B8:C4:EC:20:56:6C:E8:AF:FB
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 45F3C7A0E2BA43C3A60CB97272879BC2586DD573
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa
Signing time: Fri 04 Sep 2026 03:15:28 +0000
ROA not before: Fri 04 Sep 2026 03:10:28 +0000
ROA not after: Fri 03 Sep 2027 03:15:28 +0000
asID: 140411
IP address blocks: 103.54.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f3:c7:a0:e2:ba:43:c3:a6:0c:b9:72:72:87:9b:c2:58:6d:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Sep 4 03:10:28 2026 GMT
Not After : Sep 3 03:15:28 2027 GMT
Subject: CN=52C707251F1679B2E59BD2B8C4EC20566CE8AFFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:9c:1a:07:2d:72:bb:4a:74:e1:dc:c0:03:
17:8b:c0:c2:1c:b6:0d:26:05:c5:b2:0e:65:03:bf:
ec:79:de:32:20:ec:96:4c:80:1f:88:52:82:5d:96:
d0:be:55:18:58:fe:a2:3e:33:71:e4:1e:19:81:8b:
45:f6:15:d8:00:bf:50:4d:6a:ee:32:e9:ab:fa:86:
60:ff:ad:1e:1e:77:f6:71:dd:76:d7:a2:d0:01:17:
64:28:af:20:70:3e:50:25:de:b2:8b:1f:84:13:9a:
93:87:4f:bd:34:30:cc:bb:1f:d5:a0:52:1e:f6:39:
f0:4e:09:86:ad:59:f0:f9:09:2f:da:b4:92:5e:1e:
db:7e:58:7e:05:81:1c:3e:94:f5:51:e6:3f:f1:aa:
7f:ea:71:31:01:e7:f0:2a:03:bf:d9:24:94:d6:e6:
f8:b9:74:d9:30:a9:13:f4:a3:ab:4b:80:44:a9:32:
79:3a:cc:1f:34:4a:17:15:30:26:f4:af:d9:1e:0b:
bc:6d:7a:ae:cc:0a:15:fa:d4:fd:e3:eb:34:c9:83:
82:39:fd:df:85:c3:73:84:69:04:bb:ec:aa:fd:ca:
b7:52:03:f5:d0:02:88:e3:0f:38:b7:09:06:b0:36:
b6:3f:9e:2c:b2:ff:ff:09:b1:84:54:f8:8d:fb:04:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:07:25:1F:16:79:B2:E5:9B:D2:B8:C4:EC:20:56:6C:E8:AF:FB
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140411.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.1.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:78:7e:32:00:13:7d:c6:01:9b:d5:3f:4c:b0:82:e7:cb:
28:4f:83:32:8a:b2:66:92:6e:82:c0:da:2c:3e:3c:d5:a3:33:
7b:7d:5b:cb:34:bc:e1:be:cf:e1:99:27:3e:fe:d3:b1:b5:38:
02:12:cc:a0:d6:3b:7a:24:33:de:c0:9a:8b:be:df:77:6a:af:
30:84:9e:f1:f6:9e:8d:fe:aa:82:8a:d1:67:05:78:50:4b:f0:
e1:73:ed:c1:90:b1:ce:4f:fe:b8:cb:8d:cd:eb:3c:12:6c:c7:
1f:2e:e4:2e:23:4b:44:e1:6c:23:96:4d:02:8a:8f:da:e6:de:
fd:f8:3d:61:29:cc:d1:17:76:08:7b:63:59:f3:ec:7a:33:6e:
23:ee:47:17:cd:be:f0:97:2c:5c:51:b7:66:88:ef:89:38:65:
d6:ec:e6:67:9e:92:6d:5b:91:5c:75:7c:4b:58:9a:ac:31:9f:
d5:20:75:9f:75:71:00:ec:9f:81:3d:0c:e6:b4:09:4a:b0:d2:
17:3b:31:9a:76:94:10:01:81:88:cd:3f:d0:f3:40:0d:cf:c2:
bc:da:80:75:83:d8:aa:26:f3:e7:2b:88:fe:aa:7f:8b:39:66:
9c:b6:d6:3d:80:e2:f2:7d:e0:01:31:d4:0b:c2:05:57:aa:d6:
fa:98:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 05:28:28 2026 by rpki-client