$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141454.roa File: AS141454.roa (raw, json) Hash identifier: /P3B1I9dyMnZYhIFUZmngRAx60/m1SNtdA6ibQ90YEc= Subject key identifier: F8:21:9B:AE:C1:1A:B2:A1:F7:5E:B5:75:1D:0C:7F:DA:B7:7D:26:2D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 02978434C42920F09944A2CC2B0F86BA1BE8937F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141454.roa Signing time: Thu 10 Sep 2026 01:20:07 +0000 ROA not before: Thu 10 Sep 2026 01:15:07 +0000 ROA not after: Thu 09 Sep 2027 01:20:07 +0000 asID: 141454 IP address blocks: 163.52.71.0/24 maxlen: 24 2001:df7:6940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:97:84:34:c4:29:20:f0:99:44:a2:cc:2b:0f:86:ba:1b:e8:93:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 10 01:15:07 2026 GMT Not After : Sep 9 01:20:07 2027 GMT Subject: CN=F8219BAEC11AB2A1F75EB5751D0C7FDAB77D262D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:a3:b3:88:86:af:05:83:ff:4d:32:fe:51: 56:a5:99:81:2a:40:30:80:35:76:c9:b4:c0:41:bd: cf:15:5a:8c:73:13:6e:81:85:f0:f2:c1:8a:3a:71: e1:8c:d9:91:a4:34:a4:b1:d2:fd:28:fe:4b:df:88: 21:2d:c0:fa:aa:5d:03:52:21:99:be:42:65:e4:02: e4:b9:c5:33:d6:dd:af:04:1d:b8:7a:3f:5d:6b:6e: f2:20:b9:66:cf:2e:40:50:7a:45:5f:b3:03:65:94: b3:e5:96:98:0a:39:f0:67:65:d2:59:ce:62:1e:7f: 2e:4f:fb:d0:31:ee:c6:64:51:19:19:91:a0:9c:b2: 91:a8:af:17:10:2d:5d:14:3e:04:fa:e6:d5:4c:1d: 99:bb:62:11:ba:e3:3d:5e:e0:10:f2:a8:42:0e:25: c5:d7:aa:f0:0a:4a:51:35:1a:51:3d:9e:a6:e6:7f: f8:1e:e6:fc:f6:f3:26:b7:81:b4:3c:89:df:14:ff: 7b:ac:dc:cd:74:49:ca:c0:44:32:88:b6:5a:ed:72: 78:e0:8c:c4:54:49:d4:b1:e0:14:f3:1c:aa:1d:40: 5c:96:94:71:c8:41:90:11:7d:59:04:0a:55:6f:fa: 58:25:47:9d:d4:c4:c2:9e:cf:77:f6:74:9e:bd:9c: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:21:9B:AE:C1:1A:B2:A1:F7:5E:B5:75:1D:0C:7F:DA:B7:7D:26:2D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141454.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.71.0/24 IPv6: 2001:df7:6940::/48 Signature Algorithm: sha256WithRSAEncryption 1a:3c:b5:72:d3:d6:13:78:67:d6:31:ee:6f:1a:42:d6:88:62: 92:10:90:67:ff:ff:fa:24:6c:b7:32:2d:4a:f0:60:73:c9:4f: c9:18:97:47:a7:f3:8b:00:ee:1e:55:0f:4c:e3:81:6f:3e:55: a8:e8:ec:43:fb:5f:42:0b:29:76:c7:39:10:ec:64:a8:9f:a7: 38:ad:79:f6:0a:dd:db:5b:2e:ef:a5:38:7e:09:3b:0c:f0:70: 94:23:ac:ed:11:2c:05:6b:54:56:61:32:ff:b8:81:5e:c4:27: 2a:1a:c4:e3:a2:48:58:ef:dc:51:07:4c:b7:f4:20:23:50:f1: 4d:e8:42:ef:c5:89:fb:5c:3e:0c:f9:da:c9:4d:d7:45:4e:45: 25:9b:b0:f7:4c:47:32:b5:52:5d:ae:14:bc:60:ce:dd:66:5b: e7:d7:50:80:86:d9:e0:a4:df:51:a2:be:8e:f3:62:c6:28:c6: eb:92:f9:46:f7:42:11:79:16:00:8a:9a:a8:f1:88:56:7b:53: 1d:9c:29:d8:23:1d:1d:33:ae:68:5e:78:a6:fe:a0:ab:40:8f: 7e:9b:52:63:03:06:bf:79:30:bd:44:9b:b9:be:3c:60:de:cf: f5:79:57:bd:49:7c:e6:27:af:15:af:7b:78:64:2a:c6:b0:95: b1:54:9b:6f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUApeENMQpIPCZRKLMKw+Guhvok38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxMDAxMTUwN1oX DTI3MDkwOTAxMjAwN1owMzExMC8GA1UEAxMoRjgyMTlCQUVDMTFBQjJBMUY3NUVC NTc1MUQwQzdGREFCNzdEMjYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4+o7OIhq8Fg/9NMv5RVqWZgSpAMIA1dsm0wEG9zxVajHMTboGF8PLBijpx 4YzZkaQ0pLHS/Sj+S9+IIS3A+qpdA1Ihmb5CZeQC5LnFM9bdrwQduHo/XWtu8iC5 Zs8uQFB6RV+zA2WUs+WWmAo58Gdl0lnOYh5/Lk/70DHuxmRRGRmRoJyykaivFxAt XRQ+BPrm1UwdmbtiEbrjPV7gEPKoQg4lxdeq8ApKUTUaUT2epuZ/+B7m/PbzJreB tDyJ3xT/e6zczXRJysBEMoi2Wu1yeOCMxFRJ1LHgFPMcqh1AXJaUcchBkBF9WQQK VW/6WCVHndTEwp7Pd/Z0nr2cL5MCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBT4IZuu wRqyofdetXUdDH/at30mLTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNDU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozRHMA8EAgACMAkDBwAgAQ33aUAwDQYJKoZIhvcNAQELBQADggEBABo8 tXLT1hN4Z9Yx7m8aQtaIYpIQkGf///okbLcyLUrwYHPJT8kYl0en84sA7h5VD0zj gW8+Vajo7EP7X0ILKXbHORDsZKifpzitefYK3dtbLu+lOH4JOwzwcJQjrO0RLAVr VFZhMv+4gV7EJyoaxOOiSFjv3FEHTLf0ICNQ8U3oQu/FiftcPgz52slN10VORSWb sPdMRzK1Ul2uFLxgzt1mW+fXUICG2eCk31Givo7zYsYoxuuS+Ub3QhF5FgCKmqjx iFZ7Ux2cKdgjHR0zrmheeKb+oKtAj36bUmMDBr95ML1Em7m+PGDez/V5V71JfOYn rxWve3hkKsawlbFUm28= -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:44 2026 by rpki-client