$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141618.roa File: AS141618.roa (raw, json) Hash identifier: LGe+zrUKdUkfD0qeSDys1KdljwSuahjD/N1U05z2wHI= Subject key identifier: 08:86:93:49:E7:9C:BF:A3:6C:9F:21:37:D1:1D:CF:A7:79:50:48:01 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1A1CB9E42EC663E0CF11E1D21244ADB65FD6FC0E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141618.roa Signing time: Sat 02 May 2026 21:31:40 +0000 ROA not before: Sat 02 May 2026 21:26:40 +0000 ROA not after: Sat 01 May 2027 21:31:40 +0000 asID: 141618 IP address blocks: 2400:c260::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:b9:e4:2e:c6:63:e0:cf:11:e1:d2:12:44:ad:b6:5f:d6:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:26:40 2026 GMT Not After : May 1 21:31:40 2027 GMT Subject: CN=08869349E79CBFA36C9F2137D11DCFA779504801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:6d:00:ee:9c:02:b8:b1:b5:13:e9:f9:53: a3:db:28:26:6c:7d:bd:c0:95:d9:f5:3f:ff:a7:09: db:50:e9:84:20:df:69:7f:2a:0e:9e:9d:43:32:86: b0:67:4e:78:da:f7:b1:d1:ac:90:56:83:e3:fd:be: b7:1f:92:56:04:77:4f:07:60:7a:43:f3:d0:2c:9c: 07:7c:17:cc:6e:80:92:8b:34:b9:be:a6:64:a6:98: 68:fc:c8:b3:b1:43:1e:36:4b:08:f9:dc:99:77:39: ae:67:de:5e:11:54:cb:a1:13:a8:64:72:bc:f6:74: 92:7e:86:3a:84:49:67:98:6b:a3:c4:6f:98:3e:ba: 34:4e:13:89:40:95:cf:4e:95:09:2e:c3:05:a9:5b: f7:db:6c:43:49:66:cc:c0:bb:c9:14:88:6a:c1:dd: 39:8d:8a:fe:07:09:95:1c:b6:f9:af:9b:84:01:e5: a2:0e:45:70:64:8a:c0:a9:89:f0:bb:7e:54:bb:39: 3c:e7:e0:3f:74:c5:e7:e8:41:6d:f1:4b:fe:e9:9d: 89:89:b4:29:c6:e8:37:33:a8:4e:4d:b8:3d:92:27: c7:e0:0a:45:c4:67:ae:eb:ec:1d:99:18:6f:85:9a: 30:7f:af:ee:66:fc:db:cf:3c:0d:6b:c3:25:e5:c9: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:86:93:49:E7:9C:BF:A3:6C:9F:21:37:D1:1D:CF:A7:79:50:48:01 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:c260::/32 Signature Algorithm: sha256WithRSAEncryption 5d:8e:55:8c:93:e1:8a:71:7d:10:4d:b4:2a:56:b5:b8:fe:eb: d4:92:c8:30:70:e0:ee:d8:d6:2b:4d:a1:54:73:bc:cf:02:5a: 85:21:97:56:3d:45:14:10:d6:9f:03:e6:e5:35:c3:7c:51:a5: 5f:c9:8f:76:5e:1c:81:9f:26:35:b1:e7:7b:78:87:54:bc:59: 55:9f:d2:bf:fd:57:f4:81:1f:bc:23:26:83:73:72:dd:4f:25: 9e:80:ac:41:ac:89:f4:62:54:a2:af:58:a9:52:d0:65:b8:fd: 6f:f9:07:2a:d8:e2:ed:03:16:73:0d:29:7c:86:21:bc:1c:86: 77:df:05:1e:62:61:1c:79:78:85:c8:c3:bb:86:44:cd:69:dc: af:e1:31:78:94:bd:68:af:1f:0f:5c:31:2e:52:37:43:8a:79: 6e:ea:4e:35:f1:b6:7b:f4:d1:2a:3c:72:15:13:0c:f1:6d:50: 78:d1:e2:14:18:97:af:91:92:ab:da:33:9d:7d:b9:aa:d6:93: 1b:56:83:87:c8:a5:e3:c3:f6:0c:7e:84:1b:9d:ec:07:6e:81: eb:eb:5b:1a:48:da:c5:43:9d:69:2b:1a:8c:28:84:7c:ef:c7: 82:18:a0:b5:dd:4d:87:aa:e0:e5:f9:7e:2f:bc:08:bc:39:ac: 2d:0f:fc:fc -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUGhy55C7GY+DPEeHSEkSttl/W/A4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjY0MFoX DTI3MDUwMTIxMzE0MFowMzExMC8GA1UEAxMoMDg4NjkzNDlFNzlDQkZBMzZDOUYy MTM3RDExRENGQTc3OTUwNDgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfbbQDunAK4sbUT6flTo9soJmx9vcCV2fU//6cJ21DphCDfaX8qDp6dQzKG sGdOeNr3sdGskFaD4/2+tx+SVgR3TwdgekPz0CycB3wXzG6Akos0ub6mZKaYaPzI s7FDHjZLCPncmXc5rmfeXhFUy6ETqGRyvPZ0kn6GOoRJZ5hro8RvmD66NE4TiUCV z06VCS7DBalb99tsQ0lmzMC7yRSIasHdOY2K/gcJlRy2+a+bhAHlog5FcGSKwKmJ 8Lt+VLs5POfgP3TF5+hBbfFL/umdiYm0KcboNzOoTk24PZInx+AKRcRnruvsHZkY b4WaMH+v7mb82888DWvDJeXJjh0CAwEAAaOCAc0wggHJMB0GA1UdDgQWBBQIhpNJ 55y/o2yfITfRHc+neVBIATAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJADCYDANBgkqhkiG9w0BAQsFAAOCAQEAXY5VjJPhinF9EE20Kla1uP7r 1JLIMHDg7tjWK02hVHO8zwJahSGXVj1FFBDWnwPm5TXDfFGlX8mPdl4cgZ8mNbHn e3iHVLxZVZ/Sv/1X9IEfvCMmg3Ny3U8lnoCsQayJ9GJUoq9YqVLQZbj9b/kHKtji 7QMWcw0pfIYhvByGd98FHmJhHHl4hcjDu4ZEzWncr+ExeJS9aK8fD1wxLlI3Q4p5 bupONfG2e/TRKjxyFRMM8W1QeNHiFBiXr5GSq9oznX25qtaTG1aDh8il48P2DH6E G53sB26B6+tbGkjaxUOdaSsajCiEfO/Hghigtd1Nh6rg5fl+L7wIvDmsLQ/8/A== -----END CERTIFICATE-----Generated at Sun May 3 00:42:36 2026 by rpki-client