$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141696.roa File: AS141696.roa (raw, json) Hash identifier: daPig/jfIUvQxt7jSSDNNYziKpDCGr4ACkOwzUixlxo= Subject key identifier: 75:08:1F:10:FD:0A:2A:4D:4B:65:EB:10:12:CA:8E:D0:A5:ED:5B:99 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 29A604C348D51F8A21730F035581886BB2FDC189 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141696.roa Signing time: Mon 31 Aug 2026 07:17:04 +0000 ROA not before: Mon 31 Aug 2026 07:12:04 +0000 ROA not after: Mon 30 Aug 2027 07:17:04 +0000 asID: 141696 IP address blocks: 2001:df7:5240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a6:04:c3:48:d5:1f:8a:21:73:0f:03:55:81:88:6b:b2:fd:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 31 07:12:04 2026 GMT Not After : Aug 30 07:17:04 2027 GMT Subject: CN=75081F10FD0A2A4D4B65EB1012CA8ED0A5ED5B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:35:9a:04:97:15:33:95:b0:bc:c5:79:4c: be:fe:d1:cc:f4:70:52:f8:49:4c:2f:2e:b9:1a:66: e1:5f:e1:40:8f:99:97:b8:f5:e9:e1:39:41:79:03: 13:d9:00:72:0d:c8:f1:0f:e4:a6:a6:b6:a4:97:a2: 8e:40:73:f3:13:91:02:6f:14:98:b7:6a:bb:a4:9b: 11:f3:e9:12:85:35:be:41:70:79:df:9c:a6:ad:a3: fd:78:a3:f3:a2:9f:9c:2c:cb:93:50:ae:ac:77:aa: eb:40:fa:74:1a:7c:77:ed:7e:05:b0:c7:68:04:13: 4c:c6:83:dd:b1:cd:06:31:6b:21:5d:00:52:eb:36: f4:b8:c0:59:63:03:8d:d7:1a:db:33:f7:48:47:65: 5c:b2:7d:df:6d:52:26:d6:90:b2:6f:e7:6f:80:08: d3:fd:85:18:9c:b5:50:71:e9:11:1d:88:db:1c:fe: 84:1b:bc:ae:11:89:e8:de:4c:a9:c4:bb:c7:63:4a: 89:6c:3f:7f:4f:6f:b9:df:a4:b2:a2:30:0e:e6:50: 62:e3:06:19:f7:14:e5:00:7d:f3:6b:b7:2b:bd:82: 39:a4:e6:1b:0e:21:77:aa:2c:e6:e5:59:85:84:06: 21:25:87:e6:ef:d3:3c:b1:11:d0:db:61:36:94:36: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:08:1F:10:FD:0A:2A:4D:4B:65:EB:10:12:CA:8E:D0:A5:ED:5B:99 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:5240::/48 Signature Algorithm: sha256WithRSAEncryption 66:e9:a0:97:f3:95:46:b9:3e:0f:de:b7:1c:66:d0:46:96:3c: f0:09:44:2b:4d:d5:8e:11:da:77:20:be:72:af:69:d8:be:1c: 79:1d:d7:27:b5:df:76:c1:96:34:bd:33:ee:47:61:92:3b:56: b9:ee:3e:18:72:b9:f7:61:f8:65:03:07:ca:45:17:80:1a:18: ec:db:fc:46:8e:70:72:6c:20:c2:b6:3e:db:6e:01:e4:34:89: 35:ef:31:36:8b:1e:98:a3:1c:18:62:9b:71:44:0c:27:7a:7b: 11:e7:2f:51:ec:3b:0d:e9:85:04:40:ff:35:07:33:95:31:d8: d6:04:ac:b2:90:4f:ca:bf:26:31:8e:fc:59:04:8f:06:cd:23: 7c:15:11:07:0d:36:6f:f9:a5:2a:b8:aa:f4:b2:06:7d:65:c1: 52:aa:ac:f4:2e:01:cb:51:f9:59:f7:0f:39:08:9e:d7:ca:3c: d8:1c:20:0b:e2:8e:6b:d9:e8:14:9c:5a:5d:13:11:94:69:e3: 96:73:85:6f:60:dc:49:01:d7:a7:00:78:52:91:03:5b:3c:84: 32:e7:07:78:27:c1:af:0b:01:1d:94:12:80:bb:82:32:db:b5: 45:02:f3:e8:5d:5a:ff:4d:7f:c4:7b:4e:b2:97:e8:5a:2e:2c: 13:c8:77:ef -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKaYEw0jVH4ohcw8DVYGIa7L9wYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgzMTA3MTIwNFoX DTI3MDgzMDA3MTcwNFowMzExMC8GA1UEAxMoNzUwODFGMTBGRDBBMkE0RDRCNjVF QjEwMTJDQThFRDBBNUVENUI5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOoNZoElxUzlbC8xXlMvv7RzPRwUvhJTC8uuRpm4V/hQI+Zl7j16eE5QXkD E9kAcg3I8Q/kpqa2pJeijkBz8xORAm8UmLdqu6SbEfPpEoU1vkFwed+cpq2j/Xij 86KfnCzLk1CurHeq60D6dBp8d+1+BbDHaAQTTMaD3bHNBjFrIV0AUus29LjAWWMD jdca2zP3SEdlXLJ9321SJtaQsm/nb4AI0/2FGJy1UHHpER2I2xz+hBu8rhGJ6N5M qcS7x2NKiWw/f09vud+ksqIwDuZQYuMGGfcU5QB982u3K72COaTmGw4hd6os5uVZ hYQGISWH5u/TPLER0NthNpQ2OzECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR1CB8Q /QoqTUtl6xASyo7Qpe1bmTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN91JAMA0GCSqGSIb3DQEBCwUAA4IBAQBm6aCX85VGuT4P3rccZtBG ljzwCUQrTdWOEdp3IL5yr2nYvhx5Hdcntd92wZY0vTPuR2GSO1a57j4Ycrn3Yfhl AwfKRReAGhjs2/xGjnBybCDCtj7bbgHkNIk17zE2ix6YoxwYYptxRAwnensR5y9R 7DsN6YUEQP81BzOVMdjWBKyykE/KvyYxjvxZBI8GzSN8FREHDTZv+aUquKr0sgZ9 ZcFSqqz0LgHLUflZ9w85CJ7XyjzYHCAL4o5r2egUnFpdExGUaeOWc4VvYNxJAden AHhSkQNbPIQy5wd4J8GvCwEdlBKAu4Iy27VFAvPoXVr/TX/Ee06yl+haLiwTyHfv -----END CERTIFICATE-----Generated at Thu Sep 17 05:28:37 2026 by rpki-client