$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa File: AS141350.roa (raw, json) Hash identifier: Ok7kiTgb6QxP4V3HT3KfL0vJ2dmNCCtVBGi2kmws6rA= Subject key identifier: 9A:B9:F1:29:05:7D:44:8B:DF:48:4D:0B:AB:A6:73:DC:56:14:C5:5B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: CAFA8837B658E33B3AD3F4422BDC5437B9C380 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa Signing time: Tue 03 Feb 2026 02:00:00 +0000 ROA not before: Tue 03 Feb 2026 01:55:00 +0000 ROA not after: Tue 02 Feb 2027 02:00:00 +0000 asID: 141350 IP address blocks: 161.248.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:fa:88:37:b6:58:e3:3b:3a:d3:f4:42:2b:dc:54:37:b9:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 3 01:55:00 2026 GMT Not After : Feb 2 02:00:00 2027 GMT Subject: CN=9AB9F129057D448BDF484D0BABA673DC5614C55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:b3:16:d9:e7:b4:4e:21:b3:d8:9b:5a:56: 02:34:01:a4:da:8a:5c:41:18:ae:40:cb:b3:04:cf: bd:5d:ee:05:36:31:a2:25:2c:11:90:f1:65:23:02: d2:26:5f:d5:5d:f7:a8:47:cc:f3:94:77:23:95:62: 4c:ab:7c:a8:83:46:82:c2:57:c2:a3:55:d4:83:a6: 20:8a:78:9e:84:3f:1f:8c:65:d7:39:d4:da:c1:51: 07:64:7f:4d:19:5e:c1:c8:27:08:47:a1:d9:0a:6e: 94:5a:1a:da:24:a8:c3:c7:a7:2e:57:48:c4:a1:a1: 07:30:0e:d5:ad:ea:9f:33:d4:51:45:94:0c:28:d1: af:cc:54:6d:50:2d:48:85:fa:33:cb:af:2e:9d:1d: 9d:75:2c:02:23:05:83:70:19:4c:bb:1b:93:f0:b1: 20:07:99:85:6e:33:8e:63:69:35:3a:96:a9:6e:45: 2c:ab:f7:d3:db:62:75:98:35:7a:5d:93:f0:2d:1b: 35:29:88:b9:a1:a9:be:ff:39:e1:cd:9b:8f:a4:69: 11:db:c5:64:62:9d:70:59:32:d1:f2:de:ea:c9:f4: ae:80:0c:f5:14:d4:d3:50:8f:2c:c7:b7:c9:0e:8c: a9:37:8e:b0:93:34:bf:c0:cd:15:e5:e9:8b:04:ff: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:F1:29:05:7D:44:8B:DF:48:4D:0B:AB:A6:73:DC:56:14:C5:5B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.207.0/24 Signature Algorithm: sha256WithRSAEncryption 05:21:7e:4d:c4:33:20:a2:b1:69:2f:30:07:88:f0:ff:b7:b8: 98:ab:45:a3:04:e8:99:62:aa:12:c6:ed:03:17:99:1f:43:11: 98:da:9f:9a:d0:e5:1c:2e:f5:ee:bb:17:1d:39:c4:09:09:81: fa:09:2c:c5:f3:b4:01:34:5d:31:83:7e:7a:0f:1d:ba:9f:ea: 68:74:34:1f:81:34:f2:28:d2:c3:8f:c8:a6:cf:35:da:d2:d0: 5b:77:a8:07:6f:11:f8:d9:b9:0b:ab:d1:4e:52:cb:5a:93:e9: 3b:7b:03:ca:00:54:48:ee:57:e5:6b:a6:27:f0:ac:5f:d8:d3: 7c:a2:eb:d2:f1:a4:c3:a0:2f:fe:8f:7f:8d:5c:08:5a:9b:c7: b0:0e:39:2d:5f:9a:12:99:2a:e5:dc:05:53:8d:cb:a9:b8:1f: ef:08:95:8c:3b:3f:43:3c:68:cf:18:b5:60:de:8c:a0:03:74: 27:6d:1b:50:29:e7:1f:77:6e:36:74:dc:5b:d1:30:0d:d6:fa: d6:9b:f8:74:81:1d:41:05:24:7e:e6:ef:77:01:44:4b:1f:f4: 2c:14:7d:1c:13:06:ca:40:25:45:e7:2b:5b:0d:88:b8:9e:43: 5b:28:4f:2a:57:10:96:6c:e9:46:5a:5c:3d:5c:db:c3:a9:fe: bc:a0:92:d6 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAMr6iDe2WOM7OtP0QivcVDe5w4AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwMzAxNTUwMFoX DTI3MDIwMjAyMDAwMFowMzExMC8GA1UEAxMoOUFCOUYxMjkwNTdENDQ4QkRGNDg0 RDBCQUJBNjczREM1NjE0QzU1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFgsxbZ57ROIbPYm1pWAjQBpNqKXEEYrkDLswTPvV3uBTYxoiUsEZDxZSMC 0iZf1V33qEfM85R3I5ViTKt8qINGgsJXwqNV1IOmIIp4noQ/H4xl1znU2sFRB2R/ TRlewcgnCEeh2QpulFoa2iSow8enLldIxKGhBzAO1a3qnzPUUUWUDCjRr8xUbVAt SIX6M8uvLp0dnXUsAiMFg3AZTLsbk/CxIAeZhW4zjmNpNTqWqW5FLKv309tidZg1 el2T8C0bNSmIuaGpvv854c2bj6RpEdvFZGKdcFky0fLe6sn0roAM9RTU01CPLMe3 yQ6MqTeOsJM0v8DNFeXpiwT/8ZcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSaufEp BX1Ei99ITQurpnPcVhTFWzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MTM1MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKH4zzANBgkqhkiG9w0BAQsFAAOCAQEABSF+TcQzIKKxaS8wB4jw /7e4mKtFowTomWKqEsbtAxeZH0MRmNqfmtDlHC717rsXHTnECQmB+gksxfO0ATRd MYN+eg8dup/qaHQ0H4E08ijSw4/Ips812tLQW3eoB28R+Nm5C6vRTlLLWpPpO3sD ygBUSO5X5WumJ/CsX9jTfKLr0vGkw6Av/o9/jVwIWpvHsA45LV+aEpkq5dwFU43L qbgf7wiVjDs/Qzxozxi1YN6MoAN0J20bUCnnH3duNnTcW9EwDdb61pv4dIEdQQUk fubvdwFESx/0LBR9HBMGykAlRecrWw2IuJ5DWyhPKlcQlmzpRlpcPVzbw6n+vKCS 1g== -----END CERTIFICATE-----Generated at Mon Mar 2 12:59:50 2026 by rpki-client