$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141631.roa File: AS141631.roa (raw, json) Hash identifier: +Yzr//Da1XRXDTgg/aiTHJjq5dRro90o/O5mdSuSzY8= Subject key identifier: 11:1B:4A:96:BC:56:22:4F:E5:4D:0E:E9:30:90:27:5B:03:11:75:7B Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 17FAAE85D615402FB0DF5DB5800DF6E81D0680DF Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141631.roa Signing time: Fri 24 Oct 2025 09:34:21 +0000 ROA not before: Fri 24 Oct 2025 09:29:21 +0000 ROA not after: Fri 23 Oct 2026 09:34:21 +0000 asID: 141631 IP address blocks: 157.15.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:fa:ae:85:d6:15:40:2f:b0:df:5d:b5:80:0d:f6:e8:1d:06:80:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Oct 24 09:29:21 2025 GMT Not After : Oct 23 09:34:21 2026 GMT Subject: CN=111B4A96BC56224FE54D0EE93090275B0311757B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f9:02:7c:a1:27:4a:6c:ab:eb:58:04:11:71: 7d:45:5c:c7:6d:43:b2:c4:26:02:07:97:94:9f:12: 17:99:71:1d:44:0a:c8:c7:3f:89:73:b4:9e:6e:cc: c6:2d:b3:e1:be:ac:ca:76:33:23:fa:27:1f:e5:bf: 50:13:69:b8:3c:dc:0f:97:00:7e:25:9f:ca:26:b2: 74:49:bc:4c:0d:8d:55:1a:77:d4:c8:cc:22:a7:d7: 17:96:f7:c5:23:dd:75:b1:89:74:51:d4:4e:74:94: 4f:58:ab:3a:c5:17:50:f8:5b:45:82:3d:e0:6a:a0: d0:f8:63:58:37:a3:5a:03:44:3c:d4:0e:f1:6a:50: 36:ac:a6:0a:05:d2:d4:bd:f2:01:84:54:8e:b1:e6: 8e:ab:88:fa:b1:35:ea:00:63:be:83:e8:0a:d0:ae: 42:41:13:58:6d:3a:a8:29:f7:c5:17:1b:74:a2:89: 81:5b:07:12:0d:57:8c:52:7d:d5:ee:45:2a:4c:59: 2d:cb:04:89:b9:21:47:95:71:e4:4a:46:8a:82:77: 8f:63:25:ac:91:d9:83:cc:29:96:ec:7c:da:5b:53: 40:ce:06:28:80:e7:f7:25:c1:7a:e5:1e:96:cd:12: 67:bd:02:f1:2f:fc:09:cc:85:13:01:15:64:de:9d: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:4A:96:BC:56:22:4F:E5:4D:0E:E9:30:90:27:5B:03:11:75:7B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS141631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:70:03:ad:d1:ba:3c:72:04:4d:e2:c7:bc:3b:bd:7b:59:39: bf:85:b1:b0:f5:c0:a3:cb:da:fb:4b:9c:f5:c1:e9:a8:bb:45: e2:9e:c6:32:f5:a8:f5:1b:b0:62:ad:70:c9:3c:3b:c2:b6:63: 11:20:18:c3:5d:46:14:01:e6:58:12:b2:8d:f1:f8:8d:ae:fe: ad:5a:65:0e:bd:aa:71:04:16:a0:d7:5c:61:50:21:75:31:d4: 8f:ea:c7:94:29:c8:12:35:9f:01:5b:6c:28:d4:53:2b:6a:c5: 97:10:a9:ad:84:ff:54:74:6b:46:6e:a3:cb:f5:58:88:91:c7: 31:1b:4d:9b:ed:73:e3:c9:c1:4d:bc:99:2b:dd:e7:88:1d:43: 66:b1:04:3a:b5:28:7f:83:1e:33:c7:de:5a:ce:09:70:c9:fa: da:c1:08:80:62:5e:9e:86:78:1d:5a:65:99:3a:1f:ff:36:51: 6f:88:bf:e3:40:fd:05:83:28:18:d9:62:00:81:b2:51:2e:68: af:f5:cb:02:5b:ae:fb:ce:d7:b6:20:4c:b6:b3:fa:d6:18:99: 5e:07:da:2b:39:fb:9f:21:68:40:37:44:67:34:3f:89:54:a5: 96:e4:8d:34:ab:24:13:b1:b2:01:a7:a2:54:e3:7a:30:82:1e: 62:3b:03:93 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUF/quhdYVQC+w3121gA326B0GgN8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MTAyNDA5MjkyMVoX DTI2MTAyMzA5MzQyMVowMzExMC8GA1UEAxMoMTExQjRBOTZCQzU2MjI0RkU1NEQw RUU5MzA5MDI3NUIwMzExNzU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOX5AnyhJ0psq+tYBBFxfUVcx21DssQmAgeXlJ8SF5lxHUQKyMc/iXO0nm7M xi2z4b6synYzI/onH+W/UBNpuDzcD5cAfiWfyiaydEm8TA2NVRp31MjMIqfXF5b3 xSPddbGJdFHUTnSUT1irOsUXUPhbRYI94Gqg0PhjWDejWgNEPNQO8WpQNqymCgXS 1L3yAYRUjrHmjquI+rE16gBjvoPoCtCuQkETWG06qCn3xRcbdKKJgVsHEg1XjFJ9 1e5FKkxZLcsEibkhR5Vx5EpGioJ3j2MlrJHZg8wplux82ltTQM4GKIDn9yXBeuUe ls0SZ70C8S/8CcyFEwEVZN6dWV8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQRG0qW vFYiT+VNDukwkCdbAxF1ezAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MTYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZ0P9jANBgkqhkiG9w0BAQsFAAOCAQEAjnADrdG6PHIETeLHvDu9 e1k5v4WxsPXAo8va+0uc9cHpqLtF4p7GMvWo9RuwYq1wyTw7wrZjESAYw11GFAHm WBKyjfH4ja7+rVplDr2qcQQWoNdcYVAhdTHUj+rHlCnIEjWfAVtsKNRTK2rFlxCp rYT/VHRrRm6jy/VYiJHHMRtNm+1z48nBTbyZK93niB1DZrEEOrUof4MeM8feWs4J cMn62sEIgGJenoZ4HVplmTof/zZRb4i/40D9BYMoGNliAIGyUS5or/XLAluu+87X tiBMtrP61hiZXgfaKzn7nyFoQDdEZzQ/iVSlluSNNKskE7GyAaeiVON6MIIeYjsD kw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:08 2025 by rpki-client