$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140423.roa File: AS140423.roa (raw, json) Hash identifier: hLCTuKIqRNd6KWC6uZa5fgAy8LvsNAA8ceMouhNqRfc= Subject key identifier: EC:65:3A:C5:D4:80:60:AF:AB:E9:63:BD:37:25:5F:3D:5E:AB:9D:EE Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 110EBCE5224D6271A57172A2B6E5EF2DA2CC1110 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140423.roa Signing time: Thu 31 Jul 2025 10:00:00 +0000 ROA not before: Thu 31 Jul 2025 09:55:00 +0000 ROA not after: Thu 30 Jul 2026 10:00:00 +0000 asID: 140423 IP address blocks: 2001:df1:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0e:bc:e5:22:4d:62:71:a5:71:72:a2:b6:e5:ef:2d:a2:cc:11:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 09:55:00 2025 GMT Not After : Jul 30 10:00:00 2026 GMT Subject: CN=EC653AC5D48060AFABE963BD37255F3D5EAB9DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:6a:95:b6:9a:b9:71:28:69:3d:88:10:41: 34:6a:d8:98:28:be:45:5c:13:22:d8:4d:78:85:fd: 4b:7a:bf:a7:f1:32:96:e3:c4:3c:55:1e:69:79:f8: 7a:ea:29:d8:93:7e:fb:e8:36:5b:af:14:fc:c3:27: 98:3e:8c:31:55:3a:82:70:d5:a7:0b:46:82:58:a8: 2d:27:b3:99:22:e2:ff:25:21:55:03:4f:d1:d5:f1: fb:42:2d:f2:59:31:05:25:33:ba:81:71:f4:92:5f: 8d:f7:14:d7:05:71:b2:de:89:47:79:14:f4:b7:5c: 91:4a:9b:28:10:ff:5e:f5:af:7c:17:d7:4e:57:c9: 91:88:46:89:fe:2b:bb:21:95:4b:9d:be:f3:e5:ef: 79:7e:b9:d8:ba:09:e2:9d:b9:1d:ed:81:88:71:e7: 1c:a9:ca:c0:da:20:33:f3:ac:d3:a3:e7:b2:72:c2: 4d:e1:3e:d3:35:9d:dd:b6:81:54:b7:f0:6b:19:11: 21:bd:29:4f:c4:ae:08:f4:28:c9:c8:01:4a:fe:1c: b3:a7:b0:0e:c4:3d:6c:d5:ee:3b:f8:d3:fa:54:b1: 43:dd:23:b5:e4:fb:8b:46:1a:72:59:93:dc:ee:4f: f2:76:4a:42:62:7a:44:74:4a:ea:6c:d8:76:55:30: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:65:3A:C5:D4:80:60:AF:AB:E9:63:BD:37:25:5F:3D:5E:AB:9D:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:7140::/48 Signature Algorithm: sha256WithRSAEncryption 68:28:8e:54:dc:e5:b1:81:dd:cd:54:2b:ab:53:18:33:24:ea: b9:a3:87:bb:30:9b:d2:74:44:c0:87:02:10:7c:29:d8:98:28: 11:27:f2:aa:ef:c4:42:f8:a8:41:e1:a6:76:09:bf:72:7a:1b: 74:12:34:77:64:29:8a:41:88:09:68:ea:c3:b4:91:d9:66:76: 09:1c:0c:14:22:4a:0e:8f:dc:09:f0:9e:79:d1:1b:c7:60:72: be:94:73:ef:06:5d:84:d0:5c:01:71:e9:66:f0:77:2b:30:94: 37:86:d8:58:ba:c6:30:a3:e2:c5:94:1a:0a:8f:86:b3:8f:65: ce:47:84:c2:b4:62:5f:98:e7:a7:a2:5f:db:90:ed:dd:48:aa: 72:57:81:6f:a9:83:a3:95:41:2a:97:78:00:44:60:ad:2a:ef: ac:7e:b0:6b:59:e0:ae:27:dd:41:66:97:3d:66:ce:38:61:bf: 14:07:f8:bf:57:4e:0a:e4:fb:16:d8:15:73:9f:4f:53:e7:84: 3c:99:ed:9a:53:6a:35:18:7f:52:b3:82:a3:8a:ab:ec:3e:e2: 6e:6b:6e:db:ae:43:01:58:c7:3d:13:d8:62:5b:1d:12:a5:4c: b9:24:91:4e:56:a9:30:c2:e6:e5:74:42:c4:64:2a:87:c5:bc: de:d5:50:f1 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUEQ685SJNYnGlcXKituXvLaLMERAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTA5NTUwMFoX DTI2MDczMDEwMDAwMFowMzExMC8GA1UEAxMoRUM2NTNBQzVENDgwNjBBRkFCRTk2 M0JEMzcyNTVGM0Q1RUFCOURFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0LapW2mrlxKGk9iBBBNGrYmCi+RVwTIthNeIX9S3q/p/EyluPEPFUeaXn4 euop2JN+++g2W68U/MMnmD6MMVU6gnDVpwtGglioLSezmSLi/yUhVQNP0dXx+0It 8lkxBSUzuoFx9JJfjfcU1wVxst6JR3kU9LdckUqbKBD/XvWvfBfXTlfJkYhGif4r uyGVS52+8+XveX652LoJ4p25He2BiHHnHKnKwNogM/Os06PnsnLCTeE+0zWd3baB VLfwaxkRIb0pT8SuCPQoycgBSv4cs6ewDsQ9bNXuO/jT+lSxQ90jteT7i0YaclmT 3O5P8nZKQmJ6RHRK6mzYdlUwUIUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTsZTrF 1IBgr6vpY703JV89Xqud7jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQyMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfFxQDANBgkqhkiG9w0BAQsFAAOCAQEAaCiOVNzlsYHdzVQr q1MYMyTquaOHuzCb0nREwIcCEHwp2JgoESfyqu/EQvioQeGmdgm/cnobdBI0d2Qp ikGICWjqw7SR2WZ2CRwMFCJKDo/cCfCeedEbx2ByvpRz7wZdhNBcAXHpZvB3KzCU N4bYWLrGMKPixZQaCo+Gs49lzkeEwrRiX5jnp6Jf25Dt3UiqcleBb6mDo5VBKpd4 AERgrSrvrH6wa1ngrifdQWaXPWbOOGG/FAf4v1dOCuT7FtgVc59PU+eEPJntmlNq NRh/UrOCo4qr7D7ibmtu265DAVjHPRPYYlsdEqVMuSSRTlapMMLm5XRCxGQqh8W8 3tVQ8Q== -----END CERTIFICATE-----Generated at Wed Aug 6 03:58:00 2025 by rpki-client