$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140457.roa File: AS140457.roa (raw, json) Hash identifier: lxjPJsMFJZMTrGGvCN0Om8mmq1RfCOWSW3iZOzuOAA8= Subject key identifier: 41:BF:D8:81:A9:A4:F7:3B:DE:64:CB:10:6F:A4:EF:C6:42:A2:A0:A4 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1192CD058540A8687D151F15425A7BC0636E2D7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140457.roa Signing time: Wed 01 Apr 2026 03:39:21 +0000 ROA not before: Wed 01 Apr 2026 03:34:21 +0000 ROA not after: Wed 31 Mar 2027 03:39:21 +0000 asID: 140457 IP address blocks: 2406:3fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:92:cd:05:85:40:a8:68:7d:15:1f:15:42:5a:7b:c0:63:6e:2d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 1 03:34:21 2026 GMT Not After : Mar 31 03:39:21 2027 GMT Subject: CN=41BFD881A9A4F73BDE64CB106FA4EFC642A2A0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:86:c0:57:58:5f:6d:ee:82:96:f1:cf:88:e1: 0f:ee:b2:6b:1e:c9:b0:34:aa:1f:f5:20:1d:93:e4: 5c:c8:20:da:5b:46:61:b1:85:9c:cc:f4:71:7d:08: ea:98:c1:03:b9:f5:28:8e:e6:21:69:f6:6c:c2:07: 13:c8:b8:93:30:14:8a:a9:12:bf:3a:f9:8b:80:a2: a2:2a:69:21:13:45:7d:f9:5c:be:86:c7:72:43:2e: 3e:a7:e6:7b:fc:be:c0:89:a6:ec:d0:0f:75:91:a4: 22:34:1a:b4:7f:ec:21:a1:ab:ef:99:65:63:28:d0: d8:d6:51:77:e4:93:81:86:97:a2:1e:cb:94:eb:4c: e9:c2:28:68:80:d6:b0:ee:4a:65:09:b6:2c:de:79: 2a:56:df:a1:ec:b1:5f:61:01:16:07:42:d4:01:1b: e8:64:7d:65:29:bd:24:2d:57:34:fb:5d:be:8f:04: 6f:4b:ae:9c:19:2a:dc:de:70:11:0b:ad:4f:66:66: ef:83:9c:32:e2:ac:2d:6f:0c:f5:e9:da:f0:1d:38: 3b:44:22:f2:9b:bd:6b:a2:a0:a9:dd:24:9e:22:61: 31:03:03:7e:a2:7f:21:81:fe:8b:ec:0e:bb:9a:fa: 48:ce:8f:f5:23:f2:5b:dd:9e:b0:30:93:22:60:db: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BF:D8:81:A9:A4:F7:3B:DE:64:CB:10:6F:A4:EF:C6:42:A2:A0:A4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS140457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:3fc0::/32 Signature Algorithm: sha256WithRSAEncryption 23:1a:a9:01:62:a6:4a:05:f0:05:01:60:2d:6c:ca:75:cf:34: 0d:fa:b8:f6:5d:6b:4c:47:b7:e5:60:71:3d:3d:6f:4e:05:0c: 3d:f2:6a:3d:15:60:89:40:49:08:15:a0:9d:3d:09:ac:c9:77: 43:2b:1e:83:3b:71:67:bb:a7:86:75:8b:25:b2:8a:99:17:4d: 67:dd:f9:74:d4:35:c2:2f:80:9f:8f:2f:d6:9c:eb:c6:a1:3e: 74:de:53:50:ce:32:73:cb:c7:0c:7c:0d:37:bc:cf:fd:8a:26: 33:af:6f:6b:d5:1f:f0:85:29:21:8c:4e:42:79:36:ff:37:55: f6:8d:e8:47:4b:1c:01:6d:62:61:ec:d3:83:4b:ba:df:71:e3: 65:69:02:a5:ef:03:53:db:c4:71:68:f5:83:0d:30:79:11:70: 26:24:dc:57:22:c7:90:4c:31:43:99:57:9b:c9:5a:fc:dd:43: b2:3c:8c:f6:b5:f4:b3:c7:d3:fb:c3:97:72:fe:c5:af:fc:0c: da:cf:8e:91:7a:c1:6f:25:00:50:c2:5d:19:3a:c4:0c:6e:78: 4c:02:70:12:dd:7e:81:97:b5:90:ca:a0:2a:cf:b6:5d:bd:6c: 02:3f:52:7c:ff:4f:f6:17:4a:9d:fc:44:35:ed:25:2a:a1:b6: ce:dc:4e:02 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUEZLNBYVAqGh9FR8VQlp7wGNuLXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMTAzMzQyMVoX DTI3MDMzMTAzMzkyMVowMzExMC8GA1UEAxMoNDFCRkQ4ODFBOUE0RjczQkRFNjRD QjEwNkZBNEVGQzY0MkEyQTBBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPiGwFdYX23ugpbxz4jhD+6yax7JsDSqH/UgHZPkXMgg2ltGYbGFnMz0cX0I 6pjBA7n1KI7mIWn2bMIHE8i4kzAUiqkSvzr5i4CioippIRNFfflcvobHckMuPqfm e/y+wImm7NAPdZGkIjQatH/sIaGr75llYyjQ2NZRd+STgYaXoh7LlOtM6cIoaIDW sO5KZQm2LN55KlbfoeyxX2EBFgdC1AEb6GR9ZSm9JC1XNPtdvo8Eb0uunBkq3N5w EQutT2Zm74OcMuKsLW8M9ena8B04O0Qi8pu9a6Kgqd0kniJhMQMDfqJ/IYH+i+wO u5r6SM6P9SPyW92esDCTImDbdGkCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBRBv9iB qaT3O95kyxBvpO/GQqKgpDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MDQ1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQGP8AwDQYJKoZIhvcNAQELBQADggEBACMaqQFipkoF8AUBYC1s ynXPNA36uPZda0xHt+VgcT09b04FDD3yaj0VYIlASQgVoJ09CazJd0MrHoM7cWe7 p4Z1iyWyipkXTWfd+XTUNcIvgJ+PL9ac68ahPnTeU1DOMnPLxwx8DTe8z/2KJjOv b2vVH/CFKSGMTkJ5Nv83VfaN6EdLHAFtYmHs04NLut9x42VpAqXvA1PbxHFo9YMN MHkRcCYk3Fcix5BMMUOZV5vJWvzdQ7I8jPa19LPH0/vDl3L+xa/8DNrPjpF6wW8l AFDCXRk6xAxueEwCcBLdfoGXtZDKoCrPtl29bAI/Unz/T/YXSp38RDXtJSqhts7c TgI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:49 2026 by rpki-client