$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa File: AS141120.roa (raw, json) Hash identifier: f4aUGKQshMkA8KHF0Dcd2U02GQnKj/MvjaKo8F66b38= Subject key identifier: A7:5F:7E:78:CE:5A:8E:5E:50:7A:7A:6D:77:9B:AD:47:01:08:60:17 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3539CD2EF4C322FDF02BDD139742164EC0020F83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa Signing time: Wed 25 Feb 2026 04:00:00 +0000 ROA not before: Wed 25 Feb 2026 03:55:00 +0000 ROA not after: Wed 24 Feb 2027 04:00:00 +0000 asID: 141120 IP address blocks: 103.157.146.0/24 maxlen: 24 103.189.164.0/24 maxlen: 24 2406:a4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:39:cd:2e:f4:c3:22:fd:f0:2b:dd:13:97:42:16:4e:c0:02:0f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 03:55:00 2026 GMT Not After : Feb 24 04:00:00 2027 GMT Subject: CN=A75F7E78CE5A8E5E507A7A6D779BAD4701086017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:d5:6c:c6:68:31:09:3e:1b:3b:fe:fa:77: bd:bc:da:25:11:ea:79:77:60:87:56:67:54:ce:30: 9d:23:39:90:f3:fa:e5:52:bc:bf:28:75:54:ee:75: 48:d3:fe:16:c9:4f:47:ab:75:18:12:7e:5a:a6:8b: b2:cd:e3:3c:6b:85:74:6b:22:47:bd:b7:5a:22:7d: ad:8c:b7:5c:f8:39:07:f9:5b:02:3d:d0:c0:98:c7: cc:63:fe:46:2e:77:ad:59:db:f3:09:60:f0:96:55: f3:e3:5e:2b:9d:e3:4c:33:0e:dc:00:00:e5:18:d4: ad:fd:20:c5:5f:5c:df:81:23:c5:ee:9a:e0:de:c2: f6:54:08:b8:17:e8:5a:21:7c:8d:09:5a:83:6b:66: fc:94:34:4a:6b:43:2c:08:c5:7e:48:cd:97:8c:13: 69:01:5e:93:26:b4:c6:de:d1:cc:c3:7b:15:f1:6d: e2:66:cb:36:74:1f:44:c7:13:a5:db:7e:2d:f9:d1: 44:0f:1b:4c:62:fd:b0:43:cd:a2:b1:fb:0b:8f:0e: a2:47:66:47:c3:18:3b:e3:3b:1c:14:aa:32:cd:39: be:85:2a:96:84:9b:da:2d:55:05:91:6e:e2:d2:35: c2:36:3f:c7:8c:cf:1b:51:59:4f:5c:a1:bf:6d:e3: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:7E:78:CE:5A:8E:5E:50:7A:7A:6D:77:9B:AD:47:01:08:60:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.146.0/24 103.189.164.0/24 IPv6: 2406:a4c0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:b5:98:fd:74:b5:2d:ab:9c:5f:76:01:88:c9:7e:de:cb:43: e6:76:7f:55:cd:a2:23:79:09:57:68:21:6a:d1:cd:da:2a:af: 89:15:15:f2:c1:62:28:07:aa:14:a8:c4:d6:d2:f4:eb:50:b8: e5:55:75:a3:87:fb:9d:c2:a1:15:7f:51:24:0e:97:7e:ab:7b: 0b:e1:24:eb:9f:51:17:00:66:49:ff:f6:75:55:d7:8b:44:46: 6a:b7:39:95:75:67:f5:62:ef:55:04:4b:11:11:7e:0c:64:db: 5e:55:d4:cc:dc:e6:3d:1f:ee:27:95:c2:f4:b1:3c:e9:6b:3b: 3d:73:b3:2e:84:7f:98:e9:6f:3a:c1:ee:ba:4e:aa:65:7e:4f: 2b:74:16:7b:d9:0a:99:f5:3d:94:08:de:e3:b7:8b:cb:40:79: 52:5c:5c:2a:25:81:ee:e1:13:fa:d9:2b:70:a8:a3:39:0d:70: a2:34:b0:cf:4c:45:39:15:f2:bf:10:d5:42:8b:88:af:93:ac: d5:ff:dc:30:12:85:48:ae:ab:68:1e:e3:76:26:80:16:d7:f5: cf:ba:72:f9:48:33:c6:98:d8:59:fa:e8:9f:e3:d6:e7:69:7a: c7:c0:14:10:bd:8f:ce:20:39:70:3e:6c:31:70:4d:c8:da:70: 86:59:e8:5a -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUNTnNLvTDIv3wK90Tl0IWTsACD4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTAzNTUwMFoX DTI3MDIyNDA0MDAwMFowMzExMC8GA1UEAxMoQTc1RjdFNzhDRTVBOEU1RTUwN0E3 QTZENzc5QkFENDcwMTA4NjAxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK291WzGaDEJPhs7/vp3vbzaJRHqeXdgh1ZnVM4wnSM5kPP65VK8vyh1VO51 SNP+FslPR6t1GBJ+WqaLss3jPGuFdGsiR723WiJ9rYy3XPg5B/lbAj3QwJjHzGP+ Ri53rVnb8wlg8JZV8+NeK53jTDMO3AAA5RjUrf0gxV9c34Ejxe6a4N7C9lQIuBfo WiF8jQlag2tm/JQ0SmtDLAjFfkjNl4wTaQFekya0xt7RzMN7FfFt4mbLNnQfRMcT pdt+LfnRRA8bTGL9sEPNorH7C48OokdmR8MYO+M7HBSqMs05voUqloSb2i1VBZFu 4tI1wjY/x4zPG1FZT1yhv23jchECAwEAAaOCAeUwggHhMB0GA1UdDgQWBBSnX354 zlqOXlB6em13m61HAQhgFzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTEyMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMw EgQCAAEwDAMEAGedkgMEAGe9pDANBAIAAjAHAwUAJAakwDANBgkqhkiG9w0BAQsF AAOCAQEAb7WY/XS1LaucX3YBiMl+3stD5nZ/Vc2iI3kJV2ghatHN2iqviRUV8sFi KAeqFKjE1tL061C45VV1o4f7ncKhFX9RJA6Xfqt7C+Ek659RFwBmSf/2dVXXi0RG arc5lXVn9WLvVQRLERF+DGTbXlXUzNzmPR/uJ5XC9LE86Ws7PXOzLoR/mOlvOsHu uk6qZX5PK3QWe9kKmfU9lAje47eLy0B5UlxcKiWB7uET+tkrcKijOQ1wojSwz0xF ORXyvxDVQouIr5Os1f/cMBKFSK6raB7jdiaAFtf1z7py+UgzxpjYWfron+PW52l6 x8AUEL2PziA5cD5sMXBNyNpwhlnoWg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:00:19 2026 by rpki-client