
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
File: AS141350.roa (raw, json)
Hash identifier: m7YFpkhEuNvXaA9aPvAlKpiVCp3CTC7FcgTVjSAyrgk=
Subject key identifier: 6C:66:DA:C1:AD:3B:A6:02:D9:46:0C:22:38:09:71:81:6C:8C:A4:8D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4297A501740B313158C5F2F8879E638644C0C6C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
Signing time: Tue 03 Feb 2026 02:00:00 +0000
ROA not before: Tue 03 Feb 2026 01:55:00 +0000
ROA not after: Tue 02 Feb 2027 02:00:00 +0000
asID: 141350
IP address blocks: 2001:df4:f1c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:97:a5:01:74:0b:31:31:58:c5:f2:f8:87:9e:63:86:44:c0:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 3 01:55:00 2026 GMT
Not After : Feb 2 02:00:00 2027 GMT
Subject: CN=6C66DAC1AD3BA602D9460C22380971816C8CA48D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:8f:ac:31:40:72:cc:ba:a1:c6:fa:62:2a:
8a:ab:72:05:cc:52:d5:2b:d2:f9:bf:8b:06:bc:31:
6f:83:89:6e:a6:45:62:93:98:38:18:f8:d7:e6:60:
ea:4a:6b:cb:6d:65:2f:eb:e9:9e:c3:5f:3c:26:34:
28:d8:a8:82:fc:98:9b:a3:b4:aa:af:d9:30:25:53:
ac:bd:c6:2f:4a:d1:35:96:9d:c3:e5:74:94:78:ab:
ec:ae:ce:35:09:38:16:37:a9:b5:39:1d:d3:a5:19:
6c:35:84:63:75:25:9f:96:4a:b8:36:e8:db:2e:bf:
a1:15:c9:4b:54:7b:99:1f:e4:e5:a1:81:a3:76:5f:
fc:d9:81:34:ce:97:ec:71:47:0f:b3:68:04:f7:4b:
31:bf:15:bb:46:16:09:82:f3:9a:a8:f7:39:c6:0d:
22:aa:8c:88:96:ce:59:25:d7:cd:27:dd:05:0c:d7:
84:0c:aa:68:aa:59:e1:f2:af:f7:a5:3e:ef:84:84:
1a:16:df:1d:96:13:b3:a6:03:2d:aa:65:ef:bd:d1:
ab:d2:6f:a3:8d:d3:e4:4d:75:f8:78:a7:6e:62:1e:
52:9a:f0:11:27:e5:ec:89:20:aa:18:38:79:ad:99:
f0:7b:f7:30:dc:dc:96:00:a6:a9:c2:ac:7a:3d:25:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:DA:C1:AD:3B:A6:02:D9:46:0C:22:38:09:71:81:6C:8C:A4:8D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141350.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:f1c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:7c:e4:41:14:5e:3a:12:5c:65:68:be:ca:12:ca:2d:ce:a8:
17:72:44:2b:84:6c:1d:cc:ba:c3:60:12:65:e3:5c:3e:25:e9:
2e:08:94:22:31:87:9d:85:a0:51:e7:b2:db:04:d9:c2:c9:2b:
e0:32:d3:eb:f3:a7:0e:ee:90:5d:f1:ad:c0:91:12:ad:46:da:
73:f0:84:82:50:a9:ce:37:88:e0:0d:6d:74:66:fb:1e:c0:87:
45:43:24:d3:06:a2:ca:31:da:58:c2:66:a9:6f:f5:a6:94:2a:
12:d2:5f:d5:79:70:07:0b:87:23:c3:c0:b0:61:ec:70:38:50:
e3:7e:3f:c2:f4:1c:eb:9f:bc:18:93:51:f9:ac:9b:57:e4:ba:
e4:73:a2:55:3a:4c:69:8e:06:31:c1:f3:a6:68:4f:ab:02:da:
4b:90:8e:41:f9:7e:3d:37:6b:66:75:10:31:71:8a:05:0b:d6:
d7:fa:b0:5d:c4:09:11:96:a2:66:81:d3:c8:68:a8:6d:8d:b3:
86:d0:7f:ff:83:82:c6:0b:5a:c5:29:fe:64:39:8c:49:3a:9d:
e1:26:28:f9:d8:a7:55:70:d9:fc:34:77:be:8f:06:c3:a9:9a:
c3:a1:ac:17:b4:00:22:f9:26:bb:2e:3f:27:89:90:11:37:b7:
e2:83:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:00:24 2026 by rpki-client