$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa File: AS141376.roa (raw, json) Hash identifier: Gi47Imml6acNlaJSFMxm+2IlWdRWgsfrqP6AaEehYOw= Subject key identifier: 51:2C:A4:E9:11:A9:1F:07:E7:72:A9:DF:37:4F:42:60:72:B6:28:69 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CB590B675EEB660FEFE2545BA59E9E704C2F0C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa Signing time: Thu 02 Apr 2026 06:20:45 +0000 ROA not before: Thu 02 Apr 2026 06:15:45 +0000 ROA not after: Thu 01 Apr 2027 06:20:45 +0000 asID: 141376 IP address blocks: 163.128.35.0/24 maxlen: 24 2001:df6:cec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b5:90:b6:75:ee:b6:60:fe:fe:25:45:ba:59:e9:e7:04:c2:f0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 2 06:15:45 2026 GMT Not After : Apr 1 06:20:45 2027 GMT Subject: CN=512CA4E911A91F07E772A9DF374F426072B62869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:18:fc:12:ac:30:34:e5:fe:b2:ea:f2:90: aa:83:6a:67:bc:8f:0f:3c:d2:15:22:9d:95:c7:8b: 95:f7:09:5d:15:c8:75:7b:0f:0b:f7:91:39:75:8f: 54:8a:7d:f6:09:67:c3:ce:c2:50:6e:4a:81:bc:e5: 5e:4d:03:4e:b7:58:2d:65:0f:2b:3f:d0:16:8a:38: c3:84:8e:44:8b:26:c7:a5:63:94:9b:1b:6b:12:e7: 6c:f3:f3:53:d3:eb:0c:77:8b:7f:c7:be:c6:c4:e4: cb:e2:5e:89:c0:ec:66:5a:78:65:c9:fe:19:4c:e8: 8f:5e:b5:57:ee:05:75:c8:c7:b2:85:02:b4:f4:c0: 87:1c:af:3b:90:a5:61:c3:47:d2:2e:5a:33:2a:9a: ad:80:61:9a:3f:08:2c:ae:7a:92:51:ca:da:6b:07: 00:f9:bc:a4:49:ea:b6:6e:0b:9b:a7:7a:f1:dc:fd: e0:84:3d:4b:07:10:ce:24:d7:34:07:73:99:69:03: f0:18:29:ca:47:b2:a0:6c:5a:5b:e2:6b:e6:ff:dd: 11:f8:18:d2:68:4d:e7:67:f4:fe:34:cf:c3:51:c1: 62:25:fd:d4:20:05:89:27:ca:cf:9e:e0:43:88:a5: ef:10:ad:c2:e0:a7:e3:f1:3b:57:b4:a0:cc:25:48: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:A4:E9:11:A9:1F:07:E7:72:A9:DF:37:4F:42:60:72:B6:28:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.35.0/24 IPv6: 2001:df6:cec0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:3b:72:9a:9f:ed:0a:c8:c3:c4:15:e9:9b:22:2d:95:e4:6b: 29:ea:b9:9b:03:62:29:5d:a4:aa:3a:89:2e:94:cb:d1:5f:e1: 5a:d5:46:b2:70:89:3e:8b:07:0c:7f:c4:64:2f:14:82:61:41: d1:6c:10:3d:cf:f5:5e:b4:8e:e5:85:b5:40:06:67:2b:a8:ab: 8e:f0:b8:f3:57:56:8a:e5:f4:1e:c5:38:09:e7:d5:f2:60:71: 37:a2:3d:f4:87:ee:fa:7f:8e:61:5c:5d:96:9b:dc:37:21:51: 73:a5:62:aa:ea:c3:c4:1b:07:02:ff:c0:24:75:67:62:d8:ef: d8:a6:44:e5:87:2f:60:74:b2:37:e8:cf:46:d8:4e:6e:10:01: b8:6d:e2:e3:e8:12:77:32:c5:12:d6:0a:9f:32:c0:45:1b:39: c3:74:e6:c1:c3:fe:a1:b9:03:31:ad:63:5b:8f:c7:10:95:8c: 13:f7:1d:d9:37:6c:62:e5:44:7a:48:c4:06:c0:2d:a2:8d:b7: a1:34:5f:4b:dd:e5:e3:bb:08:97:af:2d:1e:9b:9a:d0:c9:f2: 29:1d:1c:88:5d:b5:bc:29:b5:9a:ad:b8:41:d0:e2:6f:0c:9d: 6c:74:eb:9f:cc:1d:bb:01:36:e3:57:ae:5e:ab:9f:5b:39:cf: 3d:2e:59:d4 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUTLWQtnXutmD+/iVFulnp5wTC8MgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwMjA2MTU0NVoX DTI3MDQwMTA2MjA0NVowMzExMC8GA1UEAxMoNTEyQ0E0RTkxMUE5MUYwN0U3NzJB OURGMzc0RjQyNjA3MkI2Mjg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJdGPwSrDA05f6y6vKQqoNqZ7yPDzzSFSKdlceLlfcJXRXIdXsPC/eROXWP VIp99glnw87CUG5KgbzlXk0DTrdYLWUPKz/QFoo4w4SORIsmx6VjlJsbaxLnbPPz U9PrDHeLf8e+xsTky+JeicDsZlp4Zcn+GUzoj161V+4FdcjHsoUCtPTAhxyvO5Cl YcNH0i5aMyqarYBhmj8ILK56klHK2msHAPm8pEnqtm4Lm6d68dz94IQ9SwcQziTX NAdzmWkD8BgpykeyoGxaW+Jr5v/dEfgY0mhN52f0/jTPw1HBYiX91CAFiSfKz57g Q4il7xCtwuCn4/E7V7SgzCVIGEECAwEAAaOCAeEwggHdMB0GA1UdDgQWBBRRLKTp EakfB+dyqd83T0JgcrYoaTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTM3Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAKOAIzAPBAIAAjAJAwcAIAEN9s7AMA0GCSqGSIb3DQEBCwUAA4IB AQB7O3Kan+0KyMPEFembIi2V5Gsp6rmbA2IpXaSqOokulMvRX+Fa1UaycIk+iwcM f8RkLxSCYUHRbBA9z/VetI7lhbVABmcrqKuO8LjzV1aK5fQexTgJ59XyYHE3oj30 h+76f45hXF2Wm9w3IVFzpWKq6sPEGwcC/8AkdWdi2O/YpkTlhy9gdLI36M9G2E5u EAG4beLj6BJ3MsUS1gqfMsBFGznDdObBw/6huQMxrWNbj8cQlYwT9x3ZN2xi5UR6 SMQGwC2ijbehNF9L3eXjuwiXry0em5rQyfIpHRyIXbW8KbWarbhB0OJvDJ1sdOuf zB27ATbjV65eq59bOc89LlnU -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:49 2026 by rpki-client