
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa
File: AS141600.roa (raw, json)
Hash identifier: vvMfVtU0O+MrFVhm9KWSlGa+13Iv52zy+Eir7QwVziw=
Subject key identifier: 46:45:ED:F2:E7:AE:17:3F:34:D5:F3:24:5C:65:D7:EA:3C:BC:11:16
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 262681C6687A2F6705488A84F1ECF0BEDE904884
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa
Signing time: Thu 19 Feb 2026 07:00:00 +0000
ROA not before: Thu 19 Feb 2026 06:55:00 +0000
ROA not after: Thu 18 Feb 2027 07:00:00 +0000
asID: 141600
IP address blocks: 2001:df3:af40::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:26:81:c6:68:7a:2f:67:05:48:8a:84:f1:ec:f0:be:de:90:48:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 19 06:55:00 2026 GMT
Not After : Feb 18 07:00:00 2027 GMT
Subject: CN=4645EDF2E7AE173F34D5F3245C65D7EA3CBC1116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:d4:19:df:33:05:f9:98:92:40:50:c9:76:
97:0d:6e:1f:33:7b:f9:15:9f:c7:78:12:e8:d5:ec:
52:a4:0c:4f:b2:7c:db:13:18:d4:ca:a3:94:e4:f9:
32:d3:50:4c:e3:58:0f:76:ac:60:dd:18:89:53:0e:
c5:2f:a6:51:d0:7c:95:7b:52:c6:45:58:ba:5a:15:
e5:0e:96:5f:3a:57:04:6b:bf:ae:e6:f3:a1:a2:0a:
c0:f0:93:fe:8d:e3:2b:d2:e1:b7:f4:c5:c0:d8:75:
1b:de:57:58:ee:66:8a:92:a4:16:53:12:cb:96:11:
4d:8e:59:b6:93:03:63:0b:16:43:90:19:49:6f:f9:
56:ce:aa:0a:60:50:f0:36:96:78:88:25:52:42:38:
0c:cd:e8:9a:bf:99:06:cc:24:37:a7:3e:b6:7a:4e:
87:bb:c9:05:1a:38:7e:77:1b:61:76:a8:48:34:5f:
c2:54:3a:e6:6a:6a:c7:d7:53:ef:08:da:4c:c9:6f:
87:0b:f6:9f:35:5c:5b:42:63:41:05:75:be:ac:15:
2f:db:54:28:86:68:c7:ce:58:6d:88:38:6f:58:1b:
d2:a4:48:00:ba:66:65:36:67:3c:bf:17:d4:a5:0d:
01:d3:28:43:87:82:dc:e3:49:a3:44:91:89:ee:06:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:45:ED:F2:E7:AE:17:3F:34:D5:F3:24:5C:65:D7:EA:3C:BC:11:16
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:af40::/48
Signature Algorithm: sha256WithRSAEncryption
77:87:dd:ed:c4:c7:d0:64:1e:5a:d7:64:47:4f:3b:17:a3:6d:
32:bd:e3:e9:2e:66:bf:b4:11:2b:0e:59:c4:fd:0e:42:32:bb:
75:72:a6:15:f5:f9:77:cb:8a:7a:bc:bf:6b:96:ab:ed:46:90:
f6:5d:31:a9:ea:fd:df:60:dd:fd:dc:9f:b8:7a:f4:2f:a9:21:
bd:b2:0a:c1:29:f8:99:49:0a:2c:ff:19:21:f2:8c:74:d3:d0:
e3:c0:a6:6c:18:76:64:8b:68:fb:45:6a:75:01:ca:aa:37:f8:
d3:54:77:0e:70:70:f3:10:b8:c2:00:6b:99:2d:d9:c6:a7:6f:
e2:38:68:c4:08:4e:99:f1:3d:9b:13:0a:9e:c4:2c:55:45:4b:
3f:55:cb:de:9c:82:3d:d5:7e:67:be:33:8f:e8:c8:4c:b6:4b:
bb:26:78:4e:55:48:52:bf:d9:cd:32:58:b6:d1:7d:58:21:77:
6b:d4:18:04:8a:2f:6e:4e:c7:3c:ce:aa:11:b2:fa:7a:f8:94:
66:2e:9e:2a:04:b4:3b:52:a3:ca:23:00:aa:e7:0a:e7:e5:49:
96:f3:f1:14:1f:21:b5:17:d3:4d:be:84:ed:f2:b3:83:08:5a:
31:23:32:06:77:a3:c6:24:9b:66:98:30:d5:ce:95:5c:05:f2:
a4:fc:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:49 2026 by rpki-client