$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141602.roa File: AS141602.roa (raw, json) Hash identifier: O4jAVyMY70Ila2tUt5L/SqGr6DR4DZTT8meJVAiQEQM= Subject key identifier: 0E:CB:78:EF:E0:EF:57:96:EA:9A:B2:17:16:22:52:EA:30:F6:08:3E Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CD6955E763A6A08BC6F7019C7273813FC7AFEAF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141602.roa Signing time: Mon 06 Apr 2026 07:00:00 +0000 ROA not before: Mon 06 Apr 2026 06:55:00 +0000 ROA not after: Mon 05 Apr 2027 07:00:00 +0000 asID: 141602 IP address blocks: 2401:3a0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d6:95:5e:76:3a:6a:08:bc:6f:70:19:c7:27:38:13:fc:7a:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 06:55:00 2026 GMT Not After : Apr 5 07:00:00 2027 GMT Subject: CN=0ECB78EFE0EF5796EA9AB217162252EA30F6083E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:bd:34:3a:76:5f:ab:df:30:3d:d9:f8:42: ac:e3:a8:c1:56:67:91:96:92:1c:14:c7:37:f2:86: 1f:a9:e3:1a:32:07:7c:b7:9c:b6:e7:cf:a6:d5:00: 9e:f0:2e:30:97:a7:d1:b1:61:7e:11:9a:2e:36:0b: 1f:ef:e2:92:a3:b4:15:e7:33:2b:e3:54:a6:9d:5c: e1:b6:c3:89:c3:a8:cc:88:88:0a:a8:76:a9:a0:22: 54:05:1a:13:db:94:05:9a:2a:08:ba:63:e7:4d:32: cb:fe:4c:a1:14:5f:04:4d:3f:5f:ec:a9:e1:7c:ba: 56:01:7e:1f:13:b9:ca:ca:06:39:2c:dd:e0:2e:e6: b8:43:75:21:c7:e4:7b:3a:e9:0b:d4:00:79:66:58: 0d:44:47:ed:ff:5f:92:c2:3b:d0:eb:b0:14:dd:c7: 84:7d:0b:c1:02:96:fb:7b:48:22:1d:1a:f6:be:d7: 8d:56:4a:39:af:0e:3d:c8:c8:5a:b9:58:86:46:23: 8f:0d:55:e5:56:a2:18:28:2f:3f:e9:ac:cd:53:de: 29:e4:f0:3b:a8:67:1f:fc:45:f7:55:e4:22:ce:df: 52:5b:b2:c6:d0:03:8f:4c:34:6f:ee:28:7b:3a:49: 55:9a:da:1b:b7:c1:26:21:29:e0:93:f6:2d:d2:f5: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CB:78:EF:E0:EF:57:96:EA:9A:B2:17:16:22:52:EA:30:F6:08:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141602.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3a0::/32 Signature Algorithm: sha256WithRSAEncryption 28:6c:d9:dd:92:28:f7:b8:bf:26:3e:8b:5d:8f:04:a1:89:ee: 27:4a:32:2d:68:c2:2f:e0:22:ee:ad:27:98:2a:a4:f6:43:c2: f8:88:8a:05:74:63:52:4b:b6:32:26:e7:3d:bb:8e:74:44:fa: ed:6f:b2:bf:ad:95:6f:64:6e:bb:be:f3:ae:36:3f:4d:8a:6a: b4:90:de:9f:a5:d5:8d:d8:86:bf:2c:d6:ed:4d:49:0f:59:ca: 22:7b:aa:83:ea:b3:9e:f9:e2:a6:3c:80:8d:22:1f:cc:98:20: e5:15:78:7e:c7:43:d9:71:0b:50:41:69:fa:6a:84:00:7a:73: 0e:e7:63:c9:48:e9:ef:1c:84:f3:86:4d:d4:32:ac:fa:40:95: 91:46:34:ef:e4:ee:cc:c8:d9:df:d9:ba:62:9e:71:f4:2f:f2: 7d:68:ef:1b:b5:12:99:70:79:d8:30:98:e8:26:e0:89:3e:2f: f5:ea:58:ea:c7:d3:5c:e5:b6:db:5e:bd:f5:e8:23:e8:bc:56: 5d:05:0a:9c:b9:72:59:70:4c:69:b1:6d:b0:1f:46:1a:05:a8: 32:f5:05:25:c4:26:45:d1:88:05:1c:48:44:3b:d2:51:e3:6c: 99:46:cd:00:66:f3:18:4c:89:4d:c4:0a:48:3b:39:a3:d8:e0: dd:71:2c:4e -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIULNaVXnY6agi8b3AZxyc4E/x6/q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjA2NTUwMFoX DTI3MDQwNTA3MDAwMFowMzExMC8GA1UEAxMoMEVDQjc4RUZFMEVGNTc5NkVBOUFC MjE3MTYyMjUyRUEzMEY2MDgzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmwvTQ6dl+r3zA92fhCrOOowVZnkZaSHBTHN/KGH6njGjIHfLectufPptUA nvAuMJen0bFhfhGaLjYLH+/ikqO0FeczK+NUpp1c4bbDicOozIiICqh2qaAiVAUa E9uUBZoqCLpj500yy/5MoRRfBE0/X+yp4Xy6VgF+HxO5ysoGOSzd4C7muEN1Icfk ezrpC9QAeWZYDURH7f9fksI70OuwFN3HhH0LwQKW+3tIIh0a9r7XjVZKOa8OPcjI WrlYhkYjjw1V5VaiGCgvP+mszVPeKeTwO6hnH/xF91XkIs7fUluyxtADj0w0b+4o ezpJVZraG7fBJiEp4JP2LdL1fRMCAwEAAaOCAdEwggHNMB0GA1UdDgQWBBQOy3jv 4O9XluqashcWIlLqMPYIPjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTYwMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBA6AwDQYJKoZIhvcNAQELBQADggEBAChs2d2SKPe4vyY+i12P BKGJ7idKMi1owi/gIu6tJ5gqpPZDwviIigV0Y1JLtjIm5z27jnRE+u1vsr+tlW9k bru+8642P02KarSQ3p+l1Y3Yhr8s1u1NSQ9ZyiJ7qoPqs5754qY8gI0iH8yYIOUV eH7HQ9lxC1BBafpqhAB6cw7nY8lI6e8chPOGTdQyrPpAlZFGNO/k7szI2d/ZumKe cfQv8n1o7xu1EplwedgwmOgm4Ik+L/XqWOrH01zltttevfXoI+i8Vl0FCpy5cllw TGmxbbAfRhoFqDL1BSXEJkXRiAUcSEQ70lHjbJlGzQBm8xhMiU3ECkg7OaPY4N1x LE4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:10 2026 by rpki-client