$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa File: AS141653.roa (raw, json) Hash identifier: lP1D2J3r+rUrzmK7qLI0OasVxdgNrQb2VdOn3e4GQt8= Subject key identifier: 97:53:D8:D6:62:61:1C:AD:B6:5B:3F:36:E4:A1:24:36:9A:26:A4:2D Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23CC78E7EA958BF78629A28EE334B24B86DA94AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa Signing time: Fri 18 Apr 2025 08:00:00 +0000 ROA not before: Fri 18 Apr 2025 07:55:00 +0000 ROA not after: Fri 17 Apr 2026 08:00:00 +0000 asID: 141653 IP address blocks: 2001:df3:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cc:78:e7:ea:95:8b:f7:86:29:a2:8e:e3:34:b2:4b:86:da:94:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 18 07:55:00 2025 GMT Not After : Apr 17 08:00:00 2026 GMT Subject: CN=9753D8D662611CADB65B3F36E4A124369A26A42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:4b:f5:0d:bb:7d:73:ba:da:dc:f3:28:cb: 6d:89:db:01:a4:ee:a3:77:dc:44:62:85:85:65:7e: 0a:98:57:59:dd:85:95:fb:0b:f2:16:9d:72:10:50: 13:40:47:a0:af:09:9c:45:c1:4a:b3:d6:66:2c:cf: e2:1a:45:4f:c6:5b:51:b4:ff:eb:ba:af:81:4d:83: 11:70:bc:98:68:47:fb:36:a0:e9:bd:96:d0:0f:09: 33:57:d8:74:21:75:f6:03:5f:72:ea:4f:d9:24:52: 6a:1e:bf:0f:55:76:6d:46:47:d9:ae:e5:05:2f:a2: d7:7e:ed:3c:d3:b0:dd:90:df:5d:a1:d8:b4:f1:40: 7d:8f:48:7d:9d:6a:07:1b:9b:9b:1d:fe:02:7d:27: d3:61:71:86:de:31:7f:95:f2:39:fe:0c:fc:ec:6c: f6:f3:cd:64:bf:aa:c4:38:7a:5c:a9:dd:3a:64:f1: e9:2c:3c:fc:5b:33:cd:bb:8c:de:d7:d8:cf:02:61: cb:3e:c4:27:ce:53:46:6d:fb:06:b0:3c:1e:8e:6b: 14:38:d4:2a:7c:cc:29:c3:1f:d7:1a:66:30:c8:88: 0b:a9:0c:32:50:c3:4f:5a:cd:cd:19:94:de:a6:1b: 22:85:9e:97:d2:ac:ee:e5:ea:d2:99:e0:1a:ba:c2: 44:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:D8:D6:62:61:1C:AD:B6:5B:3F:36:E4:A1:24:36:9A:26:A4:2D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 87:eb:92:d6:81:fe:cf:af:28:7f:83:3b:cc:ba:65:ce:0f:f2: c7:8e:6b:5b:fd:c1:0a:94:d0:d8:1d:a9:4b:87:bc:b3:f2:68: c8:06:f4:df:7c:6d:7d:f5:7f:22:70:6c:49:0d:56:90:7f:61: 70:cd:13:76:78:10:92:38:5d:47:a6:2d:97:c5:26:83:a4:a2: a6:17:b8:86:87:97:d1:21:4a:fa:c0:de:90:91:ec:ea:3b:92: 08:29:4b:c6:18:78:65:07:ae:3a:ea:da:d2:f7:ab:a3:bc:18: 9e:dd:dc:a5:1d:16:06:d3:81:ca:e0:71:5d:d7:8b:6e:d7:ce: 3c:b1:c4:ed:f3:04:ec:2a:f1:95:ce:12:c0:6d:46:c5:42:8e: dd:72:99:42:4a:a6:35:ea:c5:0e:c5:e4:f0:05:de:fb:6b:ef: e9:78:0c:12:5d:53:83:b8:15:54:6b:0c:cc:c2:92:a2:22:03: 62:2f:97:d4:a2:50:48:6d:0c:ba:c3:03:b1:df:8f:36:6a:ad: cf:c1:b5:07:e7:f2:03:73:73:4a:dc:a9:a5:62:dd:ae:b2:d1: 8f:64:b7:cd:a2:df:4b:52:d6:74:ff:18:3e:eb:10:c1:7f:c3: 5e:8d:db:5d:1d:d6:7d:a0:34:b1:88:cd:fc:b2:c1:f4:f9:44: 51:46:87:c2 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUI8x45+qVi/eGKaKO4zSyS4balKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxODA3NTUwMFoX DTI2MDQxNzA4MDAwMFowMzExMC8GA1UEAxMoOTc1M0Q4RDY2MjYxMUNBREI2NUIz RjM2RTRBMTI0MzY5QTI2QTQyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOiUS/UNu31zutrc8yjLbYnbAaTuo3fcRGKFhWV+CphXWd2FlfsL8hadchBQ E0BHoK8JnEXBSrPWZizP4hpFT8ZbUbT/67qvgU2DEXC8mGhH+zag6b2W0A8JM1fY dCF19gNfcupP2SRSah6/D1V2bUZH2a7lBS+i137tPNOw3ZDfXaHYtPFAfY9IfZ1q Bxubmx3+An0n02Fxht4xf5XyOf4M/Oxs9vPNZL+qxDh6XKndOmTx6Sw8/FszzbuM 3tfYzwJhyz7EJ85TRm37BrA8Ho5rFDjUKnzMKcMf1xpmMMiIC6kMMlDDT1rNzRmU 3qYbIoWel9Ks7uXq0pngGrrCRHUCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSXU9jW YmEcrbZbPzbkoSQ2miakLTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY1My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfMsQDANBgkqhkiG9w0BAQsFAAOCAQEAh+uS1oH+z68of4M7 zLplzg/yx45rW/3BCpTQ2B2pS4e8s/JoyAb033xtffV/InBsSQ1WkH9hcM0TdngQ kjhdR6Ytl8Umg6Siphe4hoeX0SFK+sDekJHs6juSCClLxhh4ZQeuOura0vero7wY nt3cpR0WBtOByuBxXdeLbtfOPLHE7fME7Crxlc4SwG1GxUKO3XKZQkqmNerFDsXk 8AXe+2vv6XgMEl1Tg7gVVGsMzMKSoiIDYi+X1KJQSG0MusMDsd+PNmqtz8G1B+fy A3NzStyppWLdrrLRj2S3zaLfS1LWdP8YPusQwX/DXo3bXR3WfaA0sYjN/LLB9PlE UUaHwg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:06 2025 by rpki-client