
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141663.roa
File: AS141663.roa (raw, json)
Hash identifier: t9IZqBQszJLdFMaQfXr5mL+KNYtM7laD1ODQ4nqBG50=
Subject key identifier: D2:6E:65:75:23:D1:7F:BC:C8:FD:67:16:60:69:A4:39:D4:46:DD:CE
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 656EB76A018745A781CC39153C14632272283951
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141663.roa
Signing time: Tue 10 Feb 2026 05:00:00 +0000
ROA not before: Tue 10 Feb 2026 04:55:00 +0000
ROA not after: Tue 09 Feb 2027 05:00:00 +0000
asID: 141663
IP address blocks: 103.158.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6e:b7:6a:01:87:45:a7:81:cc:39:15:3c:14:63:22:72:28:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 10 04:55:00 2026 GMT
Not After : Feb 9 05:00:00 2027 GMT
Subject: CN=D26E657523D17FBCC8FD67166069A439D446DDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:90:07:97:ab:19:46:64:88:a3:08:b9:d7:
31:af:10:83:c6:c9:e9:69:ad:aa:ee:f5:6e:e2:93:
a6:28:dd:00:ed:53:4d:be:9c:f3:60:f2:a1:a7:67:
f5:bc:93:0c:b5:d9:ab:7a:27:5b:cf:7c:2c:9c:35:
d3:30:8a:2d:60:6c:35:e8:b4:f3:3b:2e:b9:be:c3:
21:22:ea:fb:63:6c:33:b1:21:cc:d1:a0:f1:76:02:
55:8a:7e:ae:56:79:9b:47:de:56:32:74:d5:b6:f9:
16:bd:cc:47:6c:f3:0e:8e:08:52:da:70:04:9e:4c:
72:e9:f6:2e:83:9a:fe:40:a4:ea:b8:ca:4e:08:b7:
9e:2e:8e:e5:a6:e8:05:ff:5b:bb:9b:19:61:d2:63:
4b:85:e0:ae:97:09:a8:be:85:2a:92:d4:f5:3c:11:
3b:2b:93:df:55:fe:ea:4a:b9:1e:e7:45:17:b2:60:
70:bb:93:75:bf:1b:a4:b3:6f:38:b6:ef:2f:92:0e:
5f:b4:a5:3b:08:c5:1c:d5:71:19:7c:34:f7:4c:23:
cf:e4:65:b5:d8:8b:79:45:6d:5c:0b:64:d1:04:14:
84:9f:87:e5:91:bc:65:ab:2c:b2:d4:32:87:f2:f0:
c7:d4:88:e9:8b:29:c1:e1:af:aa:d2:98:1a:56:11:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:65:75:23:D1:7F:BC:C8:FD:67:16:60:69:A4:39:D4:46:DD:CE
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.188.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:88:66:18:3d:6f:26:ff:50:87:f4:03:70:f2:26:07:d0:6e:
80:86:97:b6:dc:5c:13:36:47:c3:81:c7:4e:9a:17:42:50:9f:
1c:20:4f:32:bf:ab:1e:03:46:46:e2:69:32:14:c1:31:ec:2b:
c9:80:c0:88:d4:89:1a:9b:40:c5:1c:86:3f:63:34:b5:ae:ba:
e4:e0:82:be:58:ba:83:b3:79:d5:88:72:1c:e2:e6:f8:ca:88:
8a:0f:b9:c5:15:69:93:40:8f:4d:a5:08:c9:07:e4:80:c3:17:
0f:3e:7f:25:32:14:8d:44:e1:f9:d1:f8:ac:42:a8:4f:c1:f7:
cf:b4:45:ec:02:8f:f2:4d:11:84:c2:55:9d:ae:dd:64:ab:7e:
52:73:ac:7f:2e:5d:22:32:21:6b:c9:3f:f0:62:6f:2a:03:f6:
c4:1e:be:1e:38:e7:29:97:35:17:5f:0d:b5:1b:c1:ef:8a:43:
7f:ff:04:6e:06:72:15:b9:f6:b3:62:17:6e:31:c0:3f:7d:35:
42:3e:ca:ef:ca:34:42:b1:ef:fa:28:70:35:99:c5:af:90:8b:
69:b5:1f:fa:98:01:06:f4:96:39:9f:3d:b8:11:b7:c3:6d:8e:
18:bd:79:55:0b:0b:75:fe:ad:22:09:a1:e3:ec:59:4b:f7:64:
57:fb:bd:fa
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZW63agGHRaeBzDkVPBRjInIoOVEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMDA0NTUwMFoX
DTI3MDIwOTA1MDAwMFowMzExMC8GA1UEAxMoRDI2RTY1NzUyM0QxN0ZCQ0M4RkQ2
NzE2NjA2OUE0MzlENDQ2RERDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMTVkAeXqxlGZIijCLnXMa8Qg8bJ6Wmtqu71buKTpijdAO1TTb6c82Dyoadn
9byTDLXZq3onW898LJw10zCKLWBsNei08zsuub7DISLq+2NsM7EhzNGg8XYCVYp+
rlZ5m0feVjJ01bb5Fr3MR2zzDo4IUtpwBJ5Mcun2LoOa/kCk6rjKTgi3ni6O5abo
Bf9bu5sZYdJjS4XgrpcJqL6FKpLU9TwROyuT31X+6kq5HudFF7JgcLuTdb8bpLNv
OLbvL5IOX7SlOwjFHNVxGXw090wjz+RltdiLeUVtXAtk0QQUhJ+H5ZG8ZassstQy
h/Lwx9SI6YspweGvqtKYGlYRgRMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTSbmV1
I9F/vMj9ZxZgaaQ51EbdzjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY2My5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWeevDANBgkqhkiG9w0BAQsFAAOCAQEAjYhmGD1vJv9Qh/QDcPIm
B9BugIaXttxcEzZHw4HHTpoXQlCfHCBPMr+rHgNGRuJpMhTBMewryYDAiNSJGptA
xRyGP2M0ta665OCCvli6g7N51YhyHOLm+MqIig+5xRVpk0CPTaUIyQfkgMMXDz5/
JTIUjUTh+dH4rEKoT8H3z7RF7AKP8k0RhMJVna7dZKt+UnOsfy5dIjIha8k/8GJv
KgP2xB6+HjjnKZc1F18NtRvB74pDf/8EbgZyFbn2s2IXbjHAP301Qj7K78o0QrHv
+ihwNZnFr5CLabUf+pgBBvSWOZ89uBG3w22OGL15VQsLdf6tIgmh4+xZS/dkV/u9
+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:21:36 2026 by rpki-client