$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa File: AS141664.roa (raw, json) Hash identifier: DKhLYKUtRN2My24a8qAyBdOKF5DwtIS9jWPNuxohAt4= Subject key identifier: 37:D5:AF:FE:D9:61:64:B4:7A:D2:41:0C:72:60:E9:73:78:3C:C8:03 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5C30ABD0505D34D914399C85C367248EB8BE761E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa Signing time: Fri 27 Mar 2026 07:00:00 +0000 ROA not before: Fri 27 Mar 2026 06:55:00 +0000 ROA not after: Fri 26 Mar 2027 07:00:00 +0000 asID: 141664 IP address blocks: 103.162.205.0/24 maxlen: 24 103.215.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:ab:d0:50:5d:34:d9:14:39:9c:85:c3:67:24:8e:b8:be:76:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 27 06:55:00 2026 GMT Not After : Mar 26 07:00:00 2027 GMT Subject: CN=37D5AFFED96164B47AD2410C7260E973783CC803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:74:05:28:a9:e2:53:8d:25:7e:09:0b:90: c0:d9:e4:67:f1:93:4e:9d:b3:78:0d:8a:61:00:32: fb:21:a0:f5:8e:25:40:16:63:4f:ea:87:37:7b:ba: b6:8a:df:e6:ea:65:a0:2b:4b:df:21:17:5b:56:68: 53:3b:0b:92:21:38:7e:25:72:20:0f:6b:2f:1c:60: 6b:b2:1a:08:8f:12:61:c0:01:83:84:d5:54:93:41: 42:aa:0d:77:a6:e1:2e:c8:70:6b:b5:ba:80:e6:12: b8:60:bf:d5:69:aa:7c:ff:4d:6f:04:18:8d:85:45: 27:5b:62:70:a3:a9:74:3c:e4:33:15:de:fc:31:f6: 25:73:17:c9:7e:0b:50:38:64:9a:80:12:c8:e1:36: 3e:4f:8c:31:7a:15:29:5f:db:50:44:37:bb:1b:83: 76:dd:29:c5:c0:30:31:c1:86:25:de:81:4d:d9:bb: 43:60:f0:52:84:91:ac:03:7f:4c:6d:2b:e2:26:b3: 56:af:de:38:7f:fd:f7:b4:52:4c:6c:69:16:37:37: 8f:27:b5:ef:26:be:64:14:f9:44:89:23:fe:af:3a: e7:ac:cc:d3:85:e7:a3:ba:8e:c6:8d:c0:da:fe:1b: 2e:d5:73:96:15:68:01:26:73:2b:91:ce:d8:96:df: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D5:AF:FE:D9:61:64:B4:7A:D2:41:0C:72:60:E9:73:78:3C:C8:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141664.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.205.0/24 103.215.187.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:cd:35:4d:21:c6:28:99:71:9c:e9:2b:42:5e:f9:19:94:e2: 1e:2d:e0:09:90:5f:b1:03:3a:0a:9c:e0:bc:84:f9:fb:ff:7c: d3:16:32:61:0c:b6:64:0e:20:09:ad:f6:40:c3:c7:7a:0a:f4: bd:af:42:0d:81:4b:51:27:8a:02:8d:fe:c1:71:e0:a2:7b:a5: ec:c0:36:07:8e:8f:3c:19:54:e2:1e:09:a4:51:85:2a:11:8b: 75:9b:f7:63:08:67:c7:74:fb:57:e2:ff:42:ef:e1:c8:35:d5: e8:5f:ec:f6:29:75:91:2b:5e:7a:f7:b6:1a:c3:7c:0b:92:35: 1b:18:b0:3d:b4:b9:fb:c8:61:c6:ef:36:a6:ff:e0:da:4f:a9: 71:56:b9:0d:a8:fa:a1:90:11:42:0a:86:ac:5e:d1:b3:e5:ec: 85:fd:c5:e5:6c:68:23:6d:ce:9e:e4:34:71:b5:53:bc:03:3d: 7a:09:06:ed:5c:65:af:5c:73:1a:2d:91:d9:af:ab:39:79:9e: d8:ca:b2:45:05:41:c5:2a:7b:2f:38:2e:d9:d7:87:8c:ac:3a: 1a:08:5b:e8:5d:23:1e:42:19:71:80:41:6a:c4:49:de:47:50: b9:69:5f:33:57:9f:eb:af:b1:32:e4:69:78:f8:fd:7f:5d:e7: f7:d2:5d:ef -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUXDCr0FBdNNkUOZyFw2ckjri+dh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNzA2NTUwMFoX DTI3MDMyNjA3MDAwMFowMzExMC8GA1UEAxMoMzdENUFGRkVEOTYxNjRCNDdBRDI0 MTBDNzI2MEU5NzM3ODNDQzgwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUpdAUoqeJTjSV+CQuQwNnkZ/GTTp2zeA2KYQAy+yGg9Y4lQBZjT+qHN3u6 torf5uploCtL3yEXW1ZoUzsLkiE4fiVyIA9rLxxga7IaCI8SYcABg4TVVJNBQqoN d6bhLshwa7W6gOYSuGC/1WmqfP9NbwQYjYVFJ1ticKOpdDzkMxXe/DH2JXMXyX4L UDhkmoASyOE2Pk+MMXoVKV/bUEQ3uxuDdt0pxcAwMcGGJd6BTdm7Q2DwUoSRrAN/ TG0r4iazVq/eOH/997RSTGxpFjc3jye17ya+ZBT5RIkj/q8656zM04Xno7qOxo3A 2v4bLtVzlhVoASZzK5HO2Jbf3eECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBQ31a/+ 2WFktHrSQQxyYOlzeDzIAzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTY2NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeizQMEAGfXuzANBgkqhkiG9w0BAQsFAAOCAQEAXM01TSHGKJlx nOkrQl75GZTiHi3gCZBfsQM6CpzgvIT5+/980xYyYQy2ZA4gCa32QMPHegr0va9C DYFLUSeKAo3+wXHgonul7MA2B46PPBlU4h4JpFGFKhGLdZv3Ywhnx3T7V+L/Qu/h yDXV6F/s9il1kSteeve2GsN8C5I1GxiwPbS5+8hhxu82pv/g2k+pcVa5Daj6oZAR QgqGrF7Rs+Xshf3F5WxoI23OnuQ0cbVTvAM9egkG7Vxlr1xzGi2R2a+rOXme2Mqy RQVBxSp7Lzgu2deHjKw6Gghb6F0jHkIZcYBBasRJ3kdQuWlfM1ef66+xMuRpePj9 f13n99Jd7w== -----END CERTIFICATE-----Generated at Fri Apr 17 08:17:22 2026 by rpki-client