$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141959.roa File: AS141959.roa (raw, json) Hash identifier: eQfCh+lQN+h7OWGV9PHTn63sW8mpTUbYzqCFL13kU4o= Subject key identifier: 96:DC:A1:58:40:9C:15:8E:02:04:11:CD:16:95:A2:BA:47:9C:F8:7A Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F88256370E9809478772EB0D6D054D458737937 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141959.roa Signing time: Mon 03 Nov 2025 03:38:31 +0000 ROA not before: Mon 03 Nov 2025 03:33:31 +0000 ROA not after: Mon 02 Nov 2026 03:38:31 +0000 asID: 141959 IP address blocks: 103.115.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:88:25:63:70:e9:80:94:78:77:2e:b0:d6:d0:54:d4:58:73:79:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 3 03:33:31 2025 GMT Not After : Nov 2 03:38:31 2026 GMT Subject: CN=96DCA158409C158E020411CD1695A2BA479CF87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:24:aa:bc:10:f6:77:31:9c:e2:b0:1b:4d: 14:de:6c:2e:56:9e:d5:5e:c2:c0:83:b6:4f:44:5b: 7d:33:d2:c2:28:53:87:96:4e:73:d5:8f:83:5a:de: 2c:9e:f2:21:61:c7:7b:09:af:73:5b:31:23:4a:30: 07:2a:26:52:24:65:51:01:af:8f:c5:ab:ca:21:e4: cd:0b:32:88:cf:98:17:42:65:b1:f3:cf:54:54:82: bb:68:b6:1e:ce:fb:fc:8a:37:22:a0:44:91:b2:e2: 28:ef:06:8c:2c:be:17:21:6f:fe:2f:fa:c1:da:93: 82:d3:84:80:e1:e6:6a:46:be:d0:0b:0f:4a:13:a6: a8:4b:6f:6d:9b:ff:5a:ce:89:7e:a5:0a:1b:69:61: 2c:95:40:88:78:00:1a:39:bf:d0:77:b5:dd:ba:29: a4:06:61:bb:b6:f5:0f:22:43:f4:45:6b:d1:74:91: 2d:13:d7:28:01:1d:4d:ef:1f:b2:0a:dd:0b:db:16: 74:48:68:7a:d7:25:3b:e0:12:1d:27:5e:04:dc:fb: fe:ae:20:ce:8b:63:90:1a:4f:53:35:3b:70:9d:43: fd:9a:de:41:eb:f9:c0:0b:62:44:ac:af:2f:21:02: 31:2f:f2:56:61:fe:13:bb:40:e6:68:0d:90:33:05: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:A1:58:40:9C:15:8E:02:04:11:CD:16:95:A2:BA:47:9C:F8:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.176.0/22 Signature Algorithm: sha256WithRSAEncryption 36:81:da:dc:85:52:64:b1:56:1c:97:51:ff:e6:75:89:b3:f1: 8f:cf:3f:ae:3e:0e:df:f6:3b:98:57:6d:24:57:13:b6:51:2d: 69:de:9a:f2:5c:bb:62:cb:6a:28:fc:34:8e:0b:b1:56:5d:9f: 57:59:95:65:15:79:9d:45:9c:bf:02:aa:ae:b2:5c:0c:8a:67: 1f:16:6b:0f:ae:5e:04:71:f6:c5:ff:94:3b:a3:5c:09:14:8a: c2:83:26:b1:48:e3:82:08:64:29:9c:d9:24:a0:53:a6:2b:e3: 76:86:33:c5:56:2c:a4:74:0f:7b:69:bb:42:9e:2a:53:7c:fa: 5d:20:cd:34:86:5e:34:db:ac:08:67:cd:be:50:ae:0b:b9:05: 3f:f1:69:a8:e8:08:ac:d6:0a:62:62:39:55:7a:75:9b:84:d3: aa:56:0b:c5:f1:db:37:1e:73:2f:15:82:64:3e:ea:b8:58:2b: fe:ab:d7:8a:1e:40:1c:58:61:c5:d5:ed:eb:4b:fc:1d:d0:80: 36:a8:2d:94:08:37:c3:89:6b:a0:5d:01:ea:3e:80:be:82:d6: a2:b8:4e:06:c2:42:90:37:ef:bd:f4:02:4a:7b:4c:af:3e:81: 96:06:d9:03:c5:32:c7:a4:6d:84:f3:f8:5d:df:bf:03:8b:bd: 53:d6:18:ff -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUT4glY3DpgJR4dy6w1tBU1FhzeTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwMzAzMzMzMVoX DTI2MTEwMjAzMzgzMVowMzExMC8GA1UEAxMoOTZEQ0ExNTg0MDlDMTU4RTAyMDQx MUNEMTY5NUEyQkE0NzlDRjg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOemJKq8EPZ3MZzisBtNFN5sLlae1V7CwIO2T0RbfTPSwihTh5ZOc9WPg1re LJ7yIWHHewmvc1sxI0owByomUiRlUQGvj8WryiHkzQsyiM+YF0JlsfPPVFSCu2i2 Hs77/Io3IqBEkbLiKO8GjCy+FyFv/i/6wdqTgtOEgOHmaka+0AsPShOmqEtvbZv/ Ws6JfqUKG2lhLJVAiHgAGjm/0He13boppAZhu7b1DyJD9EVr0XSRLRPXKAEdTe8f sgrdC9sWdEhoetclO+ASHSdeBNz7/q4gzotjkBpPUzU7cJ1D/ZreQev5wAtiRKyv LyECMS/yVmH+E7tA5mgNkDMFmgUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSW3KFY QJwVjgIEEc0WlaK6R5z4ejAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk1OS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdzsDANBgkqhkiG9w0BAQsFAAOCAQEANoHa3IVSZLFWHJdR/+Z1 ibPxj88/rj4O3/Y7mFdtJFcTtlEtad6a8ly7YstqKPw0jguxVl2fV1mVZRV5nUWc vwKqrrJcDIpnHxZrD65eBHH2xf+UO6NcCRSKwoMmsUjjgghkKZzZJKBTpivjdoYz xVYspHQPe2m7Qp4qU3z6XSDNNIZeNNusCGfNvlCuC7kFP/FpqOgIrNYKYmI5VXp1 m4TTqlYLxfHbNx5zLxWCZD7quFgr/qvXih5AHFhhxdXt60v8HdCANqgtlAg3w4lr oF0B6j6AvoLWorhOBsJCkDfvvfQCSntMrz6BlgbZA8Uyx6RthPP4Xd+/A4u9U9YY /w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:21 2025 by rpki-client