$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/0/AS141171.roa File: AS141171.roa (raw, json) Hash identifier: crGwMfqxT9Bv42apce5ebN0orOqlSluXRfCP1+kMcVQ= Subject key identifier: AD:4C:2A:E9:5A:24:08:EC:E0:29:57:66:66:50:4F:7C:64:4B:10:7E Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 4A7F147B1D2566D6831567347EB0F2C89DB0BA80 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141171.roa Signing time: Tue 03 Nov 2026 06:59:45 +0000 ROA not before: Tue 03 Nov 2026 06:54:45 +0000 ROA not after: Tue 02 Nov 2027 06:59:45 +0000 asID: 141171 IP address blocks: 192.203.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 13:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7f:14:7b:1d:25:66:d6:83:15:67:34:7e:b0:f2:c8:9d:b0:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: Nov 3 06:54:45 2026 GMT Not After : Nov 2 06:59:45 2027 GMT Subject: CN=AD4C2AE95A2408ECE029576666504F7C644B107E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:18:d7:05:7b:dd:86:91:17:05:dc:f9:5a: db:ed:8b:d9:eb:fb:7b:11:1b:03:e9:2e:20:fe:f0: 56:5f:22:b8:97:b9:20:2d:22:d6:9c:0a:e5:ed:27: 3b:17:21:0f:89:f9:49:a2:af:04:c1:5b:4c:f5:12: 8d:c2:23:71:2f:f0:4c:24:52:18:85:8d:a4:3e:81: aa:8d:4f:85:68:4a:07:5b:cd:89:07:76:1c:19:38: b7:e1:76:a0:12:31:da:63:ad:c9:4c:22:a0:22:8d: 8d:80:36:69:4b:82:97:80:8e:c9:1e:0d:ad:f5:15: 42:0b:1c:70:6f:4c:20:5c:31:0c:61:7b:c5:45:2a: 7a:07:db:28:f1:47:d9:46:ff:d7:c2:be:a4:c4:79: 23:89:8c:19:7f:f3:cf:20:2d:dc:8b:19:af:65:03: d4:b6:70:34:3c:6c:93:f2:8a:1a:2a:6d:b1:b6:6a: db:cc:7f:0a:8b:43:06:e1:cc:5d:8d:cf:5a:f2:44: 45:70:ff:24:0f:4f:45:26:92:5c:5d:ee:c3:ae:13: 2e:c5:dd:57:81:fb:18:eb:d4:c0:48:4f:5c:66:87: bb:eb:a1:d2:96:06:a9:cb:12:d9:02:46:07:ff:84: 5f:30:8f:0e:97:ef:ce:6b:69:ef:9f:1a:2d:0e:15: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:2A:E9:5A:24:08:EC:E0:29:57:66:66:50:4F:7C:64:4B:10:7E X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS141171.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.203.208.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e2:01:51:d4:18:20:e9:7f:c1:20:54:b1:d0:d9:51:2f:1d: 0e:9f:fd:62:a1:44:67:c3:5b:51:29:7b:7b:c8:5a:18:4d:6a: af:d1:a0:77:f5:6d:f9:7e:55:b8:3c:ac:80:f4:6c:f4:1e:99: 97:e7:76:a4:a1:68:f6:29:fb:a8:a4:53:f5:49:9b:d9:81:65: 80:1b:6c:77:54:d7:e7:84:e1:48:4d:8a:79:03:2b:72:da:27: d8:12:8d:0a:24:7e:f8:fc:4e:53:e1:dc:76:f5:75:0d:e8:83: 6f:84:08:fb:ed:01:1b:65:59:08:0d:53:ce:54:2e:f7:2a:6b: 9a:99:76:43:69:19:69:34:f7:79:62:b6:7f:2c:b4:1e:a9:1a: 14:97:e8:86:b6:6c:15:55:14:f5:16:45:35:3b:15:58:8d:6c: e4:ab:95:6b:0e:be:f4:b5:f2:b7:29:b8:e8:e7:89:dd:39:5b: 5e:20:97:99:0b:83:ee:57:fd:3c:84:72:9f:8d:26:d9:de:a8: a1:2a:ed:99:16:98:41:1f:25:42:98:1c:82:c5:e3:55:b5:61: df:ac:db:28:f1:a4:e3:72:93:36:e1:b9:f3:1f:6a:49:c7:1a: 58:f4:1b:98:4f:d1:33:0a:81:64:08:b5:17:a6:b9:a2:68:8c: 79:90:3f:e9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSn8Uex0lZtaDFWc0frDyyJ2wuoAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MTEwMzA2NTQ0NVoX DTI3MTEwMjA2NTk0NVowMzExMC8GA1UEAxMoQUQ0QzJBRTk1QTI0MDhFQ0UwMjk1 NzY2NjY1MDRGN0M2NDRCMTA3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAnGNcFe92GkRcF3Pla2+2L2ev7exEbA+kuIP7wVl8iuJe5IC0i1pwK5e0n OxchD4n5SaKvBMFbTPUSjcIjcS/wTCRSGIWNpD6Bqo1PhWhKB1vNiQd2HBk4t+F2 oBIx2mOtyUwioCKNjYA2aUuCl4COyR4NrfUVQgsccG9MIFwxDGF7xUUqegfbKPFH 2Ub/18K+pMR5I4mMGX/zzyAt3IsZr2UD1LZwNDxsk/KKGiptsbZq28x/CotDBuHM XY3PWvJERXD/JA9PRSaSXF3uw64TLsXdV4H7GOvUwEhPXGaHu+uh0pYGqcsS2QJG B/+EXzCPDpfvzmtp758aLQ4VQEUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBStTCrp WiQI7OApV2ZmUE98ZEsQfjAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQxMTcxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwMvQMA0GCSqGSIb3DQEBCwUAA4IBAQAb4gFR1Bgg6X/BIFSx0NlRLx0O n/1ioURnw1tRKXt7yFoYTWqv0aB39W35flW4PKyA9Gz0HpmX53akoWj2KfuopFP1 SZvZgWWAG2x3VNfnhOFITYp5Ayty2ifYEo0KJH74/E5T4dx29XUN6INvhAj77QEb ZVkIDVPOVC73KmuamXZDaRlpNPd5YrZ/LLQeqRoUl+iGtmwVVRT1FkU1OxVYjWzk q5VrDr70tfK3Kbjo54ndOVteIJeZC4PuV/08hHKfjSbZ3qihKu2ZFphBHyVCmByC xeNVtWHfrNso8aTjcpM24bnzH2pJxxpY9BuYT9EzCoFkCLUXprmiaIx5kD/p -----END CERTIFICATE-----Generated at Thu Nov 5 15:00:45 2026 by rpki-client