$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141144.roa File: AS141144.roa (raw, json) Hash identifier: 7H64cwxyPyy4lXEkY8+UolYZxLq40Dkgnmt5/PKyyC8= Subject key identifier: 4C:01:85:BD:70:9A:7C:25:84:DF:0C:1D:37:30:16:81:83:36:91:7C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 16F3C70BE68CC87BBEABB330568B14AA7E3B7CB9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141144.roa Signing time: Thu 17 Sep 2026 02:49:03 +0000 ROA not before: Thu 17 Sep 2026 02:44:03 +0000 ROA not after: Thu 16 Sep 2027 02:49:03 +0000 asID: 141144 IP address blocks: 2001:df5:8a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:c7:0b:e6:8c:c8:7b:be:ab:b3:30:56:8b:14:aa:7e:3b:7c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 17 02:44:03 2026 GMT Not After : Sep 16 02:49:03 2027 GMT Subject: CN=4C0185BD709A7C2584DF0C1D373016818336917C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:07:f5:58:f0:3a:45:4f:7c:57:c9:ad:53: 9d:d9:ae:22:75:65:bd:e6:99:6a:03:5d:e2:cf:d8: c9:d3:b4:7c:13:7a:b7:3d:a8:bf:6f:3c:a4:8f:36: 27:68:1a:39:b4:53:13:f7:f4:4c:91:4f:fd:a0:b5: 7c:21:2c:e4:02:ae:cf:39:15:d1:1e:9e:7c:51:5b: 3e:19:56:4f:90:18:42:60:74:a1:78:7c:ae:7a:05: 4a:fb:e9:56:36:69:75:e4:49:eb:5f:7a:11:27:df: bf:03:21:9c:a3:22:3e:82:fb:10:0b:4f:f7:9a:ea: 63:a9:ce:f8:2e:e8:8a:14:4b:d5:fa:84:6c:da:d9: 91:00:c1:66:1c:6a:f3:91:81:b0:b5:29:a0:61:49: 34:5f:e1:3e:93:2a:54:99:2d:d9:53:d3:61:74:b6: 76:7a:0a:60:45:85:f0:87:f6:69:c3:d9:00:8c:1d: f4:e6:b3:31:27:04:42:03:ea:1f:b4:79:70:bf:30: e0:e3:7c:d4:c1:d8:60:eb:90:96:75:80:02:32:8d: 05:96:a7:ff:39:4f:40:b5:ea:83:c1:32:59:37:a5: b5:97:23:c2:96:8f:f3:37:a1:fd:e3:50:10:3e:d4: b4:a2:0b:72:71:73:2d:09:1f:4e:d2:99:3a:0f:75: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:85:BD:70:9A:7C:25:84:DF:0C:1D:37:30:16:81:83:36:91:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141144.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:8a80::/48 Signature Algorithm: sha256WithRSAEncryption 67:d9:e2:2a:f0:ac:7c:9b:0f:63:8e:19:8c:89:90:1c:6a:0f: b4:6c:60:ce:f2:e6:f6:b8:32:a9:e8:29:9a:48:80:90:eb:43: 28:b4:f2:e5:8d:08:93:ad:5b:90:70:af:7a:01:f2:9a:00:84: b3:0b:b8:f2:25:1c:86:09:38:37:a8:46:07:14:6a:b5:cf:84: bc:bf:5f:6f:f9:88:17:a4:d3:f2:a9:ed:ee:78:b1:b8:5b:05: 7a:67:78:18:19:e7:f3:33:fb:cd:dd:c1:d6:da:9d:22:7f:fa: c0:fc:26:97:bb:c0:a6:eb:4c:7e:fd:ed:8e:ce:bd:04:d6:f2: a9:14:31:c7:db:6b:51:6f:b8:c2:7d:4c:4a:bd:69:c9:69:09: 7b:28:17:53:e5:d5:b5:04:19:55:94:99:45:90:02:a7:f4:ea: 89:26:c8:6f:4c:9e:8d:5f:f5:83:4a:28:05:ae:04:f5:ce:86: b4:63:a4:a5:9a:77:6e:79:a1:3c:6a:35:cf:d1:17:27:0b:c0: c4:00:55:db:53:25:7c:b2:2d:e9:1f:7d:60:34:18:53:4d:99: 35:39:65:37:f4:5c:e2:b0:a9:e4:6f:51:7e:4f:4a:70:95:56: e9:70:cc:a3:52:1f:9b:c0:c9:be:4c:05:c3:68:d0:99:bc:a4: 33:3f:81:2d -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUFvPHC+aMyHu+q7MwVosUqn47fLkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNzAyNDQwM1oX DTI3MDkxNjAyNDkwM1owMzExMC8GA1UEAxMoNEMwMTg1QkQ3MDlBN0MyNTg0REYw QzFEMzczMDE2ODE4MzM2OTE3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiEB/VY8DpFT3xXya1TndmuInVlveaZagNd4s/YydO0fBN6tz2ov288pI82 J2gaObRTE/f0TJFP/aC1fCEs5AKuzzkV0R6efFFbPhlWT5AYQmB0oXh8rnoFSvvp VjZpdeRJ6196ESffvwMhnKMiPoL7EAtP95rqY6nO+C7oihRL1fqEbNrZkQDBZhxq 85GBsLUpoGFJNF/hPpMqVJkt2VPTYXS2dnoKYEWF8If2acPZAIwd9OazMScEQgPq H7R5cL8w4ON81MHYYOuQlnWAAjKNBZan/zlPQLXqg8EyWTeltZcjwpaP8zeh/eNQ ED7UtKILcnFzLQkfTtKZOg91A+ECAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRMAYW9 cJp8JYTfDB03MBaBgzaRfDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTQ0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9YqAMA0GCSqGSIb3DQEBCwUAA4IBAQBn2eIq8Kx8mw9jjhmMiZAc ag+0bGDO8ub2uDKp6CmaSICQ60MotPLljQiTrVuQcK96AfKaAISzC7jyJRyGCTg3 qEYHFGq1z4S8v19v+YgXpNPyqe3ueLG4WwV6Z3gYGefzM/vN3cHW2p0if/rA/CaX u8Cm60x+/e2Ozr0E1vKpFDHH22tRb7jCfUxKvWnJaQl7KBdT5dW1BBlVlJlFkAKn 9OqJJshvTJ6NX/WDSigFrgT1zoa0Y6SlmndueaE8ajXP0RcnC8DEAFXbUyV8si3p H31gNBhTTZk1OWU39FzisKnkb1F+T0pwlVbpcMyjUh+bwMm+TAXDaNCZvKQzP4Et -----END CERTIFICATE-----Generated at Mon Sep 21 22:10:13 2026 by rpki-client