$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140010.roa File: AS140010.roa (raw, json) Hash identifier: sTSle25dNYbJc5XifaeoIoyJUbqxu1eT9gjKSR5qiaw= Subject key identifier: A7:E2:DB:8D:0A:E2:34:F2:BC:83:B1:B7:0E:02:17:59:36:F1:98:FE Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 73EEC1B0E861E0EE3F23846F36CECF56AAE716C7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140010.roa Signing time: Sat 02 May 2026 21:08:06 +0000 ROA not before: Sat 02 May 2026 21:03:06 +0000 ROA not after: Sat 01 May 2027 21:08:06 +0000 asID: 140010 IP address blocks: 103.147.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ee:c1:b0:e8:61:e0:ee:3f:23:84:6f:36:ce:cf:56:aa:e7:16:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:03:06 2026 GMT Not After : May 1 21:08:06 2027 GMT Subject: CN=A7E2DB8D0AE234F2BC83B1B70E02175936F198FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:44:a4:6f:07:44:16:86:ce:64:12:ef:b5: 0e:61:8d:46:28:cd:20:0b:d7:33:e1:c2:59:2e:d3: d1:00:2c:88:eb:56:4c:6c:d0:b2:80:c1:1a:8a:d2: 8d:e3:b7:58:22:f1:9a:5f:00:c0:86:63:8d:99:0a: 60:0f:b9:67:6a:6e:6c:46:34:aa:79:97:f5:8a:8b: 15:a6:66:d7:9e:db:4d:22:83:8c:d5:f2:05:f0:fd: d8:d1:fb:bf:6d:ec:18:95:f8:05:1b:cd:9f:4f:b6: 2b:7f:8b:8b:62:1e:fb:fa:9c:85:fd:03:f5:f3:42: 2b:e4:09:85:a5:23:b9:be:6a:c1:91:e9:ae:6f:89: 2b:dd:94:95:8c:57:f6:9a:bd:a0:1a:38:29:7b:9c: 52:41:a6:fc:f2:ec:ed:f1:b4:3d:8a:46:c7:14:75: da:a0:2a:7b:6e:1f:83:6a:c4:e4:f6:ca:d1:0f:7c: b3:4a:fa:48:38:00:f8:d7:ef:11:ac:9d:82:5d:3b: c7:49:72:e9:b7:55:94:f2:33:8b:ed:a8:8e:48:37: c6:c6:d6:b6:54:7e:2f:c1:37:d1:aa:cb:97:6e:64: 53:02:41:be:4b:b7:91:ac:61:a3:bb:e7:0b:6d:aa: f3:74:e1:ce:7d:29:50:f5:6f:3d:80:79:33:45:66: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E2:DB:8D:0A:E2:34:F2:BC:83:B1:B7:0E:02:17:59:36:F1:98:FE X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140010.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.241.0/24 Signature Algorithm: sha256WithRSAEncryption 80:72:ad:bf:95:4e:b1:13:c6:b3:7b:b8:c1:11:c7:db:1c:a5: 51:b6:e7:09:ab:96:6b:cb:79:f4:e9:b1:4e:18:54:38:15:d0: 95:b6:31:fa:a6:c2:74:c0:54:08:0a:e6:ed:04:d1:e0:c9:c0: 1d:cc:06:15:7f:de:72:7b:f8:2b:a0:a8:c6:21:12:d6:e0:c4: a4:6b:84:3b:e6:09:78:80:52:28:a2:f7:eb:96:aa:27:3b:22: 66:26:21:87:98:d8:54:c5:91:78:27:d7:23:5c:bb:f5:e1:c5: b3:4c:18:5c:16:31:0c:bb:c6:79:94:70:e2:ab:8a:e9:66:36: b2:90:37:52:d2:64:fc:b0:fa:a1:05:11:63:29:6e:f3:e3:2a: 89:0f:2f:a9:f5:d5:20:1c:18:4b:a4:6b:22:5c:2b:55:4b:e3: 61:79:91:79:d2:dd:10:1b:97:36:df:39:a3:19:ba:0b:be:1b: 8f:48:a6:d6:95:3f:54:cc:5a:1a:af:b1:b8:ea:4d:b2:ae:37: f5:c3:7a:c6:4f:3d:3b:d2:ff:f3:6f:6a:00:62:48:af:49:87: af:c2:19:3f:89:09:e6:aa:12:10:db:60:29:b3:a3:05:86:3a: fc:cd:b8:33:3c:da:58:f1:1b:eb:d7:b0:a2:c7:a0:ff:d0:73: 03:b7:96:3c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUc+7BsOhh4O4/I4RvNs7PVqrnFscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDMwNloX DTI3MDUwMTIxMDgwNlowMzExMC8GA1UEAxMoQTdFMkRCOEQwQUUyMzRGMkJDODNC MUI3MEUwMjE3NTkzNkYxOThGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8jRKRvB0QWhs5kEu+1DmGNRijNIAvXM+HCWS7T0QAsiOtWTGzQsoDBGorS jeO3WCLxml8AwIZjjZkKYA+5Z2pubEY0qnmX9YqLFaZm157bTSKDjNXyBfD92NH7 v23sGJX4BRvNn0+2K3+Li2Ie+/qchf0D9fNCK+QJhaUjub5qwZHprm+JK92UlYxX 9pq9oBo4KXucUkGm/PLs7fG0PYpGxxR12qAqe24fg2rE5PbK0Q98s0r6SDgA+Nfv Eaydgl07x0ly6bdVlPIzi+2ojkg3xsbWtlR+L8E30arLl25kUwJBvku3kaxho7vn C22q83Thzn0pUPVvPYB5M0VmQlkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSn4tuN CuI08ryDsbcOAhdZNvGY/jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwMDEwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5PxMA0GCSqGSIb3DQEBCwUAA4IBAQCAcq2/lU6xE8aze7jBEcfbHKVR tucJq5Zry3n06bFOGFQ4FdCVtjH6psJ0wFQICubtBNHgycAdzAYVf95ye/groKjG IRLW4MSka4Q75gl4gFIoovfrlqonOyJmJiGHmNhUxZF4J9cjXLv14cWzTBhcFjEM u8Z5lHDiq4rpZjaykDdS0mT8sPqhBRFjKW7z4yqJDy+p9dUgHBhLpGsiXCtVS+Nh eZF50t0QG5c23zmjGboLvhuPSKbWlT9UzFoar7G46k2yrjf1w3rGTz070v/zb2oA YkivSYevwhk/iQnmqhIQ22Aps6MFhjr8zbgzPNpY8Rvr17Cix6D/0HMDt5Y8 -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client