$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141049.roa File: AS141049.roa (raw, json) Hash identifier: 7bWU559JG1G5lkkSPC3Oxi5GWOUYtbaXdL0ijEbcVag= Subject key identifier: 84:DE:77:11:A0:68:E8:83:FA:C0:08:A0:27:AF:AC:14:84:A8:E0:A2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2D746F961760A9B1C4BF9EB1A6A3FF1DA210D7ED Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141049.roa Signing time: Sat 02 May 2026 21:13:55 +0000 ROA not before: Sat 02 May 2026 21:08:55 +0000 ROA not after: Sat 01 May 2027 21:13:55 +0000 asID: 141049 IP address blocks: 103.155.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:6f:96:17:60:a9:b1:c4:bf:9e:b1:a6:a3:ff:1d:a2:10:d7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:08:55 2026 GMT Not After : May 1 21:13:55 2027 GMT Subject: CN=84DE7711A068E883FAC008A027AFAC1484A8E0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:4a:86:b2:1d:48:c1:e1:15:a0:c3:58:9f: cb:f2:73:15:44:7a:8f:a9:44:f3:6d:88:1c:41:f1: 4b:6c:b0:59:9b:69:a0:9b:6f:dd:fb:50:8a:a7:d6: 0f:4a:fd:eb:90:aa:0c:57:7d:e9:19:9d:dd:0f:83: 1e:80:7a:10:82:f8:5f:1f:36:ab:93:92:28:8d:de: 6c:e1:22:0d:bf:be:44:62:99:d3:f6:6a:40:d6:20: b7:e8:c9:fb:ae:d0:4d:25:f1:10:b9:7e:f4:11:d5: b8:a7:21:34:8b:85:7d:a2:00:91:95:72:ab:ef:d9: 42:97:d8:5f:fa:3c:4f:30:67:8b:b3:5d:af:59:ff: 34:d1:54:d7:de:8b:f5:53:d7:95:c0:13:04:86:67: 92:db:fc:dc:04:4c:3f:f4:e4:b4:81:19:01:e4:1b: d3:0f:27:c3:a8:8b:9c:af:f0:bd:f9:29:ca:2c:00: b6:2a:60:ea:f0:7e:d7:da:3f:94:cf:06:68:dc:11: 61:e8:26:52:72:15:55:ba:2c:a4:f5:3f:8e:c2:85: 56:a7:55:09:8e:ed:d3:8b:b4:e6:c2:d1:26:a3:bf: 42:ec:d6:96:86:b6:b3:bf:e8:4d:82:0e:bd:e1:26: a4:93:a8:7e:52:a3:bc:a7:04:e2:98:ad:53:f4:7c: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:77:11:A0:68:E8:83:FA:C0:08:A0:27:AF:AC:14:84:A8:E0:A2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141049.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.46.0/23 Signature Algorithm: sha256WithRSAEncryption 60:7f:41:f2:37:91:e6:13:7d:75:23:cb:d9:be:80:c9:c0:62: a0:05:e0:10:2e:08:27:c6:e3:74:bb:01:9f:a2:b4:9a:a0:42: a7:a7:a9:eb:fb:83:60:03:26:c7:b4:eb:3e:1c:80:2a:b3:6b: ff:ff:a5:76:5e:d0:56:d2:72:92:4b:29:57:44:cb:79:fc:3e: c9:41:01:29:90:cd:04:e8:9c:40:a2:06:ec:b4:fd:a4:06:92: 3e:5c:94:06:a9:50:31:32:85:65:95:fe:34:cc:a7:31:0a:33: 3d:a7:c6:ac:df:bd:7f:f2:c5:01:e3:0f:d1:10:e9:61:b2:70: 05:4e:52:73:09:8f:5b:0f:88:0f:25:be:e0:36:18:41:12:e6: f3:bf:e9:9c:42:0b:8c:38:c5:9a:f5:5b:6f:46:0a:47:9b:f3: 17:b8:08:f7:fc:2e:9c:51:27:16:a4:6c:f7:62:5d:ff:51:14: 8e:33:1d:3d:b8:65:0b:ba:08:08:15:4a:95:27:c7:1a:7a:39: 43:21:56:6f:84:d6:dc:32:22:5c:62:fb:dd:5c:7d:2d:07:be: d2:f5:1e:9b:d5:5f:7f:0c:7f:c7:71:8c:f8:65:45:15:68:b4: 31:50:8a:e4:30:b6:9f:f0:4d:cb:8a:17:5a:b0:e8:03:3b:54: 8b:f5:6e:9f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULXRvlhdgqbHEv56xpqP/HaIQ1+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDg1NVoX DTI3MDUwMTIxMTM1NVowMzExMC8GA1UEAxMoODRERTc3MTFBMDY4RTg4M0ZBQzAw OEEwMjdBRkFDMTQ4NEE4RTBBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc4SoayHUjB4RWgw1ify/JzFUR6j6lE822IHEHxS2ywWZtpoJtv3ftQiqfW D0r965CqDFd96Rmd3Q+DHoB6EIL4Xx82q5OSKI3ebOEiDb++RGKZ0/ZqQNYgt+jJ +67QTSXxELl+9BHVuKchNIuFfaIAkZVyq+/ZQpfYX/o8TzBni7Ndr1n/NNFU196L 9VPXlcATBIZnktv83ARMP/TktIEZAeQb0w8nw6iLnK/wvfkpyiwAtipg6vB+19o/ lM8GaNwRYegmUnIVVbospPU/jsKFVqdVCY7t04u05sLRJqO/QuzWloa2s7/oTYIO veEmpJOoflKjvKcE4pitU/R8y1ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSE3ncR oGjog/rACKAnr6wUhKjgojAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDQ5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5suMA0GCSqGSIb3DQEBCwUAA4IBAQBgf0HyN5HmE311I8vZvoDJwGKg BeAQLggnxuN0uwGforSaoEKnp6nr+4NgAybHtOs+HIAqs2v//6V2XtBW0nKSSylX RMt5/D7JQQEpkM0E6JxAogbstP2kBpI+XJQGqVAxMoVllf40zKcxCjM9p8as371/ 8sUB4w/REOlhsnAFTlJzCY9bD4gPJb7gNhhBEubzv+mcQguMOMWa9VtvRgpHm/MX uAj3/C6cUScWpGz3Yl3/URSOMx09uGULuggIFUqVJ8caejlDIVZvhNbcMiJcYvvd XH0tB77S9R6b1V9/DH/HcYz4ZUUVaLQxUIrkMLaf8E3LihdasOgDO1SL9W6f -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client