$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141054.roa File: AS141054.roa (raw, json) Hash identifier: wkcHVnEM0I6vtZv4qc1gfvsA1KemVpQVJy9hUZPiiuY= Subject key identifier: CD:29:18:45:60:32:36:BB:18:4D:8E:35:22:71:75:8E:8D:45:52:03 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0D23C7C654707A4E784F40812E5E1005D166916C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141054.roa Signing time: Sat 02 May 2026 21:12:11 +0000 ROA not before: Sat 02 May 2026 21:07:11 +0000 ROA not after: Sat 01 May 2027 21:12:11 +0000 asID: 141054 IP address blocks: 103.154.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:23:c7:c6:54:70:7a:4e:78:4f:40:81:2e:5e:10:05:d1:66:91:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:07:11 2026 GMT Not After : May 1 21:12:11 2027 GMT Subject: CN=CD291845603236BB184D8E352271758E8D455203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:46:f9:fe:cb:cf:61:13:d1:c8:5b:95:65:cb: ed:bb:c9:41:06:83:a6:d6:f4:2b:67:90:d7:86:df: 74:e7:09:d4:b6:2e:17:10:8f:46:8e:90:b6:32:47: 51:62:14:49:95:ca:91:81:c7:90:14:b7:1d:32:4a: f8:d0:1d:40:bb:e6:03:43:54:ba:d5:35:1a:3d:14: 0f:5f:33:06:02:d1:97:d4:2a:29:86:06:c3:db:de: 5d:7a:b9:7d:02:16:09:71:42:cc:e1:28:e8:7f:c4: e4:f3:cf:97:97:e6:fa:07:13:ec:55:9b:8c:f8:4d: ee:dc:8d:c9:69:35:4f:80:8d:5e:8f:88:ea:eb:24: 7f:ce:fd:ec:19:83:62:89:51:11:21:f3:c2:d5:a4: 15:17:e8:38:78:ff:9e:f1:03:0f:d8:d3:b4:71:4a: b8:4b:00:e0:ba:71:82:7f:1b:1e:4c:14:90:07:f7: fe:67:cd:08:01:e4:c4:db:6a:e0:13:54:b4:2d:5d: 8c:5b:e3:94:f3:51:e6:2c:48:ae:75:c5:42:61:fa: 0c:c0:1d:c8:e8:14:d5:ae:ca:49:2d:45:d1:ee:42: 55:56:ac:b7:fa:56:96:e3:c2:14:f4:0f:03:b0:86: 7f:82:81:46:f7:20:d1:e4:50:32:7a:f3:99:09:39: 6a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:18:45:60:32:36:BB:18:4D:8E:35:22:71:75:8E:8D:45:52:03 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141054.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.172.0/23 Signature Algorithm: sha256WithRSAEncryption 14:be:aa:ce:8b:93:b5:44:cb:6a:bc:78:b7:05:b8:d6:fb:16: ce:9d:e0:02:df:b6:0b:6e:f9:e6:1b:31:7b:bd:92:ab:b6:c3: 1b:38:50:fb:03:02:97:38:ff:26:67:c2:10:7c:f7:1e:9c:47: 55:c2:8c:ed:95:f4:f6:af:32:52:2b:0b:25:25:be:92:43:2b: c3:60:5d:fe:d8:cd:2b:21:be:4e:7e:70:a6:b5:6e:dc:13:4d: e0:e6:41:52:67:8b:f6:cd:58:46:b1:ac:6d:28:2d:53:45:8f: d3:e5:88:54:79:51:1e:c0:25:b1:26:12:9b:a7:3f:f1:da:e6: 5b:83:5f:5d:6a:5f:d7:1b:4c:3c:b0:40:a2:c3:fb:63:bb:27: ec:68:96:bf:58:56:a2:9f:a2:9d:da:94:de:f8:05:ad:85:a2: ff:1e:da:ff:c0:20:26:af:d8:6a:1f:35:88:cc:65:58:b8:08: 34:6e:5d:13:02:3e:58:ac:29:4d:8e:0d:3e:3c:53:35:e2:13: 77:81:59:93:bc:3f:d7:ef:3c:c9:3d:76:13:3d:17:2a:57:ea: d9:b9:27:93:02:39:f1:73:4c:cf:64:04:7d:54:8a:9b:d7:d3: f3:26:f8:01:b8:58:cb:2a:5f:22:75:ae:58:35:26:75:72:fc: a5:36:bf:00 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDSPHxlRwek54T0CBLl4QBdFmkWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDcxMVoX DTI3MDUwMTIxMTIxMVowMzExMC8GA1UEAxMoQ0QyOTE4NDU2MDMyMzZCQjE4NEQ4 RTM1MjI3MTc1OEU4RDQ1NTIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOlG+f7Lz2ET0chblWXL7bvJQQaDptb0K2eQ14bfdOcJ1LYuFxCPRo6QtjJH UWIUSZXKkYHHkBS3HTJK+NAdQLvmA0NUutU1Gj0UD18zBgLRl9QqKYYGw9veXXq5 fQIWCXFCzOEo6H/E5PPPl5fm+gcT7FWbjPhN7tyNyWk1T4CNXo+I6uskf8797BmD YolRESHzwtWkFRfoOHj/nvEDD9jTtHFKuEsA4Lpxgn8bHkwUkAf3/mfNCAHkxNtq 4BNUtC1djFvjlPNR5ixIrnXFQmH6DMAdyOgU1a7KSS1F0e5CVVast/pWluPCFPQP A7CGf4KBRvcg0eRQMnrzmQk5assCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTNKRhF YDI2uxhNjjUicXWOjUVSAzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDU0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5qsMA0GCSqGSIb3DQEBCwUAA4IBAQAUvqrOi5O1RMtqvHi3BbjW+xbO neAC37YLbvnmGzF7vZKrtsMbOFD7AwKXOP8mZ8IQfPcenEdVwoztlfT2rzJSKwsl Jb6SQyvDYF3+2M0rIb5OfnCmtW7cE03g5kFSZ4v2zVhGsaxtKC1TRY/T5YhUeVEe wCWxJhKbpz/x2uZbg19dal/XG0w8sECiw/tjuyfsaJa/WFain6Kd2pTe+AWthaL/ Htr/wCAmr9hqHzWIzGVYuAg0bl0TAj5YrClNjg0+PFM14hN3gVmTvD/X7zzJPXYT PRcqV+rZuSeTAjnxc0zPZAR9VIqb19PzJvgBuFjLKl8ida5YNSZ1cvylNr8A -----END CERTIFICATE-----Generated at Sun May 3 00:42:32 2026 by rpki-client