$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141059.roa File: AS141059.roa (raw, json) Hash identifier: YrljHhLwH/yd2CqlYrj0OblgD6gPwihMQR22a6E4yKQ= Subject key identifier: F9:9A:D8:07:97:E8:3C:D4:38:0F:F2:2C:E0:77:0C:58:22:52:1F:38 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 591BBA6A14968E78B0DD5B99EAD49B7A648873C6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141059.roa Signing time: Sat 02 May 2026 21:13:35 +0000 ROA not before: Sat 02 May 2026 21:08:35 +0000 ROA not after: Sat 01 May 2027 21:13:35 +0000 asID: 141059 IP address blocks: 103.155.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1b:ba:6a:14:96:8e:78:b0:dd:5b:99:ea:d4:9b:7a:64:88:73:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:08:35 2026 GMT Not After : May 1 21:13:35 2027 GMT Subject: CN=F99AD80797E83CD4380FF22CE0770C5822521F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:20:b0:51:b4:32:44:c0:84:c5:29:64:1d: 75:78:c6:e3:1c:b8:99:71:bb:8e:28:21:9d:22:99: d2:a9:d9:53:4b:fe:57:5f:35:c5:bd:e1:09:ac:5d: 80:3b:1e:64:59:9a:2e:57:fc:95:64:10:03:68:9a: f6:2b:c6:9a:66:b7:4f:d1:79:df:5b:92:b1:6c:cb: 1c:3d:c9:0d:15:5a:06:f5:97:bf:1c:d7:9b:08:4b: 1d:1c:62:b4:80:30:9d:92:1e:1c:6b:62:d7:2f:6d: 33:5d:5d:55:89:48:29:7b:82:ca:e1:20:74:df:d6: 00:11:76:8c:51:bc:aa:be:39:6b:14:3a:26:f3:0a: b8:ff:41:c8:99:53:49:9d:00:78:10:17:19:2a:68: 41:65:e0:e2:4f:25:eb:75:30:29:76:6c:f7:04:d7: 93:66:ec:7a:4e:a8:50:41:05:2c:dd:38:5f:2d:d5: 5a:be:d8:26:40:d5:75:61:ad:c3:09:4c:cb:07:9c: 5e:fe:c7:15:cc:f9:b3:15:88:23:d6:d3:46:c8:07: 13:c1:6d:02:13:ab:fa:87:6d:7b:49:c7:87:78:15: 92:7d:4f:d1:f9:de:2f:7f:95:16:e6:39:7c:b2:72: 6e:42:c6:a5:dd:36:76:d2:4e:d4:96:50:e9:f5:78: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9A:D8:07:97:E8:3C:D4:38:0F:F2:2C:E0:77:0C:58:22:52:1F:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141059.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.125.0/24 Signature Algorithm: sha256WithRSAEncryption 63:15:1d:18:2e:73:45:bd:39:9a:d0:bc:61:d1:46:70:74:a9: fa:b2:3a:ee:1b:c6:9c:38:f4:0f:a9:9c:2c:cb:46:53:77:0b: 35:7d:8a:6b:66:58:d5:5b:2a:58:c9:d6:69:cd:6d:2d:c5:3f: 2c:b9:de:2c:fa:1a:02:83:97:69:b8:51:0f:b8:c4:12:76:b7: a8:32:14:1c:6f:03:f0:6d:15:bd:e5:ef:4c:34:bb:60:88:59: 32:28:fb:9c:5f:23:c7:1d:4b:01:b5:ad:95:92:28:cb:3d:aa: 8b:e1:a6:3c:fa:79:fd:40:71:5c:97:a8:5d:ed:17:0d:27:9f: 31:a4:a0:38:e7:4a:62:2c:9e:94:1c:be:4f:73:a5:43:52:55: 80:38:24:9a:f2:c1:2f:5d:2d:c6:20:ec:39:d2:67:cf:98:05: 12:58:ed:2a:52:ee:52:39:31:6c:48:aa:79:9d:69:e6:e1:dc: 3e:23:58:8a:03:7e:37:8b:1e:67:d6:3d:a9:cc:e8:5b:9e:9b: a1:2d:ff:b8:af:6c:e0:29:51:6a:fd:f8:b8:98:e7:8b:fc:8f: 76:d3:31:d0:43:b2:41:13:24:81:2b:0f:96:2b:3b:99:0c:2a: 77:4e:17:ee:f8:52:b3:d2:81:a9:22:a8:1c:76:a3:e8:38:02: cb:c7:d9:5c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWRu6ahSWjniw3VuZ6tSbemSIc8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDgzNVoX DTI3MDUwMTIxMTMzNVowMzExMC8GA1UEAxMoRjk5QUQ4MDc5N0U4M0NENDM4MEZG MjJDRTA3NzBDNTgyMjUyMUYzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZBILBRtDJEwITFKWQddXjG4xy4mXG7jighnSKZ0qnZU0v+V181xb3hCaxd gDseZFmaLlf8lWQQA2ia9ivGmma3T9F531uSsWzLHD3JDRVaBvWXvxzXmwhLHRxi tIAwnZIeHGti1y9tM11dVYlIKXuCyuEgdN/WABF2jFG8qr45axQ6JvMKuP9ByJlT SZ0AeBAXGSpoQWXg4k8l63UwKXZs9wTXk2bsek6oUEEFLN04Xy3VWr7YJkDVdWGt wwlMywecXv7HFcz5sxWII9bTRsgHE8FtAhOr+odte0nHh3gVkn1P0fneL3+VFuY5 fLJybkLGpd02dtJO1JZQ6fV4jSsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT5mtgH l+g81DgP8izgdwxYIlIfODAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5t9MA0GCSqGSIb3DQEBCwUAA4IBAQBjFR0YLnNFvTma0Lxh0UZwdKn6 sjruG8acOPQPqZwsy0ZTdws1fYprZljVWypYydZpzW0txT8sud4s+hoCg5dpuFEP uMQSdreoMhQcbwPwbRW95e9MNLtgiFkyKPucXyPHHUsBta2VkijLPaqL4aY8+nn9 QHFcl6hd7RcNJ58xpKA450piLJ6UHL5Pc6VDUlWAOCSa8sEvXS3GIOw50mfPmAUS WO0qUu5SOTFsSKp5nWnm4dw+I1iKA343ix5n1j2pzOhbnpuhLf+4r2zgKVFq/fi4 mOeL/I920zHQQ7JBEySBKw+WKzuZDCp3Thfu+FKz0oGpIqgcdqPoOALLx9lc -----END CERTIFICATE-----Generated at Sun May 3 00:42:25 2026 by rpki-client