$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141061.roa File: AS141061.roa (raw, json) Hash identifier: z5SaxitptUxmvDWyqYIROcEl1mNTxbrWotAwbL85f10= Subject key identifier: 2C:08:83:AA:19:3D:02:86:19:11:99:53:90:B9:6F:E0:F4:2B:97:FB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0E129B493D4E09766096CDB02DE7A7C950538259 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141061.roa Signing time: Sat 02 May 2026 21:13:37 +0000 ROA not before: Sat 02 May 2026 21:08:37 +0000 ROA not after: Sat 01 May 2027 21:13:37 +0000 asID: 141061 IP address blocks: 103.155.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:12:9b:49:3d:4e:09:76:60:96:cd:b0:2d:e7:a7:c9:50:53:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:08:37 2026 GMT Not After : May 1 21:13:37 2027 GMT Subject: CN=2C0883AA193D02861911995390B96FE0F42B97FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:44:a9:a6:e5:3d:a6:07:d7:6e:c5:06:8c: 2b:47:6b:b2:58:de:4e:21:be:be:fa:0d:68:9e:78: fa:60:1d:b5:1a:ac:8a:98:cf:38:75:eb:02:f4:5f: 7e:b7:68:bc:10:54:99:0e:fa:91:d7:73:0b:b6:89: f3:c7:ba:63:2c:69:b3:34:e5:4a:90:93:d7:5d:8d: 5a:d9:bf:f1:c1:f3:f1:32:00:c0:1d:69:a0:d7:8d: e2:44:95:30:47:15:c3:c5:39:c5:be:26:6a:28:9c: 34:c4:74:05:5d:ed:9b:5a:62:41:42:db:13:7a:3c: 8a:e4:9e:8f:f4:d8:38:a4:b4:26:a1:b8:54:d8:06: 56:69:2b:e7:d3:1e:56:45:6e:ac:c4:cb:ea:be:b4: d2:92:89:f3:d4:aa:e4:9a:b0:65:27:c3:44:d9:63: 1f:75:18:84:d3:07:6e:5e:66:9d:0d:ea:8f:9a:b4: 68:f6:ac:c0:d5:8e:c8:61:4b:30:bc:c4:e4:ae:d0: 51:10:98:7c:5d:bc:01:6e:9a:2c:19:2a:b4:e5:47: 26:1f:40:82:03:3b:01:c2:9d:cc:61:cb:46:8b:be: 85:bc:38:7a:0c:54:34:58:f2:d2:d0:fb:fc:b6:b2: b6:99:89:f6:93:33:33:ec:1b:61:e1:c1:3d:18:ba: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:08:83:AA:19:3D:02:86:19:11:99:53:90:B9:6F:E0:F4:2B:97:FB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.144.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:12:d8:b3:5c:50:87:4b:1d:d5:91:30:0b:17:cc:43:db:c7: 68:6b:db:33:a3:76:97:81:82:8e:a8:a4:e5:82:e6:14:9c:28: 4a:2e:5b:fd:23:1e:86:d2:a2:de:e9:fd:bd:d5:d8:9e:55:4f: a9:b6:12:a8:c7:16:be:a1:6d:64:57:2a:a4:fa:ee:6e:93:d8: e2:26:a0:f6:85:ed:fc:7f:a6:ba:b6:dc:45:e7:ed:2e:c1:f7: 63:2c:e6:db:69:a8:ac:03:9f:31:5f:80:8c:2d:e2:37:63:4b: fa:c3:d4:02:6b:8f:26:db:3d:14:73:80:b8:f6:13:f0:9f:5b: 97:1c:fd:73:09:a5:78:f8:86:62:55:c1:8b:c5:16:b6:60:da: 5a:e3:38:a4:ab:55:92:57:e1:67:dd:00:c6:8b:64:8f:64:ae: 3c:13:5e:ed:ed:fd:b7:98:f1:7d:d6:38:4a:e0:7e:65:a3:1f: 30:7e:b0:01:1b:3d:bd:46:cc:89:7b:98:40:1f:bf:88:da:1b: 9e:59:9c:d2:b7:4e:f9:0f:69:b2:e2:83:13:c1:0f:1d:63:44: 39:95:3d:50:39:f4:f5:7c:08:64:db:56:73:84:ab:6b:dc:3b: 46:b0:11:dc:af:64:9b:62:67:6b:49:6e:9e:b6:18:34:a9:50: 48:05:46:c0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUDhKbST1OCXZgls2wLeenyVBTglkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDgzN1oX DTI3MDUwMTIxMTMzN1owMzExMC8GA1UEAxMoMkMwODgzQUExOTNEMDI4NjE5MTE5 OTUzOTBCOTZGRTBGNDJCOTdGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaLRKmm5T2mB9duxQaMK0drsljeTiG+vvoNaJ54+mAdtRqsipjPOHXrAvRf frdovBBUmQ76kddzC7aJ88e6YyxpszTlSpCT112NWtm/8cHz8TIAwB1poNeN4kSV MEcVw8U5xb4maiicNMR0BV3tm1piQULbE3o8iuSej/TYOKS0JqG4VNgGVmkr59Me VkVurMTL6r600pKJ89Sq5JqwZSfDRNljH3UYhNMHbl5mnQ3qj5q0aPaswNWOyGFL MLzE5K7QURCYfF28AW6aLBkqtOVHJh9AggM7AcKdzGHLRou+hbw4egxUNFjy0tD7 /LaytpmJ9pMzM+wbYeHBPRi6+IECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQsCIOq GT0ChhkRmVOQuW/g9CuX+zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5uQMA0GCSqGSIb3DQEBCwUAA4IBAQAqEtizXFCHSx3VkTALF8xD28do a9szo3aXgYKOqKTlguYUnChKLlv9Ix6G0qLe6f291dieVU+pthKoxxa+oW1kVyqk +u5uk9jiJqD2he38f6a6ttxF5+0uwfdjLObbaaisA58xX4CMLeI3Y0v6w9QCa48m 2z0Uc4C49hPwn1uXHP1zCaV4+IZiVcGLxRa2YNpa4zikq1WSV+Fn3QDGi2SPZK48 E17t7f23mPF91jhK4H5lox8wfrABGz29RsyJe5hAH7+I2hueWZzSt075D2my4oMT wQ8dY0Q5lT1QOfT1fAhk21ZzhKtr3DtGsBHcr2SbYmdrSW6ethg0qVBIBUbA -----END CERTIFICATE-----Generated at Sun May 3 00:42:36 2026 by rpki-client