$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141070.roa File: AS141070.roa (raw, json) Hash identifier: OOd02aP/+sAw6JgzeRkBZb1DQ9w+h9AhY0AQ9B6QlIg= Subject key identifier: 34:23:48:5E:94:92:2D:37:77:FA:AA:EE:76:13:72:A2:B8:AA:75:CB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 43EBE76056DB4753090A33C9109111ADF8615465 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141070.roa Signing time: Sat 02 May 2026 09:20:11 +0000 ROA not before: Sat 02 May 2026 09:15:11 +0000 ROA not after: Sat 01 May 2027 09:20:11 +0000 asID: 141070 IP address blocks: 103.165.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:eb:e7:60:56:db:47:53:09:0a:33:c9:10:91:11:ad:f8:61:54:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:11 2026 GMT Not After : May 1 09:20:11 2027 GMT Subject: CN=3423485E94922D3777FAAAEE761372A2B8AA75CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:06:f8:75:92:c6:9e:a5:95:fb:7f:cb:c3: 5a:52:68:7c:e3:6a:ed:6f:fc:72:27:97:fe:dd:9f: ad:69:32:96:77:b4:91:72:6f:3c:b3:52:94:36:c0: 42:e6:c2:02:cb:51:36:60:97:06:0a:62:72:39:a2: f3:9e:70:17:9e:57:d8:4e:ca:47:28:b4:f0:72:61: 58:6d:fa:16:57:64:23:f9:88:97:18:88:a0:6e:18: 4c:d8:f3:74:a2:78:08:6b:a9:1f:85:01:33:9c:a9: a6:0c:41:7b:17:d7:ca:d1:f5:1e:5e:15:6a:39:d3: b8:a4:41:af:a0:16:cb:91:e2:e9:34:c8:1e:99:37: 34:0f:eb:d1:be:52:64:91:68:71:ac:03:8a:16:cd: ce:52:08:14:ab:8d:1a:ab:00:09:2f:54:4d:f5:66: 64:18:b0:7a:05:0c:00:af:15:05:fe:f3:30:4e:59: 85:b6:6d:db:45:6f:26:6b:4c:a2:b9:cf:ab:f6:bb: 37:da:6e:7e:bf:81:25:34:29:9b:79:ce:f8:cb:ae: 1f:ce:e8:3c:d9:7d:ea:60:cb:03:a7:d7:0d:07:6b: 68:e2:ac:ca:33:63:ee:0c:52:69:8d:95:52:7d:01: 43:7f:e6:df:eb:5b:1c:7c:ce:99:c7:8b:fa:74:c9: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:48:5E:94:92:2D:37:77:FA:AA:EE:76:13:72:A2:B8:AA:75:CB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141070.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.249.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:66:9b:4d:ec:06:b4:46:38:4b:35:31:64:be:03:04:99:a0: 7e:59:8a:26:e1:e0:1e:cd:c2:74:79:08:84:37:98:38:db:38: 05:48:2b:a7:9f:db:b6:5e:44:a2:e2:a8:60:0c:75:fa:fb:09: 29:d7:4f:80:64:fd:f1:5c:0c:ea:25:0c:9d:bf:99:77:0d:a2: b0:ea:8a:b3:a9:a1:e8:a1:79:87:c2:f3:c0:cb:ce:6b:c0:8d: 9b:29:9a:1c:d7:5b:03:16:80:70:57:b6:03:f4:9b:d6:24:46: ba:15:aa:ea:f1:34:c5:80:2c:e9:9c:a0:0e:a0:6e:23:71:e4: a1:73:48:76:2d:fe:b3:7f:63:4c:61:68:cc:4a:b3:ad:56:7d: a6:aa:75:cf:0e:62:f1:f1:3d:fa:f9:26:6f:80:95:32:f2:d4: 0e:c4:6b:56:f0:b4:3d:6c:64:20:21:21:ce:17:0b:9a:df:6f: 9d:cf:60:a6:36:02:59:5f:de:a7:34:d3:b0:7e:9f:1b:52:b6: 9e:7d:89:62:99:00:a7:bc:7d:aa:47:5f:0d:2c:63:79:d0:1f: f0:cd:89:7f:8d:2e:a8:1b:da:57:c2:85:5c:36:05:1f:8b:34: 4a:ce:32:ef:ef:76:c8:42:b4:62:30:df:68:83:61:76:d5:4b: fa:2a:11:83 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQ+vnYFbbR1MJCjPJEJERrfhhVGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUxMVoX DTI3MDUwMTA5MjAxMVowMzExMC8GA1UEAxMoMzQyMzQ4NUU5NDkyMkQzNzc3RkFB QUVFNzYxMzcyQTJCOEFBNzVDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMotBvh1ksaepZX7f8vDWlJofONq7W/8cieX/t2frWkylne0kXJvPLNSlDbA QubCAstRNmCXBgpicjmi855wF55X2E7KRyi08HJhWG36FldkI/mIlxiIoG4YTNjz dKJ4CGupH4UBM5yppgxBexfXytH1Hl4VajnTuKRBr6AWy5Hi6TTIHpk3NA/r0b5S ZJFocawDihbNzlIIFKuNGqsACS9UTfVmZBiwegUMAK8VBf7zME5ZhbZt20VvJmtM ornPq/a7N9pufr+BJTQpm3nO+MuuH87oPNl96mDLA6fXDQdraOKsyjNj7gxSaY2V Un0BQ3/m3+tbHHzOmceL+nTJ790CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ0I0he lJItN3f6qu52E3KiuKp1yzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6X5MA0GCSqGSIb3DQEBCwUAA4IBAQCbZptN7Aa0RjhLNTFkvgMEmaB+ WYom4eAezcJ0eQiEN5g42zgFSCunn9u2XkSi4qhgDHX6+wkp10+AZP3xXAzqJQyd v5l3DaKw6oqzqaHooXmHwvPAy85rwI2bKZoc11sDFoBwV7YD9JvWJEa6Farq8TTF gCzpnKAOoG4jceShc0h2Lf6zf2NMYWjMSrOtVn2mqnXPDmLx8T36+SZvgJUy8tQO xGtW8LQ9bGQgISHOFwua32+dz2CmNgJZX96nNNOwfp8bUraefYlimQCnvH2qR18N LGN50B/wzYl/jS6oG9pXwoVcNgUfizRKzjLv73bIQrRiMN9og2F21Uv6KhGD -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client