
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141077.roa
File: AS141077.roa (raw, json)
Hash identifier: VYWKHOOKiI8teVsv8ri9+GIGU1QWhbfQQ7QE+mgQ+ps=
Subject key identifier: 9C:D9:96:90:60:1C:86:D9:E2:02:60:93:8A:02:77:65:9C:6B:56:74
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 7D1C31EDC5CACEB4A5DAE313326DA288D1B35E2A
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141077.roa
Signing time: Sat 02 May 2026 09:20:35 +0000
ROA not before: Sat 02 May 2026 09:15:35 +0000
ROA not after: Sat 01 May 2027 09:20:35 +0000
asID: 141077
IP address blocks: 103.173.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1c:31:ed:c5:ca:ce:b4:a5:da:e3:13:32:6d:a2:88:d1:b3:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:15:35 2026 GMT
Not After : May 1 09:20:35 2027 GMT
Subject: CN=9CD99690601C86D9E20260938A0277659C6B5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:68:d9:ad:3f:4d:d9:02:bf:b0:a2:82:e5:
e5:e1:b7:0b:f2:a4:b4:0f:a6:2e:e7:6a:4f:d4:e9:
e0:22:d7:27:33:6c:6d:e8:5a:3f:88:12:2a:aa:bb:
61:1f:51:63:d9:6b:2d:2c:a6:59:a3:ff:21:c5:9b:
64:98:63:57:10:48:c9:27:73:ce:94:55:12:45:36:
2f:15:37:36:95:b0:20:77:48:35:8e:25:f2:10:40:
d4:e7:e2:fc:6a:90:93:73:5f:68:8f:1b:1b:f2:42:
47:5c:bd:ee:9a:a1:c7:3c:b2:2e:38:37:be:f8:da:
d9:8f:1d:be:ea:84:da:98:ad:06:e8:24:9c:10:ff:
70:d2:dc:ee:34:87:d5:59:7b:c9:97:20:35:f7:8b:
a4:86:bb:31:27:76:65:d9:e0:11:4a:d4:06:1d:bf:
60:ee:8c:8a:ef:4d:d6:30:22:4e:bb:7f:59:5b:a2:
c8:03:2b:a2:d8:c1:a7:e0:bd:ee:fb:b8:6c:3e:5d:
bd:04:2d:75:10:62:ab:53:d4:3a:cf:ce:81:87:52:
b3:15:db:3b:12:32:48:c3:54:3d:1d:6d:ec:b6:d5:
4d:00:fe:12:58:60:c2:80:fd:5f:ef:e7:ad:d5:9d:
d2:c5:f1:95:01:c7:ae:61:04:d1:9b:0a:79:af:28:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:96:90:60:1C:86:D9:E2:02:60:93:8A:02:77:65:9C:6B:56:74
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.162.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b2:cd:de:4d:34:31:14:ad:78:2e:48:9a:f3:fa:35:b5:61:
cf:07:e1:0f:32:44:bf:21:7e:98:f6:e9:5d:1b:61:8f:25:7d:
f0:97:ef:e5:4a:42:d5:4f:62:ef:9a:30:b7:57:27:83:d2:7e:
78:4e:3f:e1:25:38:09:6a:f1:dd:02:e9:2a:cf:8e:a4:be:bb:
65:4d:3c:8a:3b:46:5c:6c:1c:22:cb:73:c8:bb:95:e2:a5:38:
7a:58:bc:e1:37:9e:8e:c1:8a:24:a3:ce:22:a4:ba:e9:c9:de:
ac:3c:fe:90:4d:4a:af:e6:5e:07:00:61:d9:2c:74:2e:6c:79:
09:e8:9b:e2:58:7d:49:6d:c1:3f:c7:98:14:88:e7:dc:7b:9c:
8b:35:be:0b:08:7b:70:9b:b5:38:f1:46:58:09:a0:0f:73:1a:
57:60:b6:7b:e7:d8:f5:33:63:d8:1d:a7:15:5c:6f:48:94:f8:
02:bd:5c:01:aa:62:c7:d2:ca:61:7e:f9:b3:a1:f8:aa:d8:d8:
d1:08:05:b2:65:f7:60:fd:7f:82:30:0c:3f:36:73:63:4e:23:
06:f0:6e:9c:ae:ca:3e:46:cd:d1:49:ad:d0:00:be:6e:79:ba:
63:78:55:32:b9:28:dd:3d:a2:ea:38:73:9f:d9:63:60:6d:92:
98:da:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:41:50 2026 by rpki-client