
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141082.roa
File: AS141082.roa (raw, json)
Hash identifier: 4JZDkw6FOFKXFJG6iD9FQkc6TkTlfBjaBywQdLSXyx0=
Subject key identifier: 35:12:F8:BC:57:4A:AE:83:4F:1C:7B:CA:96:EA:80:F0:AC:B6:82:E7
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 0E8F6DAB5EFD943337EF0CF5905CFFCB9F6B5EE2
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141082.roa
Signing time: Sat 02 May 2026 21:18:44 +0000
ROA not before: Sat 02 May 2026 21:13:44 +0000
ROA not after: Sat 01 May 2027 21:18:44 +0000
asID: 141082
IP address blocks: 103.251.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8f:6d:ab:5e:fd:94:33:37:ef:0c:f5:90:5c:ff:cb:9f:6b:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 21:13:44 2026 GMT
Not After : May 1 21:18:44 2027 GMT
Subject: CN=3512F8BC574AAE834F1C7BCA96EA80F0ACB682E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:92:c1:c3:59:40:6f:9c:f0:20:86:82:55:
32:32:18:f1:2b:10:72:f8:52:19:fa:e0:f3:21:b7:
5d:84:f5:a0:37:11:a3:a5:d4:9c:51:d9:82:c0:39:
90:ad:74:aa:93:68:27:0d:fd:12:62:5f:fd:e6:9b:
4e:4a:d9:e1:eb:1c:ed:e6:3b:51:ae:e7:8f:8a:43:
e4:5d:ae:2f:4a:dc:8a:fd:8c:ae:5e:12:eb:1a:ed:
e6:4b:85:08:9c:24:c6:bb:b6:84:9f:d9:ea:6a:5c:
b6:d2:31:be:60:3d:73:f6:34:fc:d4:37:28:0a:0b:
d6:8f:c9:30:c4:10:74:4a:81:80:cd:5c:8b:11:9b:
f0:c5:30:d4:95:94:0e:b3:aa:cc:69:d7:cf:1d:df:
a4:a4:5b:fe:23:2a:e3:5a:4e:70:dd:c7:0d:ec:cf:
0f:20:cb:09:89:03:b0:11:54:59:71:bf:3d:ca:ba:
9b:c2:24:61:4c:67:23:25:d9:35:c8:d5:00:63:e8:
79:85:50:1c:6a:10:2a:c0:8e:54:2d:31:23:2e:95:
fd:d0:00:7d:de:e4:e6:a4:82:24:fe:b9:95:30:aa:
a4:31:ab:60:97:ba:80:35:0c:ca:a0:b4:a7:42:07:
22:d5:fc:f4:83:f6:1a:e7:54:98:35:f4:ea:21:da:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:F8:BC:57:4A:AE:83:4F:1C:7B:CA:96:EA:80:F0:AC:B6:82:E7
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.8.0/23
Signature Algorithm: sha256WithRSAEncryption
80:15:59:91:e2:7c:82:91:fd:b4:e8:5a:1c:0e:f8:ed:3d:5a:
16:59:14:4a:9b:18:92:40:83:c2:c9:c2:ed:94:e0:e1:44:cb:
69:24:8f:0d:99:bf:86:62:b8:a6:1d:b4:f6:b1:22:ba:9b:55:
fd:f3:03:50:c6:b2:3a:27:a7:2a:2c:f5:6f:1c:38:78:82:e0:
02:e1:e7:34:50:fa:ef:ba:da:4a:01:a9:70:11:45:fe:2a:f2:
2c:57:42:90:a5:99:e6:ef:5d:06:5f:2c:8e:34:24:d2:2f:43:
42:75:a1:ad:eb:ac:62:a2:31:05:1c:bf:78:1e:8a:14:94:be:
d1:99:0e:10:07:ec:d3:f0:80:07:6e:a0:dd:0f:e3:ce:76:a4:
41:f7:9a:50:b4:b4:e3:00:1d:d6:53:7d:0b:55:cb:b5:75:08:
84:d5:b9:ef:12:d7:76:d3:ee:36:70:05:9c:6a:6d:18:2e:50:
6d:01:42:82:6d:9f:82:f2:8d:0a:a9:5f:c7:4d:a9:b0:e1:55:
4f:2b:82:19:e4:9e:ee:b5:db:fc:cb:d3:42:a2:8f:b3:8a:72:
2c:4a:7d:49:9c:13:3f:3a:f5:a6:26:18:bc:d3:19:89:45:17:
c2:52:1e:ba:76:9b:88:6b:f6:a4:65:cf:b7:b2:bc:1d:88:59:
10:ad:bc:76
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUDo9tq179lDM37wz1kFz/y59rXuIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTM0NFoX
DTI3MDUwMTIxMTg0NFowMzExMC8GA1UEAxMoMzUxMkY4QkM1NzRBQUU4MzRGMUM3
QkNBOTZFQTgwRjBBQ0I2ODJFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKgzksHDWUBvnPAghoJVMjIY8SsQcvhSGfrg8yG3XYT1oDcRo6XUnFHZgsA5
kK10qpNoJw39EmJf/eabTkrZ4esc7eY7Ua7nj4pD5F2uL0rciv2Mrl4S6xrt5kuF
CJwkxru2hJ/Z6mpcttIxvmA9c/Y0/NQ3KAoL1o/JMMQQdEqBgM1cixGb8MUw1JWU
DrOqzGnXzx3fpKRb/iMq41pOcN3HDezPDyDLCYkDsBFUWXG/Pcq6m8IkYUxnIyXZ
NcjVAGPoeYVQHGoQKsCOVC0xIy6V/dAAfd7k5qSCJP65lTCqpDGrYJe6gDUMyqC0
p0IHItX89IP2GudUmDX06iHa1uUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ1Evi8
V0qug08ce8qW6oDwrLaC5zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDgyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZ/sIMA0GCSqGSIb3DQEBCwUAA4IBAQCAFVmR4nyCkf206FocDvjtPVoW
WRRKmxiSQIPCycLtlODhRMtpJI8Nmb+GYrimHbT2sSK6m1X98wNQxrI6J6cqLPVv
HDh4guAC4ec0UPrvutpKAalwEUX+KvIsV0KQpZnm710GXyyONCTSL0NCdaGt66xi
ojEFHL94HooUlL7RmQ4QB+zT8IAHbqDdD+POdqRB95pQtLTjAB3WU30LVcu1dQiE
1bnvEtd20+42cAWcam0YLlBtAUKCbZ+C8o0KqV/HTamw4VVPK4IZ5J7utdv8y9NC
oo+zinIsSn1JnBM/OvWmJhi80xmJRRfCUh66dpuIa/akZc+3srwdiFkQrbx2
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:14 2026 by rpki-client