$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141085.roa File: AS141085.roa (raw, json) Hash identifier: 554//Lr9+1XmHK1kaiyzidpiZoulaRRDTQ4m+S6S9OU= Subject key identifier: 28:63:29:6C:0B:8F:89:49:9D:51:9A:5D:15:D9:2C:58:37:B4:0E:73 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 178465E401D43A7074D1E8ABA6FB3BCF0CCCDF8B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141085.roa Signing time: Sat 02 May 2026 21:14:24 +0000 ROA not before: Sat 02 May 2026 21:09:24 +0000 ROA not after: Sat 01 May 2027 21:14:24 +0000 asID: 141085 IP address blocks: 103.156.88.0/24 maxlen: 24 2001:df4:e880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:84:65:e4:01:d4:3a:70:74:d1:e8:ab:a6:fb:3b:cf:0c:cc:df:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:09:24 2026 GMT Not After : May 1 21:14:24 2027 GMT Subject: CN=2863296C0B8F89499D519A5D15D92C5837B40E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:f6:e9:04:39:fe:b4:8d:5e:30:8d:29:b8: 0c:fb:19:7b:99:b0:3f:fe:2f:be:06:61:a0:d4:52: 41:cf:9a:24:b0:0d:54:3c:fc:32:92:5c:60:ce:99: d7:c3:7a:0a:24:02:19:14:ca:b0:1e:8b:2d:32:ad: 62:45:be:d2:89:fe:77:fd:4b:8d:20:0e:5f:d0:2a: 4f:e6:94:34:3f:8c:39:0e:21:da:a4:6a:74:cc:57: f6:0e:20:7f:0c:f2:9f:23:ea:58:f6:15:8d:40:0d: 07:7d:e8:8e:b0:98:72:0d:f6:f8:4b:00:b4:60:97: 65:f6:f2:68:fa:45:18:37:94:a9:de:3b:9d:68:f2: d6:b0:fe:d9:63:e4:13:08:48:89:1c:85:0d:bd:e2: df:a1:d0:01:e2:0a:81:89:52:b9:5d:95:e6:1b:c8: 97:3f:ba:e1:f5:57:be:ff:21:2b:a4:46:09:c6:1d: c5:46:58:1d:3d:99:4a:0f:ea:1c:c0:57:59:b7:11: 21:3a:4f:5b:73:88:0f:1e:f3:5b:2b:3b:7b:79:59: 36:73:2c:73:c5:f0:43:be:e4:3f:db:59:ca:40:88: 56:24:32:60:5f:90:f8:6f:ad:47:db:f2:19:82:44: ed:d8:84:0e:ee:cd:97:13:e4:19:f5:ec:2a:2b:52: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:29:6C:0B:8F:89:49:9D:51:9A:5D:15:D9:2C:58:37:B4:0E:73 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.88.0/24 IPv6: 2001:df4:e880::/48 Signature Algorithm: sha256WithRSAEncryption 64:65:79:eb:10:b7:45:4e:30:c8:8c:22:94:71:68:80:01:70: e5:04:ae:b2:6f:cf:18:a0:7c:1d:29:80:de:dc:5c:7d:63:7b: 23:6f:c7:8c:b1:4b:98:35:23:90:1b:bb:0d:c8:39:18:e4:61: 8f:48:9e:52:90:aa:6d:7b:eb:37:35:58:5d:2b:fd:55:f1:91: 25:99:84:38:d0:b5:7a:cd:cc:a3:6c:dc:91:25:c2:f2:94:71: 5e:b0:fe:48:c6:90:91:42:9a:14:67:1f:43:ae:ef:cf:8d:21: 65:34:30:0f:a8:cb:b6:7e:97:b7:37:19:b3:10:d3:69:52:d7: 0b:3e:cb:c3:c5:1b:84:53:92:d8:68:c1:a4:06:d1:90:5d:25: 2b:7f:b6:5c:a1:98:f8:5e:0d:32:ec:2f:83:1e:28:4b:92:0c: 85:45:ee:56:13:06:90:ac:a3:62:ca:3f:a0:35:12:fc:13:01: 2e:de:0b:9d:ee:d2:87:b2:27:64:18:6c:93:a1:e3:90:db:26: 35:83:bf:b5:ad:32:a3:dc:56:cd:d4:c6:db:c6:76:c2:90:1c: ea:a7:3d:0a:49:68:34:ac:05:b4:e9:9e:94:bf:24:82:b9:17: 09:93:ba:c0:4c:94:33:38:1d:ec:33:22:c7:6c:1b:f2:bd:7c: f4:fa:a1:58 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUF4Rl5AHUOnB00eirpvs7zwzM34swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDkyNFoX DTI3MDUwMTIxMTQyNFowMzExMC8GA1UEAxMoMjg2MzI5NkMwQjhGODk0OTlENTE5 QTVEMTVEOTJDNTgzN0I0MEU3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK979ukEOf60jV4wjSm4DPsZe5mwP/4vvgZhoNRSQc+aJLANVDz8MpJcYM6Z 18N6CiQCGRTKsB6LLTKtYkW+0on+d/1LjSAOX9AqT+aUND+MOQ4h2qRqdMxX9g4g fwzynyPqWPYVjUANB33ojrCYcg32+EsAtGCXZfbyaPpFGDeUqd47nWjy1rD+2WPk EwhIiRyFDb3i36HQAeIKgYlSuV2V5hvIlz+64fVXvv8hK6RGCcYdxUZYHT2ZSg/q HMBXWbcRITpPW3OIDx7zWys7e3lZNnMsc8XwQ77kP9tZykCIViQyYF+Q+G+tR9vy GYJE7diEDu7NlxPkGfXsKitSVn8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQoYyls C4+JSZ1Rml0V2SxYN7QOczAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ5xYMA8EAgACMAkDBwAgAQ306IAwDQYJKoZIhvcNAQELBQADggEBAGRl eesQt0VOMMiMIpRxaIABcOUErrJvzxigfB0pgN7cXH1jeyNvx4yxS5g1I5Abuw3I ORjkYY9InlKQqm176zc1WF0r/VXxkSWZhDjQtXrNzKNs3JElwvKUcV6w/kjGkJFC mhRnH0Ou78+NIWU0MA+oy7Z+l7c3GbMQ02lS1ws+y8PFG4RTkthowaQG0ZBdJSt/ tlyhmPheDTLsL4MeKEuSDIVF7lYTBpCso2LKP6A1EvwTAS7eC53u0oeyJ2QYbJOh 45DbJjWDv7WtMqPcVs3UxtvGdsKQHOqnPQpJaDSsBbTpnpS/JIK5FwmTusBMlDM4 HewzIsdsG/K9fPT6oVg= -----END CERTIFICATE-----Generated at Sun May 3 00:41:33 2026 by rpki-client