$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141087.roa File: AS141087.roa (raw, json) Hash identifier: mtH+jA8tfFlzuVARLcjJ5siS9z2ZB812ZWTl/CwlBkI= Subject key identifier: 1F:16:45:21:4A:1A:36:36:7E:1D:B7:E9:D5:C1:20:0F:69:31:67:00 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3D973D2EA1553083FF92643DEFA611DEBA74AB78 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141087.roa Signing time: Sat 02 May 2026 21:02:28 +0000 ROA not before: Sat 02 May 2026 20:57:28 +0000 ROA not after: Sat 01 May 2027 21:02:28 +0000 asID: 141087 IP address blocks: 103.127.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:97:3d:2e:a1:55:30:83:ff:92:64:3d:ef:a6:11:de:ba:74:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 20:57:28 2026 GMT Not After : May 1 21:02:28 2027 GMT Subject: CN=1F1645214A1A36367E1DB7E9D5C1200F69316700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:1a:89:67:1a:99:77:4f:c8:31:46:3d:e4: 12:be:06:b5:8d:aa:8e:e4:96:4f:8d:a8:a4:c7:5c: 47:48:28:3c:d1:85:68:30:c9:af:ba:d0:62:c4:86: c5:87:1c:8f:ca:eb:c3:7e:55:fd:22:94:bc:fa:dd: 0b:18:19:ae:6d:c2:41:e3:7f:34:ab:2e:ff:2d:05: ce:8b:ce:3c:df:78:57:2e:de:cd:ff:a6:c4:33:cd: ae:b5:d3:20:8f:8a:47:ad:58:40:52:b7:d0:ef:4d: 9b:f5:a9:9c:74:0a:05:32:52:c9:b5:3b:18:8b:7e: 52:ae:19:62:a0:cc:95:3c:d4:f8:8e:5a:a8:79:20: bf:cc:81:23:07:3f:6c:3a:2f:1d:64:aa:2b:da:34: 8b:49:fd:8e:ae:eb:21:b1:a4:53:9a:5c:8c:d2:7d: fa:1b:1a:a2:97:c6:a2:85:ba:10:66:2a:47:66:4b: 85:1e:8e:db:f9:80:93:02:e3:c0:e5:7c:18:94:a4: 5c:8c:52:d5:c6:17:8c:c2:2b:f2:c3:7f:08:fd:f2: 9b:a1:2a:09:5b:a6:54:02:37:b3:e8:6b:9b:d8:e6: e0:96:95:5f:0c:f3:1f:32:7b:0b:a7:67:5d:97:6f: a3:56:d6:ba:d3:09:a1:19:1e:c2:28:7a:07:b0:83: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:16:45:21:4A:1A:36:36:7E:1D:B7:E9:D5:C1:20:0F:69:31:67:00 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.221.0/24 Signature Algorithm: sha256WithRSAEncryption 14:5f:55:fe:5c:b2:6e:ea:7e:09:3f:c6:ed:49:7e:89:f9:cf: d9:65:f6:51:22:6e:91:4d:1f:d9:3e:b6:94:92:b0:48:b6:53: 45:83:f0:4e:86:3a:67:8d:c2:a0:f3:e9:2d:7e:a3:00:56:e7: b9:cc:5f:78:57:8e:c5:9b:77:7c:0a:a4:4e:69:7b:b9:bf:58: 4c:be:80:ca:09:2a:89:73:9b:07:48:65:c3:3a:dc:79:7b:50: a0:08:7e:ae:b2:9b:8c:46:f0:f9:2e:65:08:08:ba:ba:e5:f8: d6:00:f5:60:2c:bf:43:a7:ea:01:e6:d2:65:f0:c8:ce:d6:20: 69:ae:43:60:b3:48:cc:61:09:4d:cd:2f:bd:af:4b:36:c9:15: ce:4c:c7:72:1e:63:e4:e9:48:1b:e1:d1:c3:29:a5:36:c9:c8: 94:a0:7f:dc:12:f8:57:f3:2f:67:54:5b:e8:47:0f:ca:0b:cd: e7:22:2c:22:79:36:28:9c:b4:87:1e:9c:8d:50:e8:f5:d3:6b: 15:4c:ae:3c:0b:43:e7:10:ba:63:59:25:3d:95:af:bb:5a:39: 7e:bb:f7:3c:37:7c:cd:28:03:8d:8b:89:c4:f4:71:61:76:6f: 5e:af:08:4c:06:53:c0:39:ed:34:60:9e:dd:dc:1d:13:2c:19: 72:51:11:3a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUPZc9LqFVMIP/kmQ976YR3rp0q3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIwNTcyOFoX DTI3MDUwMTIxMDIyOFowMzExMC8GA1UEAxMoMUYxNjQ1MjE0QTFBMzYzNjdFMURC N0U5RDVDMTIwMEY2OTMxNjcwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0fGolnGpl3T8gxRj3kEr4GtY2qjuSWT42opMdcR0goPNGFaDDJr7rQYsSG xYccj8rrw35V/SKUvPrdCxgZrm3CQeN/NKsu/y0FzovOPN94Vy7ezf+mxDPNrrXT II+KR61YQFK30O9Nm/WpnHQKBTJSybU7GIt+Uq4ZYqDMlTzU+I5aqHkgv8yBIwc/ bDovHWSqK9o0i0n9jq7rIbGkU5pcjNJ9+hsaopfGooW6EGYqR2ZLhR6O2/mAkwLj wOV8GJSkXIxS1cYXjMIr8sN/CP3ym6EqCVumVAI3s+hrm9jm4JaVXwzzHzJ7C6dn XZdvo1bWutMJoRkewih6B7CDpMECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQfFkUh Sho2Nn4dt+nVwSAPaTFnADAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDg3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ3/dMA0GCSqGSIb3DQEBCwUAA4IBAQAUX1X+XLJu6n4JP8btSX6J+c/Z ZfZRIm6RTR/ZPraUkrBItlNFg/BOhjpnjcKg8+ktfqMAVue5zF94V47Fm3d8CqRO aXu5v1hMvoDKCSqJc5sHSGXDOtx5e1CgCH6uspuMRvD5LmUICLq65fjWAPVgLL9D p+oB5tJl8MjO1iBprkNgs0jMYQlNzS+9r0s2yRXOTMdyHmPk6Ugb4dHDKaU2yciU oH/cEvhX8y9nVFvoRw/KC83nIiwieTYonLSHHpyNUOj102sVTK48C0PnELpjWSU9 la+7Wjl+u/c8N3zNKAONi4nE9HFhdm9erwhMBlPAOe00YJ7d3B0TLBlyURE6 -----END CERTIFICATE-----Generated at Sun May 3 01:44:44 2026 by rpki-client