$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141092.roa File: AS141092.roa (raw, json) Hash identifier: 1MeLD1mYi3AwsDyWxRV+aWggAOjulgc4QqS9XTELlro= Subject key identifier: DA:5D:B7:54:59:16:EE:C3:9C:35:F5:DD:72:E1:2A:B8:48:5C:2B:50 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 17A1BF5720D5D0D0CF80E4D701F030399441CA4F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141092.roa Signing time: Sat 02 May 2026 21:14:02 +0000 ROA not before: Sat 02 May 2026 21:09:02 +0000 ROA not after: Sat 01 May 2027 21:14:02 +0000 asID: 141092 IP address blocks: 103.156.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a1:bf:57:20:d5:d0:d0:cf:80:e4:d7:01:f0:30:39:94:41:ca:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:09:02 2026 GMT Not After : May 1 21:14:02 2027 GMT Subject: CN=DA5DB7545916EEC39C35F5DD72E12AB8485C2B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:bc:99:a9:30:7e:72:d5:25:90:93:51:92: b7:78:04:14:b4:d1:27:5c:a9:db:e4:1b:c7:e4:5f: ad:1e:a8:16:2b:39:41:f9:f5:1f:90:46:c0:90:64: ac:aa:e8:f3:bc:83:34:30:84:e4:73:f2:54:bf:31: 49:b9:0b:4e:e2:2a:ac:77:d2:61:5b:e7:cd:d8:db: 15:4a:35:37:69:ea:00:ef:5d:3d:01:a0:9e:f8:f7: 14:00:50:b2:0d:25:95:f9:df:65:71:a7:35:c0:d5: 20:0d:37:86:08:78:51:42:ef:78:9b:13:9f:f8:3e: 41:51:95:a4:56:57:b3:ff:99:48:57:08:b7:4d:51: d3:82:9f:62:7e:a8:5b:c7:e9:df:37:ec:e7:7f:4c: 48:88:9d:9f:86:16:2a:89:2f:54:23:bd:47:fe:d0: ce:95:05:af:40:91:25:74:c5:98:06:c8:d9:01:b6: f8:0a:f1:2c:66:f9:d7:bd:bb:18:ae:56:01:d5:09: dd:45:61:29:49:43:61:37:77:6a:1d:0b:62:22:7e: 60:bd:be:96:38:e3:da:72:9f:f0:e4:4f:2b:67:b8: d7:19:0b:73:f3:c5:ba:3a:a3:1a:21:12:ee:e2:8f: cb:0d:8a:5c:40:b3:ab:5a:51:64:e6:cd:e0:2d:fd: 60:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:B7:54:59:16:EE:C3:9C:35:F5:DD:72:E1:2A:B8:48:5C:2B:50 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.140.0/23 Signature Algorithm: sha256WithRSAEncryption 08:3d:af:bb:a1:c8:0f:1a:7e:ca:3f:79:d4:a4:93:c5:b9:69: be:42:ea:16:6b:1e:3b:57:ea:c7:17:1e:93:91:87:91:e5:76: 16:ff:ad:36:70:63:4f:c0:be:48:be:94:54:6b:cb:ef:f9:be: ba:60:66:fa:d9:3d:bd:1f:fa:b0:fb:d6:fb:46:8d:bf:a9:d9: 8b:41:b0:d2:d1:91:4a:b7:5d:84:cf:6b:1a:d2:27:ed:8e:47: b0:bc:14:6f:5b:e5:89:e1:d0:71:f5:a3:e4:43:fc:8a:2d:43: 90:21:92:df:55:31:13:3d:c2:31:7a:6b:7a:29:0e:2e:53:44: df:db:ef:ef:5f:37:69:61:19:43:8d:d3:c8:25:39:d9:0d:63: b6:2d:67:9f:f4:87:e1:93:a8:90:62:3c:82:8e:38:ea:81:4c: 90:ed:c6:4a:76:e1:29:31:90:1e:5a:8c:c9:9f:d4:8e:d4:1e: cc:21:10:53:cf:a8:2b:ec:aa:6a:a6:60:70:58:ef:59:bd:c1: a8:f3:d5:9b:3a:84:f5:b4:19:97:8d:1b:0a:ca:d1:83:b4:41: 7a:bf:c9:a4:bc:31:6e:78:d6:89:80:d4:99:8d:95:92:6d:58: a4:d5:f4:1e:86:62:85:de:46:9d:8c:d8:6d:94:67:53:c2:fd: 7f:5a:94:36 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUF6G/VyDV0NDPgOTXAfAwOZRByk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDkwMloX DTI3MDUwMTIxMTQwMlowMzExMC8GA1UEAxMoREE1REI3NTQ1OTE2RUVDMzlDMzVG NURENzJFMTJBQjg0ODVDMkI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaZvJmpMH5y1SWQk1GSt3gEFLTRJ1yp2+Qbx+RfrR6oFis5Qfn1H5BGwJBk rKro87yDNDCE5HPyVL8xSbkLTuIqrHfSYVvnzdjbFUo1N2nqAO9dPQGgnvj3FABQ sg0llfnfZXGnNcDVIA03hgh4UULveJsTn/g+QVGVpFZXs/+ZSFcIt01R04KfYn6o W8fp3zfs539MSIidn4YWKokvVCO9R/7QzpUFr0CRJXTFmAbI2QG2+ArxLGb51727 GK5WAdUJ3UVhKUlDYTd3ah0LYiJ+YL2+ljjj2nKf8ORPK2e41xkLc/PFujqjGiES 7uKPyw2KXECzq1pRZObN4C39YNECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTaXbdU WRbuw5w19d1y4Sq4SFwrUDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5yMMA0GCSqGSIb3DQEBCwUAA4IBAQAIPa+7ocgPGn7KP3nUpJPFuWm+ QuoWax47V+rHFx6TkYeR5XYW/602cGNPwL5IvpRUa8vv+b66YGb62T29H/qw+9b7 Ro2/qdmLQbDS0ZFKt12Ez2sa0iftjkewvBRvW+WJ4dBx9aPkQ/yKLUOQIZLfVTET PcIxemt6KQ4uU0Tf2+/vXzdpYRlDjdPIJTnZDWO2LWef9Ifhk6iQYjyCjjjqgUyQ 7cZKduEpMZAeWozJn9SO1B7MIRBTz6gr7KpqpmBwWO9ZvcGo89WbOoT1tBmXjRsK ytGDtEF6v8mkvDFueNaJgNSZjZWSbVik1fQehmKF3kadjNhtlGdTwv1/WpQ2 -----END CERTIFICATE-----Generated at Sun May 3 00:42:15 2026 by rpki-client