$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141095.roa File: AS141095.roa (raw, json) Hash identifier: QyOWkHWAswXf1xQaIMQKqgW095TW0BbI/WlwsNj53eA= Subject key identifier: B6:F2:6C:1E:FD:6C:8C:55:D3:AD:CE:0F:B2:E2:76:4E:8E:47:77:FA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 37492935A24B5D332A0CFF252F27AEA581805247 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141095.roa Signing time: Sat 02 May 2026 21:14:04 +0000 ROA not before: Sat 02 May 2026 21:09:04 +0000 ROA not after: Sat 01 May 2027 21:14:04 +0000 asID: 141095 IP address blocks: 103.156.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:49:29:35:a2:4b:5d:33:2a:0c:ff:25:2f:27:ae:a5:81:80:52:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:09:04 2026 GMT Not After : May 1 21:14:04 2027 GMT Subject: CN=B6F26C1EFD6C8C55D3ADCE0FB2E2764E8E4777FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:c9:2a:d5:c1:b5:a6:9a:9c:1d:9b:df:28: a4:a5:42:20:24:9d:c0:ad:78:7e:4f:00:b3:7c:55: 36:8a:f5:dc:ee:7c:58:76:e5:e3:92:43:e9:fb:fc: fb:96:0f:ae:36:c4:4e:6c:58:45:85:4f:e4:a8:4a: 8b:db:3c:99:e6:07:e3:e1:a4:a5:f1:1c:62:fc:75: 2f:f4:9f:f5:d8:2c:bf:29:c2:e2:d0:58:d7:27:03: ce:6e:9b:41:47:ec:b0:b4:64:5e:e8:bb:de:c9:c3: b3:2b:84:e9:70:c8:73:f1:ad:8a:0f:39:c8:98:9d: 60:d0:06:75:a8:4e:84:d9:51:15:c2:39:b6:19:dd: fc:36:78:f5:03:ad:f5:86:db:3f:1d:a0:d2:a4:42: 05:05:d3:81:2e:4a:20:72:89:cb:39:61:db:a2:0c: b8:78:54:a7:68:1a:a7:c4:f2:d0:53:0c:2f:16:39: 36:62:0d:6d:92:36:35:10:61:27:6a:7e:eb:ac:82: 9f:30:7f:bd:84:ab:67:14:33:4c:7f:dd:5f:ae:94: 6b:9a:c3:95:69:05:41:41:f9:f8:1f:12:7a:d1:72: 96:ff:4a:ea:37:3a:8a:9c:22:a0:a4:9c:47:71:f4: 7a:f8:a4:a0:9b:ef:7e:ff:a1:e0:01:b5:79:f5:9e: 55:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F2:6C:1E:FD:6C:8C:55:D3:AD:CE:0F:B2:E2:76:4E:8E:47:77:FA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141095.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.211.0/24 Signature Algorithm: sha256WithRSAEncryption 39:05:a6:f9:cd:0d:b4:7c:13:b8:94:21:84:a2:33:a7:67:66: 75:67:84:24:3f:35:ee:49:82:02:43:1a:cf:00:ab:52:e3:4b: 35:88:a2:04:42:e0:52:38:b6:09:7a:3a:20:5c:a4:f7:0a:af: a6:d5:57:e9:fa:14:a3:08:cd:50:8c:95:44:9b:1d:dc:d6:c9: c8:ed:a4:9d:49:9c:46:66:c3:09:90:b1:d7:c8:0a:59:ba:08: 6f:da:2f:90:6f:c3:99:38:1f:90:61:a6:56:25:c2:ea:da:a3: 2b:e9:ee:f4:d0:44:9c:cd:b7:2c:b1:81:a9:52:cb:1c:4e:f9: 90:fe:1b:fb:91:5a:76:da:51:86:2d:40:c9:a3:10:e6:12:6b: 30:e0:45:4a:8e:5f:ea:38:c6:e4:d9:93:45:70:00:ff:1f:40: ef:3d:ef:59:ee:41:2b:d5:fd:f8:b0:6d:8d:8f:25:ef:f7:53: 74:c3:b9:3b:8f:c5:9d:80:88:11:84:23:d8:65:87:b2:2f:bc: 03:48:6b:ce:d6:0c:77:71:21:50:79:7a:c9:84:6f:13:79:59: 72:79:4c:6a:57:4d:33:b7:c3:2e:bd:7a:e8:a1:a7:b4:59:f6: 1f:ce:73:73:e5:f1:4b:7b:7e:69:ba:8b:76:22:cf:e3:f4:2f: 43:97:c5:54 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUN0kpNaJLXTMqDP8lLyeupYGAUkcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDkwNFoX DTI3MDUwMTIxMTQwNFowMzExMC8GA1UEAxMoQjZGMjZDMUVGRDZDOEM1NUQzQURD RTBGQjJFMjc2NEU4RTQ3NzdGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAML4ySrVwbWmmpwdm98opKVCICSdwK14fk8As3xVNor13O58WHbl45JD6fv8 +5YPrjbETmxYRYVP5KhKi9s8meYH4+GkpfEcYvx1L/Sf9dgsvynC4tBY1ycDzm6b QUfssLRkXui73snDsyuE6XDIc/Gtig85yJidYNAGdahOhNlRFcI5thnd/DZ49QOt 9YbbPx2g0qRCBQXTgS5KIHKJyzlh26IMuHhUp2gap8Ty0FMMLxY5NmINbZI2NRBh J2p+66yCnzB/vYSrZxQzTH/dX66Ua5rDlWkFQUH5+B8SetFylv9K6jc6ipwioKSc R3H0evikoJvvfv+h4AG1efWeVRMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS28mwe /WyMVdOtzg+y4nZOjkd3+jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDk1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ5zTMA0GCSqGSIb3DQEBCwUAA4IBAQA5Bab5zQ20fBO4lCGEojOnZ2Z1 Z4QkPzXuSYICQxrPAKtS40s1iKIEQuBSOLYJejogXKT3Cq+m1Vfp+hSjCM1QjJVE mx3c1snI7aSdSZxGZsMJkLHXyApZughv2i+Qb8OZOB+QYaZWJcLq2qMr6e700ESc zbcssYGpUsscTvmQ/hv7kVp22lGGLUDJoxDmEmsw4EVKjl/qOMbk2ZNFcAD/H0Dv Pe9Z7kEr1f34sG2NjyXv91N0w7k7j8WdgIgRhCPYZYeyL7wDSGvO1gx3cSFQeXrJ hG8TeVlyeUxqV00zt8MuvXrooae0WfYfznNz5fFLe35puot2Is/j9C9Dl8VU -----END CERTIFICATE-----Generated at Sun May 3 01:44:39 2026 by rpki-client