$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141097.roa File: AS141097.roa (raw, json) Hash identifier: dv8gXlb1V1SwqMq0VmigQG85qBwriJf0BxicIAnjfZg= Subject key identifier: 5C:A1:F4:55:C6:A2:0F:A4:DE:8A:86:87:D4:8C:1D:D1:97:C7:07:B5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 320F8FAA923BFE85D0D7AB729E11DACCBE5BBDCF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141097.roa Signing time: Sat 02 May 2026 21:14:13 +0000 ROA not before: Sat 02 May 2026 21:09:13 +0000 ROA not after: Sat 01 May 2027 21:14:13 +0000 asID: 141097 IP address blocks: 103.156.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0f:8f:aa:92:3b:fe:85:d0:d7:ab:72:9e:11:da:cc:be:5b:bd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:09:13 2026 GMT Not After : May 1 21:14:13 2027 GMT Subject: CN=5CA1F455C6A20FA4DE8A8687D48C1DD197C707B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:94:ee:19:5d:cd:a1:dc:d5:2a:21:21:76: 39:80:2d:40:5c:90:a7:0e:2a:b7:82:37:47:9c:53: 72:ef:bb:9f:b6:51:fc:d1:de:8d:4d:8d:45:a9:fe: 68:f0:72:35:1f:19:de:3b:b5:95:6f:22:cc:3b:e3: 9e:a9:75:8c:b9:23:e0:47:e7:2d:0b:c2:b8:85:5a: a1:72:46:34:7f:ff:1c:84:50:5c:2f:e4:1e:97:a0: 91:68:7d:71:80:81:4a:f7:0d:b1:b7:3f:a9:ac:59: 0f:9a:28:dc:74:fd:b5:08:05:f1:9d:4b:98:e2:a6: ad:e4:ae:f4:f9:ae:19:bf:bb:01:af:fe:e1:f2:c3: c8:c6:b2:7a:f1:15:b1:51:0b:11:f2:1e:cb:c8:2f: b3:9d:6e:a8:dd:e1:0c:5e:71:09:74:19:8d:87:37: 48:48:bc:f3:3b:cc:4a:c4:46:67:fe:2b:c5:4e:4d: b2:fa:dc:97:40:1e:48:ce:3b:05:0d:3a:12:cc:a7: 59:d5:91:99:d9:05:33:51:33:57:af:9f:27:2f:dd: 08:fc:1a:04:a9:5c:f1:73:34:8b:11:5f:06:ff:d0: 62:c4:6c:f5:2c:16:a1:83:e4:4a:47:18:8e:0f:0a: 99:b9:73:37:fc:17:c8:31:5d:06:5a:e9:a1:7f:f1: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:F4:55:C6:A2:0F:A4:DE:8A:86:87:D4:8C:1D:D1:97:C7:07:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.224.0/23 Signature Algorithm: sha256WithRSAEncryption 48:e0:8e:f1:6d:96:75:b9:9e:e0:d6:26:73:59:8f:7b:5b:f8: 54:91:93:e6:95:f9:65:85:80:a4:86:84:84:9f:59:ca:c4:c3: e1:ee:83:6e:e2:47:a6:ca:9e:0d:4f:67:bd:8a:bd:fb:d5:29: 4a:32:09:d8:fb:6a:3e:d7:70:2d:88:82:d4:21:5a:89:b6:ae: 42:22:68:05:a4:e9:05:d9:5c:26:9c:90:33:13:9c:69:c1:39: e5:9b:02:cc:7e:f5:84:4d:2b:c0:29:c4:24:0a:a3:bf:83:00: b3:5a:bb:a1:b7:62:62:f3:03:08:af:be:62:2d:ba:a2:09:70: 6b:68:3f:8d:7f:63:7e:65:a5:2b:39:ee:a3:c3:04:d1:2e:a8: 90:f1:a4:7b:5e:31:03:1a:6e:ae:8c:6d:2e:90:04:36:be:5c: d8:9f:20:62:82:ec:1f:ff:a4:5b:ec:cb:34:e5:67:b1:20:d7: 6f:51:af:27:c8:89:bf:7e:97:58:6b:2a:06:96:4b:e4:f6:48: 95:5a:27:ff:3a:bc:df:fa:44:bf:ef:9f:c6:69:c4:70:ba:b2: d0:ef:de:5d:22:5e:6b:7c:97:ed:f3:7b:f1:1e:62:47:24:d4: 31:53:84:86:bd:3b:b7:81:6d:68:0b:23:d9:29:37:b3:24:1f: 9d:95:15:3c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMg+PqpI7/oXQ16tynhHazL5bvc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDkxM1oX DTI3MDUwMTIxMTQxM1owMzExMC8GA1UEAxMoNUNBMUY0NTVDNkEyMEZBNERFOEE4 Njg3RDQ4QzFERDE5N0M3MDdCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGjlO4ZXc2h3NUqISF2OYAtQFyQpw4qt4I3R5xTcu+7n7ZR/NHejU2NRan+ aPByNR8Z3ju1lW8izDvjnql1jLkj4EfnLQvCuIVaoXJGNH//HIRQXC/kHpegkWh9 cYCBSvcNsbc/qaxZD5oo3HT9tQgF8Z1LmOKmreSu9PmuGb+7Aa/+4fLDyMayevEV sVELEfIey8gvs51uqN3hDF5xCXQZjYc3SEi88zvMSsRGZ/4rxU5Nsvrcl0AeSM47 BQ06EsynWdWRmdkFM1EzV6+fJy/dCPwaBKlc8XM0ixFfBv/QYsRs9SwWoYPkSkcY jg8KmblzN/wXyDFdBlrpoX/xZ+8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRcofRV xqIPpN6KhofUjB3Rl8cHtTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5zgMA0GCSqGSIb3DQEBCwUAA4IBAQBI4I7xbZZ1uZ7g1iZzWY97W/hU kZPmlfllhYCkhoSEn1nKxMPh7oNu4kemyp4NT2e9ir371SlKMgnY+2o+13AtiILU IVqJtq5CImgFpOkF2VwmnJAzE5xpwTnlmwLMfvWETSvAKcQkCqO/gwCzWruht2Ji 8wMIr75iLbqiCXBraD+Nf2N+ZaUrOe6jwwTRLqiQ8aR7XjEDGm6ujG0ukAQ2vlzY nyBiguwf/6Rb7Ms05WexINdvUa8nyIm/fpdYayoGlkvk9kiVWif/Orzf+kS/75/G acRwurLQ795dIl5rfJft83vxHmJHJNQxU4SGvTu3gW1oCyPZKTezJB+dlRU8 -----END CERTIFICATE-----Generated at Sun May 3 00:41:53 2026 by rpki-client