$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141101.roa File: AS141101.roa (raw, json) Hash identifier: m8I2hv+rKvDHLz/+sVfdjQwPcQ1EanaWB6eNyUyVHhw= Subject key identifier: A1:5A:3E:82:83:92:45:04:EA:A9:56:91:A9:8A:91:8C:43:12:89:AC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1EF3F0EA396E92B48CAE8DA483FE301C9CB24F8E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141101.roa Signing time: Sat 02 May 2026 09:26:16 +0000 ROA not before: Sat 02 May 2026 09:21:16 +0000 ROA not after: Sat 01 May 2027 09:26:16 +0000 asID: 141101 IP address blocks: 103.156.235.0/24 maxlen: 24 2001:df5:380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f3:f0:ea:39:6e:92:b4:8c:ae:8d:a4:83:fe:30:1c:9c:b2:4f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:16 2026 GMT Not After : May 1 09:26:16 2027 GMT Subject: CN=A15A3E8283924504EAA95691A98A918C431289AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:b2:d0:37:6b:5a:f2:d5:f1:fd:49:ed:42: c5:2a:b1:4d:d2:f4:89:8d:a5:e7:91:42:64:1e:a4: 81:40:84:50:ee:ed:c5:61:0d:80:f5:64:b7:d4:ad: 4d:fc:01:b2:bb:75:90:09:cc:79:6b:af:84:d5:37: 8a:f7:ae:53:5c:a1:61:74:56:cc:1b:4e:35:68:43: 11:d2:b2:ba:88:8f:00:cc:15:ae:b6:9c:39:ba:83: c6:1f:04:b9:f3:4e:56:72:2d:5b:ac:47:9f:9c:2c: 16:f5:6c:f9:ed:e9:c6:3f:f8:3a:4d:51:5b:8d:52: 80:81:5a:1c:23:9d:84:75:ca:7b:a1:3f:cc:68:11: c8:2d:1e:34:e0:f0:8b:60:75:95:46:2c:17:11:ad: 0a:18:2a:36:7c:26:86:f9:cd:7b:50:e9:7b:b3:15: 29:0b:12:f4:25:9f:98:c4:e2:8b:06:50:1d:27:4a: 20:8b:97:0c:b9:0d:43:6a:2d:e7:84:19:9e:93:4b: 4b:b0:c1:ec:80:87:e3:54:07:0f:06:4e:62:6f:82: 5e:c6:cc:38:78:91:e3:af:47:2c:4d:35:73:12:a1: 39:fe:f4:ac:7d:ff:28:cf:38:82:5e:6c:69:06:d3: af:d2:69:7b:11:09:69:f0:4d:be:a7:a8:87:63:e6: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:3E:82:83:92:45:04:EA:A9:56:91:A9:8A:91:8C:43:12:89:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141101.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.235.0/24 IPv6: 2001:df5:380::/48 Signature Algorithm: sha256WithRSAEncryption 66:ca:33:bd:e2:3c:81:38:25:c1:69:41:2f:3f:d5:b8:4b:4e: c3:15:75:a2:1c:f5:ac:2d:91:f9:b6:45:ba:78:a0:5c:4c:c5: 7d:3e:a2:00:7a:22:75:c4:cd:b8:c2:e9:c6:5b:2f:9b:3f:60: ea:b8:2d:89:ed:cb:45:1a:13:4b:92:46:7f:0a:98:8a:33:d1: 87:53:af:89:54:c3:a4:43:8b:13:91:c3:1d:df:89:88:ec:70: 0e:46:7d:36:da:bd:14:5f:f8:36:3a:35:26:12:d7:2a:26:47: 04:44:27:c8:5c:fe:1d:77:a9:4d:c3:6a:a6:bc:e9:4c:41:4b: 16:88:88:7f:c4:95:84:0e:a1:d7:53:59:6c:96:a3:93:d6:d0: 35:6c:65:86:9a:43:5d:82:62:96:3e:06:ae:34:39:1e:63:1d: c0:91:af:da:ee:23:54:ea:a6:e6:3a:f6:df:0f:08:a9:d8:35: 2c:7e:1b:ee:25:97:df:07:51:01:00:53:aa:ed:29:2c:70:39: c2:c1:1c:e0:c2:d5:28:2d:03:93:79:70:68:bb:08:af:52:d3: 37:10:fd:8b:3d:65:2d:f1:a0:7d:7b:63:18:be:e7:61:a6:d1: e3:ae:ba:0a:4d:c7:f3:a2:c4:02:46:c6:3b:b6:ca:b5:66:a2: 3b:61:3f:51 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUHvPw6jlukrSMro2kg/4wHJyyT44wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExNloX DTI3MDUwMTA5MjYxNlowMzExMC8GA1UEAxMoQTE1QTNFODI4MzkyNDUwNEVBQTk1 NjkxQTk4QTkxOEM0MzEyODlBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI+cstA3a1ry1fH9Se1CxSqxTdL0iY2l55FCZB6kgUCEUO7txWENgPVkt9St TfwBsrt1kAnMeWuvhNU3iveuU1yhYXRWzBtONWhDEdKyuoiPAMwVrracObqDxh8E ufNOVnItW6xHn5wsFvVs+e3pxj/4Ok1RW41SgIFaHCOdhHXKe6E/zGgRyC0eNODw i2B1lUYsFxGtChgqNnwmhvnNe1Dpe7MVKQsS9CWfmMTiiwZQHSdKIIuXDLkNQ2ot 54QZnpNLS7DB7ICH41QHDwZOYm+CXsbMOHiR469HLE01cxKhOf70rH3/KM84gl5s aQbTr9JpexEJafBNvqeoh2PmtHsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBShWj6C g5JFBOqpVpGpipGMQxKJrDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ5zrMA8EAgACMAkDBwAgAQ31A4AwDQYJKoZIhvcNAQELBQADggEBAGbK M73iPIE4JcFpQS8/1bhLTsMVdaIc9awtkfm2Rbp4oFxMxX0+ogB6InXEzbjC6cZb L5s/YOq4LYnty0UaE0uSRn8KmIoz0YdTr4lUw6RDixORwx3fiYjscA5GfTbavRRf +DY6NSYS1yomRwREJ8hc/h13qU3Daqa86UxBSxaIiH/ElYQOoddTWWyWo5PW0DVs ZYaaQ12CYpY+Bq40OR5jHcCRr9ruI1TqpuY69t8PCKnYNSx+G+4ll98HUQEAU6rt KSxwOcLBHODC1SgtA5N5cGi7CK9S0zcQ/Ys9ZS3xoH17Yxi+52Gm0eOuugpNx/Oi xAJGxju2yrVmojthP1E= -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client