$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141103.roa File: AS141103.roa (raw, json) Hash identifier: cQWn8lAJ6AVhMWvjDOUXtPdNa6OnChfNrfMRVLSvXMY= Subject key identifier: E2:F7:C8:C6:35:47:3D:F4:2B:1A:4D:96:B7:E5:EB:36:87:BF:B1:5D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59E302A716EEC78D0DB481786AB5D5160538ECE7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141103.roa Signing time: Sat 02 May 2026 08:35:29 +0000 ROA not before: Sat 02 May 2026 08:30:29 +0000 ROA not after: Sat 01 May 2027 08:35:29 +0000 asID: 141103 IP address blocks: 103.156.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e3:02:a7:16:ee:c7:8d:0d:b4:81:78:6a:b5:d5:16:05:38:ec:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:29 2026 GMT Not After : May 1 08:35:29 2027 GMT Subject: CN=E2F7C8C635473DF42B1A4D96B7E5EB3687BFB15D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7e:95:7d:40:aa:ed:e5:71:ed:67:fa:5d:fd: 5c:3e:e9:56:24:4d:15:33:8c:d8:e0:0e:1b:e6:68: 6e:05:c1:42:14:71:38:c4:80:cb:72:80:05:d9:7b: af:10:50:3b:1d:02:4e:a3:35:e8:be:ff:9a:9e:7f: ac:ef:67:b3:8b:cd:be:08:a1:f1:8d:4e:7c:69:73: bb:f6:5b:0b:ce:6d:01:09:46:31:7c:31:ef:a0:58: 37:fd:b3:e0:37:e9:51:04:08:1f:ed:5a:19:e6:d6: e2:07:47:a4:c0:83:8a:ed:db:c1:0d:47:ef:e1:2d: ae:91:97:6f:2a:29:50:bd:99:8e:0d:cb:ba:a0:5a: 1c:ce:bc:6b:8e:bb:12:a6:65:e7:a9:2e:65:00:a1: 4a:d7:35:6c:5d:fb:f0:b9:09:e5:79:c4:a6:a7:07: d2:96:52:38:ae:0e:a4:90:65:df:0e:82:6d:ed:7c: b8:30:e9:d1:7e:8a:76:68:4a:59:7b:15:b0:a8:5e: b1:04:fe:a4:14:6b:18:a4:a8:b2:dc:f6:44:bb:ef: 46:f4:f2:7d:27:5e:a5:a1:cf:a5:ab:11:d1:b1:b1: bf:c5:a1:12:37:29:23:0d:07:a7:fa:e9:11:88:de: a9:83:d1:2a:a3:46:83:06:79:2c:32:20:49:ea:84: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:C8:C6:35:47:3D:F4:2B:1A:4D:96:B7:E5:EB:36:87:BF:B1:5D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.252.0/23 Signature Algorithm: sha256WithRSAEncryption 28:e4:05:b2:7a:a5:f8:f5:25:00:b6:e9:10:e5:f2:94:8f:78: 20:46:49:e3:d0:06:76:9a:9f:f8:a8:fa:e9:31:12:00:58:f8: 59:2d:e5:99:2a:56:b9:dd:23:96:4c:57:ad:df:7e:d6:87:7d: 7b:c9:d5:d9:84:b1:72:3f:83:7c:c0:a2:e6:bd:1e:2b:9c:44: 9c:b5:ac:39:6c:42:e1:dc:ea:08:c9:56:0e:40:7e:7c:4c:62: d1:ed:81:c4:8a:7b:67:89:fb:47:e4:02:0b:bc:9e:ab:23:f1: 37:1c:12:7e:34:9c:18:4d:73:38:4a:08:e2:26:09:f5:59:4c: f9:da:e8:a8:4c:bb:60:41:51:b9:22:65:b3:d7:19:f4:1d:56: 10:c6:64:da:f1:73:80:13:82:1d:8c:2f:70:0c:ab:73:c6:5b: 34:a3:01:f2:cf:29:54:c5:5e:cc:3b:e4:a9:e3:ed:a2:1f:8f: b1:0d:28:d7:56:6a:bf:a2:3e:78:5d:d4:f3:d3:9b:f4:27:ce: fd:a4:20:55:29:d1:ce:ff:80:b3:69:0e:d4:ae:8a:7b:0a:fe: 96:16:7a:34:64:ae:12:24:c8:6d:8d:03:4d:0e:c8:45:d8:76: 51:85:0c:a6:62:2a:d5:32:5a:30:25:b7:de:18:0f:57:7a:9a: 02:eb:e3:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWeMCpxbux40NtIF4arXVFgU47OcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAyOVoX DTI3MDUwMTA4MzUyOVowMzExMC8GA1UEAxMoRTJGN0M4QzYzNTQ3M0RGNDJCMUE0 RDk2QjdFNUVCMzY4N0JGQjE1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJ+lX1Aqu3lce1n+l39XD7pViRNFTOM2OAOG+ZobgXBQhRxOMSAy3KABdl7 rxBQOx0CTqM16L7/mp5/rO9ns4vNvgih8Y1OfGlzu/ZbC85tAQlGMXwx76BYN/2z 4DfpUQQIH+1aGebW4gdHpMCDiu3bwQ1H7+EtrpGXbyopUL2Zjg3LuqBaHM68a467 EqZl56kuZQChStc1bF378LkJ5XnEpqcH0pZSOK4OpJBl3w6Cbe18uDDp0X6KdmhK WXsVsKhesQT+pBRrGKSostz2RLvvRvTyfSdepaHPpasR0bGxv8WhEjcpIw0Hp/rp EYjeqYPRKqNGgwZ5LDIgSeqE0hUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTi98jG NUc99CsaTZa35es2h7+xXTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTAzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ5z8MA0GCSqGSIb3DQEBCwUAA4IBAQAo5AWyeqX49SUAtukQ5fKUj3gg Rknj0AZ2mp/4qPrpMRIAWPhZLeWZKla53SOWTFet337Wh317ydXZhLFyP4N8wKLm vR4rnESctaw5bELh3OoIyVYOQH58TGLR7YHEintniftH5AILvJ6rI/E3HBJ+NJwY TXM4SgjiJgn1WUz52uioTLtgQVG5ImWz1xn0HVYQxmTa8XOAE4IdjC9wDKtzxls0 owHyzylUxV7MO+Sp4+2iH4+xDSjXVmq/oj54XdTz05v0J879pCBVKdHO/4CzaQ7U rop7Cv6WFno0ZK4SJMhtjQNNDshF2HZRhQymYirVMlowJbfeGA9XepoC6+Pw -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client