$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141123.roa File: AS141123.roa (raw, json) Hash identifier: 9VYr1/Ar0t0PiHwREnA+NfXH42fsFtrpxggHekm7YhQ= Subject key identifier: 7B:5C:94:1F:1A:5C:EA:38:54:36:2A:97:29:32:04:2C:DD:36:58:8D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3ED25822295B8A6648B063F0A29E0D8D8A42804A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141123.roa Signing time: Wed 21 Oct 2026 04:00:37 +0000 ROA not before: Wed 21 Oct 2026 03:55:37 +0000 ROA not after: Wed 20 Oct 2027 04:00:37 +0000 asID: 141123 IP address blocks: 103.158.28.0/24 maxlen: 24 103.170.22.0/24 maxlen: 24 2402:7a20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d2:58:22:29:5b:8a:66:48:b0:63:f0:a2:9e:0d:8d:8a:42:80:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 21 03:55:37 2026 GMT Not After : Oct 20 04:00:37 2027 GMT Subject: CN=7B5C941F1A5CEA3854362A972932042CDD36588D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:e2:38:ec:fe:99:fc:4a:23:0d:5c:17:e7: 58:3a:49:60:b3:61:2c:ce:53:6b:3d:f0:e5:8f:27: fc:9c:26:0b:06:7f:70:b1:e3:67:47:67:8a:fa:fd: a3:a2:6d:6f:45:e7:d2:07:b2:df:b1:ab:03:e9:37: a0:58:90:3a:08:97:00:12:6b:c2:ea:01:6e:92:6d: d8:74:71:0e:8c:29:28:00:21:33:25:53:c6:c0:1b: 90:dd:a6:3d:2e:57:51:1e:54:06:7d:e8:a1:5c:30: 9f:c8:75:e2:d1:8a:df:2e:84:1b:e7:d5:97:33:6a: 96:33:73:d7:f1:a6:0d:60:03:fa:77:f0:b4:28:41: 1e:2d:f1:84:51:f4:b4:3e:91:6b:10:08:ee:bf:d1: 39:73:52:ff:59:11:ae:1f:11:52:cb:a2:bb:aa:1a: 6c:05:8a:8d:34:77:3d:b4:63:c3:e3:6e:45:0e:54: 7a:24:ae:f6:8b:b8:0a:92:95:e7:8d:81:85:53:44: 39:38:56:48:e3:94:90:77:44:79:ba:84:fc:13:bb: 80:3c:50:d9:72:21:3f:bb:29:4b:09:73:ce:a4:41: b2:19:c9:f6:0a:37:2a:87:c8:95:c8:fc:07:e0:66: 7b:0a:33:ab:9a:80:97:f1:b5:fe:4a:8d:ce:e2:e8: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5C:94:1F:1A:5C:EA:38:54:36:2A:97:29:32:04:2C:DD:36:58:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141123.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.28.0/24 103.170.22.0/24 IPv6: 2402:7a20::/32 Signature Algorithm: sha256WithRSAEncryption 0e:11:12:64:eb:a6:03:1a:70:42:13:b1:50:57:0f:67:71:ee: a0:d3:3d:45:35:fa:67:55:07:bc:da:d3:06:7f:cb:5f:53:1f: 8c:9d:7c:57:92:5c:ab:03:10:d1:06:95:dd:8d:1a:d2:38:bb: c4:ff:3e:bd:d5:7f:17:c6:50:54:d7:a3:db:aa:4b:ae:be:e1: 30:eb:1e:c8:ed:5c:a9:76:75:54:24:d3:d6:35:6c:42:00:aa: 73:7e:a2:32:93:55:66:94:99:87:88:4e:5d:5b:39:76:c8:02: 38:d6:5f:3d:b9:e3:6c:cb:e3:4c:af:73:df:8e:4a:c2:ad:a3: 9e:b9:83:14:b9:de:56:20:9c:0b:33:68:0e:58:38:ba:c7:52: a9:8f:1e:4e:1d:88:5a:bf:d0:62:15:bd:fa:00:ee:ab:09:ac: a9:6a:a9:f9:8b:9b:30:7e:01:8b:9a:da:f6:91:08:12:13:62: e2:3f:f4:cd:28:be:2d:99:4b:54:6d:18:f1:21:3c:87:31:90: 4e:f2:87:24:4e:0c:51:70:01:24:c8:d2:d3:95:04:23:84:b7: 2f:9b:28:56:cc:41:9c:55:54:b4:3a:92:f6:32:7f:a1:8c:29: 28:32:33:13:02:ad:a7:10:03:60:0b:4d:dc:f6:8f:d7:9a:7c: 52:90:2c:de -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUPtJYIilbimZIsGPwop4NjYpCgEowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAyMTAzNTUzN1oX DTI3MTAyMDA0MDAzN1owMzExMC8GA1UEAxMoN0I1Qzk0MUYxQTVDRUEzODU0MzYy QTk3MjkzMjA0MkNERDM2NTg4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWI4jjs/pn8SiMNXBfnWDpJYLNhLM5Taz3w5Y8n/JwmCwZ/cLHjZ0dnivr9 o6Jtb0Xn0gey37GrA+k3oFiQOgiXABJrwuoBbpJt2HRxDowpKAAhMyVTxsAbkN2m PS5XUR5UBn3ooVwwn8h14tGK3y6EG+fVlzNqljNz1/GmDWAD+nfwtChBHi3xhFH0 tD6RaxAI7r/ROXNS/1kRrh8RUsuiu6oabAWKjTR3PbRjw+NuRQ5UeiSu9ou4CpKV 542BhVNEOThWSOOUkHdEebqE/BO7gDxQ2XIhP7spSwlzzqRBshnJ9go3KofIlcj8 B+Bmewozq5qAl/G1/kqNzuLoCSsCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBR7XJQf GlzqOFQ2KpcpMgQs3TZYjTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTIzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIA ATAMAwQAZ54cAwQAZ6oWMA0EAgACMAcDBQAkAnogMA0GCSqGSIb3DQEBCwUAA4IB AQAOERJk66YDGnBCE7FQVw9nce6g0z1FNfpnVQe82tMGf8tfUx+MnXxXklyrAxDR BpXdjRrSOLvE/z691X8XxlBU16PbqkuuvuEw6x7I7VypdnVUJNPWNWxCAKpzfqIy k1VmlJmHiE5dWzl2yAI41l89ueNsy+NMr3PfjkrCraOeuYMUud5WIJwLM2gOWDi6 x1Kpjx5OHYhav9BiFb36AO6rCaypaqn5i5swfgGLmtr2kQgSE2LiP/TNKL4tmUtU bRjxITyHMZBO8ockTgxRcAEkyNLTlQQjhLcvmyhWzEGcVVS0OpL2Mn+hjCkoMjMT Aq2nEANgC03c9o/XmnxSkCze -----END CERTIFICATE-----Generated at Sun Oct 25 06:44:55 2026 by rpki-client