$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141127.roa File: AS141127.roa (raw, json) Hash identifier: 8bPFmNCZ+pdB/7nCLm0ujQ9dbPfayFfYPjq1NM+YHhU= Subject key identifier: C5:A1:6A:22:D5:97:19:D6:3A:2B:C9:B7:06:D3:BA:00:BE:22:98:0F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 06C86EB67FEC2839EAF91E89D056FCD68E0182B9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141127.roa Signing time: Sat 02 May 2026 09:20:38 +0000 ROA not before: Sat 02 May 2026 09:15:38 +0000 ROA not after: Sat 01 May 2027 09:20:38 +0000 asID: 141127 IP address blocks: 103.174.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c8:6e:b6:7f:ec:28:39:ea:f9:1e:89:d0:56:fc:d6:8e:01:82:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:38 2026 GMT Not After : May 1 09:20:38 2027 GMT Subject: CN=C5A16A22D59719D63A2BC9B706D3BA00BE22980F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:08:c6:da:d3:ec:f6:ad:b7:db:2c:53:c5: 13:74:10:e9:30:2b:36:3d:79:40:ef:99:12:21:a8: 79:e2:a9:7d:96:34:a5:2b:bb:ec:d8:2a:9f:2f:af: 9a:17:a8:44:1d:16:11:d8:65:cd:d0:9b:b0:44:d8: d9:9c:34:3c:a0:90:4a:6d:55:16:34:a7:ac:01:e3: c4:9c:a7:37:20:87:d9:62:0e:80:e6:b4:6c:35:f3: 06:de:8c:e8:d0:79:27:11:84:83:b0:ee:72:45:33: e0:1e:96:6b:b2:10:91:79:5d:58:eb:7f:01:41:30: cc:38:56:a0:dd:e2:a2:a5:8e:e5:3b:bf:98:cf:26: df:05:3e:c3:5c:59:f0:39:db:5c:fc:d5:78:02:95: bd:30:0f:24:d0:62:90:c3:a5:01:62:ba:47:aa:d2: 7d:3f:8c:41:57:55:7a:93:92:60:ad:bb:08:c3:b3: ad:b1:ac:c7:e6:1b:de:07:e1:55:4b:28:e5:27:4e: 49:f9:92:a5:9b:bc:d0:61:86:57:2e:3f:88:d8:b4: 53:52:1b:db:c5:5a:34:e1:7c:72:e2:eb:35:57:af: f5:3d:ff:4b:8e:93:05:ad:6a:19:8f:b9:e1:be:a5: 86:53:b8:1e:33:a2:57:f3:7a:c0:93:89:8b:2c:b7: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A1:6A:22:D5:97:19:D6:3A:2B:C9:B7:06:D3:BA:00:BE:22:98:0F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141127.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.238.0/24 Signature Algorithm: sha256WithRSAEncryption 04:f3:fb:75:76:0d:4a:c0:5a:4d:90:96:f5:6a:f4:c1:40:06: 46:a0:0a:38:01:fa:08:51:d4:00:c7:fc:ef:31:c3:c9:4c:ea: 43:eb:9e:26:c3:dc:ac:9b:d9:a9:3c:dc:7e:87:5c:f0:78:12: 8a:f0:4a:83:31:76:ac:71:f9:8c:42:34:77:e8:6e:38:4e:67: aa:7d:ee:be:d2:bd:75:cc:37:a8:80:81:16:02:7c:98:e2:d0: cd:4b:af:c2:c3:82:5a:21:0d:7e:17:bf:12:d0:25:43:d0:77: c5:18:54:2b:23:d1:9a:12:a5:c2:d4:a1:1d:24:39:a0:38:ac: 1e:3a:dd:f0:d1:06:e5:0b:35:62:dd:75:22:db:29:1d:d0:8d: 39:fb:f1:34:b8:90:f2:4e:2b:da:96:ac:3a:4d:4a:c6:72:14: 85:fc:8c:0b:88:06:0d:6c:d4:5d:09:c0:e8:83:63:c4:49:39: f2:e9:79:5d:07:52:43:32:e1:29:cc:61:9f:3c:ae:f2:9e:06: ef:72:69:02:dc:d8:92:42:d5:e8:2e:60:eb:f6:44:20:fd:0b: 97:48:bc:9e:c4:a1:e7:83:b0:db:f1:d6:a6:8d:1f:aa:eb:f9: dc:75:c9:af:10:05:b4:fa:c0:62:5e:67:cb:6f:fd:5c:4d:fc: 98:02:e1:ad -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBshutn/sKDnq+R6J0Fb81o4BgrkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUzOFoX DTI3MDUwMTA5MjAzOFowMzExMC8GA1UEAxMoQzVBMTZBMjJENTk3MTlENjNBMkJD OUI3MDZEM0JBMDBCRTIyOTgwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzHCMba0+z2rbfbLFPFE3QQ6TArNj15QO+ZEiGoeeKpfZY0pSu77Ngqny+v mheoRB0WEdhlzdCbsETY2Zw0PKCQSm1VFjSnrAHjxJynNyCH2WIOgOa0bDXzBt6M 6NB5JxGEg7DuckUz4B6Wa7IQkXldWOt/AUEwzDhWoN3ioqWO5Tu/mM8m3wU+w1xZ 8DnbXPzVeAKVvTAPJNBikMOlAWK6R6rSfT+MQVdVepOSYK27CMOzrbGsx+Yb3gfh VUso5SdOSfmSpZu80GGGVy4/iNi0U1Ib28VaNOF8cuLrNVev9T3/S46TBa1qGY+5 4b6lhlO4HjOiV/N6wJOJiyy3bjMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTFoWoi 1ZcZ1jorybcG07oAviKYDzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTI3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ67uMA0GCSqGSIb3DQEBCwUAA4IBAQAE8/t1dg1KwFpNkJb1avTBQAZG oAo4AfoIUdQAx/zvMcPJTOpD654mw9ysm9mpPNx+h1zweBKK8EqDMXascfmMQjR3 6G44Tmeqfe6+0r11zDeogIEWAnyY4tDNS6/Cw4JaIQ1+F78S0CVD0HfFGFQrI9Ga EqXC1KEdJDmgOKweOt3w0QblCzVi3XUi2ykd0I05+/E0uJDyTivalqw6TUrGchSF /IwLiAYNbNRdCcDog2PESTny6XldB1JDMuEpzGGfPK7yngbvcmkC3NiSQtXoLmDr 9kQg/QuXSLyexKHng7Db8damjR+q6/ncdcmvEAW0+sBiXmfLb/1cTfyYAuGt -----END CERTIFICATE-----Generated at Sun May 3 00:40:30 2026 by rpki-client