$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141350.roa File: AS141350.roa (raw, json) Hash identifier: 5JztP72DGoYy4Q7cVV5gNrHrqAxmD0aoyQuJR4y/v8U= Subject key identifier: C9:01:F5:9B:F9:F3:D1:3F:1C:CA:02:ED:D9:B8:66:C8:A2:EC:AF:53 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 28C9A41DEDE50828B66B2867F8F1CE21A3E02399 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141350.roa Signing time: Sat 02 May 2026 08:37:04 +0000 ROA not before: Sat 02 May 2026 08:32:04 +0000 ROA not after: Sat 01 May 2027 08:37:04 +0000 asID: 141350 IP address blocks: 2001:df4:f1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c9:a4:1d:ed:e5:08:28:b6:6b:28:67:f8:f1:ce:21:a3:e0:23:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:04 2026 GMT Not After : May 1 08:37:04 2027 GMT Subject: CN=C901F59BF9F3D13F1CCA02EDD9B866C8A2ECAF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:6e:5e:fc:67:53:ee:f9:88:ee:07:fa:d2: a8:ea:d8:4d:5d:19:bb:96:91:75:09:d3:a9:95:41: 25:d3:8d:41:e6:b2:2f:40:c8:71:ef:77:8c:86:ef: c7:ef:5f:c5:72:93:42:20:b1:f6:5e:50:15:c8:ab: 0a:bd:77:65:cd:75:a4:ff:1c:23:75:bc:ca:d0:2d: 1e:3b:ef:b3:68:73:8b:2d:5c:e3:e6:c8:b1:c3:89: 0f:ea:77:ae:30:b3:60:74:0f:a2:0f:cb:f1:0a:ee: be:b4:42:73:f9:de:8e:7f:87:2a:52:da:e1:f2:40: 4b:73:ea:d5:dc:d5:67:f7:1c:64:73:99:02:b2:d4: ad:ec:30:a4:2a:99:ee:e8:94:6d:5f:52:76:52:08: ec:2f:47:6e:db:50:e7:df:fe:c2:8a:1d:d9:d9:7b: c0:7a:61:44:82:15:b6:19:10:28:64:19:1b:fe:aa: 39:52:b1:45:c9:bf:9f:c4:75:c7:79:42:cd:a9:29: ad:fe:ce:d3:32:86:aa:fc:9f:b3:97:11:95:06:1c: 92:40:eb:54:3c:52:97:ed:d0:03:c5:7a:b8:94:f0: a9:05:8b:3b:4b:f7:23:9d:25:2f:7a:a7:16:66:ce: 7a:27:ff:7a:04:f8:a2:76:c1:92:01:14:20:84:0f: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:01:F5:9B:F9:F3:D1:3F:1C:CA:02:ED:D9:B8:66:C8:A2:EC:AF:53 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:f1c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:af:9c:ab:79:ac:9b:f4:f8:8f:f3:cb:d5:0c:6e:15:ff:56: 65:d5:ef:78:cb:90:4e:15:46:43:35:91:64:98:7a:e6:9f:0d: c3:6b:2b:05:02:9b:00:ba:0d:a9:37:79:4c:02:ad:c5:51:da: de:88:a7:6c:7c:a5:a2:9e:a9:5a:c2:a4:d0:e3:02:39:08:7f: d6:e2:f2:d0:d6:af:a6:b2:dd:92:74:51:3f:0b:09:01:51:eb: b1:5c:63:f0:17:72:c8:d1:45:ac:68:ba:6d:a4:a5:fc:6f:61: 1b:b6:0e:69:c6:af:3e:cf:56:81:0f:bb:ae:17:68:23:36:f9: de:ac:be:c4:b8:55:d9:53:f0:5a:6d:76:87:d2:55:9c:f6:80: 45:82:47:b2:82:ca:7c:d7:73:0c:36:23:c0:b6:4b:6d:2e:c9: 5c:ce:11:54:6b:08:a0:62:96:d0:ef:2a:ce:46:86:ba:28:1e: cc:83:82:fa:48:71:81:d6:a7:d5:b9:0a:f4:fb:40:e1:8e:03: d4:d7:83:a5:92:96:13:ed:de:60:0d:7e:11:f4:6f:c0:54:fa: b1:9e:5a:69:bb:99:ed:da:6c:a0:3a:61:90:2a:fc:9c:b7:76: 5e:b2:85:13:bc:af:33:1b:0a:09:09:a8:31:48:31:9c:5c:be: 5f:27:d5:66 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKMmkHe3lCCi2ayhn+PHOIaPgI5kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIwNFoX DTI3MDUwMTA4MzcwNFowMzExMC8GA1UEAxMoQzkwMUY1OUJGOUYzRDEzRjFDQ0Ew MkVERDlCODY2QzhBMkVDQUY1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTNbl78Z1Pu+YjuB/rSqOrYTV0Zu5aRdQnTqZVBJdONQeayL0DIce93jIbv x+9fxXKTQiCx9l5QFcirCr13Zc11pP8cI3W8ytAtHjvvs2hziy1c4+bIscOJD+p3 rjCzYHQPog/L8QruvrRCc/nejn+HKlLa4fJAS3Pq1dzVZ/ccZHOZArLUrewwpCqZ 7uiUbV9SdlII7C9HbttQ59/+wood2dl7wHphRIIVthkQKGQZG/6qOVKxRcm/n8R1 x3lCzakprf7O0zKGqvyfs5cRlQYckkDrVDxSl+3QA8V6uJTwqQWLO0v3I50lL3qn FmbOeif/egT4onbBkgEUIIQPCIcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTJAfWb +fPRPxzKAu3ZuGbIouyvUzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMzUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9PHAMA0GCSqGSIb3DQEBCwUAA4IBAQA/r5yreayb9PiP88vVDG4V /1Zl1e94y5BOFUZDNZFkmHrmnw3DaysFApsAug2pN3lMAq3FUdreiKdsfKWinqla wqTQ4wI5CH/W4vLQ1q+mst2SdFE/CwkBUeuxXGPwF3LI0UWsaLptpKX8b2Ebtg5p xq8+z1aBD7uuF2gjNvnerL7EuFXZU/BabXaH0lWc9oBFgkeygsp813MMNiPAtktt LslczhFUawigYpbQ7yrORoa6KB7Mg4L6SHGB1qfVuQr0+0DhjgPU14OlkpYT7d5g DX4R9G/AVPqxnlppu5nt2mygOmGQKvyct3ZesoUTvK8zGwoJCagxSDGcXL5fJ9Vm -----END CERTIFICATE-----Generated at Sun May 3 00:42:12 2026 by rpki-client