$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141576.roa File: AS141576.roa (raw, json) Hash identifier: UlmC+OuZFbYzyG87bHV45RSBToNOfE/hBEFR+sg6hrM= Subject key identifier: E7:4B:65:E0:32:BD:95:3A:36:A1:1C:50:BC:6B:29:42:61:A7:3E:FD Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BA9B07A2D48ABD1CC8F5B1E80E072C2A6260AF4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141576.roa Signing time: Sat 02 May 2026 09:19:57 +0000 ROA not before: Sat 02 May 2026 09:14:57 +0000 ROA not after: Sat 01 May 2027 09:19:57 +0000 asID: 141576 IP address blocks: 103.160.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a9:b0:7a:2d:48:ab:d1:cc:8f:5b:1e:80:e0:72:c2:a6:26:0a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:57 2026 GMT Not After : May 1 09:19:57 2027 GMT Subject: CN=E74B65E032BD953A36A11C50BC6B294261A73EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:22:43:a6:6a:50:59:1a:3a:4f:63:5d:e2: 7f:bb:73:5f:e5:53:3e:da:28:1f:cf:6b:29:18:76: b0:bf:a0:56:39:38:51:20:fb:bd:56:c9:5c:1f:15: 8a:bc:a4:35:fc:13:9e:3c:f6:d7:eb:48:35:97:70: 02:db:74:88:0b:5e:a0:63:9e:4f:5a:db:2d:74:3b: a3:1f:d5:83:1b:41:09:e0:dd:99:14:ec:96:4a:d2: 19:f7:23:06:01:62:22:c4:b9:28:cc:ba:42:75:b3: dc:ba:43:59:3b:b1:57:52:5b:a1:0b:b0:d0:42:28: 14:95:04:7b:48:be:5a:a9:23:60:f5:86:ed:7f:d4: b2:ac:5c:d7:4c:1f:ed:13:60:98:87:4a:9f:59:ba: 7e:4b:1a:88:33:ab:fd:b8:d0:16:c0:20:19:f0:d5: 91:11:a3:6e:e0:00:d4:e0:5d:a0:f9:97:bb:dd:e1: 25:3f:15:94:53:49:1c:07:4a:00:5b:76:f3:4e:3f: f8:b5:3d:05:0c:4b:1f:ac:9a:f7:90:32:18:e1:8a: 36:ca:7c:44:e8:91:ae:1d:60:15:ce:7f:b9:37:6e: d2:66:d7:30:a1:20:d5:b4:26:f7:52:38:f1:cd:14: 89:dd:d3:04:60:4b:4c:ba:0a:cf:f9:07:73:88:c2: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4B:65:E0:32:BD:95:3A:36:A1:1C:50:BC:6B:29:42:61:A7:3E:FD X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.147.0/24 Signature Algorithm: sha256WithRSAEncryption 31:48:16:bc:02:8f:df:cc:4c:71:95:34:ee:ca:a2:31:cd:b9: eb:95:2f:86:73:0a:6d:de:c8:63:f7:06:c6:15:15:58:ce:42: 54:70:4a:35:77:24:25:3c:58:4e:8f:bc:9f:39:7d:21:ea:64: 74:bd:08:6d:eb:b4:6c:9c:27:3b:2f:a2:19:45:bb:97:ab:9d: 10:c5:76:89:66:24:87:69:b7:5a:aa:0c:fa:7c:7c:48:7d:af: 55:ce:30:4b:17:7b:87:09:4a:cf:f2:36:9d:bb:a6:3c:69:00: 47:a4:ca:4e:dd:89:67:cd:ca:3c:0f:4a:8c:62:69:5c:e7:f2: 51:51:89:03:f7:19:b6:48:0e:5a:08:ed:ce:98:4b:0f:6a:01: 2d:44:04:ab:31:5d:d2:6d:c9:53:21:0c:f9:04:51:06:47:d1: 4d:ad:40:e0:6f:3b:04:73:4b:bf:e3:46:30:a7:2d:a4:af:9e: 33:0b:48:da:d5:29:33:9a:66:f1:66:13:5c:82:5d:d7:0f:00: 96:b3:a0:56:54:3a:49:9d:93:4f:c4:cf:9f:73:c4:02:45:04: fa:36:60:da:22:c8:fd:bf:11:2a:0e:13:9a:93:07:30:04:b0: 71:2c:a7:09:6a:6d:6f:6f:c1:73:16:67:7d:a2:88:cb:0f:b2: 52:50:77:bb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUS6mwei1Iq9HMj1segOBywqYmCvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1N1oX DTI3MDUwMTA5MTk1N1owMzExMC8GA1UEAxMoRTc0QjY1RTAzMkJEOTUzQTM2QTEx QzUwQkM2QjI5NDI2MUE3M0VGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVEIkOmalBZGjpPY13if7tzX+VTPtooH89rKRh2sL+gVjk4USD7vVbJXB8V irykNfwTnjz21+tINZdwAtt0iAteoGOeT1rbLXQ7ox/VgxtBCeDdmRTslkrSGfcj BgFiIsS5KMy6QnWz3LpDWTuxV1JboQuw0EIoFJUEe0i+WqkjYPWG7X/Usqxc10wf 7RNgmIdKn1m6fksaiDOr/bjQFsAgGfDVkRGjbuAA1OBdoPmXu93hJT8VlFNJHAdK AFt2804/+LU9BQxLH6ya95AyGOGKNsp8ROiRrh1gFc5/uTdu0mbXMKEg1bQm91I4 8c0Uid3TBGBLTLoKz/kHc4jCIGMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTnS2Xg Mr2VOjahHFC8aylCYac+/TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNTc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6CTMA0GCSqGSIb3DQEBCwUAA4IBAQAxSBa8Ao/fzExxlTTuyqIxzbnr lS+Gcwpt3shj9wbGFRVYzkJUcEo1dyQlPFhOj7yfOX0h6mR0vQht67RsnCc7L6IZ RbuXq50QxXaJZiSHabdaqgz6fHxIfa9VzjBLF3uHCUrP8jadu6Y8aQBHpMpO3Yln zco8D0qMYmlc5/JRUYkD9xm2SA5aCO3OmEsPagEtRASrMV3SbclTIQz5BFEGR9FN rUDgbzsEc0u/40Ywpy2kr54zC0ja1SkzmmbxZhNcgl3XDwCWs6BWVDpJnZNPxM+f c8QCRQT6NmDaIsj9vxEqDhOakwcwBLBxLKcJam1vb8FzFmd9oojLD7JSUHe7 -----END CERTIFICATE-----Generated at Sun May 3 00:41:15 2026 by rpki-client