$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141591.roa File: AS141591.roa (raw, json) Hash identifier: vNDd4u1ksWm6rpsEX2nvcwweU7jJ6R1UG+m/7cXi3oQ= Subject key identifier: 60:9D:D4:0D:80:5E:FF:87:5A:31:BD:AC:09:5A:0B:EA:6C:DA:42:44 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 59156B5842C073E2188877409CA863AA3E8D6D14 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141591.roa Signing time: Sat 02 May 2026 21:35:44 +0000 ROA not before: Sat 02 May 2026 21:30:44 +0000 ROA not after: Sat 01 May 2027 21:35:44 +0000 asID: 141591 IP address blocks: 103.159.62.0/23 maxlen: 24 2406:8640:bda::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:15:6b:58:42:c0:73:e2:18:88:77:40:9c:a8:63:aa:3e:8d:6d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:30:44 2026 GMT Not After : May 1 21:35:44 2027 GMT Subject: CN=609DD40D805EFF875A31BDAC095A0BEA6CDA4244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:52:05:1b:f5:0e:91:2a:07:f4:a2:b3:55: b8:26:2c:76:41:43:34:cb:b9:e9:27:ab:66:05:44: 09:04:d3:f6:4c:72:db:d8:63:59:92:05:9e:5a:fa: fa:d2:18:c2:e7:a7:53:c8:5d:76:b0:d6:e4:15:5a: ce:46:e7:57:2c:62:9c:27:b1:11:09:c7:2f:03:bb: db:6e:6c:77:8f:e2:ff:2c:53:3d:2d:6d:81:e5:b2: 64:85:8f:f7:bd:06:d6:b4:53:3f:8e:ea:f8:5c:a2: e1:3c:2d:86:46:4a:79:75:78:b2:c6:45:e1:86:0e: 47:22:cd:02:16:69:64:d1:60:3b:df:a8:cc:29:24: 83:87:89:bb:bd:d2:81:8c:98:3d:45:6b:f4:49:46: 02:22:98:36:22:c3:fc:2a:d9:14:f2:90:ae:e5:8a: 49:8c:8b:b7:67:50:93:8b:27:ee:c4:bd:62:32:61: 3e:de:6e:83:a7:3b:e2:61:e7:e2:f6:d4:a3:35:fa: 3d:6a:28:d0:02:bd:de:05:99:2c:72:77:ed:51:55: e1:2c:54:2c:36:6f:35:ca:0b:76:b3:7d:c6:f1:96: 80:4f:0a:58:a0:c8:0a:dc:92:24:07:50:f5:30:67: 92:7f:b8:5f:52:c9:1c:07:69:91:1c:5b:1f:3f:a7: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9D:D4:0D:80:5E:FF:87:5A:31:BD:AC:09:5A:0B:EA:6C:DA:42:44 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141591.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.62.0/23 IPv6: 2406:8640:bda::/48 Signature Algorithm: sha256WithRSAEncryption 74:0e:42:c6:14:f6:81:85:1f:c9:df:38:22:eb:d5:86:46:19: a3:62:0a:64:11:bd:26:8e:00:7e:95:09:7a:c2:e7:42:e2:6e: c0:4e:ad:74:13:c7:3d:5d:b1:9c:c9:57:47:af:ab:d1:84:47: ac:3d:e8:ae:d1:c0:31:b7:c6:6a:e2:58:13:63:44:2b:ec:a7: 66:dc:e1:1c:6f:38:02:ae:43:fe:30:6d:b2:79:13:99:8b:78: ae:8c:40:da:a9:cb:46:66:14:09:db:0e:e8:75:3c:fd:7f:ba: 44:21:d9:57:da:03:2a:e8:19:e7:06:cc:2c:40:54:5a:37:20: 9d:88:26:f8:e1:11:b0:62:4f:26:b3:98:6c:13:b0:dc:14:0f: 51:33:3f:5a:17:9c:f1:a7:83:a7:fe:81:c2:6d:36:7b:9b:0f: 4e:87:4a:64:2a:ac:d0:a6:5c:c9:40:c1:30:a0:b5:5b:b4:8b: 9d:f0:83:6f:f5:c0:6c:26:f0:f7:30:e6:1f:39:3d:ef:8e:99: 89:4b:79:87:4a:cf:6a:00:1c:8a:3d:65:9c:b1:13:02:e8:db: 26:6d:ca:a2:62:5d:0a:e7:f1:cb:cd:48:c8:b4:68:57:3e:d9: 6c:31:0f:4f:19:b8:a9:79:ff:46:5a:81:61:76:ea:ad:1b:f5: a1:74:7a:54 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWRVrWELAc+IYiHdAnKhjqj6NbRQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzA0NFoX DTI3MDUwMTIxMzU0NFowMzExMC8GA1UEAxMoNjA5REQ0MEQ4MDVFRkY4NzVBMzFC REFDMDk1QTBCRUE2Q0RBNDI0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9wUgUb9Q6RKgf0orNVuCYsdkFDNMu56SerZgVECQTT9kxy29hjWZIFnlr6 +tIYwuenU8hddrDW5BVazkbnVyxinCexEQnHLwO7225sd4/i/yxTPS1tgeWyZIWP 970G1rRTP47q+Fyi4TwthkZKeXV4ssZF4YYORyLNAhZpZNFgO9+ozCkkg4eJu73S gYyYPUVr9ElGAiKYNiLD/CrZFPKQruWKSYyLt2dQk4sn7sS9YjJhPt5ug6c74mHn 4vbUozX6PWoo0AK93gWZLHJ37VFV4SxULDZvNcoLdrN9xvGWgE8KWKDICtySJAdQ 9TBnkn+4X1LJHAdpkRxbHz+nAtECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRgndQN gF7/h1oxvawJWgvqbNpCRDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNTkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ58+MA8EAgACMAkDBwAkBoZAC9owDQYJKoZIhvcNAQELBQADggEBAHQO QsYU9oGFH8nfOCLr1YZGGaNiCmQRvSaOAH6VCXrC50LibsBOrXQTxz1dsZzJV0ev q9GER6w96K7RwDG3xmriWBNjRCvsp2bc4RxvOAKuQ/4wbbJ5E5mLeK6MQNqpy0Zm FAnbDuh1PP1/ukQh2VfaAyroGecGzCxAVFo3IJ2IJvjhEbBiTyazmGwTsNwUD1Ez P1oXnPGng6f+gcJtNnubD06HSmQqrNCmXMlAwTCgtVu0i53wg2/1wGwm8Pcw5h85 Pe+OmYlLeYdKz2oAHIo9ZZyxEwLo2yZtyqJiXQrn8cvNSMi0aFc+2WwxD08ZuKl5 /0ZagWF26q0b9aF0elQ= -----END CERTIFICATE-----Generated at Sun May 3 00:41:59 2026 by rpki-client