
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa
File: AS141594.roa (raw, json)
Hash identifier: Qe25k5zfeyPEjo6UYMdYRLY4JsSCUhP9GV7Eo8XHhC4=
Subject key identifier: DB:38:09:FA:CC:6E:AD:35:30:3C:DA:66:24:40:7A:C5:89:5A:68:B3
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 166AB6DB5DC052D57057B8FF8BC6045229F8483D
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa
Signing time: Sat 02 May 2026 09:19:53 +0000
ROA not before: Sat 02 May 2026 09:14:53 +0000
ROA not after: Sat 01 May 2027 09:19:53 +0000
asID: 141594
IP address blocks: 103.160.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6a:b6:db:5d:c0:52:d5:70:57:b8:ff:8b:c6:04:52:29:f8:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:14:53 2026 GMT
Not After : May 1 09:19:53 2027 GMT
Subject: CN=DB3809FACC6EAD35303CDA6624407AC5895A68B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:4e:af:40:ae:c4:8f:77:51:ee:96:ba:03:
14:05:d7:54:ee:f6:35:4b:23:ec:14:74:3a:97:c0:
d8:28:72:c3:1f:d3:2f:1e:db:80:3c:ad:10:fd:c5:
18:f6:6f:37:fd:20:eb:a5:1e:59:49:de:45:0b:5d:
f0:01:72:48:c0:94:2a:79:fa:8b:d2:79:d1:fe:59:
6c:b9:63:49:c3:49:77:42:0b:a3:de:3a:7a:91:f6:
52:40:0d:2c:e7:0b:6b:d8:78:3b:49:29:3c:c6:49:
c1:6b:2b:d7:e9:6d:a6:bf:31:3e:a6:59:46:e3:58:
87:25:f2:02:99:dc:e3:a9:bd:f1:cd:f0:22:db:22:
64:e4:40:22:89:49:73:17:55:99:3a:7f:a8:bf:a6:
9b:11:a7:1c:91:f8:84:0a:64:0a:a9:6e:39:7d:cc:
09:02:80:15:b0:68:e5:d7:fc:26:0b:c4:ad:43:67:
fd:56:24:a4:55:46:57:8a:11:21:6d:ce:6d:9e:d1:
6e:ea:5b:21:ea:d7:f7:25:23:45:45:28:a5:7c:dc:
7b:32:1c:2f:60:e6:4a:5f:2f:0f:80:3a:8d:84:fa:
02:30:dd:8a:8d:24:ae:31:f6:cb:b1:ab:94:da:54:
a3:76:d1:f1:f6:54:2e:ec:6a:3a:86:af:c6:83:83:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:09:FA:CC:6E:AD:35:30:3C:DA:66:24:40:7A:C5:89:5A:68:B3
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141594.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:de:a5:45:1f:e9:79:dd:94:84:d8:18:41:42:db:45:28:75:
c5:5d:67:c7:6b:72:7e:16:1d:0b:2a:61:1c:03:3a:c4:d1:ae:
06:ad:27:4b:b3:2f:40:37:30:89:39:44:cd:78:61:ce:6c:05:
e5:39:f0:48:d7:ba:43:37:bd:dd:19:c5:11:53:8b:40:e1:d9:
1a:62:ec:61:b0:74:82:ba:7a:4e:93:03:2c:ee:80:25:a2:58:
d0:ba:9e:4c:53:80:78:ad:6d:07:c9:98:d8:31:0d:2a:64:f9:
62:85:84:f6:32:27:b8:77:65:2e:8d:60:de:e4:9f:3b:fb:9b:
54:fc:92:68:32:9e:7a:f7:21:55:dc:84:5b:a3:a2:6a:64:1e:
02:dd:d3:39:b7:2e:3d:4b:18:7e:70:c9:a1:0a:8f:f4:ff:e3:
fd:5b:bc:10:d1:e3:53:58:19:17:88:f6:55:ab:a2:13:83:f7:
6a:4d:10:e9:27:77:50:a6:de:df:97:98:a9:c7:f5:68:99:38:
90:a0:54:47:e0:9d:29:78:a3:56:6b:75:f0:f7:d8:4b:df:3e:
71:36:67:39:a8:4b:c4:91:c6:c6:23:21:2f:2b:79:c1:07:21:
82:6e:b4:36:f6:d0:82:bc:0e:9a:f7:19:cf:21:a5:62:1b:ee:
7f:0c:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:20 2026 by rpki-client