$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141596.roa File: AS141596.roa (raw, json) Hash identifier: qKJYodNjtO1a5pcKSYg+EjGsRNcikqGPUy8r5lTWYAM= Subject key identifier: 4F:FB:11:09:2F:7D:82:28:25:EF:9F:57:56:38:C7:AF:D7:E4:0B:AB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 47F4E86B565EC0BF90D3B0AF563D97642530F291 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141596.roa Signing time: Sat 02 May 2026 21:36:14 +0000 ROA not before: Sat 02 May 2026 21:31:14 +0000 ROA not after: Sat 01 May 2027 21:36:14 +0000 asID: 141596 IP address blocks: 2406:f940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:e8:6b:56:5e:c0:bf:90:d3:b0:af:56:3d:97:64:25:30:f2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:31:14 2026 GMT Not After : May 1 21:36:14 2027 GMT Subject: CN=4FFB11092F7D822825EF9F575638C7AFD7E40BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:50:79:2b:dd:99:c0:20:24:92:6a:f0:fe: 2b:01:94:76:74:1c:77:b3:d6:20:6a:a9:2b:30:77: 31:a4:45:ae:2a:16:bb:7d:f3:08:c0:da:f5:ba:e6: c2:ad:72:63:f3:35:28:8f:94:04:6a:93:c3:45:7e: 61:9c:10:af:fc:b9:56:16:8e:a9:13:67:67:95:ba: dd:bc:f7:fa:94:e6:c0:32:40:3b:73:9b:98:52:ef: ee:32:a6:38:3c:ba:97:f5:11:36:bb:23:b8:91:f1: 56:de:7d:37:7b:e4:c1:38:30:1a:97:10:46:9a:f2: 4e:9b:67:7a:f9:bb:2f:0b:6a:ee:e2:dd:ad:d2:31: 0e:75:7a:1e:63:b5:2d:18:01:ef:d6:2e:fd:00:38: f8:fc:71:e8:82:e1:82:1e:d7:bb:be:db:81:a4:33: f1:18:f4:8a:04:a4:ff:63:6a:43:9a:0c:90:82:eb: 15:83:07:aa:9c:69:a9:7e:40:2a:ec:b1:c3:aa:e2: 30:c1:30:c0:fa:5f:75:2a:c2:9e:0b:68:c0:76:3b: d5:09:e6:ff:de:40:04:fa:df:e8:b8:2e:d1:53:05: c3:0b:43:0d:77:c3:bc:52:e0:b4:06:10:ac:c7:3c: 7b:08:29:f6:db:67:3c:82:a6:a6:b3:ae:21:37:e8: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FB:11:09:2F:7D:82:28:25:EF:9F:57:56:38:C7:AF:D7:E4:0B:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141596.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:f940::/32 Signature Algorithm: sha256WithRSAEncryption 96:f7:fb:0b:99:7a:88:4b:d5:1f:d3:0d:08:96:2f:b1:53:d4: 46:ac:86:44:64:7d:6a:80:e6:93:2b:15:3f:2b:d9:1c:6d:67: 09:3e:3b:a7:78:35:7e:7e:b9:51:94:85:ad:4d:d3:34:72:7d: 30:45:b3:b5:89:35:ea:07:44:bc:39:c0:14:3d:18:a7:71:a6: fc:31:ff:86:95:48:55:ec:17:ca:3c:c2:25:69:d0:c9:0f:14: b6:8b:02:e6:c4:2c:8a:eb:28:9a:3f:87:01:96:3a:fa:54:b3: 72:37:8b:4f:50:7c:0f:9e:97:fe:0d:32:be:a1:3d:30:3c:41: da:f7:4b:28:a9:88:9b:06:c1:37:a2:99:71:e3:11:05:eb:65: 3d:70:35:c0:a6:c9:22:ef:c0:90:3d:a4:f3:62:cd:3f:d3:0e: 3b:4c:a0:83:91:ea:c3:02:51:5c:e5:ad:d2:c6:91:a1:03:7e: 55:17:a3:ac:38:8b:ad:1d:51:66:85:81:ed:3d:f5:c4:7f:ae: c3:52:bf:68:20:60:28:3b:88:9d:6f:05:b7:85:a2:78:0d:51: 68:27:63:ef:17:70:07:02:76:f6:9b:19:66:27:8a:43:49:92: 6b:ee:a0:09:66:49:ad:c9:52:2f:32:54:a8:9c:b1:c0:e9:de: cc:6c:35:b6 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUR/Toa1ZewL+Q07CvVj2XZCUw8pEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMzExNFoX DTI3MDUwMTIxMzYxNFowMzExMC8GA1UEAxMoNEZGQjExMDkyRjdEODIyODI1RUY5 RjU3NTYzOEM3QUZEN0U0MEJBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFeUHkr3ZnAICSSavD+KwGUdnQcd7PWIGqpKzB3MaRFrioWu33zCMDa9brm wq1yY/M1KI+UBGqTw0V+YZwQr/y5VhaOqRNnZ5W63bz3+pTmwDJAO3ObmFLv7jKm ODy6l/URNrsjuJHxVt59N3vkwTgwGpcQRpryTptnevm7Lwtq7uLdrdIxDnV6HmO1 LRgB79Yu/QA4+Pxx6ILhgh7Xu77bgaQz8Rj0igSk/2NqQ5oMkILrFYMHqpxpqX5A Kuyxw6riMMEwwPpfdSrCngtowHY71Qnm/95ABPrf6Lgu0VMFwwtDDXfDvFLgtAYQ rMc8ewgp9ttnPIKmprOuITfoqyUCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRP+xEJ L32CKCXvn1dWOMev1+QLqzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNTk2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAb5QDANBgkqhkiG9w0BAQsFAAOCAQEAlvf7C5l6iEvVH9MNCJYvsVPU RqyGRGR9aoDmkysVPyvZHG1nCT47p3g1fn65UZSFrU3TNHJ9MEWztYk16gdEvDnA FD0Yp3Gm/DH/hpVIVewXyjzCJWnQyQ8UtosC5sQsiusomj+HAZY6+lSzcjeLT1B8 D56X/g0yvqE9MDxB2vdLKKmImwbBN6KZceMRBetlPXA1wKbJIu/AkD2k82LNP9MO O0ygg5HqwwJRXOWt0saRoQN+VRejrDiLrR1RZoWB7T31xH+uw1K/aCBgKDuInW8F t4WieA1RaCdj7xdwBwJ29psZZieKQ0mSa+6gCWZJrclSLzJUqJyxwOnezGw1tg== -----END CERTIFICATE-----Generated at Sun May 3 00:42:34 2026 by rpki-client