$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141621.roa File: AS141621.roa (raw, json) Hash identifier: x3XRjvHEPpa364qnakZCKfIxfBNC7jhEpC0edpEZY38= Subject key identifier: 3D:3C:3B:7F:DF:28:49:AC:0D:D5:81:F9:63:A2:D4:ED:9A:09:B3:51 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 58985890F597282612E05E8D62D2E798D0808FCA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141621.roa Signing time: Sat 02 May 2026 09:19:50 +0000 ROA not before: Sat 02 May 2026 09:14:50 +0000 ROA not after: Sat 01 May 2027 09:19:50 +0000 asID: 141621 IP address blocks: 103.161.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:98:58:90:f5:97:28:26:12:e0:5e:8d:62:d2:e7:98:d0:80:8f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:50 2026 GMT Not After : May 1 09:19:50 2027 GMT Subject: CN=3D3C3B7FDF2849AC0DD581F963A2D4ED9A09B351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:f5:d7:b3:2f:9d:0b:e7:c7:ae:c8:48:e2: c7:46:72:21:45:04:dc:56:0d:b8:bd:8a:b8:82:e8: d9:25:bc:e1:32:aa:25:a8:fb:36:1b:0b:a1:fa:00: 7b:1f:30:37:ee:c6:8c:0c:fd:de:4b:2e:ab:8e:5d: df:4b:33:18:6f:54:38:25:bf:4e:d3:c6:d5:a4:c2: 74:56:57:a8:c5:0e:f8:eb:ef:79:dc:22:c1:f0:97: 24:a0:8b:d0:91:7e:4a:90:85:09:3b:b7:50:90:99: 1f:b8:78:80:89:62:c9:c9:31:2c:e6:d4:cf:bf:18: bc:3d:c4:02:4f:58:9c:95:ee:cb:90:1b:a1:f2:92: 6f:bc:35:3f:79:db:7f:99:86:66:6a:5d:33:2b:39: 08:a0:3a:c7:25:6f:25:c7:90:0c:70:57:f4:ab:f1: 3e:3a:e7:8e:e6:ba:07:3d:43:f7:6c:ae:19:7a:b8: a9:b0:4a:3e:f7:28:45:95:f7:87:54:81:18:37:d8: 14:02:83:31:09:fe:55:fa:99:60:73:07:84:2f:d2: e3:57:90:2d:0f:70:18:69:27:af:0f:e8:00:c7:e0: 3d:df:06:c1:e7:8a:5c:7d:35:e2:39:6a:32:3e:32: bf:95:a6:77:55:e8:3c:ae:c7:e9:5d:74:af:7a:e0: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3C:3B:7F:DF:28:49:AC:0D:D5:81:F9:63:A2:D4:ED:9A:09:B3:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141621.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.164.0/23 Signature Algorithm: sha256WithRSAEncryption 50:37:cf:73:76:a0:4d:59:fc:95:88:06:d3:2d:cd:8f:bd:51: e4:fe:47:25:8b:c9:28:6f:31:bf:5c:90:6e:1d:7d:f9:b3:91: da:8a:34:71:0e:b4:f0:b4:da:8d:42:27:38:cb:a5:4d:34:6a: 32:d3:eb:da:7c:54:f7:93:c4:c4:61:15:3b:a4:3b:33:f6:c0: 82:0d:9f:7b:54:fc:73:22:5f:7d:d6:d8:19:01:3b:45:e8:9b: c3:e1:c2:60:82:18:87:97:0b:2e:67:4a:8a:bf:00:5d:87:8b: 3d:80:e0:88:59:81:25:11:3f:9e:47:1b:df:68:0e:c7:f0:fe: c5:3e:4d:c6:be:68:18:4f:ae:1a:e8:be:1e:9d:9e:69:6a:69: a5:78:b3:c4:77:61:03:0c:89:21:38:9f:a3:d7:61:40:6a:64: 1a:03:03:83:fe:aa:db:61:ce:10:3a:b2:33:f0:a1:fb:5b:5c: 04:d3:1f:a5:3d:3b:f4:21:92:83:5e:a4:d1:73:dd:66:7b:84: 9e:81:48:34:f9:b7:46:c1:c7:1b:26:01:36:b1:6b:9e:d3:80: d3:aa:eb:67:b5:b9:a9:45:f7:83:a0:dc:d9:b8:da:b2:22:f3: ed:21:0d:08:fd:24:f4:69:ef:29:f0:da:30:7c:ed:56:99:c3: 5c:8a:a4:4c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWJhYkPWXKCYS4F6NYtLnmNCAj8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1MFoX DTI3MDUwMTA5MTk1MFowMzExMC8GA1UEAxMoM0QzQzNCN0ZERjI4NDlBQzBERDU4 MUY5NjNBMkQ0RUQ5QTA5QjM1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCr9dezL50L58euyEjix0ZyIUUE3FYNuL2KuILo2SW84TKqJaj7NhsLofoA ex8wN+7GjAz93ksuq45d30szGG9UOCW/TtPG1aTCdFZXqMUO+OvvedwiwfCXJKCL 0JF+SpCFCTu3UJCZH7h4gIliyckxLObUz78YvD3EAk9YnJXuy5AbofKSb7w1P3nb f5mGZmpdMys5CKA6xyVvJceQDHBX9KvxPjrnjua6Bz1D92yuGXq4qbBKPvcoRZX3 h1SBGDfYFAKDMQn+VfqZYHMHhC/S41eQLQ9wGGknrw/oAMfgPd8GweeKXH014jlq Mj4yv5Wmd1XoPK7H6V10r3rgf+8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ9PDt/ 3yhJrA3VgfljotTtmgmzUTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6GkMA0GCSqGSIb3DQEBCwUAA4IBAQBQN89zdqBNWfyViAbTLc2PvVHk /kcli8kobzG/XJBuHX35s5HaijRxDrTwtNqNQic4y6VNNGoy0+vafFT3k8TEYRU7 pDsz9sCCDZ97VPxzIl991tgZATtF6JvD4cJgghiHlwsuZ0qKvwBdh4s9gOCIWYEl ET+eRxvfaA7H8P7FPk3GvmgYT64a6L4enZ5pammleLPEd2EDDIkhOJ+j12FAamQa AwOD/qrbYc4QOrIz8KH7W1wE0x+lPTv0IZKDXqTRc91me4SegUg0+bdGwccbJgE2 sWue04DTqutntbmpRfeDoNzZuNqyIvPtIQ0I/ST0ae8p8NowfO1WmcNciqRM -----END CERTIFICATE-----Generated at Sun May 3 00:42:29 2026 by rpki-client