
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141627.roa
File: AS141627.roa (raw, json)
Hash identifier: tfmOmLF7w+F2I4XbpOTrY7rFl6+IQe6fUiZUNPflalo=
Subject key identifier: B6:C4:DB:60:99:63:A8:01:59:CD:53:50:41:2F:A0:E3:D0:BD:32:DD
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 74EF0B255816E03FEADC191DDFC7DDEF56A57DA0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141627.roa
Signing time: Sat 02 May 2026 09:19:43 +0000
ROA not before: Sat 02 May 2026 09:14:43 +0000
ROA not after: Sat 01 May 2027 09:19:43 +0000
asID: 141627
IP address blocks: 103.161.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ef:0b:25:58:16:e0:3f:ea:dc:19:1d:df:c7:dd:ef:56:a5:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:14:43 2026 GMT
Not After : May 1 09:19:43 2027 GMT
Subject: CN=B6C4DB609963A80159CD5350412FA0E3D0BD32DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:9f:05:23:1f:27:77:11:52:d8:6d:04:75:
ab:67:f8:b0:1c:d3:9f:ef:69:2a:4f:92:09:77:12:
90:06:5e:17:9b:d5:87:d2:75:3e:c8:b2:d5:cd:cf:
4e:ad:99:b2:c8:4e:09:9c:4f:6c:80:76:90:f2:ad:
9c:3a:cb:09:0f:c1:09:77:d3:b5:25:fb:83:ed:2d:
ea:f2:f7:77:44:34:09:39:ab:b9:51:53:cf:38:b7:
c4:1f:8e:43:0b:33:d7:ab:40:89:f6:9d:8a:6e:c7:
74:13:7e:8e:ba:5a:73:1f:98:2c:b3:bb:db:f6:ea:
8f:bf:21:56:09:f4:71:7d:df:44:a6:2f:79:d1:82:
20:69:b4:c5:8e:6d:9f:90:f7:e6:59:db:47:a9:d2:
52:42:a7:83:7e:75:d6:db:82:fd:08:26:e0:ce:5e:
23:60:65:d0:ec:d7:92:b9:af:72:1b:4b:b2:f0:18:
c7:1b:d2:ef:10:21:ce:86:47:7d:85:75:38:24:8a:
74:23:fd:5c:bc:96:dc:2b:42:8f:dc:04:c5:39:ce:
0f:26:a2:b0:a2:09:6c:54:c4:c6:33:8e:41:dd:60:
f7:7f:47:98:aa:71:97:9f:b3:83:90:8d:a8:1a:db:
e1:75:73:cf:17:04:55:1f:59:a9:e3:03:ca:48:a1:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:DB:60:99:63:A8:01:59:CD:53:50:41:2F:A0:E3:D0:BD:32:DD
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.206.0/23
Signature Algorithm: sha256WithRSAEncryption
94:88:16:ed:77:81:8c:c2:3c:8f:28:ac:92:da:b7:61:9e:b1:
b5:5d:f8:d4:b5:75:c9:ec:6a:a6:9a:54:45:45:52:00:62:fe:
9b:f1:bc:03:59:64:93:48:b5:d0:5f:74:1b:b6:12:c4:f2:e3:
5a:47:a7:50:a8:f0:7f:1c:e3:12:e8:c7:e4:3f:ec:72:4c:6b:
b0:8e:54:e8:93:53:3c:19:be:4a:a9:f9:bb:1a:77:c1:d8:e1:
e6:84:1c:ce:cc:c5:d8:60:83:db:f2:ad:b2:66:3d:ae:a1:fc:
e7:3b:9b:86:5c:09:bc:9b:27:ec:a6:bd:e6:90:cd:30:1d:ec:
13:39:7f:20:5d:be:e0:28:21:b2:20:49:12:ac:9a:ef:2b:f4:
29:30:1e:05:de:10:25:ba:40:bc:c3:43:81:42:c5:3f:89:a2:
54:18:4f:a3:3e:fd:04:28:22:d0:5a:64:98:82:f6:32:3f:8a:
37:82:37:d1:e3:f9:a9:5c:85:c2:09:e8:75:e4:e5:a9:dd:51:
35:68:4e:f4:77:9f:9a:a3:1a:8e:2f:b9:fb:83:43:0c:2b:83:
a2:01:e5:a1:0f:ea:53:d6:e1:03:f9:c8:42:c5:42:bb:c4:32:
74:2a:06:e6:ce:c6:de:03:fa:0d:33:03:b3:6e:ed:f7:31:3f:
90:cb:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:34 2026 by rpki-client