$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141631.roa File: AS141631.roa (raw, json) Hash identifier: QoSJqxaxNwzS2hnZFjSY/I6s5CcX9opTn7A7t2YPgaY= Subject key identifier: E3:8D:73:C7:8E:DF:89:75:54:8E:2C:F9:40:BD:A4:31:F7:38:A6:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 120AA72EC4F55889D3BD2429CE5EE390E00EF68A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141631.roa Signing time: Sat 02 May 2026 21:05:42 +0000 ROA not before: Sat 02 May 2026 21:00:42 +0000 ROA not after: Sat 01 May 2027 21:05:42 +0000 asID: 141631 IP address blocks: 103.140.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0a:a7:2e:c4:f5:58:89:d3:bd:24:29:ce:5e:e3:90:e0:0e:f6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:00:42 2026 GMT Not After : May 1 21:05:42 2027 GMT Subject: CN=E38D73C78EDF8975548E2CF940BDA431F738A66D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:1f:41:c6:7a:21:37:bf:0e:ad:c6:f3:cb: fd:c7:fe:95:fc:34:c0:f1:d0:90:75:be:84:ba:fc: 6e:be:f8:b0:3e:3d:05:f6:b7:ee:b6:ba:e6:79:f8: 06:ea:c6:d5:96:2e:1e:d6:24:87:ea:f5:d4:c5:af: c1:36:9f:b9:76:66:52:65:75:be:78:d6:95:ad:9a: b3:c6:90:a9:37:67:69:49:f9:37:87:87:b7:b1:37: b3:d7:ca:f7:50:0d:aa:dd:93:42:fa:19:35:0f:ad: ca:a8:c3:de:cf:2b:fb:33:85:5e:ee:17:c5:09:a0: ec:ba:f0:a1:f8:e7:62:41:2a:d0:27:29:7e:e4:af: 2c:b3:e6:06:7a:b8:44:43:df:b5:bf:0b:4b:2d:48: 3a:da:1e:82:e7:ea:a9:53:c8:5c:db:30:49:1e:c7: a0:4c:68:10:88:86:cd:20:fd:3d:5b:1f:d9:44:88: 11:ad:00:5e:01:26:40:9e:f8:42:73:24:65:dc:ca: 6e:0b:26:0c:f4:09:1b:72:c6:6a:27:01:87:6d:e4: af:a7:2d:59:d1:69:86:53:3e:4f:ca:da:cb:8e:09: 16:6d:7b:20:70:b9:f5:2f:1c:14:e9:0e:20:6d:3b: 94:9d:fa:97:08:24:e5:b3:9f:9c:d7:c3:99:fe:6e: 27:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8D:73:C7:8E:DF:89:75:54:8E:2C:F9:40:BD:A4:31:F7:38:A6:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.20.0/24 Signature Algorithm: sha256WithRSAEncryption a3:b8:9c:37:c7:f9:7b:c7:a3:60:8b:b6:68:3a:3f:06:0d:30: dd:d9:94:17:de:f2:27:af:13:ea:f9:6a:10:7b:7c:64:b7:0a: 0e:1a:25:bf:7e:9c:c8:8e:1f:0f:a8:77:a2:68:66:44:8e:7d: ae:de:f5:e3:a4:d7:4b:ba:a6:c8:81:2a:c6:37:1d:91:db:1d: e0:a2:d8:78:94:eb:cc:34:1c:ce:b7:68:e2:06:7a:6e:8a:dd: 9d:2f:36:c8:2c:dd:36:9f:3e:35:a8:6c:8c:fa:4d:76:87:b0: 47:05:20:5e:ca:dd:1d:01:33:bb:50:a8:2a:2e:ff:43:1e:6a: 60:f6:83:93:91:3f:33:90:7d:80:64:f7:9f:5a:53:4f:7e:68: 48:90:83:3e:a5:2d:e3:51:6b:6f:c0:a0:b4:df:ed:ca:57:b0: 47:c5:43:f7:04:ea:4a:d4:a8:92:cb:35:88:93:ce:14:1e:5d: a0:6d:a0:43:ce:7d:58:84:d2:60:41:f6:a7:9a:15:9b:5f:65: 33:9f:d0:74:ca:3d:3c:3f:6f:99:bf:d5:93:aa:c5:f6:65:e4: 99:f1:01:35:93:35:71:ab:67:90:e0:30:f7:ae:6f:9f:3d:e7: bd:da:a8:ad:dd:77:52:af:2e:8b:b3:d1:f1:94:88:9c:ff:b3: 5e:c0:f7:2c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEgqnLsT1WInTvSQpzl7jkOAO9oowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMDA0MloX DTI3MDUwMTIxMDU0MlowMzExMC8GA1UEAxMoRTM4RDczQzc4RURGODk3NTU0OEUy Q0Y5NDBCREE0MzFGNzM4QTY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALunH0HGeiE3vw6txvPL/cf+lfw0wPHQkHW+hLr8br74sD49Bfa37ra65nn4 BurG1ZYuHtYkh+r11MWvwTafuXZmUmV1vnjWla2as8aQqTdnaUn5N4eHt7E3s9fK 91ANqt2TQvoZNQ+tyqjD3s8r+zOFXu4XxQmg7LrwofjnYkEq0CcpfuSvLLPmBnq4 REPftb8LSy1IOtoegufqqVPIXNswSR7HoExoEIiGzSD9PVsf2USIEa0AXgEmQJ74 QnMkZdzKbgsmDPQJG3LGaicBh23kr6ctWdFphlM+T8ray44JFm17IHC59S8cFOkO IG07lJ36lwgk5bOfnNfDmf5uJ1ECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTjjXPH jt+JdVSOLPlAvaQx9zimbTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ4wUMA0GCSqGSIb3DQEBCwUAA4IBAQCjuJw3x/l7x6Ngi7ZoOj8GDTDd 2ZQX3vInrxPq+WoQe3xktwoOGiW/fpzIjh8PqHeiaGZEjn2u3vXjpNdLuqbIgSrG Nx2R2x3goth4lOvMNBzOt2jiBnpuit2dLzbILN02nz41qGyM+k12h7BHBSBeyt0d ATO7UKgqLv9DHmpg9oOTkT8zkH2AZPefWlNPfmhIkIM+pS3jUWtvwKC03+3KV7BH xUP3BOpK1KiSyzWIk84UHl2gbaBDzn1YhNJgQfanmhWbX2Uzn9B0yj08P2+Zv9WT qsX2ZeSZ8QE1kzVxq2eQ4DD3rm+fPee92qit3XdSry6Ls9HxlIic/7NewPcs -----END CERTIFICATE-----Generated at Sun May 3 00:42:35 2026 by rpki-client