
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141643.roa
File: AS141643.roa (raw, json)
Hash identifier: sIWA0YxISH/VXpCl4vx9YA88VxqAAil7wtUvvWRVx5s=
Subject key identifier: BD:5C:FC:AF:1B:E4:40:50:8C:D8:CA:B6:83:E6:79:8F:1E:4A:38:23
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 59A99064A103D04D9E7AB8E23AE60FEC501697A0
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141643.roa
Signing time: Sat 02 May 2026 09:19:43 +0000
ROA not before: Sat 02 May 2026 09:14:43 +0000
ROA not after: Sat 01 May 2027 09:19:43 +0000
asID: 141643
IP address blocks: 103.162.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a9:90:64:a1:03:d0:4d:9e:7a:b8:e2:3a:e6:0f:ec:50:16:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:14:43 2026 GMT
Not After : May 1 09:19:43 2027 GMT
Subject: CN=BD5CFCAF1BE440508CD8CAB683E6798F1E4A3823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:af:a8:da:62:96:e8:95:5d:19:20:fb:c6:
a2:5b:85:d1:7b:6f:c2:e3:c2:fc:ab:c6:cc:72:2b:
ce:4a:f4:8f:8f:15:b1:49:aa:52:7a:78:1f:21:79:
6c:fd:73:5b:f8:d6:ce:85:dd:8e:34:aa:ef:ed:af:
60:34:f3:81:88:7e:b9:ee:5a:dd:39:80:ef:82:05:
81:a2:2a:d1:67:51:a9:02:93:f3:47:a8:e3:44:2e:
79:26:22:7b:77:31:2c:cc:59:bb:3d:61:a3:1b:5e:
ef:ea:5c:45:5d:b6:10:7f:8b:3d:fd:cd:b2:2a:9a:
83:e7:58:48:16:cb:73:1c:f8:cf:26:aa:bb:6f:7c:
b2:df:39:f1:d5:71:98:4b:27:63:3c:c8:fa:3f:3f:
4d:2c:4f:59:64:58:f1:77:b4:0e:df:2d:c4:1d:0d:
de:88:c2:11:ec:40:af:01:42:1b:39:57:0e:2c:ff:
14:f4:98:ff:43:c9:0b:8f:ba:e0:7b:c7:0b:05:1b:
13:0f:4c:37:4a:55:54:54:6d:08:72:b9:9f:48:b3:
fa:9f:76:8b:b5:f0:30:92:62:eb:94:4a:1b:cc:72:
3b:5e:c0:76:92:b7:57:a2:99:f3:23:b3:05:94:c6:
3b:9f:5b:c3:73:35:30:98:92:a0:6d:21:5b:36:c5:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5C:FC:AF:1B:E4:40:50:8C:D8:CA:B6:83:E6:79:8F:1E:4A:38:23
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.68.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a3:af:38:32:6b:a9:b5:ae:7a:b3:18:0a:05:63:40:b9:d8:
64:68:f1:ad:75:ba:66:53:73:13:33:6a:95:83:a8:7b:b0:c6:
29:45:b8:33:5e:3b:94:e2:20:6b:df:6c:62:2e:71:79:27:31:
df:71:13:4f:8d:e5:78:42:7f:91:4e:b6:b0:c1:35:0a:a1:8c:
4c:3b:60:a6:cf:2f:0e:68:e4:50:8e:f6:58:36:9d:7c:40:4f:
23:fb:34:fe:68:9d:c1:c7:2d:58:6a:c6:ca:dc:38:4f:15:59:
c6:03:06:c4:35:8a:19:e3:df:61:43:61:9a:55:59:98:0d:3b:
0f:4d:bf:c4:5b:f9:9f:6f:ba:aa:46:92:85:2f:a5:c8:36:77:
2d:5e:7f:cd:91:b5:cb:90:6d:7c:34:b6:97:c0:f1:80:75:c5:
39:c9:c6:48:7a:68:ae:05:42:ff:9f:95:c8:a9:71:35:97:b7:
d8:b1:17:0a:2f:1c:6b:ce:bb:7c:72:dc:2a:70:1e:a8:5d:d7:
ca:c2:1a:73:b8:d0:b7:ae:45:90:77:14:ec:dd:ac:0b:d7:87:
a2:07:68:4c:34:2f:db:57:e2:eb:1d:45:22:f5:f2:cb:75:62:
43:fa:b4:31:c0:3a:93:ad:21:c3:75:df:ef:75:46:f4:5d:2a:
d9:3e:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:18 2026 by rpki-client