
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141644.roa
File: AS141644.roa (raw, json)
Hash identifier: Es7KtbHVEhbaKIjK9xhWzVAkpm51HqMTc00vH8kTxBY=
Subject key identifier: B8:C7:18:4A:60:4A:59:91:C7:86:E7:7C:3E:7A:17:63:81:5A:7A:4E
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 358AF722ED4C6036FCAC43D0055D43EDEEFD1328
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141644.roa
Signing time: Sat 02 May 2026 09:19:57 +0000
ROA not before: Sat 02 May 2026 09:14:57 +0000
ROA not after: Sat 01 May 2027 09:19:57 +0000
asID: 141644
IP address blocks: 103.162.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8a:f7:22:ed:4c:60:36:fc:ac:43:d0:05:5d:43:ed:ee:fd:13:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:14:57 2026 GMT
Not After : May 1 09:19:57 2027 GMT
Subject: CN=B8C7184A604A5991C786E77C3E7A1763815A7A4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:76:7e:8c:9b:92:2c:1b:21:3e:00:85:67:
0a:55:3e:6b:3d:7b:a6:6a:97:d0:e3:18:f9:b3:2e:
fc:c6:d8:c5:49:54:77:09:4f:29:be:b4:f4:76:95:
b0:be:8b:12:9b:4c:61:b6:99:0c:cd:0d:35:0a:d6:
a2:27:f5:ba:f9:97:26:eb:a9:1b:92:1d:0d:cc:6d:
fb:e6:44:aa:43:1d:b5:27:7b:09:22:3d:5e:09:56:
bb:7c:1d:bf:97:b5:20:07:9b:1d:5a:78:5a:8d:7d:
b8:1d:53:e8:c9:c9:b5:71:99:bd:06:aa:ba:9b:85:
1e:94:f4:1a:3a:9f:6a:b6:f4:d0:f7:7f:ad:44:ab:
05:7f:fd:3b:92:67:e4:3a:42:55:2d:3b:16:d1:07:
dd:ba:c1:f6:bb:69:7a:0c:f1:e3:12:3a:85:8c:f6:
5e:3c:4d:d5:65:d7:b6:c5:0a:59:c5:e6:7a:fc:2d:
24:2f:1f:89:f0:cb:e4:ee:f5:1d:e8:c6:5c:64:d7:
50:b9:12:48:02:fa:fc:f2:ff:4d:dc:83:e6:17:23:
ef:ba:84:50:a3:a6:8e:bc:d2:16:1a:63:70:b3:9a:
15:b7:f6:4b:9f:da:20:e8:43:ff:48:10:2e:35:a7:
8d:dd:8e:ad:f1:5c:3a:5d:88:5e:eb:6f:39:5e:51:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:18:4A:60:4A:59:91:C7:86:E7:7C:3E:7A:17:63:81:5A:7A:4E
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:be:95:d6:69:5d:f8:4b:e6:d4:5e:57:f8:82:7d:61:3d:90:
80:2d:b0:6c:d3:4e:b5:a2:34:cd:21:86:46:37:06:e1:c7:9d:
5f:2a:d1:bb:a1:b7:bd:e0:25:56:f2:df:0b:04:96:7d:6a:14:
00:f5:47:70:1f:8c:10:8b:26:9c:be:3e:44:49:d4:f0:a3:f3:
56:30:9b:ea:58:25:64:b9:b4:aa:51:05:62:3f:9a:7a:9e:04:
8e:ba:ce:3e:2a:90:8e:6e:54:71:dc:e8:f3:ff:eb:06:20:55:
4c:0a:c2:8f:c0:ff:f1:e3:3a:6f:2d:6d:fb:b7:6d:79:db:f0:
aa:96:fa:80:fc:69:6f:6f:d7:29:6a:c9:f2:88:79:2b:1d:f1:
51:20:75:f6:14:bb:fd:34:cb:68:5f:54:fb:31:2f:42:08:8c:
ab:56:46:3e:5d:8c:43:0f:52:99:af:f5:ec:b1:ea:64:21:37:
e3:aa:47:c3:6d:b0:d9:e0:a3:4f:66:6d:f1:be:f0:a2:51:b9:
89:94:29:9b:9a:32:bf:51:57:d7:41:ff:c2:dd:92:9f:fa:6c:
e5:68:b1:b9:6f:49:02:63:f7:81:35:bb:e0:2d:65:0b:ed:44:
97:75:05:f4:99:9f:54:03:92:c8:ad:61:cc:2c:88:0c:aa:58:
e9:40:f3:39
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUNYr3Iu1MYDb8rEPQBV1D7e79EygwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1N1oX
DTI3MDUwMTA5MTk1N1owMzExMC8GA1UEAxMoQjhDNzE4NEE2MDRBNTk5MUM3ODZF
NzdDM0U3QTE3NjM4MTVBN0E0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFEdn6Mm5IsGyE+AIVnClU+az17pmqX0OMY+bMu/MbYxUlUdwlPKb609HaV
sL6LEptMYbaZDM0NNQrWoif1uvmXJuupG5IdDcxt++ZEqkMdtSd7CSI9XglWu3wd
v5e1IAebHVp4Wo19uB1T6MnJtXGZvQaqupuFHpT0Gjqfarb00Pd/rUSrBX/9O5Jn
5DpCVS07FtEH3brB9rtpegzx4xI6hYz2XjxN1WXXtsUKWcXmevwtJC8fifDL5O71
HejGXGTXULkSSAL6/PL/TdyD5hcj77qEUKOmjrzSFhpjcLOaFbf2S5/aIOhD/0gQ
LjWnjd2OrfFcOl2IXutvOV5RlSkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS4xxhK
YEpZkceG53w+ehdjgVp6TjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjQ0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ6JFMA0GCSqGSIb3DQEBCwUAA4IBAQBrvpXWaV34S+bUXlf4gn1hPZCA
LbBs0061ojTNIYZGNwbhx51fKtG7obe94CVW8t8LBJZ9ahQA9UdwH4wQiyacvj5E
SdTwo/NWMJvqWCVkubSqUQViP5p6ngSOus4+KpCOblRx3Ojz/+sGIFVMCsKPwP/x
4zpvLW37t2152/CqlvqA/Glvb9cpasnyiHkrHfFRIHX2FLv9NMtoX1T7MS9CCIyr
VkY+XYxDD1KZr/XssepkITfjqkfDbbDZ4KNPZm3xvvCiUbmJlCmbmjK/UVfXQf/C
3ZKf+mzlaLG5b0kCY/eBNbvgLWUL7USXdQX0mZ9UA5LIrWHMLIgMqljpQPM5
-----END CERTIFICATE-----
Generated at Sun May 3 00:42:08 2026 by rpki-client