$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141645.roa File: AS141645.roa (raw, json) Hash identifier: uT+7ePwqtyAFWIGyg4Jtlb2J36y4nimrwciQYRjHyDE= Subject key identifier: 4B:73:81:8B:96:C6:94:92:BB:2D:48:08:80:F7:66:22:AB:AE:AF:D7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1583CF8A278D4BDC9E0403C6C549E2846681D1C9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141645.roa Signing time: Sat 02 May 2026 09:19:49 +0000 ROA not before: Sat 02 May 2026 09:14:49 +0000 ROA not after: Sat 01 May 2027 09:19:49 +0000 asID: 141645 IP address blocks: 103.162.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:83:cf:8a:27:8d:4b:dc:9e:04:03:c6:c5:49:e2:84:66:81:d1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:49 2026 GMT Not After : May 1 09:19:49 2027 GMT Subject: CN=4B73818B96C69492BB2D480880F76622ABAEAFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:45:6b:95:dd:cd:ab:40:94:89:9e:6a:56: 68:d2:65:59:42:3b:58:13:1b:ef:e0:ba:84:83:05: 84:b7:77:95:a4:e1:40:95:83:ce:70:0b:c5:0a:34: 99:d7:4d:f8:51:98:70:8a:f5:30:1c:9c:48:65:c6: 82:2f:0e:a6:48:d6:17:c7:7d:c2:f3:7d:ec:cb:92: 73:42:d7:74:f8:8c:ac:36:8b:c6:42:6c:b1:5c:74: 91:02:55:58:1c:6c:fa:a1:40:22:da:e3:fe:5f:37: 8b:83:fe:46:bc:7d:d4:c1:eb:a3:c8:4d:a1:ae:2d: 7c:72:7e:fd:97:8e:a6:f7:b2:37:55:bf:0b:4c:7f: 63:a5:56:f5:8d:e3:d1:ab:c8:6e:3f:58:23:43:88: 1e:74:5e:20:63:f8:45:a7:bd:b5:d2:84:a6:5c:f2: 42:50:f6:e8:91:ca:89:d1:e6:a5:1c:a3:50:ff:60: bb:c7:c7:89:d0:55:81:0c:2f:f5:27:6d:93:e6:b6: f6:c0:33:48:f3:fe:cd:4b:a2:83:2e:73:5e:e1:e0: a8:1e:52:37:ba:23:0e:b9:e2:f6:61:d3:97:75:5c: 3d:d8:de:bb:a3:dd:de:52:dc:b1:d1:d7:33:a1:2b: 2e:b9:49:dc:03:ad:b5:28:93:fe:4b:44:f3:e4:8f: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:73:81:8B:96:C6:94:92:BB:2D:48:08:80:F7:66:22:AB:AE:AF:D7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141645.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.54.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:f5:01:3e:a1:6c:71:f5:c9:51:8e:1b:5e:bf:b6:ec:7e:e4: 94:e7:8a:50:d6:39:ab:36:a3:d7:f7:eb:a8:d4:db:ad:b3:ed: 22:bd:35:dc:2e:b2:23:9c:7e:a8:d6:54:16:4e:8b:df:c8:c6: 66:2d:ef:1b:85:d5:56:b2:ee:4b:5b:23:7d:c3:70:e3:de:dd: 2c:91:0d:de:d4:b4:c1:33:5b:b4:8b:d5:95:30:74:e2:7f:01: 05:6a:ab:4b:d6:88:c2:72:77:b6:ce:52:c7:1c:d6:1b:13:b2: b3:99:82:db:a7:c4:8f:b8:23:53:c8:53:36:4f:e9:d7:0b:11: 7d:67:32:5d:74:68:32:44:0a:ae:86:10:da:75:82:67:4d:90: 48:96:e5:8e:5b:80:5c:9d:5f:77:c4:ad:f4:aa:fc:d2:ba:82: 2f:6a:63:ad:72:84:d4:cb:ef:65:04:57:48:70:ac:1b:12:53: 8d:be:69:a5:32:f7:41:5c:d2:66:2a:91:27:c0:41:79:9a:9d: e0:d7:13:8d:dc:74:a8:88:fb:d3:4c:7c:a2:7d:70:32:9d:db: e4:a9:1a:ea:66:86:4d:7b:0f:59:35:8e:79:7a:95:85:d3:ae: d0:f3:a2:6d:24:f5:3e:d1:6f:c9:33:cc:34:66:1b:b2:bf:9c: 9a:07:b8:33 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFYPPiieNS9yeBAPGxUnihGaB0ckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0OVoX DTI3MDUwMTA5MTk0OVowMzExMC8GA1UEAxMoNEI3MzgxOEI5NkM2OTQ5MkJCMkQ0 ODA4ODBGNzY2MjJBQkFFQUZENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK4XRWuV3c2rQJSJnmpWaNJlWUI7WBMb7+C6hIMFhLd3laThQJWDznALxQo0 mddN+FGYcIr1MBycSGXGgi8OpkjWF8d9wvN97MuSc0LXdPiMrDaLxkJssVx0kQJV WBxs+qFAItrj/l83i4P+Rrx91MHro8hNoa4tfHJ+/ZeOpveyN1W/C0x/Y6VW9Y3j 0avIbj9YI0OIHnReIGP4Rae9tdKEplzyQlD26JHKidHmpRyjUP9gu8fHidBVgQwv 9Sdtk+a29sAzSPP+zUuigy5zXuHgqB5SN7ojDrni9mHTl3VcPdjeu6Pd3lLcsdHX M6ErLrlJ3AOttSiT/ktE8+SPTEUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLc4GL lsaUkrstSAiA92Yiq66v1zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6I2MA0GCSqGSIb3DQEBCwUAA4IBAQBt9QE+oWxx9clRjhtev7bsfuSU 54pQ1jmrNqPX9+uo1Nuts+0ivTXcLrIjnH6o1lQWTovfyMZmLe8bhdVWsu5LWyN9 w3Dj3t0skQ3e1LTBM1u0i9WVMHTifwEFaqtL1ojCcne2zlLHHNYbE7KzmYLbp8SP uCNTyFM2T+nXCxF9ZzJddGgyRAquhhDadYJnTZBIluWOW4BcnV93xK30qvzSuoIv amOtcoTUy+9lBFdIcKwbElONvmmlMvdBXNJmKpEnwEF5mp3g1xON3HSoiPvTTHyi fXAyndvkqRrqZoZNew9ZNY55epWF067Q86JtJPU+0W/JM8w0Zhuyv5yaB7gz -----END CERTIFICATE-----Generated at Sun May 3 01:44:45 2026 by rpki-client