$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141659.roa File: AS141659.roa (raw, json) Hash identifier: NMi2IFp/xAims5DOd2GZjsKg62O2ansTcpU2VM/LxaE= Subject key identifier: 44:17:1E:A1:7F:B4:D7:0D:43:F6:FC:EC:D1:53:5A:BA:FA:B6:2A:68 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6D56E2E72AEC9A788CF86703A73E8ACEF30B5C20 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141659.roa Signing time: Sat 02 May 2026 09:19:56 +0000 ROA not before: Sat 02 May 2026 09:14:56 +0000 ROA not after: Sat 01 May 2027 09:19:56 +0000 asID: 141659 IP address blocks: 103.160.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:56:e2:e7:2a:ec:9a:78:8c:f8:67:03:a7:3e:8a:ce:f3:0b:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:56 2026 GMT Not After : May 1 09:19:56 2027 GMT Subject: CN=44171EA17FB4D70D43F6FCECD1535ABAFAB62A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:81:75:23:fe:e0:81:2e:64:7a:80:cb:de: 14:0e:5f:2a:87:f4:d8:3c:14:4b:ef:77:72:e6:84: fb:29:6e:01:88:a7:d9:c5:62:63:21:f9:42:4b:0d: ce:81:b8:0a:95:9f:73:5f:de:72:4a:11:e0:10:2f: 19:81:43:6f:ef:d7:bf:35:7b:74:f5:24:bd:7f:b1: f6:22:79:23:5a:74:18:f1:c8:9f:eb:e4:b1:53:de: 34:f9:59:04:6f:a2:ab:bc:3e:66:e5:48:31:eb:7a: 32:53:18:0e:c1:53:53:da:4a:17:f5:b0:63:d8:b7: a3:ec:1b:ff:ed:16:d9:c0:69:ec:98:18:06:66:32: 4f:8f:1c:e1:05:fd:09:ad:3d:70:54:1a:4a:ac:52: 27:f2:41:bb:c0:e3:39:51:0d:1c:7a:c5:7a:61:83: f5:d5:07:4f:46:9a:92:62:95:70:cb:62:61:8b:d1: 9d:82:9f:51:3c:38:df:53:a9:01:da:3a:77:33:33: 0e:b5:97:2c:f1:2e:99:a6:90:34:56:f6:b2:b0:b2: 39:26:59:59:b3:12:49:b7:5f:1d:bb:0f:e2:a9:f1: fa:19:63:04:ba:73:4b:d3:50:6e:ba:91:46:7b:fe: 6e:23:c7:40:47:03:da:78:9a:ff:26:75:02:fe:b6: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:1E:A1:7F:B4:D7:0D:43:F6:FC:EC:D1:53:5A:BA:FA:B6:2A:68 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.42.0/23 Signature Algorithm: sha256WithRSAEncryption a4:4e:60:18:12:a9:ee:a1:35:17:b1:b0:02:6e:ae:c0:de:df: 5f:f6:61:ec:7c:83:a3:e7:46:0c:60:37:fb:c8:93:97:b5:bf: f7:e2:de:8a:da:96:22:e2:74:1f:43:f0:00:96:4d:bd:cb:f6: 37:1e:24:b8:db:f7:63:f5:4a:51:cf:7f:3b:99:2a:8f:f2:7b: b9:1c:e9:d8:d4:ee:7f:4a:7e:4d:48:af:05:19:52:11:74:d3: 0c:12:5b:be:b8:a6:4b:80:d9:6f:a9:29:12:99:bd:fd:ac:aa: 20:b8:ec:bc:b2:5c:1c:ea:a6:d9:97:95:b4:80:e4:8f:ae:66: 1c:37:ad:6c:1f:37:ec:0a:d2:96:2d:22:90:0e:88:f9:e7:33: fd:7f:81:4b:11:04:8d:52:c6:ab:b0:f1:43:84:59:21:0b:7d: 11:03:9e:16:af:ce:1d:91:99:ba:2e:88:0f:12:29:b9:49:5b: 24:93:5d:f1:c1:e3:9c:71:05:f4:78:2f:97:46:c6:7a:2e:3e: 76:39:09:2d:3d:d7:7f:d3:7b:28:4f:09:b2:66:01:aa:40:71: 12:88:60:3a:8d:b0:2a:0d:c2:eb:2a:c4:68:76:51:dd:6a:ba: 8a:ab:f2:14:39:ed:5d:a9:1c:dc:c0:04:34:0c:d7:26:0b:b1: b7:ac:b8:9c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUbVbi5yrsmniM+GcDpz6KzvMLXCAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1NloX DTI3MDUwMTA5MTk1NlowMzExMC8GA1UEAxMoNDQxNzFFQTE3RkI0RDcwRDQzRjZG Q0VDRDE1MzVBQkFGQUI2MkE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTFgXUj/uCBLmR6gMveFA5fKof02DwUS+93cuaE+yluAYin2cViYyH5QksN zoG4CpWfc1/eckoR4BAvGYFDb+/XvzV7dPUkvX+x9iJ5I1p0GPHIn+vksVPeNPlZ BG+iq7w+ZuVIMet6MlMYDsFTU9pKF/WwY9i3o+wb/+0W2cBp7JgYBmYyT48c4QX9 Ca09cFQaSqxSJ/JBu8DjOVENHHrFemGD9dUHT0aakmKVcMtiYYvRnYKfUTw431Op Ado6dzMzDrWXLPEumaaQNFb2srCyOSZZWbMSSbdfHbsP4qnx+hljBLpzS9NQbrqR Rnv+biPHQEcD2nia/yZ1Av62h58CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBREFx6h f7TXDUP2/OzRU1q6+rYqaDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6AqMA0GCSqGSIb3DQEBCwUAA4IBAQCkTmAYEqnuoTUXsbACbq7A3t9f 9mHsfIOj50YMYDf7yJOXtb/34t6K2pYi4nQfQ/AAlk29y/Y3HiS42/dj9UpRz387 mSqP8nu5HOnY1O5/Sn5NSK8FGVIRdNMMElu+uKZLgNlvqSkSmb39rKoguOy8slwc 6qbZl5W0gOSPrmYcN61sHzfsCtKWLSKQDoj55zP9f4FLEQSNUsarsPFDhFkhC30R A54Wr84dkZm6LogPEim5SVskk13xweOccQX0eC+XRsZ6Lj52OQktPdd/03soTwmy ZgGqQHESiGA6jbAqDcLrKsRodlHdarqKq/IUOe1dqRzcwAQ0DNcmC7G3rLic -----END CERTIFICATE-----Generated at Sun May 3 00:42:36 2026 by rpki-client