$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141663.roa File: AS141663.roa (raw, json) Hash identifier: Ys2iqShdlB9pf8rNIRsSRMutsB+LGiUsb7WnboK8XJc= Subject key identifier: B2:8D:CA:3F:16:32:82:1C:D5:B6:C8:91:73:C1:9C:E3:C7:17:A0:2E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0BC6B8C07172B1AED1767A6F538A024D53357AFB Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141663.roa Signing time: Sat 02 May 2026 21:15:06 +0000 ROA not before: Sat 02 May 2026 21:10:06 +0000 ROA not after: Sat 01 May 2027 21:15:06 +0000 asID: 141663 IP address blocks: 103.158.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c6:b8:c0:71:72:b1:ae:d1:76:7a:6f:53:8a:02:4d:53:35:7a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:10:06 2026 GMT Not After : May 1 21:15:06 2027 GMT Subject: CN=B28DCA3F1632821CD5B6C89173C19CE3C717A02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:95:ab:fa:71:b3:1b:de:c7:8e:7f:ec:9e: 1c:5b:a6:01:a4:95:18:3a:d0:18:09:02:47:81:fc: 63:d7:10:52:50:77:de:b1:10:15:d6:65:e7:37:01: 39:0b:db:93:6e:d9:02:7b:3c:0b:d0:77:17:bd:01: 70:86:3e:cc:9b:2d:70:0e:92:b7:6f:93:5e:82:81: 92:cd:fb:c2:0b:34:bf:e0:df:81:00:13:7d:93:57: 3b:f6:75:39:89:ff:1e:96:83:1e:1a:56:09:21:03: 44:47:ea:a5:8a:b4:32:17:a6:3c:b3:b9:2a:4d:9f: 7c:8a:6e:13:f2:41:68:ad:6a:51:0c:b9:36:6a:55: 22:ec:cc:bc:f2:4b:30:3a:ce:28:06:c2:bf:b7:e1: 56:89:21:48:80:61:d1:7d:a4:36:03:a9:09:0d:65: 23:08:0a:bb:42:a9:ea:45:c4:d1:29:94:65:78:19: af:4f:78:39:e9:a7:4d:fd:a9:21:d7:6f:27:60:4b: 4b:a6:e0:40:71:9c:06:45:ae:0c:6e:e4:03:a0:39: 74:6e:d2:54:18:16:74:73:d0:a7:44:90:07:84:8d: 08:2d:48:5a:56:bc:09:d1:94:17:70:2e:22:fd:18: c0:7d:70:40:22:af:5d:26:6a:2b:fb:7b:2c:8f:22: ba:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:CA:3F:16:32:82:1C:D5:B6:C8:91:73:C1:9C:E3:C7:17:A0:2E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.188.0/23 Signature Algorithm: sha256WithRSAEncryption 93:a0:31:4a:d2:53:cf:f1:b5:06:95:cb:83:66:9e:3e:93:ec: 96:5c:32:08:1a:00:88:09:8f:40:1d:27:e7:88:9b:07:2e:8f: f5:85:35:55:af:ff:ca:93:14:20:e4:37:13:64:38:30:3f:e0: 25:fd:11:f5:84:14:26:57:5e:b5:86:f2:4d:80:d9:7f:a9:0c: 58:0f:8e:54:e3:83:79:7b:be:a1:b1:12:20:1e:68:95:22:61: 9d:39:8a:f6:30:65:06:4c:ec:92:26:32:79:8f:74:a6:73:6a: f0:90:2a:b8:e5:5b:1d:2e:1b:e5:d0:47:39:0d:63:c1:ca:67: 49:55:45:14:84:47:9a:3c:41:47:08:4f:2a:18:81:a0:02:39: 68:88:d2:2d:22:b4:d2:ce:b7:6e:7b:a7:61:07:3c:89:5a:5d: b9:69:fd:29:a2:8e:6b:c1:b3:5a:eb:90:6f:a0:fb:25:0e:f4: 04:82:b5:7c:f5:a9:d7:81:57:3a:8b:6c:d7:bd:7b:6b:67:47: 99:7b:bd:b0:ea:7f:81:11:18:33:b8:9b:f1:06:16:bc:59:d9: 65:61:e7:ce:e6:31:27:ad:3c:90:56:11:b7:cd:3c:21:0d:fe: 6a:ec:0a:d6:42:ed:6a:a7:ea:ed:78:ce:5c:c2:51:3d:c8:d2: bb:53:cb:f2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUC8a4wHFysa7RdnpvU4oCTVM1evswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTAwNloX DTI3MDUwMTIxMTUwNlowMzExMC8GA1UEAxMoQjI4RENBM0YxNjMyODIxQ0Q1QjZD ODkxNzNDMTlDRTNDNzE3QTAyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF8lav6cbMb3seOf+yeHFumAaSVGDrQGAkCR4H8Y9cQUlB33rEQFdZl5zcB OQvbk27ZAns8C9B3F70BcIY+zJstcA6St2+TXoKBks37wgs0v+DfgQATfZNXO/Z1 OYn/HpaDHhpWCSEDREfqpYq0MhemPLO5Kk2ffIpuE/JBaK1qUQy5NmpVIuzMvPJL MDrOKAbCv7fhVokhSIBh0X2kNgOpCQ1lIwgKu0Kp6kXE0SmUZXgZr094OemnTf2p IddvJ2BLS6bgQHGcBkWuDG7kA6A5dG7SVBgWdHPQp0SQB4SNCC1IWla8CdGUF3Au Iv0YwH1wQCKvXSZqK/t7LI8iulkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSyjco/ FjKCHNW2yJFzwZzjxxegLjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ568MA0GCSqGSIb3DQEBCwUAA4IBAQCToDFK0lPP8bUGlcuDZp4+k+yW XDIIGgCICY9AHSfniJsHLo/1hTVVr//KkxQg5DcTZDgwP+Al/RH1hBQmV161hvJN gNl/qQxYD45U44N5e76hsRIgHmiVImGdOYr2MGUGTOySJjJ5j3Smc2rwkCq45Vsd Lhvl0Ec5DWPBymdJVUUUhEeaPEFHCE8qGIGgAjloiNItIrTSzrdue6dhBzyJWl25 af0poo5rwbNa65BvoPslDvQEgrV89anXgVc6i2zXvXtrZ0eZe72w6n+BERgzuJvx Bha8WdllYefO5jEnrTyQVhG3zTwhDf5q7ArWQu1qp+rteM5cwlE9yNK7U8vy -----END CERTIFICATE-----Generated at Sun May 3 00:39:46 2026 by rpki-client