$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa File: AS141674.roa (raw, json) Hash identifier: oSsQvcdKXE0WMgEhk3hCMHuYQKahbImHW6V0HDIVz6w= Subject key identifier: 25:49:24:E5:FA:24:F1:38:6A:E4:EB:CA:27:9B:F4:79:82:77:5A:96 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7C6BBB9FB4B6C9CA7AE59D054A0AD808B2828E6B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa Signing time: Sat 02 May 2026 21:26:37 +0000 ROA not before: Sat 02 May 2026 21:21:37 +0000 ROA not after: Sat 01 May 2027 21:26:37 +0000 asID: 141674 IP address blocks: 103.163.80.0/23 maxlen: 24 2001:df2:38c0::/48 maxlen: 48 2001:df2:78c0::/48 maxlen: 48 2001:df2:8440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6b:bb:9f:b4:b6:c9:ca:7a:e5:9d:05:4a:0a:d8:08:b2:82:8e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:37 2026 GMT Not After : May 1 21:26:37 2027 GMT Subject: CN=254924E5FA24F1386AE4EBCA279BF47982775A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:cf:22:a4:de:e0:94:4f:b3:83:9e:db:79: 20:5d:7b:90:b7:5f:84:60:bb:bc:18:a3:7c:f7:c9: 7f:0a:ba:ea:3e:10:59:ee:a6:4f:cc:30:78:05:07: 6b:d1:01:d6:4f:15:87:e2:62:3c:b8:6c:33:32:92: 68:cc:c9:98:23:02:ae:68:72:9c:1f:f3:a5:b0:32: 88:5c:b0:99:40:89:8a:87:bf:e8:91:a5:a5:60:fa: 61:c4:bc:31:9e:55:45:b4:bb:84:23:78:d3:1b:46: e7:de:cf:a7:d9:0f:9e:b5:7a:36:d6:ab:87:01:ce: 5a:c2:d5:97:18:87:f9:82:51:60:a3:e4:99:7a:1a: 53:4e:1c:ee:9d:0c:11:22:61:3f:bc:2a:e6:57:70: a0:55:36:c3:5c:f2:f8:ad:7d:6d:4f:44:6d:05:4e: b9:1b:f6:78:35:d2:cb:91:a5:0b:38:c3:f6:cd:a6: e9:9c:cc:27:89:70:af:5f:3c:ad:d3:e5:6a:d9:a7: a5:d4:a1:69:40:c4:6f:94:14:d3:c5:fe:13:d1:dc: 46:b0:fd:6e:f5:9d:6d:fa:38:97:65:2e:45:86:23: a2:61:9b:fb:87:57:4a:73:92:d2:42:3b:85:a3:0e: 37:cf:d9:9c:98:3f:98:4b:17:93:3f:25:2b:e3:ae: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:49:24:E5:FA:24:F1:38:6A:E4:EB:CA:27:9B:F4:79:82:77:5A:96 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.80.0/23 IPv6: 2001:df2:38c0::/48 2001:df2:78c0::/48 2001:df2:8440::/48 Signature Algorithm: sha256WithRSAEncryption 82:a6:f0:a2:3a:39:eb:dc:66:95:68:9b:12:e6:d3:b3:b4:fb: 30:80:21:51:a6:d8:64:1a:59:6d:d4:80:55:d0:29:89:a8:0c: 02:cb:e2:06:30:2d:93:c7:4a:b3:ac:97:1f:f3:fe:5f:87:34: d8:cd:45:93:1c:75:9a:13:46:63:86:e6:f6:7a:ff:19:4f:4c: 37:1a:15:15:ff:92:25:8c:f5:06:96:8e:77:41:5c:e8:f1:33: 64:cf:40:65:32:f9:29:63:b1:55:f0:bf:c5:ca:95:4a:62:ef: 3e:49:74:0e:7d:d8:f5:d3:de:40:6b:b0:1a:44:c2:32:52:3a: 3e:c0:45:21:98:6a:ac:53:55:24:9a:75:36:eb:dd:af:09:fc: a8:57:03:fc:09:35:65:97:6e:f2:5d:bc:77:13:e5:2e:4b:42: d7:00:ff:0c:1d:3e:72:b8:d6:e1:c5:65:69:e6:f0:35:98:46: a1:a7:c3:2c:f9:3c:45:88:58:01:c7:2e:f5:42:d8:2b:de:cc: 89:b1:9f:fb:fb:9e:79:47:c6:18:f6:2f:1f:0a:ac:9e:bf:06: d8:6c:5d:da:f4:24:53:d6:07:75:8c:cb:a8:d7:f0:8e:0f:e9: e2:a3:84:b3:9f:d9:c8:e9:07:cd:48:75:0d:50:57:f4:18:c8: d2:93:72:a7 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUfGu7n7S2ycp65Z0FSgrYCLKCjmswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjEzN1oX DTI3MDUwMTIxMjYzN1owMzExMC8GA1UEAxMoMjU0OTI0RTVGQTI0RjEzODZBRTRF QkNBMjc5QkY0Nzk4Mjc3NUE5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3MzyKk3uCUT7ODntt5IF17kLdfhGC7vBijfPfJfwq66j4QWe6mT8wweAUH a9EB1k8Vh+JiPLhsMzKSaMzJmCMCrmhynB/zpbAyiFywmUCJioe/6JGlpWD6YcS8 MZ5VRbS7hCN40xtG597Pp9kPnrV6NtarhwHOWsLVlxiH+YJRYKPkmXoaU04c7p0M ESJhP7wq5ldwoFU2w1zy+K19bU9EbQVOuRv2eDXSy5GlCzjD9s2m6ZzMJ4lwr188 rdPlatmnpdShaUDEb5QU08X+E9HcRrD9bvWdbfo4l2UuRYYjomGb+4dXSnOS0kI7 haMON8/ZnJg/mEsXkz8lK+Ou4uUCAwEAAaOCAe8wggHrMB0GA1UdDgQWBBQlSSTl +iTxOGrk68onm/R5gndaljAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxNjc0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIA ATAGAwQBZ6NQMCEEAgACMBsDBwAgAQ3yOMADBwAgAQ3yeMADBwAgAQ3yhEAwDQYJ KoZIhvcNAQELBQADggEBAIKm8KI6OevcZpVomxLm07O0+zCAIVGm2GQaWW3UgFXQ KYmoDALL4gYwLZPHSrOslx/z/l+HNNjNRZMcdZoTRmOG5vZ6/xlPTDcaFRX/kiWM 9QaWjndBXOjxM2TPQGUy+SljsVXwv8XKlUpi7z5JdA592PXT3kBrsBpEwjJSOj7A RSGYaqxTVSSadTbr3a8J/KhXA/wJNWWXbvJdvHcT5S5LQtcA/wwdPnK41uHFZWnm 8DWYRqGnwyz5PEWIWAHHLvVC2CvezImxn/v7nnlHxhj2Lx8KrJ6/BthsXdr0JFPW B3WMy6jX8I4P6eKjhLOf2cjpB81IdQ1QV/QYyNKTcqc= -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client