$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141890.roa File: AS141890.roa (raw, json) Hash identifier: 9DKmeORBRn5C//Cp+c1Bu00C9ePN3XAnBgLDGBtO2dg= Subject key identifier: 4F:7F:8F:8F:C7:6C:9F:0F:B7:3D:17:F2:5C:67:E6:28:E7:D1:8C:D3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 62DE1B43D022BE4874D7D9967543A8D59FB6CF06 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141890.roa Signing time: Sat 02 May 2026 09:21:08 +0000 ROA not before: Sat 02 May 2026 09:16:08 +0000 ROA not after: Sat 01 May 2027 09:21:08 +0000 asID: 141890 IP address blocks: 103.76.178.0/24 maxlen: 24 103.163.39.0/24 maxlen: 24 103.200.116.0/23 maxlen: 24 103.200.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:de:1b:43:d0:22:be:48:74:d7:d9:96:75:43:a8:d5:9f:b6:cf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:08 2026 GMT Not After : May 1 09:21:08 2027 GMT Subject: CN=4F7F8F8FC76C9F0FB73D17F25C67E628E7D18CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:02:0f:c3:70:c9:a5:62:6f:25:5a:31:1e: 74:9d:7b:0f:a7:f8:97:54:d0:f2:9a:f0:1c:00:33: 27:47:a8:aa:df:62:2e:96:46:2e:94:ac:8e:c5:a0: a0:e6:1d:ab:1d:e2:09:f6:14:3f:41:2a:4a:d7:05: 9f:2c:79:be:14:cb:b4:79:24:ef:92:03:89:d7:d2: 76:4d:45:3c:1a:74:18:9d:b4:26:25:b4:ed:1b:08: 32:19:eb:b0:b5:bd:83:64:48:48:5e:e4:a7:83:d7: 77:d3:2e:24:d9:80:34:95:50:4b:a1:2c:f1:5a:5b: ee:0f:52:24:40:55:92:fe:16:61:68:de:44:fa:67: 0f:69:1f:07:46:20:53:42:db:22:20:c2:0d:f6:7f: fc:58:60:ab:cc:b6:20:6f:86:f2:55:4b:b0:3a:9f: ad:42:c7:df:37:a0:f3:78:ab:54:a3:54:f1:f1:2d: 7f:68:cd:21:a6:f3:66:ad:73:25:34:4c:90:3b:5f: dc:85:53:43:6d:9c:97:68:7c:3f:f3:27:11:54:8c: 12:6a:48:d7:e9:2c:2a:a5:76:e5:e3:d8:31:b4:ec: 16:af:08:db:2b:f1:68:3f:be:1f:58:3e:a7:38:44: 7e:b6:15:d9:5d:8b:0b:3d:75:9f:27:e5:07:1b:24: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7F:8F:8F:C7:6C:9F:0F:B7:3D:17:F2:5C:67:E6:28:E7:D1:8C:D3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.178.0/24 103.163.39.0/24 103.200.116.0/22 Signature Algorithm: sha256WithRSAEncryption 22:66:13:1e:b6:86:7e:41:8f:b6:c7:ae:3f:52:03:93:6c:2b: 72:ff:9f:35:5d:cd:41:62:0e:1b:18:30:e0:6e:c0:3a:fe:0f: 24:bf:fd:bc:d0:ee:98:72:e0:0c:ba:93:e9:09:c8:0d:17:5f: 82:90:4e:ce:42:49:cb:69:94:77:02:b9:05:2c:75:c7:bc:d5: 15:75:1c:67:0d:43:ec:6e:81:91:69:89:59:7b:4b:32:1b:9b: 0d:e5:98:5e:a4:84:14:90:4f:97:7d:b9:f0:09:e7:ae:1f:11: bb:26:48:25:27:3f:e0:f3:b5:51:bf:d7:bf:be:70:e0:49:c8: ae:85:da:1a:28:ea:1f:e6:a6:45:4b:dc:56:00:ce:70:2b:71: 8b:19:6b:e0:ae:a8:ae:68:ad:a6:bf:cd:6b:7d:f6:52:5c:93: e7:a6:b1:cf:f1:99:00:f7:d2:82:85:7b:68:f0:d7:5b:35:5f: c5:aa:62:56:2c:71:fe:a3:91:c4:af:76:04:45:04:86:97:47: 85:70:d7:57:6e:d4:3f:08:89:62:b0:16:5c:a5:79:4b:2a:60: 48:fa:ba:1e:e4:28:0c:37:aa:0c:2e:0d:ab:e1:2e:73:34:ac: 36:37:11:24:2b:66:59:f5:57:e8:8b:15:88:ad:92:e2:70:6a: f5:45:fd:3a -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUYt4bQ9Aivkh019mWdUOo1Z+2zwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYwOFoX DTI3MDUwMTA5MjEwOFowMzExMC8GA1UEAxMoNEY3RjhGOEZDNzZDOUYwRkI3M0Qx N0YyNUM2N0U2MjhFN0QxOENEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+WAg/DcMmlYm8lWjEedJ17D6f4l1TQ8prwHAAzJ0eoqt9iLpZGLpSsjsWg oOYdqx3iCfYUP0EqStcFnyx5vhTLtHkk75IDidfSdk1FPBp0GJ20JiW07RsIMhnr sLW9g2RISF7kp4PXd9MuJNmANJVQS6Es8Vpb7g9SJEBVkv4WYWjeRPpnD2kfB0Yg U0LbIiDCDfZ//Fhgq8y2IG+G8lVLsDqfrULH3zeg83irVKNU8fEtf2jNIabzZq1z JTRMkDtf3IVTQ22cl2h8P/MnEVSMEmpI1+ksKqV25ePYMbTsFq8I2yvxaD++H1g+ pzhEfrYV2V2LCz11nyflBxskQPMCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBRPf4+P x2yfD7c9F/JcZ+Yo59GM0zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxODkwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQAZ0yyAwQAZ6MnAwQCZ8h0MA0GCSqGSIb3DQEBCwUAA4IBAQAiZhMetoZ+ QY+2x64/UgOTbCty/581Xc1BYg4bGDDgbsA6/g8kv/280O6YcuAMupPpCcgNF1+C kE7OQknLaZR3ArkFLHXHvNUVdRxnDUPsboGRaYlZe0syG5sN5ZhepIQUkE+Xfbnw CeeuHxG7JkglJz/g87VRv9e/vnDgSciuhdoaKOof5qZFS9xWAM5wK3GLGWvgrqiu aK2mv81rffZSXJPnprHP8ZkA99KChXto8NdbNV/FqmJWLHH+o5HEr3YERQSGl0eF cNdXbtQ/CIlisBZcpXlLKmBI+roe5CgMN6oMLg2r4S5zNKw2NxEkK2ZZ9VfoixWI rZLicGr1Rf06 -----END CERTIFICATE-----Generated at Sun May 3 01:44:40 2026 by rpki-client