$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141892.roa File: AS141892.roa (raw, json) Hash identifier: 8sIlI8HMm/ynBUBLqUpWF2fZtx4mQ3V6gQLlXBJPHf4= Subject key identifier: BE:20:63:02:D9:33:34:D2:46:34:E9:96:8D:76:E5:5F:90:D9:7B:A5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 779AF0AC68A27F33771A2EA9001FE68034E47DF0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141892.roa Signing time: Sat 02 May 2026 09:19:51 +0000 ROA not before: Sat 02 May 2026 09:14:51 +0000 ROA not after: Sat 01 May 2027 09:19:51 +0000 asID: 141892 IP address blocks: 103.163.161.0/24 maxlen: 24 103.186.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9a:f0:ac:68:a2:7f:33:77:1a:2e:a9:00:1f:e6:80:34:e4:7d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:51 2026 GMT Not After : May 1 09:19:51 2027 GMT Subject: CN=BE206302D93334D24634E9968D76E55F90D97BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e1:74:4e:eb:60:e0:f0:d0:30:87:f4:b8:11: c5:74:06:d8:f0:5a:81:cc:ff:7c:3f:44:8a:a9:ad: e6:5a:eb:10:95:4a:40:13:2f:4a:db:c5:17:d6:90: 7f:0b:a1:9c:fa:b1:63:59:fe:53:45:11:76:3e:6d: 6b:62:32:67:97:cd:54:7f:4c:79:0e:0d:36:94:46: 5a:4c:45:88:75:e2:d4:52:86:53:5a:b1:b3:14:aa: 71:2d:f5:f2:8b:85:05:b6:9e:9c:33:4c:8c:6d:8d: 5d:c6:da:8f:fe:45:96:75:98:e2:cf:3b:26:c6:2c: 87:c1:82:c2:da:cd:38:04:a1:10:da:68:5c:49:02: c8:ae:23:5f:a0:14:26:20:82:0c:18:41:9a:39:77: eb:ed:a2:cb:aa:f2:95:66:aa:61:fe:49:cb:47:45: 82:1b:08:b0:51:ef:d8:c8:21:b2:3d:ee:10:ae:18: 53:0c:a0:c9:4a:31:c7:20:ae:49:cb:a8:47:fd:36: 70:04:47:69:61:ac:c8:5d:0e:75:83:2f:15:ca:37: cb:10:85:c4:68:33:a2:c6:ff:7d:82:4c:12:78:d1: 7c:fd:c7:1c:07:95:53:a3:13:e2:60:2a:c7:0e:f0: a9:74:42:97:f5:73:1c:37:79:b7:de:e1:f7:e4:26: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:63:02:D9:33:34:D2:46:34:E9:96:8D:76:E5:5F:90:D9:7B:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141892.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.161.0/24 103.186.30.0/23 Signature Algorithm: sha256WithRSAEncryption 93:b8:16:75:95:23:2e:e3:bf:88:9f:fd:36:00:fb:67:40:47: 3a:22:10:94:36:70:16:18:a3:bf:1b:7f:61:80:af:89:02:50: 4b:76:88:7a:6d:21:b9:83:94:71:fb:8b:f3:94:39:d2:6c:97: f0:49:e7:6e:1e:a5:0d:fe:9b:2a:53:24:5b:7f:6f:0a:ef:1b: f3:8e:32:e7:2f:6c:33:3b:aa:7d:5b:55:18:d2:58:5b:bf:9e: 9e:2a:d5:fe:9e:57:e9:14:87:8e:4e:b6:e6:24:5b:6e:11:ba: 5a:cd:81:19:42:7e:25:4a:90:95:30:53:c1:99:10:af:84:ae: 50:a5:c5:7e:98:11:af:25:fd:44:62:a8:29:7a:8b:15:47:3f: 8e:c3:f0:55:a1:58:27:ed:48:9d:54:c9:71:88:36:2b:ea:f6: 4b:3c:c4:dd:dc:9e:05:47:4f:e6:97:81:fe:bd:d7:5a:ba:3e: 0f:a2:2c:a4:87:24:01:da:c4:63:a7:26:fe:08:48:01:f9:27: 4d:fa:81:e4:b8:c8:8d:6d:46:d5:85:75:0e:75:6b:27:97:61: 0a:77:c1:c3:cd:7b:8e:9f:a5:41:42:74:3a:ba:b2:9a:0a:98: d5:df:ec:98:d6:1f:b1:af:8f:e9:48:9a:87:75:90:8b:71:3e: ab:e5:b5:7c -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUd5rwrGiifzN3Gi6pAB/mgDTkffAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1MVoX DTI3MDUwMTA5MTk1MVowMzExMC8GA1UEAxMoQkUyMDYzMDJEOTMzMzREMjQ2MzRF OTk2OEQ3NkU1NUY5MEQ5N0JBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7hdE7rYODw0DCH9LgRxXQG2PBagcz/fD9Eiqmt5lrrEJVKQBMvStvFF9aQ fwuhnPqxY1n+U0URdj5ta2IyZ5fNVH9MeQ4NNpRGWkxFiHXi1FKGU1qxsxSqcS31 8ouFBbaenDNMjG2NXcbaj/5FlnWY4s87JsYsh8GCwtrNOAShENpoXEkCyK4jX6AU JiCCDBhBmjl36+2iy6rylWaqYf5Jy0dFghsIsFHv2Mghsj3uEK4YUwygyUoxxyCu ScuoR/02cARHaWGsyF0OdYMvFco3yxCFxGgzosb/fYJMEnjRfP3HHAeVU6MT4mAq xw7wqXRCl/VzHDd5t97h9+QmbIECAwEAAaOCAdIwggHOMB0GA1UdDgQWBBS+IGMC 2TM00kY06ZaNduVfkNl7pTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxODkyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ6OhAwQBZ7oeMA0GCSqGSIb3DQEBCwUAA4IBAQCTuBZ1lSMu47+In/02 APtnQEc6IhCUNnAWGKO/G39hgK+JAlBLdoh6bSG5g5Rx+4vzlDnSbJfwSeduHqUN /psqUyRbf28K7xvzjjLnL2wzO6p9W1UY0lhbv56eKtX+nlfpFIeOTrbmJFtuEbpa zYEZQn4lSpCVMFPBmRCvhK5QpcV+mBGvJf1EYqgpeosVRz+Ow/BVoVgn7UidVMlx iDYr6vZLPMTd3J4FR0/ml4H+vddauj4PoiykhyQB2sRjpyb+CEgB+SdN+oHkuMiN bUbVhXUOdWsnl2EKd8HDzXuOn6VBQnQ6urKaCpjV3+yY1h+xr4/pSJqHdZCLcT6r 5bV8 -----END CERTIFICATE-----Generated at Sun May 3 01:44:55 2026 by rpki-client