
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa
File: AS141893.roa (raw, json)
Hash identifier: +u2DHFDW+WWxSrAk+VS3+ixLlGJmkvcB9XjWYfBUjR4=
Subject key identifier: 54:79:EB:FC:65:C2:F6:65:7B:F6:28:B4:70:21:94:57:07:A4:CD:3C
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 3728FE0E30A6580AAE8B5111D75C1B981FB97F8E
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa
Signing time: Sat 02 May 2026 08:37:12 +0000
ROA not before: Sat 02 May 2026 08:32:12 +0000
ROA not after: Sat 01 May 2027 08:37:12 +0000
asID: 141893
IP address blocks: 103.162.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:28:fe:0e:30:a6:58:0a:ae:8b:51:11:d7:5c:1b:98:1f:b9:7f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 08:32:12 2026 GMT
Not After : May 1 08:37:12 2027 GMT
Subject: CN=5479EBFC65C2F6657BF628B47021945707A4CD3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:14:33:12:32:32:32:f2:a7:f2:87:64:03:
be:fb:b4:05:7d:d9:d5:57:a8:0d:a3:49:51:f1:a9:
2c:5e:fd:7e:c5:45:2b:e9:04:5b:76:33:3e:17:0f:
31:ba:65:8d:75:fe:ed:7f:18:ea:65:3e:95:e9:04:
5c:a6:64:3d:91:06:91:fd:4b:a4:ab:a9:4d:0d:fe:
d3:6f:3d:41:b3:45:fc:8c:c5:ff:d5:d8:7e:db:0b:
18:8b:73:61:57:85:e8:11:b6:a6:72:75:57:5b:de:
06:f0:ea:83:7a:68:10:80:5c:c7:fe:1e:73:a9:a4:
4c:a8:48:c6:5d:f4:94:38:a1:8d:53:39:a9:54:b4:
f8:c6:f9:3d:45:4f:f4:14:96:e5:26:4a:4e:56:7f:
43:49:96:06:f3:2f:4d:66:07:ce:08:1c:c3:ea:68:
66:f4:2a:6d:66:7d:bc:77:23:72:44:a3:c7:54:36:
0b:e9:b8:68:97:43:20:e8:4f:a3:39:39:d7:a3:f0:
d2:cc:26:81:d5:1f:82:16:7a:0f:ad:17:91:5f:8f:
b7:2f:a2:2c:0e:83:dd:96:07:eb:d2:03:a8:ae:2b:
50:9f:83:91:a3:33:13:1d:ce:cf:cc:33:c2:35:35:
27:7a:23:20:5a:a4:53:35:43:10:87:19:3e:27:0a:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:EB:FC:65:C2:F6:65:7B:F6:28:B4:70:21:94:57:07:A4:CD:3C
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.114.0/23
Signature Algorithm: sha256WithRSAEncryption
24:59:01:90:11:6d:3d:97:13:4a:e5:69:87:70:d2:ff:94:59:
14:2b:c6:ea:81:de:d9:80:a0:4b:7a:c1:69:a8:a3:8d:bd:74:
e2:7d:b1:72:7d:f6:69:a6:95:73:23:78:13:86:cc:2f:09:d4:
3d:96:87:2c:9f:f1:5a:2a:f8:e6:38:f4:bc:ff:d5:bb:4a:20:
99:bf:91:53:cb:27:1c:43:a3:f7:21:6c:ac:1c:14:8e:9d:de:
e1:96:35:44:f4:fe:8b:65:b7:ac:b5:52:b9:41:5f:41:0c:57:
df:af:3e:e1:c8:f7:28:3a:e1:ac:30:21:d5:2f:5b:82:bd:ad:
7c:0f:59:ab:de:dc:3b:56:bd:79:76:ac:2d:7d:38:a5:a8:71:
ac:23:28:e5:b0:23:0a:c9:8d:10:14:3b:62:36:bb:d1:31:4a:
05:29:eb:ee:4c:95:a0:be:73:41:a3:b4:58:c8:c7:1b:83:79:
4b:41:bc:d8:ed:50:04:22:73:6a:a4:0c:df:8b:b5:18:de:a2:
62:bb:d4:43:4c:61:ca:ab:57:2f:de:2a:0b:ed:19:de:4f:79:
c7:4d:f0:1a:3e:b5:6b:d6:6c:a0:b3:64:1c:6a:b3:0f:fe:90:
24:18:84:9e:61:98:e8:c5:bc:f9:e0:1b:8c:88:a6:ae:37:93:
b3:27:f1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:05 2026 by rpki-client