$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141899.roa File: AS141899.roa (raw, json) Hash identifier: TjpAUMtRxdniUDSbFGO5/Y92QfW0+3V8L+dJy1H6A0w= Subject key identifier: F0:32:65:99:38:7D:B2:75:06:34:18:BF:C8:08:47:23:10:22:69:78 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7CD77DC3071C1D6BCD1147A46253E9AAF0EEBB49 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141899.roa Signing time: Sat 02 May 2026 09:19:44 +0000 ROA not before: Sat 02 May 2026 09:14:44 +0000 ROA not after: Sat 01 May 2027 09:19:44 +0000 asID: 141899 IP address blocks: 103.164.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:7d:c3:07:1c:1d:6b:cd:11:47:a4:62:53:e9:aa:f0:ee:bb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:44 2026 GMT Not After : May 1 09:19:44 2027 GMT Subject: CN=F0326599387DB275063418BFC808472310226978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:90:fe:79:0e:25:71:78:14:7e:ae:18:30: 3e:fb:aa:d2:cc:62:be:36:0d:e1:36:58:44:65:90: 66:ce:65:88:c6:0c:72:3b:51:53:47:0a:0c:5f:96: 97:f2:35:ff:fe:52:5d:ac:b8:32:b3:26:31:70:15: 13:c4:93:d8:76:b0:55:39:bc:40:9b:45:36:51:07: 5a:96:54:f1:66:fc:8a:6d:5a:6c:ce:9f:6f:4d:6a: 74:84:5f:3a:d1:58:6b:8a:5d:4d:f9:26:9d:59:9e: b9:68:be:30:a6:d8:3d:b6:cf:5a:63:1e:53:bf:ee: ac:d1:fc:b8:1d:46:a4:b8:c2:aa:38:6c:4b:2d:3f: 1e:e3:e9:ca:bc:2e:77:0e:19:dd:8f:3d:b4:76:fd: ff:72:f3:40:32:58:28:79:13:19:d7:9e:01:17:f1: d1:56:a3:81:57:52:ad:55:de:9e:c6:18:20:31:ad: cb:96:22:94:93:a0:bf:38:14:f0:4a:c1:65:cf:be: 77:c5:90:de:56:77:56:0f:85:41:0f:65:cf:8f:6e: 76:ab:4a:9c:34:a3:ba:68:33:cb:b9:b9:a0:4a:48: f3:76:6e:64:f1:04:ee:4c:27:de:45:73:72:c2:c9: 99:41:6c:17:79:1d:01:d0:ac:8c:16:57:a8:e2:6f: 35:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:32:65:99:38:7D:B2:75:06:34:18:BF:C8:08:47:23:10:22:69:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141899.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.20.0/23 Signature Algorithm: sha256WithRSAEncryption 50:f4:90:53:e6:55:ef:0f:c5:51:a6:11:f4:5b:7f:fb:f5:64: 13:4e:c2:c0:cb:df:da:68:0d:56:c3:6b:2b:98:00:cf:b0:f1: c3:3f:80:d0:08:b5:ae:98:fc:6c:d2:c9:a2:5d:25:b3:54:dc: 85:b3:6b:10:33:7b:83:22:77:4f:dc:5d:ce:1d:e0:34:d1:fb: e7:7f:14:83:92:e7:74:6f:bc:3c:0a:2e:d7:3a:68:19:4e:0b: d9:88:02:33:30:9c:db:af:6c:c3:13:d2:77:ed:22:22:72:e7: 0d:e4:f1:8b:ae:0b:1d:9d:dd:96:1d:80:e1:5b:c4:4b:d1:8b: f7:4f:45:9a:a7:24:fd:b4:27:43:bb:22:c2:f9:bf:70:3b:18: 8e:70:9a:54:20:6b:d0:b2:f1:8e:18:72:c5:bf:46:67:79:c8: 7e:eb:0b:a4:33:3b:25:e8:22:af:30:7a:9f:72:5f:20:08:8b: 9a:45:16:b6:fb:33:2e:b3:08:ba:0d:b7:0e:ae:f7:ba:00:77: ad:9a:b8:cc:b1:21:e6:58:93:62:1d:9c:75:8d:33:0c:ea:d6: 86:7c:f7:eb:f1:87:66:47:32:22:49:3b:06:8b:f2:be:a7:58: 77:0b:7a:9d:4c:33:88:98:e2:3d:c6:22:cd:ac:08:50:54:03: 5c:f0:3a:7e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfNd9wwccHWvNEUekYlPpqvDuu0kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0NFoX DTI3MDUwMTA5MTk0NFowMzExMC8GA1UEAxMoRjAzMjY1OTkzODdEQjI3NTA2MzQx OEJGQzgwODQ3MjMxMDIyNjk3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbPkP55DiVxeBR+rhgwPvuq0sxivjYN4TZYRGWQZs5liMYMcjtRU0cKDF+W l/I1//5SXay4MrMmMXAVE8ST2HawVTm8QJtFNlEHWpZU8Wb8im1abM6fb01qdIRf OtFYa4pdTfkmnVmeuWi+MKbYPbbPWmMeU7/urNH8uB1GpLjCqjhsSy0/HuPpyrwu dw4Z3Y89tHb9/3LzQDJYKHkTGdeeARfx0VajgVdSrVXensYYIDGty5YilJOgvzgU 8ErBZc++d8WQ3lZ3Vg+FQQ9lz49udqtKnDSjumgzy7m5oEpI83ZuZPEE7kwn3kVz csLJmUFsF3kdAdCsjBZXqOJvNXMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTwMmWZ OH2ydQY0GL/ICEcjECJpeDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxODk5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6QUMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9JBT5lXvD8VRphH0W3/79WQT TsLAy9/aaA1Ww2srmADPsPHDP4DQCLWumPxs0smiXSWzVNyFs2sQM3uDIndP3F3O HeA00fvnfxSDkud0b7w8Ci7XOmgZTgvZiAIzMJzbr2zDE9J37SIicucN5PGLrgsd nd2WHYDhW8RL0Yv3T0WapyT9tCdDuyLC+b9wOxiOcJpUIGvQsvGOGHLFv0Znech+ 6wukMzsl6CKvMHqfcl8gCIuaRRa2+zMuswi6DbcOrve6AHetmrjMsSHmWJNiHZx1 jTMM6taGfPfr8YdmRzIiSTsGi/K+p1h3C3qdTDOImOI9xiLNrAhQVANc8Dp+ -----END CERTIFICATE-----Generated at Sun May 3 00:41:42 2026 by rpki-client