$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa File: AS141902.roa (raw, json) Hash identifier: h0cpaCgIdJlKhJpjL8BfDDWfAIHZzTsTmrxvgxmeMj8= Subject key identifier: 1B:72:87:4A:60:09:C4:2D:8E:EC:06:6D:9C:C2:09:2D:7A:5B:85:1D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 749266CBE2823F36F9CEA567E91811605E122522 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa Signing time: Sat 02 May 2026 08:35:56 +0000 ROA not before: Sat 02 May 2026 08:30:56 +0000 ROA not after: Sat 01 May 2027 08:35:56 +0000 asID: 141902 IP address blocks: 103.163.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:92:66:cb:e2:82:3f:36:f9:ce:a5:67:e9:18:11:60:5e:12:25:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:56 2026 GMT Not After : May 1 08:35:56 2027 GMT Subject: CN=1B72874A6009C42D8EEC066D9CC2092D7A5B851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:e1:b0:76:5a:e9:8f:4c:6f:12:c8:41:92: ff:9b:9f:a2:a3:bd:05:b0:86:81:a2:df:c1:de:1e: c5:ee:b1:d4:0b:d7:15:0b:01:66:32:31:35:04:2c: a9:47:51:02:42:ce:2c:72:66:04:15:32:43:72:db: 68:26:08:e1:a0:89:7a:88:9a:13:e8:f0:7c:81:6c: 38:c4:59:46:22:19:9b:64:9d:ac:da:fe:cb:78:66: c6:83:9a:18:a4:ec:24:5b:09:c4:55:e7:33:6a:ed: 7b:72:60:a0:6f:3b:0b:6f:ca:89:5e:6c:36:f6:59: d6:af:c4:69:46:28:9d:ef:fc:e9:34:50:78:6b:b3: 3e:f4:23:d0:08:31:fe:5c:ff:35:64:63:85:dc:f4: 55:9c:c9:85:03:dd:a5:99:04:38:db:e1:3b:76:7e: f5:a9:53:33:29:3e:08:2c:c1:01:cc:27:78:9a:9a: 2e:32:b4:93:c2:2a:9f:82:4a:65:7e:77:bb:27:9f: 2e:b7:91:2b:d5:fa:37:80:72:c0:8b:fd:d1:47:1d: 08:61:ce:d7:82:5d:d1:22:02:ed:4c:06:35:87:01: f4:95:cb:76:2d:73:3a:88:da:3c:a7:8c:38:4b:3e: 54:a1:80:6b:78:b3:e2:10:04:f1:b7:3a:95:e2:eb: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:87:4A:60:09:C4:2D:8E:EC:06:6D:9C:C2:09:2D:7A:5B:85:1D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.134.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:5c:21:c5:ae:6c:24:29:6e:6a:8e:eb:18:e6:e7:14:27:83: 42:d9:11:19:34:96:6d:c3:97:f0:9d:bd:34:89:eb:35:92:16: ab:90:95:3f:11:27:45:87:b9:0d:7c:3f:ad:a3:ac:45:4e:fe: 65:9b:01:a7:99:25:6c:22:e7:3b:66:73:fa:8c:26:bc:13:cd: 9b:6c:4d:80:78:09:f6:c6:1e:38:88:3e:53:ee:80:be:1c:59: e1:b7:e8:cf:ed:a4:35:6e:d5:5b:8e:80:a6:b6:2d:41:c9:08: aa:56:8f:1d:10:32:8e:eb:1b:07:2b:d0:41:d0:f3:06:1b:fa: 99:82:f9:07:05:9c:f2:32:74:3d:fe:ef:10:de:4f:3b:e1:ee: 7d:e3:ff:2c:9a:2a:81:e9:ff:20:e8:f7:50:0a:7b:fb:fc:bb: 1f:57:f8:49:1a:57:8c:32:43:da:4c:27:77:6a:61:fc:4c:ad: b2:8f:28:4e:63:95:11:5b:22:29:b1:31:3b:03:52:d8:55:f9: d2:36:59:75:99:58:1f:b4:85:3a:6f:97:39:8f:52:41:50:32: d0:06:1d:e9:3f:54:00:01:e9:10:f7:e5:0e:a3:9c:d2:cd:12: 5d:85:cf:ca:b6:cb:7f:b0:d0:6d:db:d8:4c:00:ee:7d:63:1c: 06:09:95:a8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdJJmy+KCPzb5zqVn6RgRYF4SJSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA1NloX DTI3MDUwMTA4MzU1NlowMzExMC8GA1UEAxMoMUI3Mjg3NEE2MDA5QzQyRDhFRUMw NjZEOUNDMjA5MkQ3QTVCODUxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsP4bB2WumPTG8SyEGS/5ufoqO9BbCGgaLfwd4exe6x1AvXFQsBZjIxNQQs qUdRAkLOLHJmBBUyQ3LbaCYI4aCJeoiaE+jwfIFsOMRZRiIZm2SdrNr+y3hmxoOa GKTsJFsJxFXnM2rte3JgoG87C2/KiV5sNvZZ1q/EaUYone/86TRQeGuzPvQj0Agx /lz/NWRjhdz0VZzJhQPdpZkEONvhO3Z+9alTMyk+CCzBAcwneJqaLjK0k8Iqn4JK ZX53uyefLreRK9X6N4BywIv90UcdCGHO14Jd0SIC7UwGNYcB9JXLdi1zOojaPKeM OEs+VKGAa3iz4hAE8bc6leLrBZECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQbcodK YAnELY7sBm2cwgkteluFHTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6OGMA0GCSqGSIb3DQEBCwUAA4IBAQA8XCHFrmwkKW5qjusY5ucUJ4NC 2REZNJZtw5fwnb00ies1kharkJU/ESdFh7kNfD+to6xFTv5lmwGnmSVsIuc7ZnP6 jCa8E82bbE2AeAn2xh44iD5T7oC+HFnht+jP7aQ1btVbjoCmti1ByQiqVo8dEDKO 6xsHK9BB0PMGG/qZgvkHBZzyMnQ9/u8Q3k874e594/8smiqB6f8g6PdQCnv7/Lsf V/hJGleMMkPaTCd3amH8TK2yjyhOY5URWyIpsTE7A1LYVfnSNll1mVgftIU6b5c5 j1JBUDLQBh3pP1QAAekQ9+UOo5zSzRJdhc/Ktst/sNBt29hMAO59YxwGCZWo -----END CERTIFICATE-----Generated at Sun May 3 00:40:38 2026 by rpki-client