$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141907.roa File: AS141907.roa (raw, json) Hash identifier: GPNSulTG4KBQgIW7wmgLpna3FmmviDfcqcGBgQaMhFM= Subject key identifier: 6A:E5:4B:70:57:B4:A8:95:BB:C4:C1:7C:52:5C:D9:86:B6:2E:D3:39 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 188D62894ADDE97DE0DEF01B787731BD56B69239 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141907.roa Signing time: Sat 02 May 2026 21:28:25 +0000 ROA not before: Sat 02 May 2026 21:23:25 +0000 ROA not after: Sat 01 May 2027 21:28:25 +0000 asID: 141907 IP address blocks: 202.51.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8d:62:89:4a:dd:e9:7d:e0:de:f0:1b:78:77:31:bd:56:b6:92:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:23:25 2026 GMT Not After : May 1 21:28:25 2027 GMT Subject: CN=6AE54B7057B4A895BBC4C17C525CD986B62ED339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:26:ee:4b:be:1d:d9:0c:52:ab:dd:91:d7: 5d:53:cd:d6:ba:ea:74:0e:80:8d:2b:c0:23:21:70: 08:3f:ff:36:7e:dc:47:31:7e:6e:b6:65:6b:f3:4e: 39:42:08:e8:d0:d6:5a:77:81:c0:07:f6:b9:b6:c7: 36:8c:c5:db:c3:9f:2a:0e:ef:8e:8b:1f:99:5b:c8: ff:1e:60:74:5b:36:55:62:78:0b:db:53:c0:0d:95: ab:12:eb:29:a0:c5:63:ed:e7:41:cd:81:4e:c3:86: 7b:a1:7d:37:b6:df:81:1d:83:ab:49:10:bc:b3:f5: 62:5f:b9:4a:31:50:7a:d0:96:67:92:b8:a6:a2:f4: 5c:50:e8:d1:cb:92:3b:88:8f:8c:68:e7:52:65:a6: 0b:0f:d7:5a:de:3c:2d:f0:e1:cd:7a:8c:49:c0:27: 12:e9:09:26:ba:d3:99:a2:d1:0f:f7:49:4d:0a:7f: 19:7d:9c:1a:bb:3d:5d:3c:2b:6c:09:14:17:71:1e: 1f:8e:aa:45:f3:f1:58:d1:b2:91:4a:e3:92:d2:27: 8a:9a:c1:4b:28:d2:b4:69:af:d6:c1:ab:c6:44:36: fa:09:1c:d6:3b:d2:82:66:63:e1:03:63:dd:2c:ad: 61:66:58:b1:e2:18:c5:14:8a:64:69:17:74:87:19: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:4B:70:57:B4:A8:95:BB:C4:C1:7C:52:5C:D9:86:B6:2E:D3:39 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:a5:ce:35:63:f4:6b:16:81:d6:ac:37:c9:11:d5:4c:9e:0f: af:03:12:bb:31:3d:ef:d7:cd:39:ff:1a:84:75:25:e4:c3:6d: 5d:6c:01:f0:1d:68:e5:c8:51:8a:12:90:5c:8d:0c:04:96:36: 20:77:56:ec:a6:48:6d:82:5b:a1:35:d9:ea:dc:9c:6e:95:83: ec:7b:ce:28:31:c2:fb:ec:8c:f2:1c:8e:c3:f3:ba:87:f4:c6: a6:cf:20:a2:91:52:56:43:be:f6:00:33:45:93:41:9b:29:a7: ee:89:ce:f4:56:b1:32:ad:8d:2e:f5:0a:4a:41:9b:59:d7:71: dc:77:f7:b3:7e:bb:5b:37:e6:69:64:d2:21:99:08:fb:b3:e1: d6:ea:d3:8d:57:bc:f4:70:9c:59:dd:57:3b:dc:18:c2:09:2f: 38:d3:5d:de:fc:f4:84:ea:ea:77:0a:e8:56:55:36:b8:d7:c1: df:a2:db:ee:2b:66:72:57:9b:55:f9:c3:e6:c5:34:79:30:c4: cc:03:4a:a9:ad:e6:da:56:f9:9d:a4:55:86:c2:4f:68:0a:62: 1a:11:6c:4a:7d:c5:34:5c:de:6d:5a:20:91:e5:86:92:10:42: 78:b3:a6:7e:99:38:74:8c:0e:cd:f7:4f:cb:54:5b:df:48:f8: df:97:a4:da -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGI1iiUrd6X3g3vAbeHcxvVa2kjkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjMyNVoX DTI3MDUwMTIxMjgyNVowMzExMC8GA1UEAxMoNkFFNTRCNzA1N0I0QTg5NUJCQzRD MTdDNTI1Q0Q5ODZCNjJFRDMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALECJu5Lvh3ZDFKr3ZHXXVPN1rrqdA6AjSvAIyFwCD//Nn7cRzF+brZla/NO OUII6NDWWneBwAf2ubbHNozF28OfKg7vjosfmVvI/x5gdFs2VWJ4C9tTwA2VqxLr KaDFY+3nQc2BTsOGe6F9N7bfgR2Dq0kQvLP1Yl+5SjFQetCWZ5K4pqL0XFDo0cuS O4iPjGjnUmWmCw/XWt48LfDhzXqMScAnEukJJrrTmaLRD/dJTQp/GX2cGrs9XTwr bAkUF3EeH46qRfPxWNGykUrjktIniprBSyjStGmv1sGrxkQ2+gkc1jvSgmZj4QNj 3SytYWZYseIYxRSKZGkXdIcZD0UCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRq5Utw V7SolbvEwXxSXNmGti7TOTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAyjPaMA0GCSqGSIb3DQEBCwUAA4IBAQAbpc41Y/RrFoHWrDfJEdVMng+v AxK7MT3v1805/xqEdSXkw21dbAHwHWjlyFGKEpBcjQwEljYgd1bspkhtgluhNdnq 3JxulYPse84oMcL77IzyHI7D87qH9MamzyCikVJWQ772ADNFk0GbKafuic70VrEy rY0u9QpKQZtZ13Hcd/ezfrtbN+ZpZNIhmQj7s+HW6tONV7z0cJxZ3Vc73BjCCS84 013e/PSE6up3CuhWVTa418HfotvuK2ZyV5tV+cPmxTR5MMTMA0qprebaVvmdpFWG wk9oCmIaEWxKfcU0XN5tWiCR5YaSEEJ4s6Z+mTh0jA7N90/LVFvfSPjfl6Ta -----END CERTIFICATE-----Generated at Sun May 3 01:44:54 2026 by rpki-client