$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141908.roa File: AS141908.roa (raw, json) Hash identifier: kKVoiAwZvrnLSDsESx7AT4s3kB8+tBRlortlqPR5cak= Subject key identifier: B5:25:C9:72:30:12:C6:BB:F2:E0:83:E3:08:BA:67:69:C9:45:4B:51 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 411C3BE4A8504A45112B1D42FE045B88D56F52FC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141908.roa Signing time: Sat 02 May 2026 09:19:52 +0000 ROA not before: Sat 02 May 2026 09:14:52 +0000 ROA not after: Sat 01 May 2027 09:19:52 +0000 asID: 141908 IP address blocks: 103.164.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1c:3b:e4:a8:50:4a:45:11:2b:1d:42:fe:04:5b:88:d5:6f:52:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:52 2026 GMT Not After : May 1 09:19:52 2027 GMT Subject: CN=B525C9723012C6BBF2E083E308BA6769C9454B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:45:f7:fb:90:7c:3d:6b:3b:39:04:38:4b:34: a9:e2:86:58:c7:a9:f5:3b:d4:ce:e7:53:18:d5:5d: d3:4c:fa:3b:e8:be:7a:43:1b:b6:03:ea:85:13:c1: 48:3e:96:7c:db:fe:89:1a:bb:ee:67:6d:14:9e:c6: 15:d8:57:c3:26:0d:bc:4f:c7:e8:d6:f2:2e:c7:ff: 5e:69:25:d3:b3:62:1b:0d:85:c8:46:1f:7f:0c:39: 22:f8:7d:1b:47:14:4b:c0:22:3f:fb:42:03:c1:3f: cb:50:89:f2:74:c8:6a:ea:79:f9:6b:43:3e:26:54: 0e:ab:27:76:02:23:ae:ae:b2:5c:28:04:aa:dd:a4: 98:ef:60:2a:98:2b:09:a8:1f:a6:d9:29:d3:ad:c0: 0b:61:2b:a0:1c:74:c7:d0:64:72:2c:9e:e5:d5:f4: 0b:6c:13:a2:be:68:ab:bd:7b:6a:ed:84:de:00:91: 0f:cc:37:c3:af:49:a9:18:10:8f:25:e0:78:1a:de: 84:d1:dd:02:76:9a:61:87:41:29:c6:df:fb:14:81: 62:7e:d9:92:07:6d:a9:69:d4:6a:63:e2:b9:99:de: 86:51:3e:88:a3:3b:75:9c:54:08:66:1f:16:45:e8: 1c:dd:b9:b8:8f:13:59:ce:50:7b:87:f8:60:61:2a: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:25:C9:72:30:12:C6:BB:F2:E0:83:E3:08:BA:67:69:C9:45:4B:51 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141908.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.148.0/23 Signature Algorithm: sha256WithRSAEncryption 03:f5:0b:96:c7:c9:3b:c2:3f:63:39:c8:94:3b:f3:13:43:2a: 28:be:46:ba:1d:86:c4:43:99:ca:97:d6:a9:57:e6:ab:ec:6b: d3:c4:01:7f:60:9b:f5:99:40:05:cf:89:df:65:8d:62:34:79: 1e:cf:1a:c2:d7:84:e0:6a:4e:2d:8c:b5:88:90:a6:85:fa:ba: c1:f4:f9:70:5d:24:78:a7:ea:d7:9e:d5:88:2b:ba:ec:e0:0f: ef:4a:5e:21:d2:cb:c3:bd:1a:c9:e0:53:32:6f:d3:b2:1d:b6: c9:ec:94:2f:94:c9:18:29:ae:20:d3:a0:12:2a:f1:59:99:51: c1:89:96:a1:2c:f0:8f:b1:a8:d4:81:80:11:a0:65:6a:ad:7f: 71:db:0d:35:27:f9:f1:03:be:21:50:f1:6b:2e:5c:0e:e8:c2: f3:0a:30:07:93:d6:b5:53:dc:22:9f:69:8b:58:36:98:f9:e6: e4:fc:2b:2b:79:2c:31:7d:d6:51:d7:f8:4c:55:2b:91:35:94: 9b:43:63:64:76:69:41:73:24:ad:ec:d1:a7:b0:fe:f6:e9:36: f5:5e:c2:d2:31:56:52:a9:86:3b:84:99:3a:93:0d:a7:db:02: ec:f3:3f:a5:d4:b4:7f:19:27:fa:a2:ba:6c:0d:ad:7b:d9:7d: 21:82:e5:b0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQRw75KhQSkURKx1C/gRbiNVvUvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ1MloX DTI3MDUwMTA5MTk1MlowMzExMC8GA1UEAxMoQjUyNUM5NzIzMDEyQzZCQkYyRTA4 M0UzMDhCQTY3NjlDOTQ1NEI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZF9/uQfD1rOzkEOEs0qeKGWMep9TvUzudTGNVd00z6O+i+ekMbtgPqhRPB SD6WfNv+iRq77mdtFJ7GFdhXwyYNvE/H6NbyLsf/Xmkl07NiGw2FyEYffww5Ivh9 G0cUS8AiP/tCA8E/y1CJ8nTIaup5+WtDPiZUDqsndgIjrq6yXCgEqt2kmO9gKpgr Cagfptkp063AC2EroBx0x9Bkciye5dX0C2wTor5oq717au2E3gCRD8w3w69JqRgQ jyXgeBrehNHdAnaaYYdBKcbf+xSBYn7ZkgdtqWnUamPiuZnehlE+iKM7dZxUCGYf FkXoHN25uI8TWc5Qe4f4YGEqCmMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS1Jcly MBLGu/Lgg+MIumdpyUVLUTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTA4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6SUMA0GCSqGSIb3DQEBCwUAA4IBAQAD9QuWx8k7wj9jOciUO/MTQyoo vka6HYbEQ5nKl9apV+ar7GvTxAF/YJv1mUAFz4nfZY1iNHkezxrC14Tgak4tjLWI kKaF+rrB9PlwXSR4p+rXntWIK7rs4A/vSl4h0svDvRrJ4FMyb9OyHbbJ7JQvlMkY Ka4g06ASKvFZmVHBiZahLPCPsajUgYARoGVqrX9x2w01J/nxA74hUPFrLlwO6MLz CjAHk9a1U9win2mLWDaY+ebk/CsreSwxfdZR1/hMVSuRNZSbQ2NkdmlBcySt7NGn sP726Tb1XsLSMVZSqYY7hJk6kw2n2wLs8z+l1LR/GSf6orpsDa172X0hguWw -----END CERTIFICATE-----Generated at Sun May 3 00:39:45 2026 by rpki-client