$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141917.roa File: AS141917.roa (raw, json) Hash identifier: HURxQ1efCDmxJSSYnSyXILn3mrRfb6fDZBhZPkkIYrA= Subject key identifier: 81:53:24:42:33:A0:10:3E:D4:54:16:79:71:2A:66:FE:D2:54:3E:B5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7D441AE027B619BE4709D3D63DE1F7668C292B48 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141917.roa Signing time: Sat 02 May 2026 08:35:15 +0000 ROA not before: Sat 02 May 2026 08:30:15 +0000 ROA not after: Sat 01 May 2027 08:35:15 +0000 asID: 141917 IP address blocks: 103.164.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:44:1a:e0:27:b6:19:be:47:09:d3:d6:3d:e1:f7:66:8c:29:2b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:15 2026 GMT Not After : May 1 08:35:15 2027 GMT Subject: CN=8153244233A0103ED4541679712A66FED2543EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:f1:06:2a:94:d0:54:df:d0:d7:9b:0c:74: d6:d2:8b:d9:63:ae:ef:ca:6d:c4:1e:9c:24:8c:7d: 2c:62:f3:18:1e:43:1f:be:c5:42:db:d9:60:ad:50: 15:7c:99:21:16:be:47:d9:6d:a7:cd:bb:45:ca:5d: 11:1a:cc:ff:bf:71:0f:7d:a1:ac:62:f7:2f:69:7b: 52:d3:3a:02:78:42:4b:67:1d:47:7f:05:5e:0f:d6: 03:1c:44:29:d8:60:3d:9b:a2:4f:e6:bf:80:46:d4: 80:e0:b3:85:e8:57:45:20:ce:67:c6:2d:ce:a7:4a: 9f:54:3f:8d:81:8c:66:0d:82:15:c5:0a:55:0b:93: 20:41:c5:16:9f:3a:e7:fb:7c:25:ad:3b:00:d5:b4: 97:c1:ca:d1:1c:13:41:a4:a8:0c:74:bd:e5:e2:3e: 98:94:71:a5:0c:92:0b:bd:0e:d6:2a:f2:34:e0:e8: 0e:20:4c:e8:0c:48:06:cd:20:59:8f:af:2f:a6:56: 18:6a:bf:1d:ed:bf:bb:95:ae:ae:2f:3e:9e:2c:08: 2b:ae:43:3f:5d:50:e5:11:03:fa:f3:41:00:11:65: ba:30:9f:4b:ed:73:58:c0:c7:bb:be:8a:b3:ba:a3: f9:6d:e8:fc:28:04:7f:aa:16:f5:8e:3f:84:07:e5: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:53:24:42:33:A0:10:3E:D4:54:16:79:71:2A:66:FE:D2:54:3E:B5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.228.0/23 Signature Algorithm: sha256WithRSAEncryption 78:69:1e:ee:aa:6d:22:21:d8:7e:fc:f2:87:2e:95:f2:5a:c5: 83:5f:e5:92:ee:7d:e6:3f:ef:2f:5a:2a:cc:f7:21:2c:75:c5: 0d:22:27:66:fe:7a:85:03:d9:9b:ca:12:89:db:e6:ca:41:ba: c4:9c:a8:8a:bd:fc:9a:9d:21:49:a2:07:44:31:a5:52:6e:32: c2:fc:91:7d:b3:a2:f0:83:52:95:7e:e8:ed:9b:23:5a:fc:69: cd:dd:79:c5:35:1c:9c:38:f0:93:03:9a:89:79:e9:28:c8:1e: 09:5e:4d:96:88:fd:45:2d:58:ed:45:44:d9:5a:b6:2f:a2:67: 74:15:72:5f:c2:50:e4:21:cb:60:79:19:51:7b:02:34:63:b2: 91:b5:5e:08:44:4f:c5:0e:7c:5f:78:31:2e:cf:e6:7f:a8:3a: ca:41:b6:2d:b8:3f:0f:f8:80:24:02:d8:f0:97:05:88:85:e9: fe:15:5c:3c:33:28:9f:58:bd:e0:28:e9:05:3c:88:b1:df:51: ed:bf:91:f8:cf:59:16:5d:87:95:99:c1:a2:7a:3d:cf:8e:d5: 59:2c:19:5e:b0:e3:9c:f2:0a:21:d4:ce:cd:29:58:9d:c7:e9: 7d:a4:dd:30:eb:63:77:d0:ba:38:a9:fa:c4:02:d8:38:c7:53: 2a:d5:59:f9 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfUQa4Ce2Gb5HCdPWPeH3ZowpK0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAxNVoX DTI3MDUwMTA4MzUxNVowMzExMC8GA1UEAxMoODE1MzI0NDIzM0EwMTAzRUQ0NTQx Njc5NzEyQTY2RkVEMjU0M0VCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPO8QYqlNBU39DXmwx01tKL2WOu78ptxB6cJIx9LGLzGB5DH77FQtvZYK1Q FXyZIRa+R9ltp827RcpdERrM/79xD32hrGL3L2l7UtM6AnhCS2cdR38FXg/WAxxE KdhgPZuiT+a/gEbUgOCzhehXRSDOZ8YtzqdKn1Q/jYGMZg2CFcUKVQuTIEHFFp86 5/t8Ja07ANW0l8HK0RwTQaSoDHS95eI+mJRxpQySC70O1iryNODoDiBM6AxIBs0g WY+vL6ZWGGq/He2/u5Wuri8+niwIK65DP11Q5RED+vNBABFlujCfS+1zWMDHu76K s7qj+W3o/CgEf6oW9Y4/hAflRU8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSBUyRC M6AQPtRUFnlxKmb+0lQ+tTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTE3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6TkMA0GCSqGSIb3DQEBCwUAA4IBAQB4aR7uqm0iIdh+/PKHLpXyWsWD X+WS7n3mP+8vWirM9yEsdcUNIidm/nqFA9mbyhKJ2+bKQbrEnKiKvfyanSFJogdE MaVSbjLC/JF9s6Lwg1KVfujtmyNa/GnN3XnFNRycOPCTA5qJeekoyB4JXk2WiP1F LVjtRUTZWrYvomd0FXJfwlDkIctgeRlRewI0Y7KRtV4IRE/FDnxfeDEuz+Z/qDrK QbYtuD8P+IAkAtjwlwWIhen+FVw8MyifWL3gKOkFPIix31Htv5H4z1kWXYeVmcGi ej3PjtVZLBlesOOc8goh1M7NKVidx+l9pN0w62N30Lo4qfrEAtg4x1Mq1Vn5 -----END CERTIFICATE-----Generated at Sun May 3 00:42:19 2026 by rpki-client