$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141919.roa File: AS141919.roa (raw, json) Hash identifier: P+ycEckGjRA+58CRrug4Lc8FWLzx3SAPJiPxUuwJaeU= Subject key identifier: 0B:77:FE:2B:33:DD:FD:F7:B8:CE:A9:DE:6B:54:C5:32:77:68:C9:40 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 452FFBEE29A475D1D20EE76A4DA6DCA3DF2C455D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141919.roa Signing time: Sat 02 May 2026 08:36:46 +0000 ROA not before: Sat 02 May 2026 08:31:46 +0000 ROA not after: Sat 01 May 2027 08:36:46 +0000 asID: 141919 IP address blocks: 103.165.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2f:fb:ee:29:a4:75:d1:d2:0e:e7:6a:4d:a6:dc:a3:df:2c:45:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:46 2026 GMT Not After : May 1 08:36:46 2027 GMT Subject: CN=0B77FE2B33DDFDF7B8CEA9DE6B54C5327768C940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:5b:0f:9b:d3:a4:59:5e:ef:bd:51:fd:b3: ce:82:19:95:5f:22:d6:74:ac:bd:32:07:f4:2b:d0: f4:1d:9b:6f:df:e6:48:8a:27:30:d1:5c:2c:fd:14: 46:70:dc:6d:aa:3f:24:72:5e:ab:21:f2:d9:8f:77: 78:6c:df:43:ba:f2:63:b5:38:37:f8:dc:56:7a:27: 41:92:af:1c:8c:92:3a:bd:1f:0d:fc:56:75:82:fd: 02:1a:c8:3f:63:1f:7f:e4:c1:95:fb:d5:d6:77:ed: 41:0c:05:0f:46:4b:67:09:b1:dd:90:37:e7:31:cb: 9b:cd:e1:bf:2c:f8:47:38:36:3c:3a:20:e4:18:59: 74:34:34:9f:ac:d0:1a:92:7d:14:b0:b5:dc:a4:82: b4:a6:39:49:10:6b:5a:a4:af:3f:5e:db:cf:3b:6a: 20:0f:b6:5c:c1:66:8d:e3:22:fe:1c:0b:ab:62:fa: 24:c4:64:ac:57:08:39:54:81:68:77:f5:d4:9c:c0: 5c:ef:16:9a:53:d6:a3:f0:22:d7:23:c5:c7:8d:59: 2a:03:8c:4f:ff:70:7d:4b:b1:56:80:17:1f:6a:ec: f1:26:b5:20:db:d8:5f:0f:11:ff:32:38:bf:f9:1a: 70:d1:d1:92:c6:60:ab:1c:fd:c3:4d:ec:d8:66:1c: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:FE:2B:33:DD:FD:F7:B8:CE:A9:DE:6B:54:C5:32:77:68:C9:40 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.153.0/24 Signature Algorithm: sha256WithRSAEncryption 52:fa:2d:b6:4b:9a:82:49:bf:7e:8d:58:7b:b9:b4:dd:79:cb: b2:ac:5f:5f:cb:23:22:b9:5f:d6:2f:49:5f:c2:1a:14:93:87: ed:f4:8f:60:50:de:84:00:53:09:31:18:ff:7d:b9:b2:cc:8c: 6a:2b:a1:1f:5e:41:7d:41:a9:52:72:59:4c:62:d3:9c:62:36: d1:be:34:c4:67:e9:76:65:c8:d1:27:8f:30:dc:30:bd:8d:dd: 3a:8e:39:2b:72:ba:c5:4c:2a:d0:f3:d6:f4:6e:bf:63:03:ec: 1b:f4:9f:1e:39:a2:ea:2f:07:9e:c4:fb:ef:a9:2a:4c:88:78: 31:13:90:7c:86:03:66:4a:e0:2c:5f:51:40:61:87:70:57:e9: 99:6d:a3:d1:66:86:75:51:38:7d:c9:81:78:f6:9a:4e:c2:54: 6b:35:cb:90:83:1d:aa:f8:7b:61:96:e3:9f:96:b0:cc:02:44: 00:24:0c:a9:b5:bf:7d:bd:1f:fa:af:4a:50:fa:20:b6:35:44: b2:56:76:8d:2a:66:8f:9b:2b:a3:18:ae:ef:b8:63:1c:d8:50: 3b:03:8b:3b:25:4f:95:82:81:f0:44:19:4a:97:0a:7b:d5:9d: d9:77:d6:3a:e1:0f:18:bd:12:0f:a3:df:ea:32:d0:af:e4:73: ae:56:20:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURS/77imkddHSDudqTabco98sRV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0NloX DTI3MDUwMTA4MzY0NlowMzExMC8GA1UEAxMoMEI3N0ZFMkIzM0RERkRGN0I4Q0VB OURFNkI1NEM1MzI3NzY4Qzk0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH7Ww+b06RZXu+9Uf2zzoIZlV8i1nSsvTIH9CvQ9B2bb9/mSIonMNFcLP0U RnDcbao/JHJeqyHy2Y93eGzfQ7ryY7U4N/jcVnonQZKvHIySOr0fDfxWdYL9AhrI P2Mff+TBlfvV1nftQQwFD0ZLZwmx3ZA35zHLm83hvyz4Rzg2PDog5BhZdDQ0n6zQ GpJ9FLC13KSCtKY5SRBrWqSvP17bzztqIA+2XMFmjeMi/hwLq2L6JMRkrFcIOVSB aHf11JzAXO8WmlPWo/Ai1yPFx41ZKgOMT/9wfUuxVoAXH2rs8Sa1INvYXw8R/zI4 v/kacNHRksZgqxz9w03s2GYcX08CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQLd/4r M93997jOqd5rVMUyd2jJQDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTE5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6WZMA0GCSqGSIb3DQEBCwUAA4IBAQBS+i22S5qCSb9+jVh7ubTdecuy rF9fyyMiuV/WL0lfwhoUk4ft9I9gUN6EAFMJMRj/fbmyzIxqK6EfXkF9QalScllM YtOcYjbRvjTEZ+l2ZcjRJ48w3DC9jd06jjkrcrrFTCrQ89b0br9jA+wb9J8eOaLq LweexPvvqSpMiHgxE5B8hgNmSuAsX1FAYYdwV+mZbaPRZoZ1UTh9yYF49ppOwlRr NcuQgx2q+HthluOflrDMAkQAJAyptb99vR/6r0pQ+iC2NUSyVnaNKmaPmyujGK7v uGMc2FA7A4s7JU+VgoHwRBlKlwp71Z3Zd9Y64Q8YvRIPo9/qMtCv5HOuViDz -----END CERTIFICATE-----Generated at Sun May 3 00:42:22 2026 by rpki-client