$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141921.roa File: AS141921.roa (raw, json) Hash identifier: heDPbZ0dhkqkexeh9QnCndGGzFhBAv4CG5LB3Uzz9WI= Subject key identifier: 80:B0:1C:36:FA:CD:AE:AA:62:90:EB:FD:C4:D1:E7:BF:6B:4E:FB:EB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2B3D871ADACC542AB75EE0A8A3AEB22D35B67C9E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141921.roa Signing time: Sat 02 May 2026 09:26:06 +0000 ROA not before: Sat 02 May 2026 09:21:06 +0000 ROA not after: Sat 01 May 2027 09:26:06 +0000 asID: 141921 IP address blocks: 103.178.194.0/24 maxlen: 24 2001:df3:ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3d:87:1a:da:cc:54:2a:b7:5e:e0:a8:a3:ae:b2:2d:35:b6:7c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:06 2026 GMT Not After : May 1 09:26:06 2027 GMT Subject: CN=80B01C36FACDAEAA6290EBFDC4D1E7BF6B4EFBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:4a:c2:c7:41:b3:12:c7:5c:ca:f9:36:5d: 7b:c6:11:34:c8:cb:81:d6:88:bd:09:72:2c:85:e3: db:5a:6d:48:ed:21:6d:17:20:38:39:09:2c:04:5d: f0:72:40:23:32:13:44:61:8f:62:be:98:a0:bf:bc: fc:aa:ce:fe:fb:ad:41:56:80:ff:e1:0e:fc:39:50: 74:db:37:32:43:2b:3d:d6:34:ee:ab:20:d0:6b:87: 34:34:39:ab:60:5d:6e:3a:9b:59:2e:32:33:65:56: d0:51:8c:6e:bd:74:3f:3c:4a:e1:8e:8e:ba:82:93: a6:67:70:ed:e5:c5:62:ec:70:11:93:fe:72:e0:92: c8:35:17:df:10:1e:27:b5:63:ad:1a:50:39:97:e7: 49:29:15:ec:02:b1:9f:ea:f8:50:21:0d:e5:d6:7f: 45:73:9d:99:a6:dc:d0:08:3e:53:0d:59:e6:4e:b6: c0:c7:ad:f0:8e:5a:8b:3e:db:9a:ab:55:dc:48:54: 21:d6:a8:38:f8:78:ef:10:bc:74:79:78:5d:b7:6c: 71:05:19:a6:e8:08:c4:19:83:d0:12:de:1f:3c:86: ed:1c:8b:ba:89:c9:c4:7e:f7:6d:96:86:b5:bd:11: 11:73:d8:b3:b5:cc:3b:3a:80:b8:03:b5:a4:67:cf: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B0:1C:36:FA:CD:AE:AA:62:90:EB:FD:C4:D1:E7:BF:6B:4E:FB:EB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141921.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.194.0/24 IPv6: 2001:df3:ac0::/48 Signature Algorithm: sha256WithRSAEncryption 50:b1:f8:50:a0:96:1b:8f:7f:5d:27:db:4c:61:94:b8:3c:94: 12:1d:c5:83:17:af:1b:24:22:88:6b:7b:bb:b7:04:0a:e0:12: c8:77:61:1e:d7:64:1e:8e:c1:a1:ce:1d:58:80:6a:50:b7:50: 8d:83:53:b3:05:76:34:d1:eb:6e:4a:d0:c8:86:41:65:6b:74: 12:58:b2:b4:14:25:41:cd:e7:2d:6d:35:c0:fd:8a:69:30:e5: c6:16:60:fd:5d:74:92:71:7f:b0:4f:87:29:ad:d7:db:70:41: 1d:7e:2c:c8:cc:32:fd:ad:ef:2f:e3:3d:32:5d:3e:29:6d:ee: 41:e9:a1:c9:62:d6:45:05:2f:99:63:1d:09:dc:00:58:d4:1a: 39:5b:15:3e:6a:44:12:ae:1a:f0:66:f8:85:71:db:3f:ad:12: cc:45:20:b8:4c:64:52:a4:77:4c:29:c2:49:32:03:8c:21:0c: cc:e1:ab:0e:b8:15:39:5b:a4:fa:00:90:60:94:eb:68:05:92: 6a:27:9b:df:1f:7a:ca:24:3f:40:9b:94:e3:2e:db:a9:1b:97: 22:20:8f:b2:72:eb:ef:c9:86:28:98:65:8c:cf:da:53:a1:2f: 06:a9:da:b4:a5:a9:03:69:9b:81:ca:64:3b:b3:cb:cf:32:58: 38:95:3d:ae -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKz2HGtrMVCq3XuCoo66yLTW2fJ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjEwNloX DTI3MDUwMTA5MjYwNlowMzExMC8GA1UEAxMoODBCMDFDMzZGQUNEQUVBQTYyOTBF QkZEQzREMUU3QkY2QjRFRkJFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ8SsLHQbMSx1zK+TZde8YRNMjLgdaIvQlyLIXj21ptSO0hbRcgODkJLARd 8HJAIzITRGGPYr6YoL+8/KrO/vutQVaA/+EO/DlQdNs3MkMrPdY07qsg0GuHNDQ5 q2BdbjqbWS4yM2VW0FGMbr10PzxK4Y6OuoKTpmdw7eXFYuxwEZP+cuCSyDUX3xAe J7VjrRpQOZfnSSkV7AKxn+r4UCEN5dZ/RXOdmabc0Ag+Uw1Z5k62wMet8I5aiz7b mqtV3EhUIdaoOPh47xC8dHl4XbdscQUZpugIxBmD0BLeHzyG7RyLuonJxH73bZaG tb0REXPYs7XMOzqAuAO1pGfPtjsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBSAsBw2 +s2uqmKQ6/3E0ee/a0776zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ7LCMA8EAgACMAkDBwAgAQ3zCsAwDQYJKoZIhvcNAQELBQADggEBAFCx +FCglhuPf10n20xhlLg8lBIdxYMXrxskIohre7u3BArgEsh3YR7XZB6OwaHOHViA alC3UI2DU7MFdjTR625K0MiGQWVrdBJYsrQUJUHN5y1tNcD9imkw5cYWYP1ddJJx f7BPhymt19twQR1+LMjMMv2t7y/jPTJdPilt7kHpocli1kUFL5ljHQncAFjUGjlb FT5qRBKuGvBm+IVx2z+tEsxFILhMZFKkd0wpwkkyA4whDMzhqw64FTlbpPoAkGCU 62gFkmonm98fesokP0CblOMu26kblyIgj7Jy6+/JhiiYZYzP2lOhLwap2rSlqQNp m4HKZDuzy88yWDiVPa4= -----END CERTIFICATE-----Generated at Sun May 3 00:42:31 2026 by rpki-client