
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141930.roa
File: AS141930.roa (raw, json)
Hash identifier: XswzvhnVpotyeGPPLx75dXgJKSnduCW17wHqLs/WxD0=
Subject key identifier: 36:2B:1C:1B:59:9F:73:03:6A:12:18:F2:CA:1B:BB:A1:73:59:8B:36
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 37E46E337320F88407F60F1CA846EB6AEC6A0AC6
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141930.roa
Signing time: Sat 02 May 2026 09:20:00 +0000
ROA not before: Sat 02 May 2026 09:15:00 +0000
ROA not after: Sat 01 May 2027 09:20:00 +0000
asID: 141930
IP address blocks: 103.163.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e4:6e:33:73:20:f8:84:07:f6:0f:1c:a8:46:eb:6a:ec:6a:0a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: May 2 09:15:00 2026 GMT
Not After : May 1 09:20:00 2027 GMT
Subject: CN=362B1C1B599F73036A1218F2CA1BBBA173598B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:e5:92:ff:a7:0e:55:05:95:7a:d7:df:13:
43:0d:96:81:3a:2a:e4:24:fc:aa:9f:d5:c7:6e:73:
57:4e:c0:a2:87:3c:4f:37:de:8e:5c:ff:a2:3b:49:
ef:d9:be:cc:b2:36:82:6c:24:74:a1:02:40:af:2e:
de:0a:7e:98:13:0b:76:86:e4:92:cd:d3:6b:2f:ce:
32:1f:a4:a3:f2:5d:98:16:18:21:fe:66:da:7f:46:
13:ea:2e:23:aa:3a:32:ca:a3:04:a4:18:d2:2e:d4:
7c:73:dd:57:d1:80:8a:74:49:d5:96:20:11:0b:5a:
75:a8:a9:0e:ec:96:3e:3a:32:68:4b:56:63:75:b6:
20:09:49:ed:0d:24:44:3b:41:9e:7e:1e:b5:59:5d:
69:26:ed:20:cb:90:ee:04:b0:49:3f:ae:b7:30:69:
90:af:e0:e8:ac:18:2c:4d:6f:e3:cf:dd:aa:23:48:
95:43:53:0d:36:6d:8c:e1:01:91:36:a8:4b:61:69:
ab:20:f8:64:be:e3:4c:d3:26:7c:ce:cf:f9:6d:a2:
e0:a0:05:93:93:82:d9:2a:ec:53:0d:e6:09:76:32:
6d:9c:66:d8:d1:98:18:ea:e6:3d:e0:21:1a:c4:a2:
77:83:0b:55:df:ec:37:ae:2e:93:8d:e4:25:3d:35:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:1C:1B:59:9F:73:03:6A:12:18:F2:CA:1B:BB:A1:73:59:8B:36
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.110.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:8f:37:d5:fd:5e:e3:8d:1b:6f:97:9e:55:4a:9c:60:c0:87:
09:69:ab:58:e8:05:26:b7:91:ca:49:d1:26:01:e5:e2:c4:71:
53:ff:b1:6d:46:7e:a5:48:2f:97:b3:90:c2:48:94:d3:57:89:
b1:8a:59:94:56:a3:41:b0:f0:0d:be:26:69:df:a1:71:d7:88:
4e:5d:ec:32:74:14:3a:da:ad:fd:63:b8:9f:14:0c:de:fe:06:
48:42:39:da:b0:1c:d1:d5:c6:58:0e:e7:bd:b2:4f:ee:41:ca:
fa:f3:92:41:3c:8c:03:1e:d8:1f:47:91:a9:ed:88:9f:73:68:
b6:f2:c8:52:05:f1:60:db:76:28:77:ce:69:57:33:ea:77:38:
9e:64:e4:b8:46:71:76:ea:f3:57:33:18:0f:2e:fc:3a:42:15:
96:7d:04:40:c4:de:77:d1:51:7f:9f:02:0a:9a:de:3a:b6:0b:
e4:95:dc:1c:2c:0b:67:e1:59:26:19:36:d7:6d:f7:fc:b0:10:
66:a4:26:4e:fe:f3:7e:9c:22:8c:0b:71:c9:6b:d3:4f:9a:5c:
d6:9d:d1:6f:60:3a:35:28:f7:db:e4:c4:7e:fc:ff:39:1f:e0:
38:80:32:21:df:26:32:dd:5f:ca:e3:8a:ae:73:6f:a9:e2:39:
24:d7:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 00:42:10 2026 by rpki-client