$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141934.roa File: AS141934.roa (raw, json) Hash identifier: XoBFfxi27gMDuQJ6aB6KkvBSLQWh3rxlZ/dhQvYth+c= Subject key identifier: 5A:52:72:CA:0B:FD:4C:83:E3:F2:BE:6B:56:57:61:51:F1:2E:6D:38 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 123276E8C4C89B78DF1553C7265262CAF3EC8EC5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141934.roa Signing time: Sat 02 May 2026 21:24:55 +0000 ROA not before: Sat 02 May 2026 21:19:55 +0000 ROA not after: Sat 01 May 2027 21:24:55 +0000 asID: 141934 IP address blocks: 103.4.82.0/23 maxlen: 24 2001:df1:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:32:76:e8:c4:c8:9b:78:df:15:53:c7:26:52:62:ca:f3:ec:8e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:19:55 2026 GMT Not After : May 1 21:24:55 2027 GMT Subject: CN=5A5272CA0BFD4C83E3F2BE6B56576151F12E6D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:19:3f:d0:46:46:37:9c:d7:93:f9:e4:e8: 6e:13:1c:ae:e3:e3:68:29:91:2a:18:a8:39:21:f0: 7c:94:9a:dd:d0:ef:80:84:cb:b8:bf:bf:e1:ef:f6: 5b:17:71:40:d7:5d:7a:a2:c4:9a:ec:8b:c6:a4:90: b6:a0:d4:20:9e:49:c3:b8:41:67:8e:c9:9a:08:c2: 67:ba:35:53:dd:19:ce:ea:0d:02:cb:5e:a8:e1:4d: 0f:e5:86:fc:02:e6:58:78:ad:7e:cd:da:cc:12:aa: 78:b7:74:7e:9a:98:f1:e1:e3:9c:a7:b9:e3:46:07: c1:0e:09:9f:e6:fd:25:44:e3:20:c5:b4:b5:23:f2: 65:09:e4:9e:53:d3:db:b0:81:bc:84:15:2b:f1:2b: f2:ae:7e:a3:67:87:a9:f9:a3:1c:2d:ca:e4:af:77: 4b:1c:53:60:aa:1f:fb:9b:6a:ca:8e:e0:0b:f7:79: 06:4d:20:1a:30:6a:13:28:5d:7f:b2:51:cb:2c:5f: 1b:ab:c1:1b:cf:a6:2b:fb:ea:ee:18:a0:6f:63:dd: e4:c4:d4:53:a0:66:a1:f8:19:d1:dd:b2:57:9b:1a: ff:a7:da:bb:95:6a:91:57:e6:69:49:81:82:55:20: 2f:bc:c0:0a:4f:b5:12:4d:82:06:a0:7b:48:34:af: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:72:CA:0B:FD:4C:83:E3:F2:BE:6B:56:57:61:51:F1:2E:6D:38 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.82.0/23 IPv6: 2001:df1:5040::/48 Signature Algorithm: sha256WithRSAEncryption 62:c8:f7:39:84:74:8e:5c:ed:23:b0:04:74:c9:f5:ea:3b:93: f3:62:d4:74:18:e4:41:7d:40:ee:9b:6f:60:7d:f0:82:a3:8b: 3c:76:c1:e1:55:4a:f4:7e:7b:e4:76:10:32:8e:1d:bf:27:18: 7b:8c:9a:b4:2f:69:a2:f3:5d:0b:eb:a0:09:92:c9:94:af:aa: fe:db:97:8d:60:1f:96:ad:0c:d6:1c:23:c0:3a:ab:b0:0c:0a: 20:de:25:d2:86:7f:8e:fa:2f:81:01:f6:1b:d5:df:c2:6b:70: d0:de:fb:f8:07:09:63:64:03:ff:5d:0a:ba:61:81:aa:49:d6: 2f:c5:f3:fb:2d:6c:b8:2b:5c:f6:7e:1b:2e:ab:24:a7:3d:6b: 18:b5:c6:d8:65:36:47:67:22:44:96:34:2c:cb:4f:6d:df:32: 09:6d:25:56:3c:55:da:f7:26:72:97:c6:18:d5:86:1f:cf:b7: 55:77:75:58:16:b9:bb:82:98:99:f6:60:5d:29:15:e2:83:a1: cd:cc:05:24:5a:0c:cf:89:fb:9d:a3:4f:00:47:5b:83:45:29: 93:96:48:43:a3:36:4c:36:21:f3:83:e2:7c:95:0d:20:00:12: 98:0b:f3:01:ca:35:0a:29:7c:21:d4:e6:0a:23:6a:10:72:10: ca:82:8b:e9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEjJ26MTIm3jfFVPHJlJiyvPsjsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTk1NVoX DTI3MDUwMTIxMjQ1NVowMzExMC8GA1UEAxMoNUE1MjcyQ0EwQkZENEM4M0UzRjJC RTZCNTY1NzYxNTFGMTJFNkQzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPAGT/QRkY3nNeT+eTobhMcruPjaCmRKhioOSHwfJSa3dDvgITLuL+/4e/2 WxdxQNddeqLEmuyLxqSQtqDUIJ5Jw7hBZ47JmgjCZ7o1U90ZzuoNAsteqOFND+WG /ALmWHitfs3azBKqeLd0fpqY8eHjnKe540YHwQ4Jn+b9JUTjIMW0tSPyZQnknlPT 27CBvIQVK/Er8q5+o2eHqfmjHC3K5K93SxxTYKof+5tqyo7gC/d5Bk0gGjBqEyhd f7JRyyxfG6vBG8+mK/vq7higb2Pd5MTUU6BmofgZ0d2yV5sa/6fau5VqkVfmaUmB glUgL7zACk+1Ek2CBqB7SDSvYo8CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRaUnLK C/1Mg+PyvmtWV2FR8S5tODAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZwRSMA8EAgACMAkDBwAgAQ3xUEAwDQYJKoZIhvcNAQELBQADggEBAGLI 9zmEdI5c7SOwBHTJ9eo7k/Ni1HQY5EF9QO6bb2B98IKjizx2weFVSvR+e+R2EDKO Hb8nGHuMmrQvaaLzXQvroAmSyZSvqv7bl41gH5atDNYcI8A6q7AMCiDeJdKGf476 L4EB9hvV38JrcNDe+/gHCWNkA/9dCrphgapJ1i/F8/stbLgrXPZ+Gy6rJKc9axi1 xthlNkdnIkSWNCzLT23fMgltJVY8Vdr3JnKXxhjVhh/Pt1V3dVgWubuCmJn2YF0p FeKDoc3MBSRaDM+J+52jTwBHW4NFKZOWSEOjNkw2IfOD4nyVDSAAEpgL8wHKNQop fCHU5gojahByEMqCi+k= -----END CERTIFICATE-----Generated at Sun May 3 00:42:10 2026 by rpki-client