$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141936.roa File: AS141936.roa (raw, json) Hash identifier: tXPOibTL+cbfmkaBAFnyS17ohCf9/K1sj6F+ewN40cY= Subject key identifier: C5:C3:93:9D:CA:04:E6:25:F7:28:E3:89:D8:05:56:55:11:58:39:C8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5445A2BD0DE6D6E90E5453FAD7F9488C732A9766 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141936.roa Signing time: Sat 02 May 2026 09:20:14 +0000 ROA not before: Sat 02 May 2026 09:15:14 +0000 ROA not after: Sat 01 May 2027 09:20:14 +0000 asID: 141936 IP address blocks: 103.166.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:45:a2:bd:0d:e6:d6:e9:0e:54:53:fa:d7:f9:48:8c:73:2a:97:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:14 2026 GMT Not After : May 1 09:20:14 2027 GMT Subject: CN=C5C3939DCA04E625F728E389D8055655115839C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:74:a9:ca:e9:3d:f6:41:a8:d9:bd:dc:34: 46:a8:18:0b:e5:8b:ba:c3:10:10:16:d0:47:54:61: 63:b6:62:ad:1c:71:ec:b6:31:56:14:8e:08:ce:4d: 3b:ff:19:38:08:de:1f:0a:01:35:85:01:32:a7:a8: 10:0e:03:a0:88:04:ff:db:40:ff:12:ea:92:ec:87: 73:86:09:42:54:d5:30:9b:99:72:e9:aa:a4:5c:4f: 8b:49:ee:f5:76:e7:43:7d:c8:91:33:70:d9:0f:44: 44:23:2d:50:4c:e7:c2:4b:54:cb:67:b0:40:fa:28: 43:34:ff:77:c5:01:36:49:b6:f2:de:b2:65:df:c4: 3f:50:51:f2:0e:7a:dd:60:c5:9c:c9:ed:52:0b:1e: e6:24:01:d1:55:aa:e2:bf:29:af:59:a4:2a:97:7c: 8e:6c:77:b5:e1:d4:5e:bb:42:5b:48:46:b7:07:4a: 0c:90:56:d4:5b:2f:52:9f:56:17:ed:7b:ef:55:f9: 5c:43:5d:c7:f2:8c:f4:15:89:a0:8a:34:52:96:63: 2c:b2:d9:39:2a:0b:32:02:1e:c0:fe:0e:b0:cb:e5: e8:4e:d7:6b:18:8a:cf:24:56:19:e3:ba:66:3b:c2: 73:f0:c0:53:f5:fa:cb:b5:3e:10:5e:eb:d4:d7:53: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:93:9D:CA:04:E6:25:F7:28:E3:89:D8:05:56:55:11:58:39:C8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f6:9b:92:fc:d6:15:12:60:cf:dc:14:3f:bc:50:5c:55:ae: 91:1d:6e:7a:da:6f:76:47:77:e4:6e:63:12:ff:08:d8:55:ca: 5d:72:00:0b:47:b7:b6:19:88:a4:2f:ef:cb:e5:fb:80:92:da: 64:1d:e8:57:c7:ea:6d:a6:2f:ca:9c:f3:19:fd:a8:c9:e1:bb: 21:3f:1d:b9:cb:2b:f2:4b:fb:1f:34:09:9e:64:50:af:1c:41: 81:06:82:7f:50:0b:95:e3:78:93:f5:5c:ed:63:6a:13:05:72: ee:32:3c:ea:b8:7c:a8:8a:85:d5:d4:cd:f9:77:e0:3b:e8:2f: 89:c7:fd:5b:36:d7:a0:23:bb:09:82:fd:d0:36:03:95:85:51: 47:f2:43:e1:f3:6b:6c:55:dc:e8:1a:ee:ab:d8:03:48:a7:42: 7e:14:8c:e9:f9:59:93:0c:2d:e2:8d:32:00:fd:5d:d4:87:6c: e6:19:64:9c:e6:d4:db:5e:ca:b2:65:c4:82:f8:20:da:84:8d: 84:37:88:10:12:e5:1e:ae:34:b4:f3:4b:00:60:de:4a:2b:2d: 79:26:8f:85:9a:d5:c9:8b:f0:17:a5:5a:a3:e0:85:2a:9b:02: 0a:44:08:27:76:45:5c:15:79:38:fe:b6:d5:34:fb:c0:7a:e9: d2:f3:02:82 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUVEWivQ3m1ukOVFP61/lIjHMql2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUxNFoX DTI3MDUwMTA5MjAxNFowMzExMC8GA1UEAxMoQzVDMzkzOURDQTA0RTYyNUY3MjhF Mzg5RDgwNTU2NTUxMTU4MzlDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKOLdKnK6T32QajZvdw0RqgYC+WLusMQEBbQR1RhY7ZirRxx7LYxVhSOCM5N O/8ZOAjeHwoBNYUBMqeoEA4DoIgE/9tA/xLqkuyHc4YJQlTVMJuZcumqpFxPi0nu 9XbnQ33IkTNw2Q9ERCMtUEznwktUy2ewQPooQzT/d8UBNkm28t6yZd/EP1BR8g56 3WDFnMntUgse5iQB0VWq4r8pr1mkKpd8jmx3teHUXrtCW0hGtwdKDJBW1FsvUp9W F+1771X5XENdx/KM9BWJoIo0UpZjLLLZOSoLMgIewP4OsMvl6E7XaxiKzyRWGeO6 ZjvCc/DAU/X6y7U+EF7r1NdTucsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTFw5Od ygTmJfco44nYBVZVEVg5yDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6YuMA0GCSqGSIb3DQEBCwUAA4IBAQCO9puS/NYVEmDP3BQ/vFBcVa6R HW562m92R3fkbmMS/wjYVcpdcgALR7e2GYikL+/L5fuAktpkHehXx+ptpi/KnPMZ /ajJ4bshPx25yyvyS/sfNAmeZFCvHEGBBoJ/UAuV43iT9VztY2oTBXLuMjzquHyo ioXV1M35d+A76C+Jx/1bNtegI7sJgv3QNgOVhVFH8kPh82tsVdzoGu6r2ANIp0J+ FIzp+VmTDC3ijTIA/V3Uh2zmGWSc5tTbXsqyZcSC+CDahI2EN4gQEuUerjS080sA YN5KKy15Jo+FmtXJi/AXpVqj4IUqmwIKRAgndkVcFXk4/rbVNPvAeunS8wKC -----END CERTIFICATE-----Generated at Sun May 3 00:42:06 2026 by rpki-client