$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141938.roa File: AS141938.roa (raw, json) Hash identifier: igL3O0/WK0tEGxxEVMXwLsxaTBD3Y/71SdXnQUmAtLo= Subject key identifier: BB:9F:D6:8F:9E:E9:60:5B:90:77:E6:E6:78:4D:A4:BC:14:A1:A8:82 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5ACCC8AB1467777C476E7BFF70F5A303CA505AD0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141938.roa Signing time: Sat 02 May 2026 09:19:46 +0000 ROA not before: Sat 02 May 2026 09:14:46 +0000 ROA not after: Sat 01 May 2027 09:19:46 +0000 asID: 141938 IP address blocks: 103.164.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cc:c8:ab:14:67:77:7c:47:6e:7b:ff:70:f5:a3:03:ca:50:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:46 2026 GMT Not After : May 1 09:19:46 2027 GMT Subject: CN=BB9FD68F9EE9605B9077E6E6784DA4BC14A1A882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:05:37:a6:4e:23:16:7f:6c:d7:d3:bf:71: 58:7f:7b:8a:c9:8c:51:6d:ed:c4:f9:5a:40:be:29: f1:d9:fa:3d:c0:21:04:31:de:21:f6:52:2d:c0:66: 71:70:9f:34:de:0b:a4:6e:9b:fb:f3:21:31:89:38: 98:c4:f2:38:88:63:ae:98:72:15:b6:b7:11:9c:be: 70:cc:f2:35:91:68:98:2f:03:35:f5:f3:aa:f3:a3: 79:59:20:03:af:0f:31:95:52:4c:02:b9:73:a9:fe: b5:00:4c:1d:f7:8c:77:68:c8:8a:8e:a4:cf:5b:db: 3d:df:56:2a:a3:c6:75:10:07:76:f6:35:36:f3:6d: c5:18:55:e3:2c:06:d6:d8:be:a0:dd:35:66:09:b6: 40:42:6b:73:9c:c1:f9:cd:3c:90:5a:39:4d:f1:d3: 4a:8e:4f:f4:38:62:e5:66:d4:22:ee:ec:3f:72:10: c0:92:22:3a:51:78:35:24:ff:91:86:0d:8e:8b:72: aa:43:cf:66:70:8a:f0:b0:e6:23:1e:4f:26:bc:ae: 5d:39:d0:f8:b2:0f:b6:89:a1:d2:e4:ef:19:ec:2a: d2:d8:01:6e:79:27:dd:65:14:85:00:4d:de:7e:45: a3:72:85:b3:89:ee:3c:24:1f:a0:c3:f4:40:60:7d: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9F:D6:8F:9E:E9:60:5B:90:77:E6:E6:78:4D:A4:BC:14:A1:A8:82 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.186.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:19:96:56:77:12:32:ec:47:0a:8b:e6:25:de:f8:a9:2f:0f: 4b:b1:cb:d6:04:c8:f2:0b:77:b8:ba:7e:be:35:fd:20:b9:db: 7a:51:b3:3a:9c:49:8b:54:19:6f:57:01:72:da:d7:a4:2d:35: 26:10:ce:d0:cd:e9:a0:94:3f:bc:05:00:d5:b9:ce:d8:ac:7f: 34:98:0c:f3:f8:1a:b6:f4:88:0a:48:fe:28:52:a8:4f:0b:9a: 9f:f8:9a:21:e4:79:b5:5c:85:ff:e5:2e:41:74:78:96:8b:29: 06:24:4e:0c:47:47:66:b3:5f:2c:b2:4f:bc:4e:2b:e8:de:19: 96:71:b8:5a:64:10:b5:e2:fa:d4:2f:a3:25:3d:79:80:8a:e8: ce:80:5f:8f:57:95:d2:c2:d4:b7:6b:a0:7f:31:91:00:45:b1: d1:71:03:2a:ca:ae:93:29:27:44:d2:e4:73:94:6a:ef:19:2c: 61:f2:2d:79:6b:89:ee:f3:2c:05:6b:98:79:f6:7e:aa:b1:15: 1e:1a:24:fa:39:df:f9:10:94:42:dc:9c:c3:f7:ed:1e:57:ec: 03:6a:52:e2:b8:04:6c:42:88:98:28:a9:f3:f8:0f:54:3f:42: e2:c3:5c:a5:ec:0c:2f:86:5e:85:8f:ba:fe:89:2f:b1:3d:ec: 72:61:7d:10 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWszIqxRnd3xHbnv/cPWjA8pQWtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQ0NloX DTI3MDUwMTA5MTk0NlowMzExMC8GA1UEAxMoQkI5RkQ2OEY5RUU5NjA1QjkwNzdF NkU2Nzg0REE0QkMxNEExQTg4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1TBTemTiMWf2zX079xWH97ismMUW3txPlaQL4p8dn6PcAhBDHeIfZSLcBm cXCfNN4LpG6b+/MhMYk4mMTyOIhjrphyFba3EZy+cMzyNZFomC8DNfXzqvOjeVkg A68PMZVSTAK5c6n+tQBMHfeMd2jIio6kz1vbPd9WKqPGdRAHdvY1NvNtxRhV4ywG 1ti+oN01Zgm2QEJrc5zB+c08kFo5TfHTSo5P9Dhi5WbUIu7sP3IQwJIiOlF4NST/ kYYNjotyqkPPZnCK8LDmIx5PJryuXTnQ+LIPtomh0uTvGewq0tgBbnkn3WUUhQBN 3n5Fo3KFs4nuPCQfoMP0QGB953sCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS7n9aP nulgW5B35uZ4TaS8FKGogjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6S6MA0GCSqGSIb3DQEBCwUAA4IBAQAvGZZWdxIy7EcKi+Yl3vipLw9L scvWBMjyC3e4un6+Nf0gudt6UbM6nEmLVBlvVwFy2tekLTUmEM7QzemglD+8BQDV uc7YrH80mAzz+Bq29IgKSP4oUqhPC5qf+Joh5Hm1XIX/5S5BdHiWiykGJE4MR0dm s18ssk+8Tivo3hmWcbhaZBC14vrUL6MlPXmAiujOgF+PV5XSwtS3a6B/MZEARbHR cQMqyq6TKSdE0uRzlGrvGSxh8i15a4nu8ywFa5h59n6qsRUeGiT6Od/5EJRC3JzD 9+0eV+wDalLiuARsQoiYKKnz+A9UP0Liw1yl7Awvhl6Fj7r+iS+xPexyYX0Q -----END CERTIFICATE-----Generated at Sun May 3 00:42:30 2026 by rpki-client