$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141945.roa File: AS141945.roa (raw, json) Hash identifier: zWLdq7gsbc72zcyjM4GvU5jV49voOXglFPjGu2Cdgo8= Subject key identifier: C1:25:EF:08:72:F1:A7:9D:D5:17:1C:B8:AE:43:1C:28:87:5A:B5:F8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7830482B088578D4D60AD6D297FE162A33F59288 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141945.roa Signing time: Sat 02 May 2026 09:20:07 +0000 ROA not before: Sat 02 May 2026 09:15:07 +0000 ROA not after: Sat 01 May 2027 09:20:07 +0000 asID: 141945 IP address blocks: 103.166.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:30:48:2b:08:85:78:d4:d6:0a:d6:d2:97:fe:16:2a:33:f5:92:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:07 2026 GMT Not After : May 1 09:20:07 2027 GMT Subject: CN=C125EF0872F1A79DD5171CB8AE431C28875AB5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:7a:36:39:aa:9b:f1:5d:3d:2a:f3:9b:ac: fa:db:79:26:27:68:06:fb:e3:76:49:ca:5b:f2:14: d7:40:ce:54:8e:84:cf:ea:8d:ca:e0:43:a8:e9:d9: f9:1a:50:6f:cc:47:89:e7:d4:80:e1:a3:6f:93:5d: 9b:43:65:ab:5e:d8:70:74:80:8b:dd:14:ea:84:04: bc:88:7d:cd:fd:fb:18:c4:b8:4b:cd:48:8b:6f:9d: a0:93:87:89:e8:19:7e:f6:0c:73:2e:db:ab:89:44: fd:d6:f2:62:f5:b4:35:ec:6c:00:7a:27:42:8f:f4: c0:75:c0:3b:17:fd:1c:29:2c:4e:fb:3c:9e:6d:81: bf:00:87:a4:94:0a:7d:da:1c:07:98:2f:1e:6f:ba: 36:3a:73:5c:d1:3f:12:7d:d2:58:1b:d2:39:4c:48: 91:4a:fc:de:24:1a:4d:57:f5:a6:3c:09:f7:91:50: 08:44:de:cc:38:02:1e:c1:ae:b9:3f:45:a2:b0:04: 12:21:ed:31:7f:81:89:6f:87:2d:fa:3c:b1:fa:2e: 40:ec:6e:6d:eb:40:2c:2b:01:d8:9b:f7:2a:5e:9c: 12:80:4b:3c:1d:08:c3:13:14:8c:13:1f:70:06:66: d7:e3:f0:b7:cf:86:4d:e9:e7:0a:f8:e6:2c:1f:f4: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:EF:08:72:F1:A7:9D:D5:17:1C:B8:AE:43:1C:28:87:5A:B5:F8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141945.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.122.0/23 Signature Algorithm: sha256WithRSAEncryption 78:d0:63:b0:c6:de:2d:93:71:d0:d8:c7:26:3f:f3:c8:56:c6: ff:25:8c:8e:fd:dd:43:1c:a9:6d:26:f7:bf:ee:d4:da:dd:51: 03:d8:41:4f:cc:1a:e1:32:69:7f:3a:9e:7d:3b:ed:a2:bf:69: 9e:72:9e:2d:81:59:35:ac:67:d9:d4:47:b9:91:a5:6f:a2:d1: 90:c7:e1:aa:d2:37:1e:99:1f:fc:69:0e:4b:2e:08:00:c6:4a: 09:10:f1:2a:9a:12:a3:45:5d:c5:44:8a:07:a6:b3:c7:1f:64: 42:d4:28:46:77:e8:46:09:59:6c:68:e7:05:15:ef:fa:67:d6: d5:93:a4:0f:9b:ba:17:72:a8:94:a6:67:40:b9:90:99:8a:f3: a4:f7:c5:9c:ee:8a:46:9f:be:b4:7f:19:d5:b5:fd:ae:69:e1: 41:f8:8e:f2:4a:3f:7d:00:81:24:96:9d:57:67:e3:06:6f:21: a4:e0:fb:59:eb:34:bf:c9:94:78:92:70:7d:08:f6:81:e6:72: 73:dd:8c:16:06:e8:2f:5c:31:43:1a:f8:00:6a:db:df:66:20: c5:61:9c:67:9f:a5:00:e0:c7:c3:16:29:f5:f9:20:90:ed:23: c6:ea:ab:a0:6c:8a:98:74:46:ab:51:db:78:f4:a3:25:86:1c: 42:81:98:34 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeDBIKwiFeNTWCtbSl/4WKjP1kogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwN1oX DTI3MDUwMTA5MjAwN1owMzExMC8GA1UEAxMoQzEyNUVGMDg3MkYxQTc5REQ1MTcx Q0I4QUU0MzFDMjg4NzVBQjVGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOLnejY5qpvxXT0q85us+tt5JidoBvvjdknKW/IU10DOVI6Ez+qNyuBDqOnZ +RpQb8xHiefUgOGjb5Ndm0Nlq17YcHSAi90U6oQEvIh9zf37GMS4S81Ii2+doJOH iegZfvYMcy7bq4lE/dbyYvW0NexsAHonQo/0wHXAOxf9HCksTvs8nm2BvwCHpJQK fdocB5gvHm+6NjpzXNE/En3SWBvSOUxIkUr83iQaTVf1pjwJ95FQCETezDgCHsGu uT9ForAEEiHtMX+BiW+HLfo8sfouQOxubetALCsB2Jv3Kl6cEoBLPB0IwxMUjBMf cAZm1+Pwt8+GTennCvjmLB/0GCUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTBJe8I cvGnndUXHLiuQxwoh1q1+DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6Z6MA0GCSqGSIb3DQEBCwUAA4IBAQB40GOwxt4tk3HQ2McmP/PIVsb/ JYyO/d1DHKltJve/7tTa3VED2EFPzBrhMml/Op59O+2iv2mecp4tgVk1rGfZ1Ee5 kaVvotGQx+Gq0jcemR/8aQ5LLggAxkoJEPEqmhKjRV3FRIoHprPHH2RC1ChGd+hG CVlsaOcFFe/6Z9bVk6QPm7oXcqiUpmdAuZCZivOk98Wc7opGn760fxnVtf2uaeFB +I7ySj99AIEklp1XZ+MGbyGk4PtZ6zS/yZR4knB9CPaB5nJz3YwWBugvXDFDGvgA atvfZiDFYZxnn6UA4MfDFin1+SCQ7SPG6qugbIqYdEarUdt49KMlhhxCgZg0 -----END CERTIFICATE-----Generated at Sun May 3 00:42:37 2026 by rpki-client