$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141947.roa File: AS141947.roa (raw, json) Hash identifier: P53MmS457XtBEok+ljyFkWbh0veAer7vpzmphopS/po= Subject key identifier: 52:CC:A0:28:5A:93:2D:74:E1:FA:B7:65:90:4C:E9:4C:4B:FE:FB:23 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B201CD9545562B152E4976A9CC5A05F9658D549 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141947.roa Signing time: Sat 02 May 2026 09:25:43 +0000 ROA not before: Sat 02 May 2026 09:20:43 +0000 ROA not after: Sat 01 May 2027 09:25:43 +0000 asID: 141947 IP address blocks: 2001:df2:6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:20:1c:d9:54:55:62:b1:52:e4:97:6a:9c:c5:a0:5f:96:58:d5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:43 2026 GMT Not After : May 1 09:25:43 2027 GMT Subject: CN=52CCA0285A932D74E1FAB765904CE94C4BFEFB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:90:47:9b:d8:54:e7:24:26:cd:ed:fe:37: dd:c5:f4:98:d0:09:9d:8a:f5:ee:f5:69:42:f7:9a: e1:80:d1:f5:39:dd:22:24:fb:a9:70:45:62:ef:a2: d2:95:1c:58:45:aa:df:21:13:7d:0a:72:04:5e:53: 66:af:fa:45:86:63:e5:41:99:03:39:17:d6:75:fc: ab:5f:eb:1c:7f:87:d9:68:cd:94:8d:15:15:4d:ae: c0:6b:9d:38:e2:7e:fd:10:b5:c2:5c:9c:8c:d3:a4: dc:88:af:e9:9f:a6:29:18:53:bf:24:3c:ed:76:98: 28:17:7d:3b:18:f3:c8:9c:c4:1b:e4:f8:ed:37:16: 24:8c:98:6d:0b:7c:86:53:6e:3f:26:48:55:eb:7d: fa:95:36:18:05:d0:4a:05:fd:c1:d9:0b:11:21:5a: 30:ef:19:18:e4:a1:83:65:fb:59:29:69:f6:bc:97: 31:7a:d6:78:af:cf:d3:70:40:24:f0:34:93:98:65: 89:72:af:3d:0c:d9:ad:aa:64:83:0b:2b:af:c7:40: d6:eb:60:6e:69:4d:16:03:09:72:97:26:f7:f3:30: c6:06:ef:b5:4e:62:54:e8:9e:4b:45:a3:da:c8:b6: 36:b5:7e:9b:15:56:ad:48:1e:9c:1c:ad:91:23:f7: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CC:A0:28:5A:93:2D:74:E1:FA:B7:65:90:4C:E9:4C:4B:FE:FB:23 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:6c0::/48 Signature Algorithm: sha256WithRSAEncryption 11:53:9f:2d:21:bc:ae:ab:9b:47:14:d9:e9:3c:ee:26:a5:d0: a9:95:b5:7d:22:31:11:17:44:97:47:f3:15:2d:57:ac:25:d0: f5:3b:2b:f0:3d:e9:96:b9:9f:6c:96:1e:76:76:5c:1a:45:ff: 58:b3:ff:e2:be:38:cb:87:dc:17:e7:2d:15:07:7a:13:4c:93: 32:a4:fd:6f:8f:e4:f4:45:78:5f:69:1f:ba:f5:e7:83:a0:9b: b7:f4:01:ad:06:62:75:ba:87:f3:cf:82:10:25:1c:e1:bb:38: 6e:b0:04:de:7a:e0:d0:75:a4:05:21:36:61:c5:41:36:7e:f3: b1:3b:98:4f:b9:f6:09:64:be:ad:a1:f6:a1:62:fa:45:56:b4: bc:96:e8:93:0d:44:fb:e9:93:27:e4:ca:ff:9d:d1:c9:75:15: e6:2a:74:b4:d0:e5:89:9d:8a:f9:99:9e:b6:95:29:d0:b2:7e: 32:2b:9b:cf:f9:85:19:6f:95:c3:6c:fe:c9:08:70:37:56:ab: 61:8d:88:9b:e0:36:cf:5e:45:e1:a5:d5:7a:e1:a8:4a:b9:72: b4:cd:c5:da:84:33:ff:ae:28:c9:47:99:1b:91:ef:76:61:ad: 13:e8:a2:b4:a1:80:0c:5a:67:4d:5e:d5:45:34:d4:6a:09:b7: 64:c9:4c:79 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUGyAc2VRVYrFS5JdqnMWgX5ZY1UkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0M1oX DTI3MDUwMTA5MjU0M1owMzExMC8GA1UEAxMoNTJDQ0EwMjg1QTkzMkQ3NEUxRkFC NzY1OTA0Q0U5NEM0QkZFRkIyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTnkEeb2FTnJCbN7f433cX0mNAJnYr17vVpQvea4YDR9TndIiT7qXBFYu+i 0pUcWEWq3yETfQpyBF5TZq/6RYZj5UGZAzkX1nX8q1/rHH+H2WjNlI0VFU2uwGud OOJ+/RC1wlycjNOk3Iiv6Z+mKRhTvyQ87XaYKBd9OxjzyJzEG+T47TcWJIyYbQt8 hlNuPyZIVet9+pU2GAXQSgX9wdkLESFaMO8ZGOShg2X7WSlp9ryXMXrWeK/P03BA JPA0k5hliXKvPQzZrapkgwsrr8dA1utgbmlNFgMJcpcm9/MwxgbvtU5iVOieS0Wj 2si2NrV+mxVWrUgenBytkSP38qMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRSzKAo WpMtdOH6t2WQTOlMS/77IzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8gbAMA0GCSqGSIb3DQEBCwUAA4IBAQARU58tIbyuq5tHFNnpPO4m pdCplbV9IjERF0SXR/MVLVesJdD1OyvwPemWuZ9slh52dlwaRf9Ys//ivjjLh9wX 5y0VB3oTTJMypP1vj+T0RXhfaR+69eeDoJu39AGtBmJ1uofzz4IQJRzhuzhusATe euDQdaQFITZhxUE2fvOxO5hPufYJZL6tofahYvpFVrS8luiTDUT76ZMn5Mr/ndHJ dRXmKnS00OWJnYr5mZ62lSnQsn4yK5vP+YUZb5XDbP7JCHA3VqthjYib4DbPXkXh pdV64ahKuXK0zcXahDP/rijJR5kbke92Ya0T6KK0oYAMWmdNXtVFNNRqCbdkyUx5 -----END CERTIFICATE-----Generated at Sun May 3 00:42:37 2026 by rpki-client