$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141959.roa File: AS141959.roa (raw, json) Hash identifier: MZLtED+YA7XvclBT88adLGEa1glS9Kvrzzu1+dLPU9k= Subject key identifier: 4B:84:93:DD:AC:CA:E6:05:8E:30:F0:80:A1:FB:88:CC:A3:0A:C5:32 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 423ACF225F0BC09698FA83895FB6805A36F1AFCE Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141959.roa Signing time: Sat 02 May 2026 09:19:17 +0000 ROA not before: Sat 02 May 2026 09:14:17 +0000 ROA not after: Sat 01 May 2027 09:19:17 +0000 asID: 141959 IP address blocks: 103.115.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3a:cf:22:5f:0b:c0:96:98:fa:83:89:5f:b6:80:5a:36:f1:af:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:14:17 2026 GMT Not After : May 1 09:19:17 2027 GMT Subject: CN=4B8493DDACCAE6058E30F080A1FB88CCA30AC532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:6d:2a:a1:8a:28:fc:1c:27:05:43:dc:84: 57:74:03:6a:3c:4c:12:e0:7b:31:bf:c3:6e:28:b9: 13:4a:37:d3:52:fe:a8:bd:bf:fb:c5:71:ac:e4:7a: fa:1d:3c:53:9e:ca:2c:f5:ce:e1:7e:c7:2e:8a:29: d2:8e:c1:52:ad:9c:36:fc:84:66:5f:37:5b:3e:7f: 39:f1:36:53:f1:68:b8:28:59:bd:cb:9d:b4:94:7e: 5c:d1:16:47:84:d4:3f:31:d1:9b:03:0e:44:b4:24: 89:b1:52:62:63:55:b1:2d:f4:2b:e8:41:9e:23:36: ec:99:78:19:6c:73:38:2f:86:9f:b4:7a:33:9c:1f: f8:7a:b9:ac:07:dc:f8:6e:66:c1:4c:c9:54:31:f4: 50:92:50:77:a8:3d:17:44:44:41:35:65:5b:33:83: e6:0f:ef:60:af:af:18:70:7f:7e:a3:ab:ae:63:7d: 9f:cf:a4:e4:ee:6d:ea:38:43:f3:75:3a:fd:23:1f: 00:48:68:9c:67:57:a5:89:63:3f:4a:7b:cc:0c:6c: 95:3f:10:5d:ff:07:36:aa:57:0e:61:65:f4:18:06: 8b:27:b9:2f:1f:79:cd:7a:1c:fb:e1:fb:38:26:78: 54:13:8e:28:54:12:3a:2c:3d:76:d4:2f:5f:67:a2: 55:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:84:93:DD:AC:CA:E6:05:8E:30:F0:80:A1:FB:88:CC:A3:0A:C5:32 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.176.0/22 Signature Algorithm: sha256WithRSAEncryption 83:88:dd:04:61:37:10:19:cb:68:b2:67:9a:c5:15:af:af:32: d2:5e:6c:4f:26:5b:39:90:2e:8b:e8:82:67:98:7b:6f:a7:a2: 4f:11:b6:84:aa:1d:12:08:c1:6d:5b:49:4e:cc:54:1f:18:c9: 24:80:70:35:e7:47:36:41:af:8f:a4:b9:47:40:e0:8c:be:e9: fe:5a:07:ed:a1:4f:b2:e9:0b:96:b6:9a:46:37:b3:a9:9c:19: 69:2b:9d:18:00:56:48:42:27:6e:d8:fb:34:43:96:a1:7e:e4: 6d:46:24:80:c2:c8:1c:20:cd:fe:86:df:a3:cb:5c:a4:85:f2: 8f:31:71:e6:3e:56:22:7d:7b:26:fa:34:b4:6f:50:68:02:4e: bb:23:18:83:c0:fc:af:b2:42:9c:4b:58:12:e0:49:6e:b6:e0: 99:59:76:b5:1a:11:d4:08:0e:10:d7:d3:3c:72:e7:6e:14:74: e4:a4:7e:06:ed:35:93:70:60:99:78:a4:f2:61:5f:e8:66:41: f0:5f:61:aa:94:88:8b:c6:26:76:5b:fb:c6:aa:58:a6:05:fa: 96:39:21:8c:62:13:22:98:6c:7d:a5:15:73:89:e2:90:e8:59: 7c:96:b8:7f:34:eb:3e:bf:60:dc:07:19:8c:a4:90:18:eb:cd: 86:8f:74:2a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQjrPIl8LwJaY+oOJX7aAWjbxr84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTQxN1oX DTI3MDUwMTA5MTkxN1owMzExMC8GA1UEAxMoNEI4NDkzRERBQ0NBRTYwNThFMzBG MDgwQTFGQjg4Q0NBMzBBQzUzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSEbSqhiij8HCcFQ9yEV3QDajxMEuB7Mb/Dbii5E0o301L+qL2/+8VxrOR6 +h08U57KLPXO4X7HLoop0o7BUq2cNvyEZl83Wz5/OfE2U/FouChZvcudtJR+XNEW R4TUPzHRmwMORLQkibFSYmNVsS30K+hBniM27Jl4GWxzOC+Gn7R6M5wf+Hq5rAfc +G5mwUzJVDH0UJJQd6g9F0REQTVlWzOD5g/vYK+vGHB/fqOrrmN9n8+k5O5t6jhD 83U6/SMfAEhonGdXpYljP0p7zAxslT8QXf8HNqpXDmFl9BgGiye5Lx95zXoc++H7 OCZ4VBOOKFQSOiw9dtQvX2eiVWMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLhJPd rMrmBY4w8ICh+4jMowrFMjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTU5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ3OwMA0GCSqGSIb3DQEBCwUAA4IBAQCDiN0EYTcQGctosmeaxRWvrzLS XmxPJls5kC6L6IJnmHtvp6JPEbaEqh0SCMFtW0lOzFQfGMkkgHA150c2Qa+PpLlH QOCMvun+WgftoU+y6QuWtppGN7OpnBlpK50YAFZIQidu2Ps0Q5ahfuRtRiSAwsgc IM3+ht+jy1ykhfKPMXHmPlYifXsm+jS0b1BoAk67IxiDwPyvskKcS1gS4ElutuCZ WXa1GhHUCA4Q19M8cuduFHTkpH4G7TWTcGCZeKTyYV/oZkHwX2GqlIiLxiZ2W/vG qlimBfqWOSGMYhMimGx9pRVzieKQ6Fl8lrh/NOs+v2DcBxmMpJAY682Gj3Qq -----END CERTIFICATE-----Generated at Sun May 3 00:42:31 2026 by rpki-client