$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa File: AS141961.roa (raw, json) Hash identifier: g6Z/uU+kExeWQ/NMZ+qRznluGYS5B74Re/3mSGW+uVw= Subject key identifier: D3:D6:FC:3F:4B:A0:5A:F4:69:9F:DF:27:C4:F1:8A:D4:E4:E1:FC:ED Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1FC4D5C2066092B30B2CDBE579F60B3CC549180D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa Signing time: Sat 02 May 2026 09:20:15 +0000 ROA not before: Sat 02 May 2026 09:15:15 +0000 ROA not after: Sat 01 May 2027 09:20:15 +0000 asID: 141961 IP address blocks: 103.166.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c4:d5:c2:06:60:92:b3:0b:2c:db:e5:79:f6:0b:3c:c5:49:18:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:15 2026 GMT Not After : May 1 09:20:15 2027 GMT Subject: CN=D3D6FC3F4BA05AF4699FDF27C4F18AD4E4E1FCED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:1b:dd:91:0a:ee:5c:22:e7:22:3b:9c:3d: ba:dc:25:cf:d1:2a:3a:28:52:65:93:44:4e:7e:28: 6b:1f:7a:97:c6:1e:a3:41:d9:b3:bb:60:ee:db:7a: 94:e9:15:24:6d:27:18:86:1b:a4:da:0e:1d:94:eb: 18:b5:2e:0d:0f:36:81:2f:72:d0:b6:57:89:17:66: d7:37:c2:5f:40:9f:90:ff:a7:1f:26:b8:7c:93:9f: 62:78:39:5d:ab:16:77:a0:d1:c3:47:99:13:5d:20: 4f:bc:b8:f0:59:91:3c:4a:ed:0e:63:f7:3a:43:c9: 57:fb:eb:4f:6e:68:d7:c0:35:56:84:68:81:52:cb: 84:86:3e:0c:d0:10:af:51:35:fb:c2:e4:11:38:0e: 7e:de:40:a4:b7:2d:e6:af:e0:5f:68:47:a3:ec:7f: b8:3f:4a:8b:f6:2d:ea:49:b5:a6:7a:74:1e:11:45: c1:dc:3e:db:52:91:45:cc:39:48:a5:57:bb:87:e2: 64:f2:aa:25:4e:44:32:a8:d0:96:10:f2:73:5e:d9: f3:f0:6b:d6:cf:06:a2:45:96:cf:d0:e4:77:ed:42: 92:e1:c2:41:55:f7:fc:64:95:44:4f:2a:f4:20:59: c7:6f:f3:a8:a6:ff:f1:ed:fe:79:0a:2f:bd:0a:cd: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D6:FC:3F:4B:A0:5A:F4:69:9F:DF:27:C4:F1:8A:D4:E4:E1:FC:ED X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.192.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b4:05:95:d9:ac:2c:a4:16:8e:93:89:55:3f:cd:68:00:a0: 76:d0:ef:58:71:ba:16:63:fb:83:56:27:0f:c3:d8:fd:ec:d3: a5:0a:1f:77:93:98:16:1c:dd:7b:29:a0:b1:9c:31:d4:1f:41: fd:bc:20:10:da:ae:fa:a5:a5:b8:51:bd:6e:87:cd:d2:fc:1b: 02:f4:38:39:7a:c2:7f:8c:58:35:46:ad:e1:c6:4b:60:95:b5: 77:dd:3a:a6:ed:3f:67:df:b1:f3:e3:31:8e:7e:d2:06:09:b0: ea:87:0b:d7:31:50:e9:55:8e:24:9c:e5:76:aa:ca:88:1c:8a: 8b:89:0e:aa:3d:66:d9:c1:e3:e3:84:0d:fe:3a:87:23:87:c4: 08:10:33:e9:af:cd:fd:71:2d:ee:c8:5c:70:31:6b:97:9e:de: 71:ac:7e:c6:06:8c:df:ab:d9:76:3d:b2:e6:82:30:91:e5:1e: 6d:4d:49:11:36:8b:02:4f:81:a0:da:c3:69:44:79:07:36:05: c1:c9:a2:ad:eb:af:5c:8b:54:4a:6e:bc:22:60:2a:f0:d0:4a: 2c:cd:12:fd:c3:10:0c:00:be:a1:0a:44:55:2d:d0:e5:8e:29: 44:a8:35:c8:61:ad:56:e6:56:09:3f:10:68:19:6d:5e:63:cf: b6:2d:c6:59 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUH8TVwgZgkrMLLNvlefYLPMVJGA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUxNVoX DTI3MDUwMTA5MjAxNVowMzExMC8GA1UEAxMoRDNENkZDM0Y0QkEwNUFGNDY5OUZE RjI3QzRGMThBRDRFNEUxRkNFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7DG92RCu5cIuciO5w9utwlz9EqOihSZZNETn4oax96l8Yeo0HZs7tg7tt6 lOkVJG0nGIYbpNoOHZTrGLUuDQ82gS9y0LZXiRdm1zfCX0CfkP+nHya4fJOfYng5 XasWd6DRw0eZE10gT7y48FmRPErtDmP3OkPJV/vrT25o18A1VoRogVLLhIY+DNAQ r1E1+8LkETgOft5ApLct5q/gX2hHo+x/uD9Ki/Yt6km1pnp0HhFFwdw+21KRRcw5 SKVXu4fiZPKqJU5EMqjQlhDyc17Z8/Br1s8GokWWz9Dkd+1CkuHCQVX3/GSVRE8q 9CBZx2/zqKb/8e3+eQovvQrNrisCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTT1vw/ S6Ba9Gmf3yfE8YrU5OH87TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6bAMA0GCSqGSIb3DQEBCwUAA4IBAQBNtAWV2awspBaOk4lVP81oAKB2 0O9YcboWY/uDVicPw9j97NOlCh93k5gWHN17KaCxnDHUH0H9vCAQ2q76paW4Ub1u h83S/BsC9Dg5esJ/jFg1Rq3hxktglbV33Tqm7T9n37Hz4zGOftIGCbDqhwvXMVDp VY4knOV2qsqIHIqLiQ6qPWbZwePjhA3+Oocjh8QIEDPpr839cS3uyFxwMWuXnt5x rH7GBozfq9l2PbLmgjCR5R5tTUkRNosCT4Gg2sNpRHkHNgXByaKt669ci1RKbrwi YCrw0EoszRL9wxAMAL6hCkRVLdDljilEqDXIYa1W5lYJPxBoGW1eY8+2LcZZ -----END CERTIFICATE-----Generated at Sun May 3 00:42:36 2026 by rpki-client