$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141963.roa File: AS141963.roa (raw, json) Hash identifier: xLo4iOhz7xb8jMkqSvPXm229+ayckR1iNysLTZAMZBs= Subject key identifier: BE:9A:11:A6:BD:FB:1F:3A:B1:15:5B:B4:1D:EF:F1:32:2C:94:B1:33 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2ADC79731B69FC7E2DF5416A179310764A7D7C39 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141963.roa Signing time: Sat 02 May 2026 09:20:06 +0000 ROA not before: Sat 02 May 2026 09:15:06 +0000 ROA not after: Sat 01 May 2027 09:20:06 +0000 asID: 141963 IP address blocks: 103.166.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:dc:79:73:1b:69:fc:7e:2d:f5:41:6a:17:93:10:76:4a:7d:7c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:06 2026 GMT Not After : May 1 09:20:06 2027 GMT Subject: CN=BE9A11A6BDFB1F3AB1155BB41DEFF1322C94B133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:1f:63:58:d4:b2:b4:bd:ee:0a:70:28:eb: d0:ba:97:83:da:48:66:a4:8d:98:ac:0d:da:95:c9: d6:f8:06:03:39:aa:ca:5f:d4:0a:e0:82:fa:5c:e9: 52:9e:a3:04:d6:bb:96:07:b2:90:dc:82:95:b6:d4: cd:68:d4:1f:d2:eb:cb:67:8b:3d:83:fc:a8:79:78: d5:bf:c4:59:e5:03:f4:ac:04:d5:38:a7:15:74:7f: 68:7b:97:56:bb:e0:8d:6d:8e:9b:a9:81:84:30:e0: 5d:4c:bf:90:52:14:26:49:32:b6:72:de:1b:f5:71: 31:aa:f5:46:f5:6a:b6:c7:f2:21:1f:cf:4c:03:f4: bc:16:01:aa:01:f4:16:4a:09:0f:e3:25:fd:70:d3: 60:ca:0b:8f:61:44:7f:11:0b:9d:b5:9b:89:60:9a: 7c:6f:90:92:c7:af:4b:21:b7:ee:3f:c2:4b:01:9f: 33:fc:67:f9:21:1a:d0:37:85:95:1c:da:de:cf:3f: 45:26:ff:e1:db:75:bc:82:36:07:86:48:d9:7e:4b: 2c:d5:9f:fa:b7:57:96:ae:9b:02:2f:66:69:0d:24: 2e:33:e4:14:fc:f0:1b:02:08:6a:df:c7:da:e4:2a: 80:51:31:87:85:5f:03:6a:89:96:85:55:54:23:da: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:11:A6:BD:FB:1F:3A:B1:15:5B:B4:1D:EF:F1:32:2C:94:B1:33 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.234.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:a1:f0:8d:e3:9f:f5:fc:3f:ef:e9:e3:94:1f:be:da:fe:2d: 79:0c:a2:a1:0b:85:72:ae:c7:d8:f5:8e:0a:8d:cc:ca:29:c8: e2:89:8e:50:1f:fe:4d:02:c3:40:92:2c:4c:59:0f:f8:62:ce: c3:c0:a0:c0:79:97:df:59:40:cf:0c:94:60:ac:34:aa:06:3a: 8a:7e:b2:9e:e0:5c:39:c2:69:f6:30:5f:81:d0:ba:08:ca:89: 3f:29:d7:f5:0c:53:27:52:a8:27:0e:be:70:49:1f:36:32:d7: 57:11:92:8b:4b:03:2f:03:91:ca:97:94:6b:52:8c:6f:58:2c: 63:bf:f3:52:ec:99:90:1c:22:54:1b:83:7a:a7:b9:c0:93:71: 71:cc:1c:65:ef:e2:4a:09:8b:ae:ca:3a:f9:57:4e:2e:1e:5e: f2:cd:ee:03:82:20:08:d6:51:52:98:e3:00:96:f0:d1:c7:37: 52:20:d4:76:5d:00:fd:c2:73:51:30:2b:46:60:13:30:ff:fc: ce:f0:e9:db:f3:c3:23:9c:38:4b:d3:72:c7:6f:f3:cf:b5:62: 08:ed:3d:3e:7c:82:d9:a8:77:83:ca:8f:54:e3:2c:8d:01:62: 92:6f:c8:e4:ce:df:76:5c:00:a6:d7:f9:14:e3:10:39:7b:48: 77:03:f8:6d -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUKtx5cxtp/H4t9UFqF5MQdkp9fDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwNloX DTI3MDUwMTA5MjAwNlowMzExMC8GA1UEAxMoQkU5QTExQTZCREZCMUYzQUIxMTU1 QkI0MURFRkYxMzIyQzk0QjEzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWzH2NY1LK0ve4KcCjr0LqXg9pIZqSNmKwN2pXJ1vgGAzmqyl/UCuCC+lzp Up6jBNa7lgeykNyClbbUzWjUH9Lry2eLPYP8qHl41b/EWeUD9KwE1TinFXR/aHuX VrvgjW2Om6mBhDDgXUy/kFIUJkkytnLeG/VxMar1RvVqtsfyIR/PTAP0vBYBqgH0 FkoJD+Ml/XDTYMoLj2FEfxELnbWbiWCafG+QksevSyG37j/CSwGfM/xn+SEa0DeF lRza3s8/RSb/4dt1vII2B4ZI2X5LLNWf+rdXlq6bAi9maQ0kLjPkFPzwGwIIat/H 2uQqgFExh4VfA2qJloVVVCPatzsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS+mhGm vfsfOrEVW7Qd7/EyLJSxMzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTYzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6bqMA0GCSqGSIb3DQEBCwUAA4IBAQBeofCN45/1/D/v6eOUH77a/i15 DKKhC4VyrsfY9Y4KjczKKcjiiY5QH/5NAsNAkixMWQ/4Ys7DwKDAeZffWUDPDJRg rDSqBjqKfrKe4Fw5wmn2MF+B0LoIyok/Kdf1DFMnUqgnDr5wSR82MtdXEZKLSwMv A5HKl5RrUoxvWCxjv/NS7JmQHCJUG4N6p7nAk3FxzBxl7+JKCYuuyjr5V04uHl7y ze4DgiAI1lFSmOMAlvDRxzdSINR2XQD9wnNRMCtGYBMw//zO8Onb88MjnDhL03LH b/PPtWII7T0+fILZqHeDyo9U4yyNAWKSb8jkzt92XACm1/kU4xA5e0h3A/ht -----END CERTIFICATE-----Generated at Sun May 3 00:40:32 2026 by rpki-client