$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141966.roa File: AS141966.roa (raw, json) Hash identifier: OVjGSKZzMqHgPYlWaI9DG8qDdgInQi78nxBtLa/ZA5w= Subject key identifier: D2:FD:A7:9F:D0:82:29:90:E4:0F:BA:F9:7E:24:A8:EA:6D:11:43:A5 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: AB7FCF064EA3BE3557C58DC9FF0CCE96C7369F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141966.roa Signing time: Sat 02 May 2026 08:36:49 +0000 ROA not before: Sat 02 May 2026 08:31:49 +0000 ROA not after: Sat 01 May 2027 08:36:49 +0000 asID: 141966 IP address blocks: 2001:df6:a380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ab:7f:cf:06:4e:a3:be:35:57:c5:8d:c9:ff:0c:ce:96:c7:36:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:49 2026 GMT Not After : May 1 08:36:49 2027 GMT Subject: CN=D2FDA79FD0822990E40FBAF97E24A8EA6D1143A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:3d:30:0b:1e:b6:7f:f6:96:77:c5:1f:a5: 87:e5:35:4c:c9:a5:21:6e:d2:15:db:be:8d:6e:67: 97:c4:98:cf:ae:07:f8:e9:97:ff:31:75:8a:c0:ce: 55:96:db:f6:d7:d8:fa:d7:7d:65:93:21:10:aa:f8: 56:9a:b5:02:84:42:b1:4e:63:30:a6:b8:04:82:19: 90:82:f5:6d:13:7a:b5:ca:e1:bc:66:c2:84:b1:49: f4:c8:bf:41:21:08:6b:f1:2d:e6:55:0d:76:af:08: 3c:cc:69:c4:63:b3:ac:08:36:e6:36:1a:99:d4:cc: 5f:a7:cb:0b:12:28:25:ff:84:60:92:c3:bb:8f:54: 8e:97:3d:39:3e:b2:01:3a:f4:95:03:d9:40:b9:37: 31:4f:0f:c8:4a:7a:a6:3e:50:7d:e4:57:31:cf:f7: 17:67:88:91:60:2a:9b:5b:57:20:fb:1f:5f:e0:a9: 14:b2:fc:b3:9f:8b:94:54:68:7d:b1:e2:46:92:ba: 46:fb:ae:2c:63:37:5c:e9:8c:4c:2b:c4:99:17:ce: a4:c3:11:ec:d1:3b:ae:fa:2a:0d:17:91:fc:f5:1e: 46:a8:1b:66:22:ee:f9:02:da:ee:bb:a9:ae:2e:02: 2d:c4:ff:d7:e0:35:f8:7a:89:7a:0c:5a:d3:2b:3c: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FD:A7:9F:D0:82:29:90:E4:0F:BA:F9:7E:24:A8:EA:6D:11:43:A5 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141966.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a380::/48 Signature Algorithm: sha256WithRSAEncryption a7:d9:5b:17:a9:ab:da:75:ca:28:4e:d0:ba:96:39:15:88:c0: 34:16:6c:bc:fc:c1:b6:d6:52:17:c7:89:6c:de:cf:1a:97:6b: d4:87:dc:7d:da:30:c2:3d:aa:8f:7e:06:d7:e9:4e:b0:be:91: 13:42:3d:e0:7a:86:b1:30:bb:b2:3e:f9:4a:d3:b8:86:f2:5d: 3e:67:ce:56:68:c8:4e:d2:7e:ba:d3:fb:fb:bf:c3:28:79:9f: b2:5f:c2:1c:a7:1d:c6:ca:8b:51:23:a0:25:ad:71:a3:a7:6f: e6:64:75:51:4f:a8:66:22:58:ed:c8:21:b1:6e:b0:96:8f:10: 7c:c2:f2:c5:fd:c6:33:df:bb:1b:3d:74:b0:6e:5c:8e:4c:d0: d3:c6:41:74:fc:ca:76:c2:98:f9:f7:8f:82:39:b1:b4:7c:fc: eb:ad:ba:48:b2:dc:11:10:84:63:d4:74:fe:4c:37:93:d5:b5: 47:45:e6:26:ec:37:98:68:0e:be:2a:5f:86:65:32:5d:ab:f7: e4:dd:44:5e:bf:7b:14:dd:bd:5f:68:99:26:d4:41:f7:6f:35: 31:87:9d:ff:ea:65:32:28:c6:aa:ff:9a:11:8d:7c:99:22:2d: 14:ab:33:fd:9b:d0:7c:32:03:2c:2f:7f:5b:91:a0:0c:f1:75: 85:f1:03:02 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUAKt/zwZOo741V8WNyf8MzpbHNp8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0OVoX DTI3MDUwMTA4MzY0OVowMzExMC8GA1UEAxMoRDJGREE3OUZEMDgyMjk5MEU0MEZC QUY5N0UyNEE4RUE2RDExNDNBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2mPTALHrZ/9pZ3xR+lh+U1TMmlIW7SFdu+jW5nl8SYz64H+OmX/zF1isDO VZbb9tfY+td9ZZMhEKr4Vpq1AoRCsU5jMKa4BIIZkIL1bRN6tcrhvGbChLFJ9Mi/ QSEIa/Et5lUNdq8IPMxpxGOzrAg25jYamdTMX6fLCxIoJf+EYJLDu49Ujpc9OT6y ATr0lQPZQLk3MU8PyEp6pj5QfeRXMc/3F2eIkWAqm1tXIPsfX+CpFLL8s5+LlFRo fbHiRpK6RvuuLGM3XOmMTCvEmRfOpMMR7NE7rvoqDReR/PUeRqgbZiLu+QLa7rup ri4CLcT/1+A1+HqJegxa0ys87KMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTS/aef 0IIpkOQPuvl+JKjqbRFDpTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9qOAMA0GCSqGSIb3DQEBCwUAA4IBAQCn2VsXqavadcooTtC6ljkV iMA0Fmy8/MG21lIXx4ls3s8al2vUh9x92jDCPaqPfgbX6U6wvpETQj3geoaxMLuy PvlK07iG8l0+Z85WaMhO0n660/v7v8MoeZ+yX8Icpx3GyotRI6AlrXGjp2/mZHVR T6hmIljtyCGxbrCWjxB8wvLF/cYz37sbPXSwblyOTNDTxkF0/Mp2wpj594+CObG0 fPzrrbpIstwREIRj1HT+TDeT1bVHReYm7DeYaA6+Kl+GZTJdq/fk3URev3sU3b1f aJkm1EH3bzUxh53/6mUyKMaq/5oRjXyZIi0UqzP9m9B8MgMsL39bkaAM8XWF8QMC -----END CERTIFICATE-----Generated at Sun May 3 01:44:15 2026 by rpki-client