$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141984.roa File: AS141984.roa (raw, json) Hash identifier: N/uCUGRfdQAqpIFzx7iz75u0WvVIy+GI0O9Tums4Ihk= Subject key identifier: 4C:39:91:78:FB:95:94:46:56:D6:C3:54:74:2B:1B:B1:8C:4A:25:FC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 69071D925972915C38EFEE714798D902E66A24F8 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141984.roa Signing time: Sat 02 May 2026 08:37:23 +0000 ROA not before: Sat 02 May 2026 08:32:23 +0000 ROA not after: Sat 01 May 2027 08:37:23 +0000 asID: 141984 IP address blocks: 2400:cfa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:07:1d:92:59:72:91:5c:38:ef:ee:71:47:98:d9:02:e6:6a:24:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:23 2026 GMT Not After : May 1 08:37:23 2027 GMT Subject: CN=4C399178FB95944656D6C354742B1BB18C4A25FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:a4:b2:b1:e7:5a:f6:19:76:9f:06:d1:1a: 3d:c9:5d:38:fd:dd:d4:5a:e7:c9:4f:e3:c7:82:81: 9f:f3:d4:5d:ac:14:ab:f4:f9:88:63:bd:50:c6:0d: 6c:db:83:66:73:a2:6a:2d:25:d3:15:99:14:9a:8c: 0d:40:5a:c8:cd:b7:20:8b:c9:c8:57:a1:4e:b1:c5: 48:d8:c0:a7:34:ec:06:c5:90:b3:aa:13:e6:87:b6: e8:db:10:72:45:3f:59:39:2d:27:c7:9a:13:d4:3b: 27:32:53:74:8e:fb:21:30:06:53:68:18:43:11:1e: 24:15:69:8c:5d:61:8b:54:38:b2:30:d8:88:4d:62: cd:4a:44:70:20:7f:fc:e1:62:3d:62:06:99:e9:e6: 0c:e1:b3:af:ca:31:66:62:fb:09:b3:19:07:66:e1: 78:ca:95:cd:ac:f0:14:0c:9a:24:fd:bd:e3:12:e1: 7c:d8:eb:1f:bc:9f:1d:0a:cf:84:ec:e5:d8:8e:47: 59:a7:60:31:23:b5:84:51:30:2f:20:06:c9:93:8e: 9f:da:38:2c:0c:1f:d4:93:4d:d0:17:c4:f4:8e:63: 0d:79:f7:30:f9:bc:f3:59:eb:14:b7:6f:fc:f8:a5: 71:83:37:44:92:30:76:3e:b9:79:a4:8f:96:51:db: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:91:78:FB:95:94:46:56:D6:C3:54:74:2B:1B:B1:8C:4A:25:FC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cfa0::/32 Signature Algorithm: sha256WithRSAEncryption 09:ea:97:e1:c5:9d:1d:87:8d:09:d9:ea:5e:3d:c8:b6:8e:a5: 01:3d:91:5f:26:a3:8c:e0:5a:f7:1a:83:53:61:e8:c5:91:86: 69:e1:94:0d:a3:70:fa:31:93:41:88:8a:7e:ca:62:9d:43:f9: 93:bd:cf:11:b2:fb:b4:c6:3b:33:06:a3:6d:11:b2:2c:a8:e3: b4:f9:de:de:63:ae:0a:99:97:18:8b:c9:f2:7e:57:ac:68:4a: c3:6f:e0:64:96:38:92:fe:38:43:cd:2f:e9:f2:9a:ef:51:a9: 83:c7:cb:f7:76:aa:30:b9:0b:eb:ab:3e:e9:44:e2:93:c7:76: 34:0d:7f:50:46:f0:e7:fd:d0:b5:b3:6c:92:73:3c:51:7d:ab: ed:3d:b0:86:5f:04:2a:94:29:3d:99:74:52:a4:63:d8:d1:fa: b2:d0:57:a9:dc:80:1d:1a:00:a8:f4:43:c6:f5:cd:e5:bc:4c: 81:13:ce:83:80:3b:a3:d7:f3:c0:c2:fa:2e:15:46:58:29:6f: d6:42:21:0d:4c:5f:7f:07:cb:ca:1c:6e:7a:d2:5c:eb:df:2f: 4a:c7:31:22:af:a1:46:5f:52:2e:c3:2f:4a:dc:d5:3f:69:db: 6e:8b:72:1a:de:bf:e8:b4:63:28:0b:66:a6:81:5d:39:e7:20: b2:8b:71:9b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUaQcdkllykVw47+5xR5jZAuZqJPgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIyM1oX DTI3MDUwMTA4MzcyM1owMzExMC8GA1UEAxMoNEMzOTkxNzhGQjk1OTQ0NjU2RDZD MzU0NzQyQjFCQjE4QzRBMjVGQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6bpLKx51r2GXafBtEaPcldOP3d1FrnyU/jx4KBn/PUXawUq/T5iGO9UMYN bNuDZnOiai0l0xWZFJqMDUBayM23IIvJyFehTrHFSNjApzTsBsWQs6oT5oe26NsQ ckU/WTktJ8eaE9Q7JzJTdI77ITAGU2gYQxEeJBVpjF1hi1Q4sjDYiE1izUpEcCB/ /OFiPWIGmenmDOGzr8oxZmL7CbMZB2bheMqVzazwFAyaJP294xLhfNjrH7yfHQrP hOzl2I5HWadgMSO1hFEwLyAGyZOOn9o4LAwf1JNN0BfE9I5jDXn3MPm881nrFLdv /PilcYM3RJIwdj65eaSPllHbysUCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRMOZF4 +5WURlbWw1R0KxuxjEol/DAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJADPoDANBgkqhkiG9w0BAQsFAAOCAQEACeqX4cWdHYeNCdnqXj3Ito6l AT2RXyajjOBa9xqDU2HoxZGGaeGUDaNw+jGTQYiKfspinUP5k73PEbL7tMY7Mwaj bRGyLKjjtPne3mOuCpmXGIvJ8n5XrGhKw2/gZJY4kv44Q80v6fKa71Gpg8fL93aq MLkL66s+6UTik8d2NA1/UEbw5/3QtbNsknM8UX2r7T2whl8EKpQpPZl0UqRj2NH6 stBXqdyAHRoAqPRDxvXN5bxMgRPOg4A7o9fzwML6LhVGWClv1kIhDUxffwfLyhxu etJc698vSscxIq+hRl9SLsMvStzVP2nbbotyGt6/6LRjKAtmpoFdOecgsotxmw== -----END CERTIFICATE-----Generated at Sun May 3 00:42:31 2026 by rpki-client