$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147076.roa File: AS147076.roa (raw, json) Hash identifier: 9yzt7gG+uu1/RP/ADjdFa3ax8A5qX+YRplrqUo7nb6E= Subject key identifier: E4:26:AD:7C:40:D8:AE:B7:FD:D6:A0:23:1E:E1:53:04:94:D5:8C:0C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 336E0A2882B91C280B1E07408AA511233435798A Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147076.roa Signing time: Sat 02 May 2026 09:21:09 +0000 ROA not before: Sat 02 May 2026 09:16:09 +0000 ROA not after: Sat 01 May 2027 09:21:09 +0000 asID: 147076 IP address blocks: 103.172.96.0/24 maxlen: 24 103.189.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6e:0a:28:82:b9:1c:28:0b:1e:07:40:8a:a5:11:23:34:35:79:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:09 2026 GMT Not After : May 1 09:21:09 2027 GMT Subject: CN=E426AD7C40D8AEB7FDD6A0231EE1530494D58C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:a7:26:8a:5f:d4:be:ed:32:03:05:e2:02: 0f:dc:c9:06:cc:ef:40:d6:f8:cb:ff:56:bb:37:df: 3a:fd:d4:9d:f6:b3:6d:b0:0c:5a:be:ea:0f:ed:c4: 6a:1c:b8:c5:ce:e4:b2:02:a5:bc:eb:1d:25:f4:1b: dc:20:46:16:5e:b6:12:b6:e6:1b:72:02:b8:46:e2: 4b:80:f6:ab:b8:d7:04:83:ef:39:82:9b:0e:d1:c8: 5d:0d:b2:30:d9:35:68:ef:5b:4c:4f:83:03:42:bf: ff:7c:91:14:ed:e4:fd:2c:69:e6:06:e8:6c:14:68: 09:3c:cf:c6:ea:5c:91:83:b8:de:5e:9d:b2:ac:ac: 49:ef:f6:01:88:eb:ef:6f:37:fa:e7:7a:dc:2e:01: d7:b4:73:15:e3:09:db:d0:4e:0f:82:4e:3a:24:8c: 07:96:e7:0e:0f:20:07:96:0e:23:82:59:b2:eb:e8: 00:1c:0e:d2:6a:a6:f8:93:66:05:e1:55:c4:30:80: bd:3f:2a:fb:62:10:69:a6:44:a1:7d:a9:61:88:b0: ff:67:27:34:51:ed:c1:c3:35:c3:86:56:d7:e5:0b: b8:5e:9a:4b:a5:1a:73:ca:a5:33:7e:f0:ab:01:02: 1a:f2:78:e2:9f:cd:2d:fb:56:5a:8d:44:5a:70:df: 74:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:AD:7C:40:D8:AE:B7:FD:D6:A0:23:1E:E1:53:04:94:D5:8C:0C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147076.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.96.0/24 103.189.229.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:16:a2:ae:d1:4b:73:f4:db:f6:04:bf:3f:a4:ff:76:b9:9a: fe:23:d0:88:ac:88:09:54:8c:25:7a:68:d1:37:0a:7e:4e:99: 47:e5:db:b3:0a:07:cc:11:36:2b:a7:0e:90:65:cb:62:9d:15: 05:a7:80:dd:b0:7b:8b:35:90:82:f1:10:07:38:f0:89:8f:64: 7d:d5:23:cc:50:26:09:a5:99:ca:40:b8:9c:0d:68:63:61:bc: 7a:e8:dd:b7:b8:a6:4d:a7:1c:69:ce:bc:54:b7:9b:60:f1:4f: e1:82:d1:32:e0:bc:36:1c:d4:65:0c:d1:85:be:a8:8e:06:bb: 58:ef:3d:5c:76:f3:52:6f:80:d4:55:c7:6d:e6:d1:d5:7a:92: 06:0b:5c:87:d7:1f:8c:a8:7f:be:c1:47:3a:bb:19:46:a1:22: 50:ac:1a:6c:40:7b:c7:14:95:83:a3:96:16:9b:3b:8e:4a:d7: b7:b1:56:f5:55:f4:c5:c9:70:c3:90:18:ce:c8:71:30:a5:d2: 3c:f7:66:36:8e:b3:36:72:46:7a:a5:61:41:fe:5c:5a:a7:dc: 92:67:b0:ff:ae:5b:5b:c0:8f:89:fb:4f:aa:b4:71:42:23:1e: 45:86:bd:0e:9d:cb:b1:94:ef:d2:c4:5c:92:1b:1f:dd:d9:74: c3:23:29:d7 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUM24KKIK5HCgLHgdAiqURIzQ1eYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTYwOVoX DTI3MDUwMTA5MjEwOVowMzExMC8GA1UEAxMoRTQyNkFEN0M0MEQ4QUVCN0ZERDZB MDIzMUVFMTUzMDQ5NEQ1OEMwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuDpyaKX9S+7TIDBeICD9zJBszvQNb4y/9WuzffOv3UnfazbbAMWr7qD+3E ahy4xc7ksgKlvOsdJfQb3CBGFl62ErbmG3ICuEbiS4D2q7jXBIPvOYKbDtHIXQ2y MNk1aO9bTE+DA0K//3yRFO3k/Sxp5gbobBRoCTzPxupckYO43l6dsqysSe/2AYjr 7283+ud63C4B17RzFeMJ29BOD4JOOiSMB5bnDg8gB5YOI4JZsuvoABwO0mqm+JNm BeFVxDCAvT8q+2IQaaZEoX2pYYiw/2cnNFHtwcM1w4ZW1+ULuF6aS6Uac8qlM37w qwECGvJ44p/NLftWWo1EWnDfdFsCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTkJq18 QNiut/3WoCMe4VMElNWMDDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MDc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ6xgAwQAZ73lMA0GCSqGSIb3DQEBCwUAA4IBAQCPFqKu0Utz9Nv2BL8/ pP92uZr+I9CIrIgJVIwlemjRNwp+TplH5duzCgfMETYrpw6QZctinRUFp4DdsHuL NZCC8RAHOPCJj2R91SPMUCYJpZnKQLicDWhjYbx66N23uKZNpxxpzrxUt5tg8U/h gtEy4Lw2HNRlDNGFvqiOBrtY7z1cdvNSb4DUVcdt5tHVepIGC1yH1x+MqH++wUc6 uxlGoSJQrBpsQHvHFJWDo5YWmzuOSte3sVb1VfTFyXDDkBjOyHEwpdI892Y2jrM2 ckZ6pWFB/lxap9ySZ7D/rltbwI+J+0+qtHFCIx5Fhr0OncuxlO/SxFySGx/d2XTD IynX -----END CERTIFICATE-----Generated at Sun May 3 00:40:39 2026 by rpki-client