$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147084.roa File: AS147084.roa (raw, json) Hash identifier: enK+7q7PduTl6OzXkPWyBgO1JTLGxn8ViazWh0LbW5E= Subject key identifier: D2:CA:60:05:F3:74:B6:EE:CE:34:27:81:7C:7B:39:EB:9B:4A:CA:7F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 124B8996D1F3058C78F3B7CA374305A3CE2FFE1B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147084.roa Signing time: Sat 02 May 2026 09:21:55 +0000 ROA not before: Sat 02 May 2026 09:16:55 +0000 ROA not after: Sat 01 May 2027 09:21:55 +0000 asID: 147084 IP address blocks: 103.63.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:89:96:d1:f3:05:8c:78:f3:b7:ca:37:43:05:a3:ce:2f:fe:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:55 2026 GMT Not After : May 1 09:21:55 2027 GMT Subject: CN=D2CA6005F374B6EECE3427817C7B39EB9B4ACA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:59:52:a3:0a:60:57:74:b6:d7:79:cf:27: d1:be:91:20:f5:99:81:6e:25:c0:44:3a:de:a3:e0: e2:69:4b:bb:28:d8:2e:33:97:39:4f:55:59:f3:06: 5c:1e:20:af:a9:c5:6e:08:d4:71:08:48:c5:e9:dc: de:76:36:9c:a7:3d:89:29:c1:db:35:aa:53:5d:89: d3:9f:d8:b8:6f:82:73:26:dd:ba:68:a0:cb:f8:37: d1:4f:dc:92:c1:9f:77:e8:3f:ea:16:99:ac:3e:64: fa:8b:55:9d:f4:36:0d:22:6d:88:c6:32:5a:af:10: db:d8:c1:1b:15:6a:42:50:f9:82:7c:bb:46:61:b2: 35:ad:dc:8d:fd:07:7f:ce:95:48:03:1a:39:46:27: b5:64:fd:da:d7:e5:da:a8:53:0c:bd:e1:cd:87:2d: 2b:63:f6:4d:13:81:5f:75:fd:6e:f5:6d:4a:4a:bd: d1:56:32:ea:af:c2:25:2c:2d:33:32:36:29:5d:0b: e6:39:6d:c2:99:79:26:f0:e2:99:22:24:d2:4c:92: 33:a6:b2:8c:c5:8c:a7:77:c0:6f:a5:3d:2e:25:66: 0d:a4:12:37:09:90:0e:ea:5e:24:a8:ca:18:ac:9b: 0f:61:66:ab:6a:12:2f:13:b5:73:56:5d:f1:23:2f: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:60:05:F3:74:B6:EE:CE:34:27:81:7C:7B:39:EB:9B:4A:CA:7F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.63.191.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ec:9c:6d:c9:d0:4a:53:77:54:d2:40:9b:50:3f:c7:61:3a: 38:6d:cb:3d:2e:0d:a8:83:a0:82:87:fe:bf:bf:f7:a1:ca:f7: 9c:dc:c5:c8:21:00:cb:66:e5:f2:e8:6f:1c:6a:bc:ec:ef:b7: a5:e4:e3:94:ec:67:fe:42:5a:ca:f7:46:d0:70:14:a2:c4:66: 2d:ae:11:1a:1c:12:35:2c:34:4c:7e:d4:1f:46:ea:1b:13:e8: c8:a2:03:b3:b9:b5:34:bf:fd:59:63:18:e9:36:13:6c:e1:64: 9d:1b:a6:f2:f8:bf:2d:a2:b8:88:76:33:39:18:8e:e0:06:24: 32:1d:2c:a7:51:77:20:dd:af:03:cf:07:2c:63:a6:80:2f:50: 03:21:3f:34:d2:c4:cb:dc:08:2e:2e:04:8b:b1:57:d5:a7:bf: a6:85:10:7b:96:8b:9e:30:a5:62:96:b4:50:2e:e1:42:03:57: c1:15:b7:da:cf:40:60:0a:7a:09:c8:c7:38:9e:33:d1:fd:d7: 1c:31:a5:6d:24:97:fd:c9:72:e5:2f:0f:19:0a:0c:a7:3a:4e: 71:73:74:7a:6d:61:af:39:f4:4c:1e:63:16:27:41:e3:0c:df: 52:1a:c9:0c:20:96:cc:ff:25:ce:63:0a:2e:0b:fb:c1:c6:ca: a1:dd:39:2b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEkuJltHzBYx487fKN0MFo84v/hswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY1NVoX DTI3MDUwMTA5MjE1NVowMzExMC8GA1UEAxMoRDJDQTYwMDVGMzc0QjZFRUNFMzQy NzgxN0M3QjM5RUI5QjRBQ0E3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX9WVKjCmBXdLbXec8n0b6RIPWZgW4lwEQ63qPg4mlLuyjYLjOXOU9VWfMG XB4gr6nFbgjUcQhIxenc3nY2nKc9iSnB2zWqU12J05/YuG+Ccybdumigy/g30U/c ksGfd+g/6haZrD5k+otVnfQ2DSJtiMYyWq8Q29jBGxVqQlD5gny7RmGyNa3cjf0H f86VSAMaOUYntWT92tfl2qhTDL3hzYctK2P2TROBX3X9bvVtSkq90VYy6q/CJSwt MzI2KV0L5jltwpl5JvDimSIk0kySM6ayjMWMp3fAb6U9LiVmDaQSNwmQDupeJKjK GKybD2Fmq2oSLxO1c1Zd8SMvaL0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTSymAF 83S27s40J4F8eznrm0rKfzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MDg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZz+/MA0GCSqGSIb3DQEBCwUAA4IBAQCG7JxtydBKU3dU0kCbUD/HYTo4 bcs9Lg2og6CCh/6/v/ehyvec3MXIIQDLZuXy6G8carzs77el5OOU7Gf+QlrK90bQ cBSixGYtrhEaHBI1LDRMftQfRuobE+jIogOzubU0v/1ZYxjpNhNs4WSdG6by+L8t oriIdjM5GI7gBiQyHSynUXcg3a8DzwcsY6aAL1ADIT800sTL3AguLgSLsVfVp7+m hRB7loueMKVilrRQLuFCA1fBFbfaz0BgCnoJyMc4njPR/dccMaVtJJf9yXLlLw8Z CgynOk5xc3R6bWGvOfRMHmMWJ0HjDN9SGskMIJbM/yXOYwouC/vBxsqh3Tkr -----END CERTIFICATE-----Generated at Sun May 3 00:41:46 2026 by rpki-client