$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147094.roa File: AS147094.roa (raw, json) Hash identifier: iGliRH3cBdGMv+SBGn7N/1qMs/aQFeOeGp568UI4oGA= Subject key identifier: 5D:5B:84:75:4B:88:EB:53:B2:AC:C5:43:68:CC:C1:07:EA:4F:C9:A1 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 22AC97DD41BA0E47C8D1833A0829461957B9B44E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147094.roa Signing time: Sat 02 May 2026 08:36:14 +0000 ROA not before: Sat 02 May 2026 08:31:14 +0000 ROA not after: Sat 01 May 2027 08:36:14 +0000 asID: 147094 IP address blocks: 103.215.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ac:97:dd:41:ba:0e:47:c8:d1:83:3a:08:29:46:19:57:b9:b4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:14 2026 GMT Not After : May 1 08:36:14 2027 GMT Subject: CN=5D5B84754B88EB53B2ACC54368CCC107EA4FC9A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:2a:8a:a0:83:c7:41:cb:5d:af:90:13:90: df:f2:c4:8b:98:67:04:df:cc:f5:3f:5a:88:3b:8a: c5:9d:67:77:a8:dc:19:e0:64:43:a8:68:1c:15:7b: 30:1f:79:3d:25:db:06:ca:4b:e4:fe:1b:bf:bd:19: f1:d7:d7:5f:fb:61:16:53:7f:b3:c5:5d:ce:c8:6d: 4d:85:e7:ac:2b:1a:08:06:28:41:6c:a5:58:bf:88: 7e:b4:5c:87:a9:d6:d4:39:79:18:90:ac:d7:fe:28: b9:81:ba:fc:ab:8a:e1:ec:80:e3:fa:23:d9:26:29: 6c:ed:4d:7f:d3:48:fc:36:0a:f3:1b:45:ce:24:ec: 2c:e3:11:74:bd:b8:5c:b0:b8:4c:a1:5c:9a:c9:f1: 5a:dd:cd:51:72:09:a4:2d:e2:74:be:49:be:88:e9: bc:42:e9:57:0d:16:96:dc:e0:4d:15:a1:bf:fa:1d: f4:81:d1:54:7e:ff:b2:27:74:28:6f:14:17:3e:99: 75:73:9f:27:fa:96:fe:ab:30:1b:26:19:a3:90:9d: 78:7e:9c:af:a4:b4:75:97:f9:f2:ba:99:6a:8f:60: 7d:49:b8:2b:a6:07:24:2a:35:69:10:6e:a1:56:f2: 77:f0:91:1c:aa:dc:f9:c3:51:a6:b3:78:74:c7:dd: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:84:75:4B:88:EB:53:B2:AC:C5:43:68:CC:C1:07:EA:4F:C9:A1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147094.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.176.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:99:88:f0:20:4b:39:bc:2a:17:d7:b2:36:4f:67:77:bf:b1: 1b:d2:e7:8a:ad:47:bf:7c:81:47:e5:4a:cc:fd:02:f1:30:1a: bd:71:83:7a:fc:52:d2:0d:05:d6:26:28:cd:eb:85:6c:c8:e9: a7:71:88:ec:c6:bc:b4:ee:af:48:5d:02:66:a4:fa:71:46:22: 0d:68:36:b8:22:9c:91:e8:6b:72:ae:83:6e:28:9a:87:40:2c: b1:f9:e1:0a:63:ac:39:f2:49:5e:a7:8b:16:37:d4:f9:e3:ac: a9:c6:67:5a:c9:27:d6:99:98:8f:aa:b9:92:f5:55:aa:8d:cb: 10:d7:85:fc:14:54:c9:d6:2a:38:07:3b:89:f2:f0:e8:f8:ac: fb:a6:1b:10:4b:e7:2b:1e:39:ec:25:26:42:6c:0c:37:38:7c: 2f:4b:2f:55:70:13:c2:dd:eb:08:a7:61:03:46:90:0b:ed:28: da:0c:4f:7a:26:9f:e1:bd:aa:5f:8e:67:4b:1c:2d:f8:c1:d2: bc:ce:0b:25:f7:a6:c5:0e:4c:be:35:21:4c:f1:2d:b7:fc:5b: e6:94:6b:8a:d1:77:f6:05:b6:16:0b:8f:39:2a:c7:51:a5:5e: 25:71:87:ad:bf:ed:8a:cc:7b:fd:01:f5:a6:d0:9c:96:39:07: 5b:79:b5:8f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUIqyX3UG6DkfI0YM6CClGGVe5tE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzExNFoX DTI3MDUwMTA4MzYxNFowMzExMC8GA1UEAxMoNUQ1Qjg0NzU0Qjg4RUI1M0IyQUND NTQzNjhDQ0MxMDdFQTRGQzlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEyKoqgg8dBy12vkBOQ3/LEi5hnBN/M9T9aiDuKxZ1nd6jcGeBkQ6hoHBV7 MB95PSXbBspL5P4bv70Z8dfXX/thFlN/s8VdzshtTYXnrCsaCAYoQWylWL+IfrRc h6nW1Dl5GJCs1/4ouYG6/KuK4eyA4/oj2SYpbO1Nf9NI/DYK8xtFziTsLOMRdL24 XLC4TKFcmsnxWt3NUXIJpC3idL5JvojpvELpVw0WltzgTRWhv/od9IHRVH7/sid0 KG8UFz6ZdXOfJ/qW/qswGyYZo5CdeH6cr6S0dZf58rqZao9gfUm4K6YHJCo1aRBu oVbyd/CRHKrc+cNRprN4dMfd9ZUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRdW4R1 S4jrU7KsxUNozMEH6k/JoTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MDk0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ9ewMA0GCSqGSIb3DQEBCwUAA4IBAQALmYjwIEs5vCoX17I2T2d3v7Eb 0ueKrUe/fIFH5UrM/QLxMBq9cYN6/FLSDQXWJijN64VsyOmncYjsxry07q9IXQJm pPpxRiINaDa4IpyR6GtyroNuKJqHQCyx+eEKY6w58klep4sWN9T546ypxmdaySfW mZiPqrmS9VWqjcsQ14X8FFTJ1io4BzuJ8vDo+Kz7phsQS+crHjnsJSZCbAw3OHwv Sy9VcBPC3esIp2EDRpAL7SjaDE96Jp/hvapfjmdLHC34wdK8zgsl96bFDky+NSFM 8S23/FvmlGuK0Xf2BbYWC485KsdRpV4lcYetv+2KzHv9AfWm0JyWOQdbebWP -----END CERTIFICATE-----Generated at Sun May 3 00:42:11 2026 by rpki-client