$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147104.roa File: AS147104.roa (raw, json) Hash identifier: WFAiuliK3twlsLUOirYoeWmfMgX4b9IV5BibS+I6wfU= Subject key identifier: 4D:D1:BE:AB:C6:34:0A:D6:5F:AB:E0:15:30:7A:8C:F9:9F:B1:A0:2C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6160967037F1BB03A3AAA9024205CB5A37AB2F19 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147104.roa Signing time: Sat 02 May 2026 09:20:42 +0000 ROA not before: Sat 02 May 2026 09:15:42 +0000 ROA not after: Sat 01 May 2027 09:20:42 +0000 asID: 147104 IP address blocks: 103.174.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:60:96:70:37:f1:bb:03:a3:aa:a9:02:42:05:cb:5a:37:ab:2f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:42 2026 GMT Not After : May 1 09:20:42 2027 GMT Subject: CN=4DD1BEABC6340AD65FABE015307A8CF99FB1A02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:f4:59:e2:eb:68:4c:eb:5d:db:f6:1d:f6: c3:98:02:7b:b0:aa:af:72:c9:46:5b:02:80:9a:ef: aa:af:18:04:21:15:af:c9:f8:35:67:44:0e:2f:8a: c6:13:f1:4d:96:04:45:da:08:bd:20:41:9e:73:16: a3:b1:86:82:a2:a9:29:7e:9b:6b:4f:38:b1:14:d8: 0d:07:e6:9e:40:10:84:bc:75:7c:95:7e:22:c4:59: 6f:45:0b:f7:d5:e1:19:6c:7c:9c:f5:90:d9:a5:74: eb:bd:f2:c6:f4:2b:3e:ed:cc:c7:5c:f8:a9:9e:64: 13:b6:10:f8:ec:fb:66:87:2e:6c:ff:fb:9e:b0:93: 05:ee:73:8a:8c:4d:22:04:52:37:af:45:76:d8:f3: 17:13:f2:da:24:07:b8:86:0f:59:0f:70:4a:e9:44: da:90:cc:1e:e3:1c:1c:dd:d3:18:6d:65:c4:c4:3a: eb:80:fc:19:69:ba:b5:29:4a:e8:ad:4e:ad:cf:8a: ce:d9:96:7c:41:60:30:a7:7f:68:98:5b:41:22:6b: a4:5d:93:fb:55:17:66:d0:a1:33:0e:c7:e9:34:31: 33:d2:bc:8c:ae:44:7b:9d:e4:32:d8:a3:03:a2:7d: 15:0a:24:35:43:20:7a:56:16:ba:9a:f9:f5:42:2b: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:BE:AB:C6:34:0A:D6:5F:AB:E0:15:30:7A:8C:F9:9F:B1:A0:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:64:27:7b:4e:95:9e:bd:c6:8a:af:0d:12:29:32:fb:e0:b8: 88:9f:3d:0e:ab:62:54:99:91:8e:ec:5e:cd:db:31:cd:ba:b9: 26:3a:c2:1c:62:12:7c:f3:2c:96:5d:1c:db:8c:9d:b6:bc:b9: e7:18:dc:36:a0:b4:b1:03:a9:64:01:2b:f6:0b:a3:87:1f:a9: b5:a0:3c:77:be:43:8e:a5:44:a8:4b:2d:bd:f7:7e:60:6d:6a: 20:fa:d3:c2:be:70:28:7d:de:2f:f4:cf:a5:43:49:b0:b4:ef: 1e:a8:a4:38:71:06:41:83:4b:71:93:f2:7c:18:32:e7:c3:52: e1:9d:e8:36:4d:ba:45:e8:7f:87:54:84:61:81:c2:ad:fc:45: 31:1a:e9:93:ce:5c:7f:bd:23:cf:9d:7e:b1:70:2a:4d:92:cb: 3e:eb:c5:c0:85:f3:00:fa:50:2e:6e:66:13:d9:ed:1b:35:5e: 4c:82:b8:04:cd:b9:7d:04:2d:f6:03:bc:7c:77:f0:5c:d4:a6: f0:69:20:d6:1c:00:1c:55:4a:e9:e3:c8:8b:ef:d7:07:57:70: e1:b6:d3:91:1d:14:ad:f5:2f:d7:c4:d1:58:5b:16:5c:30:7f: 34:c4:97:6f:32:7a:ab:c3:82:ea:f5:9f:d8:10:85:ee:13:22: c1:10:69:25 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUYWCWcDfxuwOjqqkCQgXLWjerLxkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU0MloX DTI3MDUwMTA5MjA0MlowMzExMC8GA1UEAxMoNEREMUJFQUJDNjM0MEFENjVGQUJF MDE1MzA3QThDRjk5RkIxQTAyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2o9Fni62hM613b9h32w5gCe7Cqr3LJRlsCgJrvqq8YBCEVr8n4NWdEDi+K xhPxTZYERdoIvSBBnnMWo7GGgqKpKX6ba084sRTYDQfmnkAQhLx1fJV+IsRZb0UL 99XhGWx8nPWQ2aV0673yxvQrPu3Mx1z4qZ5kE7YQ+Oz7ZocubP/7nrCTBe5zioxN IgRSN69FdtjzFxPy2iQHuIYPWQ9wSulE2pDMHuMcHN3TGG1lxMQ664D8GWm6tSlK 6K1Orc+KztmWfEFgMKd/aJhbQSJrpF2T+1UXZtChMw7H6TQxM9K8jK5Ee53kMtij A6J9FQokNUMgelYWupr59UIr5f8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRN0b6r xjQK1l+r4BUweoz5n7GgLDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTA0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ66sMA0GCSqGSIb3DQEBCwUAA4IBAQAfZCd7TpWevcaKrw0SKTL74LiI nz0Oq2JUmZGO7F7N2zHNurkmOsIcYhJ88yyWXRzbjJ22vLnnGNw2oLSxA6lkASv2 C6OHH6m1oDx3vkOOpUSoSy29935gbWog+tPCvnAofd4v9M+lQ0mwtO8eqKQ4cQZB g0txk/J8GDLnw1Lhneg2TbpF6H+HVIRhgcKt/EUxGumTzlx/vSPPnX6xcCpNkss+ 68XAhfMA+lAubmYT2e0bNV5MgrgEzbl9BC32A7x8d/Bc1KbwaSDWHAAcVUrp48iL 79cHV3DhttORHRSt9S/XxNFYWxZcMH80xJdvMnqrw4Lq9Z/YEIXuEyLBEGkl -----END CERTIFICATE-----Generated at Sun May 3 00:40:32 2026 by rpki-client