$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147106.roa File: AS147106.roa (raw, json) Hash identifier: VPrTgaKLbsx8Z0cXjJ2fXzZaKJAUbsg2483nIeMDDYs= Subject key identifier: DB:FC:80:B2:51:D6:28:29:17:E8:3D:8C:77:37:E8:64:8E:15:9B:02 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7963E8C0940075058B98BDEDF21A85DE2144F503 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147106.roa Signing time: Sat 02 May 2026 21:32:04 +0000 ROA not before: Sat 02 May 2026 21:27:04 +0000 ROA not after: Sat 01 May 2027 21:32:04 +0000 asID: 147106 IP address blocks: 103.174.236.0/23 maxlen: 24 2401:1fa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:e8:c0:94:00:75:05:8b:98:bd:ed:f2:1a:85:de:21:44:f5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:27:04 2026 GMT Not After : May 1 21:32:04 2027 GMT Subject: CN=DBFC80B251D6282917E83D8C7737E8648E159B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:27:d9:d9:2f:5e:16:c9:f7:95:06:fd:fd: 20:7b:f5:37:32:18:00:89:b2:2e:96:10:4c:2e:fe: c2:d3:82:4f:cd:53:3e:30:66:9b:99:b8:b7:56:22: 9d:13:e8:8d:47:c1:38:ad:94:aa:be:ec:d9:b5:1a: 5f:e8:d8:4d:ba:2d:0f:ae:85:e7:e6:64:e6:11:2e: 90:cf:17:d1:5c:53:1b:b6:29:9a:47:23:32:7c:6b: d6:da:8c:c1:7e:87:04:72:ae:95:4b:e5:2b:3a:2c: f4:75:2c:bb:b0:c7:f8:82:c3:70:67:1e:54:06:a7: f1:d3:39:44:5d:0b:a7:8c:c6:e4:33:ad:01:1c:d7: a5:68:e1:d5:c7:40:cb:a3:8c:26:c1:e4:c9:a3:47: 4b:f1:fa:16:83:89:a3:8c:f1:4d:78:4d:84:87:8e: 52:da:d7:cc:37:55:13:29:2d:1f:50:7d:92:50:b2: d8:fc:18:97:8b:b0:30:3e:c7:9a:24:64:25:0a:a3: e2:91:5e:14:9a:ef:de:b0:81:b5:c6:d3:ad:29:e2: 9e:43:64:e3:6b:48:70:cf:0c:1b:2a:4f:a5:a3:4f: 56:54:b2:cf:87:be:66:b4:f8:87:5f:ea:1d:c5:c0: bd:44:e9:28:dc:74:5f:73:fd:21:82:f6:0c:03:aa: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FC:80:B2:51:D6:28:29:17:E8:3D:8C:77:37:E8:64:8E:15:9B:02 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147106.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.236.0/23 IPv6: 2401:1fa0::/32 Signature Algorithm: sha256WithRSAEncryption 68:df:45:55:28:3f:11:62:15:48:37:4f:12:95:d6:d3:6f:de: 41:4d:da:f9:c3:af:47:e4:33:9e:91:5f:00:17:ab:bb:52:de: 56:9a:8a:17:75:09:79:2b:2e:16:06:71:7f:ac:48:95:15:5a: ec:29:02:31:20:59:95:da:99:01:a5:98:49:e7:13:92:61:e9: a0:84:a9:b0:62:40:ce:9d:84:dd:40:c8:90:f1:7d:87:38:31: a9:d3:55:32:8f:ae:2e:5d:11:25:ea:3f:0c:49:0f:0d:f4:02: de:0b:0e:0d:fb:52:ff:04:9b:34:fb:bb:d9:d6:43:68:7d:04: 5b:23:ea:e9:57:5c:be:99:ca:c6:c3:b0:86:0f:ff:b2:96:16: 15:30:9f:92:c0:4b:b8:ac:ff:80:f2:81:36:0c:f4:82:ce:a4: 20:43:bd:35:3d:e8:be:b6:55:b9:cd:2b:04:a2:70:32:99:72: de:eb:ef:e6:e9:97:0b:03:f9:89:fd:d9:4c:95:82:1b:85:c1: 1c:23:20:c1:54:1d:c9:92:9f:6c:fe:b2:fb:cf:fa:76:9b:6b: e9:84:a0:47:e6:20:76:62:48:ef:b2:4e:63:3d:01:07:36:45: fa:f7:e4:48:f1:7d:8f:7e:71:e8:ce:65:ec:2e:e0:bf:49:54: 2a:8d:4e:de -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUeWPowJQAdQWLmL3t8hqF3iFE9QMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjcwNFoX DTI3MDUwMTIxMzIwNFowMzExMC8GA1UEAxMoREJGQzgwQjI1MUQ2MjgyOTE3RTgz RDhDNzczN0U4NjQ4RTE1OUIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjZJ9nZL14WyfeVBv39IHv1NzIYAImyLpYQTC7+wtOCT81TPjBmm5m4t1Yi nRPojUfBOK2Uqr7s2bUaX+jYTbotD66F5+Zk5hEukM8X0VxTG7YpmkcjMnxr1tqM wX6HBHKulUvlKzos9HUsu7DH+ILDcGceVAan8dM5RF0Lp4zG5DOtARzXpWjh1cdA y6OMJsHkyaNHS/H6FoOJo4zxTXhNhIeOUtrXzDdVEyktH1B9klCy2PwYl4uwMD7H miRkJQqj4pFeFJrv3rCBtcbTrSninkNk42tIcM8MGypPpaNPVlSyz4e+ZrT4h1/q HcXAvUTpKNx0X3P9IYL2DAOqvpUCAwEAAaOCAdswggHXMB0GA1UdDgQWBBTb/ICy UdYoKRfoPYx3N+hkjhWbAjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIA ATAGAwQBZ67sMA0EAgACMAcDBQAkAR+gMA0GCSqGSIb3DQEBCwUAA4IBAQBo30VV KD8RYhVIN08SldbTb95BTdr5w69H5DOekV8AF6u7Ut5WmooXdQl5Ky4WBnF/rEiV FVrsKQIxIFmV2pkBpZhJ5xOSYemghKmwYkDOnYTdQMiQ8X2HODGp01Uyj64uXREl 6j8MSQ8N9ALeCw4N+1L/BJs0+7vZ1kNofQRbI+rpV1y+mcrGw7CGD/+ylhYVMJ+S wEu4rP+A8oE2DPSCzqQgQ701Pei+tlW5zSsEonAymXLe6+/m6ZcLA/mJ/dlMlYIb hcEcIyDBVB3Jkp9s/rL7z/p2m2vphKBH5iB2Ykjvsk5jPQEHNkX69+RI8X2PfnHo zmXsLuC/SVQqjU7e -----END CERTIFICATE-----Generated at Sun May 3 00:41:25 2026 by rpki-client