$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147107.roa File: AS147107.roa (raw, json) Hash identifier: lQ4CNKcvi2ZkRpDCyWYh7Ki4iqa0SrDntox7NIqstUc= Subject key identifier: 51:B7:61:D3:81:6A:66:7B:3D:8E:BE:05:51:F5:07:CB:0D:31:55:54 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10E016CFB3E411BF661B8736624081ACBC4B6427 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147107.roa Signing time: Sat 02 May 2026 21:31:46 +0000 ROA not before: Sat 02 May 2026 21:26:46 +0000 ROA not after: Sat 01 May 2027 21:31:46 +0000 asID: 147107 IP address blocks: 2400:e420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e0:16:cf:b3:e4:11:bf:66:1b:87:36:62:40:81:ac:bc:4b:64:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:26:46 2026 GMT Not After : May 1 21:31:46 2027 GMT Subject: CN=51B761D3816A667B3D8EBE0551F507CB0D315554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:88:41:01:b5:8a:96:e7:58:87:31:78:e8: 87:46:16:b3:ff:f3:32:72:ff:51:12:7b:1a:c0:77: aa:1d:41:f2:9e:94:3a:82:03:93:b6:db:03:38:31: b9:fe:32:21:2f:80:2c:6e:62:9d:ad:2f:4f:3a:da: 6f:d0:3c:6f:1b:7a:38:47:58:11:18:54:1d:b1:d2: 7f:5f:70:fb:9e:41:dd:9f:8c:31:7d:8c:58:84:c1: 2e:52:7b:cf:55:24:6d:cb:e7:24:b8:26:b3:63:77: 63:5f:c1:0b:63:23:50:a0:68:8a:ad:0b:87:bf:01: 68:fd:2a:8d:30:1f:8a:5c:ed:10:66:0a:3c:25:ad: 5e:1d:80:cf:d1:bc:31:d1:a4:2c:d0:5a:ea:d8:22: 57:94:14:76:61:38:16:f8:f4:7f:8c:bb:ed:ea:9c: 4c:d0:6b:fa:ea:76:66:41:83:54:f6:d3:dd:00:b8: 47:45:0e:79:ea:e3:90:80:c7:30:00:a0:44:3a:c7: 35:56:8c:e7:ff:e4:f8:ec:8b:57:b3:86:09:f2:71: ad:22:dd:f8:b3:a2:49:b0:90:ac:b5:4a:f3:a2:0c: af:b6:1f:54:11:c9:4a:6f:45:19:4b:1e:97:53:cb: 3b:9c:e1:62:6a:e5:d3:5a:06:f1:7f:b7:1b:6b:37: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B7:61:D3:81:6A:66:7B:3D:8E:BE:05:51:F5:07:CB:0D:31:55:54 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147107.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:e420::/32 Signature Algorithm: sha256WithRSAEncryption 98:54:a4:35:d9:12:98:0a:0f:de:7e:43:1b:e1:37:00:e1:d6: 97:00:6a:96:88:77:98:7d:06:bb:ed:6a:13:de:aa:7b:9f:21: 2e:93:ff:e1:03:fc:62:ba:cc:8b:39:ef:b1:d4:61:03:a9:07: c5:b8:74:43:6f:1b:4c:ec:5a:e2:b7:43:2a:74:14:63:ce:d7: 81:ff:8e:be:2c:98:14:a1:4f:7a:1a:81:19:2e:21:d7:cd:a7: 1c:57:c7:1a:11:44:c4:23:ec:e1:5d:41:b4:70:1c:62:18:6b: d1:f8:04:4b:7d:41:24:32:08:eb:31:4c:ab:df:8a:c6:c0:0e: e3:c2:88:d1:1e:db:0a:74:b1:54:7a:60:5e:dd:ec:5f:eb:cd: 0a:5e:86:d6:6c:fc:2d:4b:df:45:95:b0:55:6f:45:cf:8b:af: f7:07:ad:ce:03:fd:ac:09:54:0b:89:24:11:b6:bc:b6:87:41: 53:a7:4b:32:ca:45:bd:a3:8d:cd:17:8f:26:43:c1:24:b1:9f: 5f:7f:86:cd:6b:46:b4:31:7e:d0:97:1d:d8:56:2e:b9:13:91: 01:9a:16:a7:57:f9:db:d1:e4:34:d9:2f:fa:05:13:fc:f6:9b: a3:a7:46:95:cd:87:18:61:31:d9:8e:6c:01:02:47:79:d3:bf: ea:e1:54:18 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUEOAWz7PkEb9mG4c2YkCBrLxLZCcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjY0NloX DTI3MDUwMTIxMzE0NlowMzExMC8GA1UEAxMoNTFCNzYxRDM4MTZBNjY3QjNEOEVC RTA1NTFGNTA3Q0IwRDMxNTU1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKatiEEBtYqW51iHMXjoh0YWs//zMnL/URJ7GsB3qh1B8p6UOoIDk7bbAzgx uf4yIS+ALG5ina0vTzrab9A8bxt6OEdYERhUHbHSf19w+55B3Z+MMX2MWITBLlJ7 z1UkbcvnJLgms2N3Y1/BC2MjUKBoiq0Lh78BaP0qjTAfilztEGYKPCWtXh2Az9G8 MdGkLNBa6tgiV5QUdmE4Fvj0f4y77eqcTNBr+up2ZkGDVPbT3QC4R0UOeerjkIDH MACgRDrHNVaM5//k+OyLV7OGCfJxrSLd+LOiSbCQrLVK86IMr7YfVBHJSm9FGUse l1PLO5zhYmrl01oG8X+3G2s3xrkCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRRt2HT gWpmez2OvgVR9QfLDTFVVDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTA3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJADkIDANBgkqhkiG9w0BAQsFAAOCAQEAmFSkNdkSmAoP3n5DG+E3AOHW lwBqloh3mH0Gu+1qE96qe58hLpP/4QP8YrrMiznvsdRhA6kHxbh0Q28bTOxa4rdD KnQUY87Xgf+OviyYFKFPehqBGS4h182nHFfHGhFExCPs4V1BtHAcYhhr0fgES31B JDII6zFMq9+KxsAO48KI0R7bCnSxVHpgXt3sX+vNCl6G1mz8LUvfRZWwVW9Fz4uv 9wetzgP9rAlUC4kkEba8todBU6dLMspFvaONzRePJkPBJLGfX3+GzWtGtDF+0Jcd 2FYuuRORAZoWp1f529HkNNkv+gUT/Pabo6dGlc2HGGEx2Y5sAQJHedO/6uFUGA== -----END CERTIFICATE-----Generated at Sun May 3 00:40:35 2026 by rpki-client