$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147118.roa File: AS147118.roa (raw, json) Hash identifier: QsvkfoU8Cprb53w2/zz4h5oaUE0APMTdlGwiqL0biks= Subject key identifier: 16:F7:ED:A6:76:60:33:A3:8E:34:C9:AD:3A:C4:A7:67:5E:BB:93:14 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: EB052B48A9FFD3F418FEDF8790D1623C0CAD9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147118.roa Signing time: Sat 02 May 2026 09:20:23 +0000 ROA not before: Sat 02 May 2026 09:15:23 +0000 ROA not after: Sat 01 May 2027 09:20:23 +0000 asID: 147118 IP address blocks: 103.175.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: eb:05:2b:48:a9:ff:d3:f4:18:fe:df:87:90:d1:62:3c:0c:ad:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:23 2026 GMT Not After : May 1 09:20:23 2027 GMT Subject: CN=16F7EDA6766033A38E34C9AD3AC4A7675EBB9314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:11:7f:d4:c1:31:67:6f:30:23:63:d4:2b: cd:ac:9c:4c:22:65:96:fe:87:d5:51:df:1c:31:ef: 26:74:82:9c:af:fe:e4:bc:6f:1b:8c:f4:a1:53:11: a5:4b:5f:fc:74:de:71:17:63:cc:7b:f4:5d:b6:3c: e8:5a:a0:fe:e4:76:dd:30:86:f5:37:82:9e:eb:bb: 0b:19:12:de:81:5d:a9:ad:9c:28:cf:2f:52:e3:da: f1:dd:b1:83:b7:47:31:44:4a:a1:7e:cd:cc:da:89: 25:35:9a:3f:67:de:26:a9:2d:19:1f:ac:5b:2f:e6: 31:b8:90:25:a0:1a:b6:cb:e5:91:80:92:c6:04:ee: 8b:28:20:cd:fd:cb:4d:d9:b5:8b:95:9b:9f:4f:0e: 96:b9:d1:77:1f:dc:b6:8b:2b:68:eb:b2:c0:9f:0b: 91:07:c7:7d:dc:8b:b9:65:87:f0:7d:3e:65:01:70: 77:81:ba:9b:f2:7a:69:db:7b:80:bc:3a:23:e8:62: 59:50:38:1d:21:59:9e:8d:2b:16:d9:b4:87:c7:70: b2:f9:7a:1a:c5:54:be:a2:e5:24:60:f8:e1:85:6b: c4:26:25:cd:ad:3b:db:b6:35:3b:2d:e1:d2:b8:16: 82:48:bd:ea:3d:4b:58:e8:d7:8e:d4:c5:cc:fe:6f: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F7:ED:A6:76:60:33:A3:8E:34:C9:AD:3A:C4:A7:67:5E:BB:93:14 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147118.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.202.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:45:c7:4f:43:b0:1b:81:73:79:33:1e:44:91:bc:6b:ce:ee: 2e:23:43:98:86:88:34:18:3f:05:14:d9:31:17:89:a6:a7:c8: 92:11:43:08:8d:e8:41:0a:31:5c:6a:da:79:e0:67:50:7f:7b: 63:73:d7:ad:4c:9f:71:38:1b:21:9c:2e:df:b1:fa:42:58:89: 46:18:b3:87:b2:84:3e:0b:43:af:16:e3:1e:7f:9b:2a:e7:9c: be:5d:d4:c1:26:ec:06:96:a8:a9:8a:4a:77:0c:5e:46:f9:95: 8a:fe:ae:d1:99:c7:dc:5d:ae:e3:1f:65:8b:0c:dd:4a:7c:01: 87:3a:2c:fe:98:84:b8:66:4a:d6:42:a9:c5:b4:3d:6c:46:57: 3b:d2:9a:2d:59:4d:16:37:3d:b6:9b:14:91:70:a3:3c:82:34: 51:fd:af:6a:d5:c4:a7:4d:3c:f5:3a:7d:df:d0:d5:40:5c:77: 91:7b:c6:35:76:f6:0e:55:57:f6:56:41:06:8c:ed:58:3b:7d: 98:74:2c:17:da:c1:8c:a0:71:e4:cb:bb:87:e1:6e:a0:ec:f2: c3:7d:e6:85:d4:bb:d1:0f:90:20:55:91:7e:2a:27:8f:12:51: c8:51:b2:5e:8b:de:e0:d6:85:c1:65:2f:a9:dc:ef:4c:ae:5b: e3:dc:e5:ad -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUAOsFK0ip/9P0GP7fh5DRYjwMrZ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUyM1oX DTI3MDUwMTA5MjAyM1owMzExMC8GA1UEAxMoMTZGN0VEQTY3NjYwMzNBMzhFMzRD OUFEM0FDNEE3Njc1RUJCOTMxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxFEX/UwTFnbzAjY9QrzaycTCJllv6H1VHfHDHvJnSCnK/+5LxvG4z0oVMR pUtf/HTecRdjzHv0XbY86Fqg/uR23TCG9TeCnuu7CxkS3oFdqa2cKM8vUuPa8d2x g7dHMURKoX7NzNqJJTWaP2feJqktGR+sWy/mMbiQJaAatsvlkYCSxgTuiyggzf3L Tdm1i5Wbn08OlrnRdx/ctosraOuywJ8LkQfHfdyLuWWH8H0+ZQFwd4G6m/J6adt7 gLw6I+hiWVA4HSFZno0rFtm0h8dwsvl6GsVUvqLlJGD44YVrxCYlza0727Y1Oy3h 0rgWgki96j1LWOjXjtTFzP5vMfMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQW9+2m dmAzo440ya06xKdnXruTFDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTE4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6/KMA0GCSqGSIb3DQEBCwUAA4IBAQAsRcdPQ7AbgXN5Mx5Ekbxrzu4u I0OYhog0GD8FFNkxF4mmp8iSEUMIjehBCjFcatp54GdQf3tjc9etTJ9xOBshnC7f sfpCWIlGGLOHsoQ+C0OvFuMef5sq55y+XdTBJuwGlqipikp3DF5G+ZWK/q7Rmcfc Xa7jH2WLDN1KfAGHOiz+mIS4ZkrWQqnFtD1sRlc70potWU0WNz22mxSRcKM8gjRR /a9q1cSnTTz1On3f0NVAXHeRe8Y1dvYOVVf2VkEGjO1YO32YdCwX2sGMoHHky7uH 4W6g7PLDfeaF1LvRD5AgVZF+KiePElHIUbJei97g1oXBZS+p3O9Mrlvj3OWt -----END CERTIFICATE-----Generated at Sun May 3 01:44:41 2026 by rpki-client