$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147129.roa File: AS147129.roa (raw, json) Hash identifier: st53bejzXMMZHU9M97ydjeBqmTxamJ4MKyEp6RSUSEo= Subject key identifier: 4B:54:CD:A9:E2:FC:C4:F6:95:B0:66:BD:08:B3:04:70:9A:03:B5:62 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7EA70F611B2946AA3104B3E8FEC987929C998C95 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147129.roa Signing time: Sat 02 May 2026 09:20:31 +0000 ROA not before: Sat 02 May 2026 09:15:31 +0000 ROA not after: Sat 01 May 2027 09:20:31 +0000 asID: 147129 IP address blocks: 103.176.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a7:0f:61:1b:29:46:aa:31:04:b3:e8:fe:c9:87:92:9c:99:8c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:31 2026 GMT Not After : May 1 09:20:31 2027 GMT Subject: CN=4B54CDA9E2FCC4F695B066BD08B304709A03B562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1d:9f:22:62:be:19:1e:ba:62:37:88:99:b4: 30:d5:5f:af:2e:4f:f6:f2:7a:57:ec:0f:a3:f1:0a: e9:8e:4c:f6:1a:a6:e2:bb:3f:33:22:dc:53:e6:b8: aa:78:0b:62:cb:19:50:4d:cd:c3:3f:af:e7:bc:0f: 79:af:b7:d2:19:b3:69:29:1b:9b:06:d4:b4:72:7d: e7:24:83:34:a4:51:08:14:5b:fe:30:0e:4f:bc:c4: 9e:2d:87:88:5b:ff:36:b1:ac:e3:13:f0:ab:0c:b1: 96:47:32:d0:a8:d7:65:fe:6c:70:92:81:7d:bd:b2: 21:e7:ca:f6:7e:20:44:8c:f0:74:1e:2f:57:2a:f5: 24:04:17:5c:ea:03:36:28:39:df:f7:88:e8:95:7d: e8:6a:13:ea:3f:5d:7a:85:a5:ce:8c:de:95:9f:d4: 94:14:d0:72:13:1c:58:58:e7:23:67:d2:c1:c6:29: 6e:c4:1e:75:d9:e3:09:52:e0:aa:ef:36:08:57:e0: fc:95:c4:38:63:ff:09:1c:ed:81:59:46:54:be:15: 3b:30:0f:03:35:0c:dc:df:ac:75:64:8e:10:7d:3e: 01:96:91:80:a0:b5:ad:63:09:9e:e4:fb:64:58:ec: fc:2b:3a:8a:02:57:aa:b0:e0:df:e5:50:eb:d9:b1: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:54:CD:A9:E2:FC:C4:F6:95:B0:66:BD:08:B3:04:70:9A:03:B5:62 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.69.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ad:04:97:4d:f1:f6:52:de:68:60:1e:64:00:da:50:38:87: ee:05:35:6f:dc:99:77:05:c1:30:62:41:21:2f:98:5f:a3:96: 87:07:5c:55:e8:86:22:f7:ee:6e:1d:7a:ab:0d:d9:f3:e0:91: c6:83:49:67:53:24:98:58:08:73:05:64:4c:99:0f:8a:bb:77: 1b:ff:fb:7d:ae:a9:76:e8:27:fb:4e:9d:e0:46:76:76:f9:af: 49:c7:89:18:be:90:4c:86:c9:71:b7:3b:b8:c3:68:5b:b0:20: 15:6a:4c:b9:fd:f0:e7:88:fe:8e:9b:6d:6c:a4:7e:17:04:5b: 7f:b1:aa:20:fc:e0:29:14:18:92:3d:bb:c5:05:f1:d1:77:c9: d6:32:e7:65:59:68:cd:2d:08:bc:e1:dc:ff:cb:c4:4a:d4:9f: 60:f3:6f:30:3e:2f:76:f9:18:2b:a3:3d:22:ac:4e:24:f0:81: f4:6c:b1:fe:e7:10:8c:da:05:df:c1:a7:74:90:be:39:53:fe: 80:b4:ee:e0:45:08:10:87:10:de:68:ad:39:aa:1b:a2:23:dd: 91:7b:5a:90:f4:b1:98:0b:65:48:b1:66:c0:f5:6c:d5:a6:bb: 8e:88:9a:f5:a7:b7:14:bc:47:ae:29:c1:77:ea:57:e5:d0:6a: 51:83:d3:09 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfqcPYRspRqoxBLPo/smHkpyZjJUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUzMVoX DTI3MDUwMTA5MjAzMVowMzExMC8GA1UEAxMoNEI1NENEQTlFMkZDQzRGNjk1QjA2 NkJEMDhCMzA0NzA5QTAzQjU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMdnyJivhkeumI3iJm0MNVfry5P9vJ6V+wPo/EK6Y5M9hqm4rs/MyLcU+a4 qngLYssZUE3Nwz+v57wPea+30hmzaSkbmwbUtHJ95ySDNKRRCBRb/jAOT7zEni2H iFv/NrGs4xPwqwyxlkcy0KjXZf5scJKBfb2yIefK9n4gRIzwdB4vVyr1JAQXXOoD Nig53/eI6JV96GoT6j9deoWlzozelZ/UlBTQchMcWFjnI2fSwcYpbsQeddnjCVLg qu82CFfg/JXEOGP/CRztgVlGVL4VOzAPAzUM3N+sdWSOEH0+AZaRgKC1rWMJnuT7 ZFjs/Cs6igJXqrDg3+VQ69mxTGcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRLVM2p 4vzE9pWwZr0IswRwmgO1YjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7BFMA0GCSqGSIb3DQEBCwUAA4IBAQAWrQSXTfH2Ut5oYB5kANpQOIfu BTVv3Jl3BcEwYkEhL5hfo5aHB1xV6IYi9+5uHXqrDdnz4JHGg0lnUySYWAhzBWRM mQ+Ku3cb//t9rql26Cf7Tp3gRnZ2+a9Jx4kYvpBMhslxtzu4w2hbsCAVaky5/fDn iP6Om21spH4XBFt/saog/OApFBiSPbvFBfHRd8nWMudlWWjNLQi84dz/y8RK1J9g 828wPi92+Rgroz0irE4k8IH0bLH+5xCM2gXfwad0kL45U/6AtO7gRQgQhxDeaK05 qhuiI92Re1qQ9LGYC2VIsWbA9WzVpruOiJr1p7cUvEeuKcF36lfl0GpRg9MJ -----END CERTIFICATE-----Generated at Sun May 3 00:40:23 2026 by rpki-client