$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147131.roa File: AS147131.roa (raw, json) Hash identifier: YHSOsDKbA3VqCk0HmfFZcPnNPFjoPlS5R4eNG6AuDs8= Subject key identifier: 74:40:AD:B8:21:8A:56:69:3C:4E:65:95:7E:4E:0E:37:82:F8:2A:08 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7FE2291C93288B5F37DA13DB72ECC8331183B398 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147131.roa Signing time: Sat 02 May 2026 21:24:36 +0000 ROA not before: Sat 02 May 2026 21:19:36 +0000 ROA not after: Sat 01 May 2027 21:24:36 +0000 asID: 147131 IP address blocks: 2001:df1:1ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e2:29:1c:93:28:8b:5f:37:da:13:db:72:ec:c8:33:11:83:b3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:19:36 2026 GMT Not After : May 1 21:24:36 2027 GMT Subject: CN=7440ADB8218A56693C4E65957E4E0E3782F82A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:72:57:b9:79:41:85:59:7f:12:2b:a7:a8: 4c:bb:c9:97:93:36:00:f3:a0:3d:08:04:04:73:85: 56:9e:2c:05:08:42:1f:4c:9b:df:a7:bc:6f:55:2e: 2e:38:c1:2d:28:65:54:6b:72:b8:74:c7:61:ac:47: 74:d7:8a:dc:51:79:88:b6:87:98:6b:4f:4a:53:38: 1b:d9:ab:74:af:f5:ef:db:18:54:2c:3d:5b:16:da: d1:a9:7a:a0:21:c0:a8:ad:b6:b0:81:c8:f3:a8:fc: 59:76:26:6b:ff:8c:66:7b:c2:7a:0b:27:37:2f:b6: 35:a4:0f:3c:f1:43:da:51:63:1c:0e:cb:18:ed:6f: 30:36:47:d5:e6:33:6c:c6:fe:43:f3:32:3d:66:90: 69:66:af:3e:b6:4c:ac:ff:34:28:cb:3a:d2:d8:4e: 27:90:0a:fb:ff:e1:c5:67:60:92:0c:5f:73:1a:71: 6c:bc:9c:97:9b:ac:35:d0:0e:2d:bb:73:6d:b1:87: 21:1a:c8:86:7b:b9:d7:77:fe:5e:54:f8:5b:c1:84: 0a:4a:70:0b:d8:ad:52:ec:52:75:90:8d:53:41:83: 7c:ab:ce:9a:55:bd:35:d9:4c:36:0d:27:d9:19:bd: ca:71:2e:1e:d8:7d:74:f6:0c:b7:4a:d5:78:38:8e: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:40:AD:B8:21:8A:56:69:3C:4E:65:95:7E:4E:0E:37:82:F8:2A:08 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1ac0::/48 Signature Algorithm: sha256WithRSAEncryption 94:e0:c9:c2:19:26:e9:a4:ed:81:a1:74:a1:33:cc:85:7b:0b: b0:1f:05:cc:09:7f:33:cc:9e:54:2c:37:2a:41:b3:f3:10:64: 52:d6:d0:29:5b:ff:33:82:62:8a:00:ca:38:3e:a2:f2:e8:c4: 49:d8:f9:89:21:5f:7e:ed:ac:61:b0:d3:8b:4d:5a:8b:46:6a: 7f:5d:2b:7b:4c:0e:cc:9c:40:06:f4:fb:e1:4e:50:91:80:96: a9:70:63:f0:35:c5:ab:d4:4f:fb:d9:65:bf:1c:dd:b3:80:c1: 7a:52:cc:c9:e2:05:23:65:53:e3:eb:80:f1:ae:d9:b8:9d:20: 2b:9a:7e:61:95:32:d6:34:77:36:91:18:de:87:4e:75:54:b7: 71:53:c8:4e:bf:09:92:de:86:df:b9:d4:bd:86:f9:c6:5e:0f: 4a:75:b7:54:b8:77:66:af:1b:82:2f:e2:9a:87:40:d7:54:75: 60:cd:aa:9b:c4:f5:5a:02:31:03:5c:09:17:01:23:77:9d:b4: f1:39:02:ef:d9:1e:da:ec:e8:7b:09:0d:c4:72:3e:0e:92:d3: 3d:05:ec:56:ea:37:4e:c2:32:ca:ca:a5:04:98:17:2f:e1:b3: 7a:33:93:ac:91:1c:56:d1:05:2a:60:a0:b1:65:9e:3f:4e:e1: 5f:99:5c:ae -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUf+IpHJMoi1832hPbcuzIMxGDs5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTkzNloX DTI3MDUwMTIxMjQzNlowMzExMC8GA1UEAxMoNzQ0MEFEQjgyMThBNTY2OTNDNEU2 NTk1N0U0RTBFMzc4MkY4MkEwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6vcle5eUGFWX8SK6eoTLvJl5M2APOgPQgEBHOFVp4sBQhCH0yb36e8b1Uu LjjBLShlVGtyuHTHYaxHdNeK3FF5iLaHmGtPSlM4G9mrdK/179sYVCw9Wxba0al6 oCHAqK22sIHI86j8WXYma/+MZnvCegsnNy+2NaQPPPFD2lFjHA7LGO1vMDZH1eYz bMb+Q/MyPWaQaWavPrZMrP80KMs60thOJ5AK+//hxWdgkgxfcxpxbLycl5usNdAO LbtzbbGHIRrIhnu513f+XlT4W8GECkpwC9itUuxSdZCNU0GDfKvOmlW9NdlMNg0n 2Rm9ynEuHth9dPYMt0rVeDiOR28CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR0QK24 IYpWaTxOZZV+Tg43gvgqCDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8RrAMA0GCSqGSIb3DQEBCwUAA4IBAQCU4MnCGSbppO2BoXShM8yF ewuwHwXMCX8zzJ5ULDcqQbPzEGRS1tApW/8zgmKKAMo4PqLy6MRJ2PmJIV9+7axh sNOLTVqLRmp/XSt7TA7MnEAG9PvhTlCRgJapcGPwNcWr1E/72WW/HN2zgMF6UszJ 4gUjZVPj64Dxrtm4nSArmn5hlTLWNHc2kRjeh051VLdxU8hOvwmS3obfudS9hvnG Xg9KdbdUuHdmrxuCL+Kah0DXVHVgzaqbxPVaAjEDXAkXASN3nbTxOQLv2R7a7Oh7 CQ3Ecj4OktM9BexW6jdOwjLKyqUEmBcv4bN6M5OskRxW0QUqYKCxZZ4/TuFfmVyu -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client