$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147139.roa File: AS147139.roa (raw, json) Hash identifier: P184OODj9z6NjAo1HtPc9yLH2RPETBcbHqa1/O+4xZA= Subject key identifier: F6:1C:4A:EB:57:2E:87:A1:85:3A:C2:7D:42:1A:49:45:8B:7C:A9:AB Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7E1819ED4A578005794C513F0B3C25AC8EC63D2D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147139.roa Signing time: Sat 02 May 2026 09:20:36 +0000 ROA not before: Sat 02 May 2026 09:15:36 +0000 ROA not after: Sat 01 May 2027 09:20:36 +0000 asID: 147139 IP address blocks: 103.177.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:18:19:ed:4a:57:80:05:79:4c:51:3f:0b:3c:25:ac:8e:c6:3d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:36 2026 GMT Not After : May 1 09:20:36 2027 GMT Subject: CN=F61C4AEB572E87A1853AC27D421A49458B7CA9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:14:d2:f4:67:ff:6c:ab:46:7d:48:9e:4f: 5b:03:66:0d:a6:28:8d:6b:e6:8b:b9:6c:92:3e:7d: 78:22:3c:fd:5c:dc:7f:6a:22:68:ed:61:d9:44:72: 0a:3e:54:fe:45:2c:1d:48:f0:72:05:91:53:38:41: 85:ee:df:f3:73:cb:00:27:37:f3:6e:f0:5c:ac:45: 4c:ce:21:60:1c:9d:93:35:5e:38:35:a9:2b:76:6a: 15:94:3c:dc:bd:6e:48:bf:96:29:54:b9:35:57:13: 3c:0a:a1:67:3a:18:2f:b2:ac:8d:06:43:64:80:00: 92:16:d6:7e:c0:2f:09:d8:b0:70:6e:20:d9:c3:8a: 7b:b8:45:17:98:33:c5:48:cf:07:e5:26:0f:dd:35: 0a:db:99:75:c1:33:09:82:f6:bb:8a:a3:22:43:94: de:13:be:64:94:7b:e4:ec:11:0a:7a:4d:28:ec:eb: 8d:4e:87:eb:c9:cb:a7:6c:60:18:04:c9:bc:34:b0: a4:fa:f1:b6:17:7b:7b:84:62:8a:c5:17:6f:3d:a2: 12:e0:b4:a4:77:7c:a9:c4:f7:13:2a:f9:0b:32:1a: 22:f3:a8:f4:84:d6:cd:80:45:a0:ad:79:f3:88:81: 5f:93:3e:fc:fb:58:06:1e:86:95:31:03:be:1d:cc: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1C:4A:EB:57:2E:87:A1:85:3A:C2:7D:42:1A:49:45:8B:7C:A9:AB X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.20.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:a3:8f:eb:cd:15:f6:2c:98:ed:08:4f:00:39:2e:8c:da:ab: ec:36:e5:bf:00:57:b1:d4:b3:0c:68:27:59:a0:36:a7:da:ce: 4b:12:d3:0a:42:29:57:88:54:16:b7:d7:dd:4f:6d:5e:10:04: 20:ac:78:5a:3b:ff:12:1a:4d:1b:84:39:a4:2f:48:6d:14:77: b3:40:a7:71:66:44:17:e7:42:1c:cc:a4:62:38:16:ab:dc:80: c8:5f:19:17:1e:e8:97:bc:63:83:8e:88:3d:f4:e8:12:14:b8: 83:15:fc:21:b9:a5:42:f7:6c:e0:fd:38:df:21:15:3d:1d:88: af:3b:85:7c:4e:32:20:1b:80:03:bf:cc:f6:46:2e:42:c0:c2: a4:a7:81:48:81:2d:ca:11:89:13:02:3e:6b:24:1f:a7:9b:f9: f6:cf:5d:c7:be:b8:6b:8d:ce:ec:22:2f:d8:1f:27:46:bb:3a: 73:cc:0f:bb:ce:64:e7:f1:cc:16:32:82:e9:c6:e7:0e:57:c6: ab:1c:aa:4c:b3:fe:1c:01:68:cb:da:a1:43:4f:cc:a7:34:db: fe:3b:98:5d:12:28:0b:67:0a:c3:e2:f5:a5:06:1b:77:76:79: 29:8d:de:81:30:88:75:fe:1c:45:14:22:da:05:73:72:8e:53: 37:c0:9b:f2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfhgZ7UpXgAV5TFE/CzwlrI7GPS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUzNloX DTI3MDUwMTA5MjAzNlowMzExMC8GA1UEAxMoRjYxQzRBRUI1NzJFODdBMTg1M0FD MjdENDIxQTQ5NDU4QjdDQTlBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWBFNL0Z/9sq0Z9SJ5PWwNmDaYojWvmi7lskj59eCI8/Vzcf2oiaO1h2URy Cj5U/kUsHUjwcgWRUzhBhe7f83PLACc3827wXKxFTM4hYBydkzVeODWpK3ZqFZQ8 3L1uSL+WKVS5NVcTPAqhZzoYL7KsjQZDZIAAkhbWfsAvCdiwcG4g2cOKe7hFF5gz xUjPB+UmD901CtuZdcEzCYL2u4qjIkOU3hO+ZJR75OwRCnpNKOzrjU6H68nLp2xg GATJvDSwpPrxthd7e4RiisUXbz2iEuC0pHd8qcT3Eyr5CzIaIvOo9ITWzYBFoK15 84iBX5M+/PtYBh6GlTEDvh3MuKMCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBT2HErr Vy6HoYU6wn1CGklFi3ypqzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ7EUMA0GCSqGSIb3DQEBCwUAA4IBAQBKo4/rzRX2LJjtCE8AOS6M2qvs NuW/AFex1LMMaCdZoDan2s5LEtMKQilXiFQWt9fdT21eEAQgrHhaO/8SGk0bhDmk L0htFHezQKdxZkQX50IczKRiOBar3IDIXxkXHuiXvGODjog99OgSFLiDFfwhuaVC 92zg/TjfIRU9HYivO4V8TjIgG4ADv8z2Ri5CwMKkp4FIgS3KEYkTAj5rJB+nm/n2 z13Hvrhrjc7sIi/YHydGuzpzzA+7zmTn8cwWMoLpxucOV8arHKpMs/4cAWjL2qFD T8ynNNv+O5hdEigLZwrD4vWlBht3dnkpjd6BMIh1/hxFFCLaBXNyjlM3wJvy -----END CERTIFICATE-----Generated at Sun May 3 00:41:46 2026 by rpki-client