$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147142.roa File: AS147142.roa (raw, json) Hash identifier: IbC9ls2nB6L8FQO31oIlyhrzIVTXfyPSreL1Kd+zT0o= Subject key identifier: 05:6B:DA:62:6E:7E:70:E0:CA:A8:6F:20:8E:AC:CC:B8:2E:B5:B5:74 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B27E04AEF1A4D18C2ABC9B18CEBB34BE62DA818 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147142.roa Signing time: Sat 02 May 2026 09:22:13 +0000 ROA not before: Sat 02 May 2026 09:17:13 +0000 ROA not after: Sat 01 May 2027 09:22:13 +0000 asID: 147142 IP address blocks: 103.177.60.0/24 maxlen: 24 115.84.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:27:e0:4a:ef:1a:4d:18:c2:ab:c9:b1:8c:eb:b3:4b:e6:2d:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:17:13 2026 GMT Not After : May 1 09:22:13 2027 GMT Subject: CN=056BDA626E7E70E0CAA86F208EACCCB82EB5B574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:0d:96:2a:fe:52:cc:f3:63:81:b4:c2:5d: ab:f3:ad:79:dc:0c:b8:35:1b:02:d2:e4:c5:ab:91: 02:20:cc:7c:d5:de:34:db:b6:6b:06:93:0f:c5:51: 6d:3b:90:5a:cb:d6:3a:19:36:a3:72:24:bb:6c:43: a3:80:dc:36:43:04:cf:50:d2:22:56:45:65:39:43: 74:c9:27:68:68:ac:a8:2e:4d:da:5b:63:d7:79:62: 4f:1d:41:3d:34:0e:d9:52:b1:d7:39:b1:61:72:92: dc:d3:43:1b:13:48:07:3e:7d:6d:d5:99:e0:6c:1e: 68:e5:d8:6c:8e:90:a1:56:5a:1c:16:11:0c:5b:32: 01:70:0a:95:05:0e:40:89:74:34:f8:f2:93:f0:d1: 3d:b3:4b:8c:56:43:0e:9f:8a:58:1d:58:10:9b:c0: 96:95:ef:92:59:1c:e6:56:34:4e:0a:78:f8:96:db: d5:19:58:4d:dc:9d:a5:39:95:31:a7:89:68:fd:92: a8:dd:e9:c7:54:8a:78:01:e4:47:13:57:09:b5:d4: 9f:df:1e:12:83:c9:5d:da:41:e0:75:e8:40:e4:91: c0:19:11:31:2d:30:4f:2e:22:fa:e2:b0:dd:be:42: 54:8e:6b:46:e0:34:88:85:be:c7:82:07:27:5f:04: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6B:DA:62:6E:7E:70:E0:CA:A8:6F:20:8E:AC:CC:B8:2E:B5:B5:74 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.60.0/24 115.84.174.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:28:03:6e:27:10:22:b0:dd:71:8d:cc:0a:8c:b4:0a:77:64: bb:cb:51:92:16:d4:6c:58:f4:18:41:25:01:b5:a6:9a:74:f6: 8c:e4:7a:ab:fe:d1:ed:f2:04:7a:69:96:c8:9c:98:f8:35:c6: 4e:e0:97:31:aa:4d:eb:2a:56:81:04:aa:84:ff:52:58:ca:c7: 95:cc:10:35:c7:c4:cc:02:3f:c3:20:23:dd:4b:a3:b1:57:cc: 30:5e:a9:bd:fc:6c:3b:a1:8a:88:7e:ba:47:a5:30:d0:1b:24: e6:7e:26:d2:cc:f0:c9:d6:90:9c:b4:e4:89:94:4a:d9:54:81: 83:c9:9d:49:ca:d9:7c:2f:ac:39:0e:15:d5:e9:45:58:ff:84: 0a:2d:32:27:54:0d:b9:0e:3f:e4:79:38:57:2d:2b:ee:a4:01: 21:c1:19:2f:45:42:af:88:e6:87:17:dc:f0:0b:0d:03:4c:b7: 52:3e:b8:c5:bc:a7:ba:33:13:43:86:6c:ee:35:39:08:58:42: 39:e6:98:3f:69:be:f5:dc:3e:a4:e1:57:dd:83:6d:45:d2:7c: 61:b7:f9:18:31:49:e7:95:0a:8c:03:4c:88:73:c7:3e:9d:12: a7:4f:ad:e1:80:43:e4:93:9f:42:f2:30:db:e1:35:0f:9f:8b: 21:39:d4:ce -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUGyfgSu8aTRjCq8mxjOuzS+YtqBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTcxM1oX DTI3MDUwMTA5MjIxM1owMzExMC8GA1UEAxMoMDU2QkRBNjI2RTdFNzBFMENBQTg2 RjIwOEVBQ0NDQjgyRUI1QjU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsMDZYq/lLM82OBtMJdq/OtedwMuDUbAtLkxauRAiDMfNXeNNu2awaTD8VR bTuQWsvWOhk2o3Iku2xDo4DcNkMEz1DSIlZFZTlDdMknaGisqC5N2ltj13liTx1B PTQO2VKx1zmxYXKS3NNDGxNIBz59bdWZ4GweaOXYbI6QoVZaHBYRDFsyAXAKlQUO QIl0NPjyk/DRPbNLjFZDDp+KWB1YEJvAlpXvklkc5lY0Tgp4+Jbb1RlYTdydpTmV MaeJaP2SqN3px1SKeAHkRxNXCbXUn98eEoPJXdpB4HXoQOSRwBkRMS0wTy4i+uKw 3b5CVI5rRuA0iIW+x4IHJ18EwRECAwEAAaOCAdIwggHOMB0GA1UdDgQWBBQFa9pi bn5w4MqobyCOrMy4LrW1dDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ7E8AwQAc1SuMA0GCSqGSIb3DQEBCwUAA4IBAQB6KANuJxAisN1xjcwK jLQKd2S7y1GSFtRsWPQYQSUBtaaadPaM5Hqr/tHt8gR6aZbInJj4NcZO4Jcxqk3r KlaBBKqE/1JYyseVzBA1x8TMAj/DICPdS6OxV8wwXqm9/Gw7oYqIfrpHpTDQGyTm fibSzPDJ1pCctOSJlErZVIGDyZ1Jytl8L6w5DhXV6UVY/4QKLTInVA25Dj/keThX LSvupAEhwRkvRUKviOaHF9zwCw0DTLdSPrjFvKe6MxNDhmzuNTkIWEI55pg/ab71 3D6k4Vfdg21F0nxht/kYMUnnlQqMA0yIc8c+nRKnT63hgEPkk59C8jDb4TUPn4sh OdTO -----END CERTIFICATE-----Generated at Sun May 3 01:44:04 2026 by rpki-client