$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS214143.roa File: AS214143.roa (raw, json) Hash identifier: rShZYjxC/YXEKWM6E79vBQ1iqQWPCcZO9vw1Y4cQ/fo= Subject key identifier: 3D:6E:B0:04:E2:93:0A:8F:EB:69:F5:3E:DA:BF:8E:52:3E:84:EC:6D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B172B2277EFDE5E6DD3778ED7216DFBB4CF5F6C Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS214143.roa Signing time: Sat 02 May 2026 08:35:43 +0000 ROA not before: Sat 02 May 2026 08:30:43 +0000 ROA not after: Sat 01 May 2027 08:35:43 +0000 asID: 214143 IP address blocks: 203.84.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:17:2b:22:77:ef:de:5e:6d:d3:77:8e:d7:21:6d:fb:b4:cf:5f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:43 2026 GMT Not After : May 1 08:35:43 2027 GMT Subject: CN=3D6EB004E2930A8FEB69F53EDABF8E523E84EC6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:ad:df:7d:97:dd:c1:5e:d6:71:ba:21:9d: e9:8d:08:87:cd:a5:aa:37:cd:e7:c9:f5:d6:ec:4f: fb:93:00:b9:42:28:ac:f4:2f:3e:ee:12:3f:74:26: a9:b9:ae:31:9a:24:6d:90:6f:d1:44:92:0a:40:f5: 96:c6:a9:14:3b:92:eb:bb:c9:b0:e7:cf:b4:a1:7b: 62:f0:24:e6:66:eb:26:6c:2d:26:7d:e7:fb:bb:48: 58:9f:4c:bf:f4:52:b1:25:74:b3:38:e5:e6:6b:f0: 27:d6:d1:52:c4:2f:d7:3b:2f:bf:6b:46:eb:de:b2: 5d:7b:4a:f8:e9:a2:d9:97:f4:7f:8a:d0:7b:38:03: 2c:c7:52:75:93:b0:f0:3d:d1:3d:4d:03:0c:b1:a3: 50:b6:c2:7d:50:a5:7d:4d:21:b8:70:48:b1:aa:29: ad:2d:0b:0d:4e:30:f9:ea:58:98:8f:cb:8a:9b:ec: 2f:11:71:f3:ff:3d:87:65:a3:80:65:50:91:cb:31: ab:38:01:14:fd:a9:a7:93:37:67:8c:65:84:da:1b: 98:61:db:0b:d3:8d:3b:a9:62:63:4b:81:85:07:22: 1b:f6:a6:0e:3d:0b:94:ea:9e:42:de:33:e8:e3:74: 98:99:a3:25:97:eb:d5:85:17:cc:93:89:b5:27:95: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6E:B0:04:E2:93:0A:8F:EB:69:F5:3E:DA:BF:8E:52:3E:84:EC:6D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS214143.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.137.0/24 Signature Algorithm: sha256WithRSAEncryption 26:9b:6d:7b:27:52:bd:be:fd:af:f7:d3:ae:04:af:d9:0f:3d: 2f:c4:7d:42:93:a5:8f:52:44:77:cd:f9:c2:51:57:76:44:0c: 7f:80:53:34:41:00:0f:e4:8c:6c:2c:d1:eb:c4:7d:36:86:05: e3:94:e7:54:2e:93:79:13:cc:d6:5e:f6:73:72:59:fc:c4:77: aa:a5:56:23:9d:c8:0d:49:29:f0:35:0a:f6:57:39:a5:fc:23: 5c:96:b2:03:5a:ae:43:b0:7a:ea:73:dc:f3:13:a4:f1:06:4e: f7:2b:00:a4:d9:ee:33:b8:1d:96:22:86:b8:3f:f1:3e:66:17: 7d:76:76:87:35:cd:15:89:ca:b7:b3:1a:bc:dd:71:7b:a0:08: 12:bb:f7:06:59:ea:c7:cc:91:7c:a8:6f:2a:c0:bb:30:4d:81: fd:7a:d2:f5:9b:6a:9a:75:44:5f:4c:b0:66:50:d8:ca:2a:a4: 60:17:54:2f:59:e7:e9:a8:e1:0a:ca:c7:13:81:0a:c7:3a:72: 2e:bf:22:eb:cd:00:13:d9:7f:bb:b8:08:84:bf:da:fd:a2:de: e3:b2:77:52:77:78:de:29:2a:6a:28:37:de:3a:9d:a6:b4:ac: 4e:09:87:72:e7:6d:43:21:81:45:4e:68:71:fb:38:bf:1c:e6: 7c:df:9c:cb -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSxcrInfv3l5t03eO1yFt+7TPX2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzA0M1oX DTI3MDUwMTA4MzU0M1owMzExMC8GA1UEAxMoM0Q2RUIwMDRFMjkzMEE4RkVCNjlG NTNFREFCRjhFNTIzRTg0RUM2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJQrd99l93BXtZxuiGd6Y0Ih82lqjfN58n11uxP+5MAuUIorPQvPu4SP3Qm qbmuMZokbZBv0USSCkD1lsapFDuS67vJsOfPtKF7YvAk5mbrJmwtJn3n+7tIWJ9M v/RSsSV0szjl5mvwJ9bRUsQv1zsvv2tG696yXXtK+Omi2Zf0f4rQezgDLMdSdZOw 8D3RPU0DDLGjULbCfVClfU0huHBIsaoprS0LDU4w+epYmI/LipvsLxFx8/89h2Wj gGVQkcsxqzgBFP2pp5M3Z4xlhNobmGHbC9ONO6liY0uBhQciG/amDj0LlOqeQt4z 6ON0mJmjJZfr1YUXzJOJtSeVEv8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ9brAE 4pMKj+tp9T7av45SPoTsbTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMjE0MTQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAy1SJMA0GCSqGSIb3DQEBCwUAA4IBAQAmm217J1K9vv2v99OuBK/ZDz0v xH1Ck6WPUkR3zfnCUVd2RAx/gFM0QQAP5IxsLNHrxH02hgXjlOdULpN5E8zWXvZz cln8xHeqpVYjncgNSSnwNQr2Vzml/CNclrIDWq5DsHrqc9zzE6TxBk73KwCk2e4z uB2WIoa4P/E+Zhd9dnaHNc0Vicq3sxq83XF7oAgSu/cGWerHzJF8qG8qwLswTYH9 etL1m2qadURfTLBmUNjKKqRgF1QvWefpqOEKyscTgQrHOnIuvyLrzQAT2X+7uAiE v9r9ot7jsndSd3jeKSpqKDfeOp2mtKxOCYdy521DIYFFTmhx+zi/HOZ835zL -----END CERTIFICATE-----Generated at Sun May 3 00:42:34 2026 by rpki-client