$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa File: AS141071.roa (raw, json) Hash identifier: PWq0qkvbhtDIVEjroTWJdVVRgXpueUOXk6CjTf9mK1c= Subject key identifier: 62:D5:C1:C8:58:04:F1:D6:69:D9:E4:04:0A:2D:9A:D3:41:58:33:06 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 7AD010F5E4BCD7E9DCB5D7D2686691A9B6637AD6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa Signing time: Sun 03 May 2026 05:56:59 +0000 ROA not before: Sun 03 May 2026 05:51:59 +0000 ROA not after: Sun 02 May 2027 05:56:59 +0000 asID: 141071 IP address blocks: 103.54.171.0/24 maxlen: 24 103.97.140.0/24 maxlen: 24 103.97.141.0/24 maxlen: 24 103.155.196.0/23 maxlen: 23 2406:7640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d0:10:f5:e4:bc:d7:e9:dc:b5:d7:d2:68:66:91:a9:b6:63:7a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:51:59 2026 GMT Not After : May 2 05:56:59 2027 GMT Subject: CN=62D5C1C85804F1D669D9E4040A2D9AD341583306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:cc:64:88:56:ef:0d:44:cb:ea:1e:c8:61: 30:4c:0f:fa:92:ce:c5:6d:fb:b9:96:13:ee:3a:89: 60:d7:bd:46:48:3b:f2:e4:36:b5:be:65:3d:3c:59: ea:56:ef:1c:85:27:56:51:5f:dc:6c:6e:39:3c:d0: 06:e1:95:b2:cb:2f:a7:db:0b:bd:ff:8d:bf:b0:83: 37:bb:de:d4:64:e8:af:3a:68:07:84:bb:4c:84:2f: 66:d5:85:a7:47:c2:dd:32:b2:3f:7a:21:e2:30:f1: 27:52:b7:8d:43:f1:23:31:6c:d6:d1:71:4c:db:01: db:19:3a:24:47:61:93:02:cb:1e:fc:99:4d:92:e0: 60:f5:e2:55:71:9a:fd:59:01:4f:24:06:ae:7b:2d: 64:11:e7:4c:a5:81:90:4b:f5:20:7c:19:c5:c1:eb: 68:da:80:28:1c:ab:05:fb:90:30:08:6a:22:97:cd: 73:31:93:5c:c9:c0:2a:d4:63:85:0d:8f:e0:ee:b3: 22:ca:bd:1b:5e:cc:db:f0:da:0c:85:d6:d8:aa:f7: 1a:95:51:e4:eb:7d:31:ac:d0:a9:0a:ee:8d:66:b3: c2:fd:81:47:c0:7a:28:cf:9b:b0:4b:a9:33:c2:95: 1c:5e:e8:b1:e3:01:2f:13:dc:7d:6b:5a:35:9b:bf: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D5:C1:C8:58:04:F1:D6:69:D9:E4:04:0A:2D:9A:D3:41:58:33:06 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.171.0/24 103.97.140.0/23 103.155.196.0/23 IPv6: 2406:7640::/32 Signature Algorithm: sha256WithRSAEncryption 35:c6:44:6b:e6:a4:78:64:73:2a:31:17:d2:39:73:9b:b7:c8: 61:04:cd:58:69:f5:48:e4:ce:a2:cc:99:58:b7:22:bc:af:59: 3e:04:e1:b9:5f:a1:4c:ac:a0:28:93:59:33:c0:37:bf:8a:f1: d3:9c:cf:17:69:e8:e8:ba:20:fb:43:2e:bc:fd:6a:2c:e1:4c: 85:43:8e:a7:71:53:9d:78:a1:f8:71:86:e9:98:ac:f4:92:32: 57:79:37:03:b6:f2:88:52:4a:53:ab:e2:ba:df:3a:a2:2c:61: 1d:33:d4:08:89:7d:cd:bf:a0:35:9e:48:9b:a6:f3:0d:d8:dc: eb:f1:c5:1c:34:72:26:db:43:e4:ba:60:34:3b:ab:79:2e:1a: f7:44:ed:55:96:30:09:b9:33:b2:ea:ef:39:77:27:fb:fc:94: fd:f3:3c:f8:cc:d2:ae:84:a5:7b:e4:e1:56:fb:82:c1:2a:05: d6:5d:c0:e6:e1:00:70:a6:33:0a:77:90:a3:c6:96:9f:de:c3: 63:20:62:23:8a:0c:80:67:ef:b6:5b:cc:80:9c:07:3a:c6:44: b0:f1:66:c0:ba:c1:06:9f:08:06:7f:2a:2f:24:db:08:fb:e2: f7:3a:17:d8:7e:4b:b7:7f:11:f4:2c:84:a6:b5:a0:c6:54:a0: 9b:27:35:73 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUetAQ9eS81+nctdfSaGaRqbZjetYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1NTE1OVoX DTI3MDUwMjA1NTY1OVowMzExMC8GA1UEAxMoNjJENUMxQzg1ODA0RjFENjY5RDlF NDA0MEEyRDlBRDM0MTU4MzMwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5IzGSIVu8NRMvqHshhMEwP+pLOxW37uZYT7jqJYNe9Rkg78uQ2tb5lPTxZ 6lbvHIUnVlFf3GxuOTzQBuGVsssvp9sLvf+Nv7CDN7ve1GTorzpoB4S7TIQvZtWF p0fC3TKyP3oh4jDxJ1K3jUPxIzFs1tFxTNsB2xk6JEdhkwLLHvyZTZLgYPXiVXGa /VkBTyQGrnstZBHnTKWBkEv1IHwZxcHraNqAKByrBfuQMAhqIpfNczGTXMnAKtRj hQ2P4O6zIsq9G17M2/DaDIXW2Kr3GpVR5Ot9MazQqQrujWazwv2BR8B6KM+bsEup M8KVHF7oseMBLxPcfWtaNZu/GT8CAwEAAaOCAecwggHjMB0GA1UdDgQWBBRi1cHI WATx1mnZ5AQKLZrTQVgzBjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMDcxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQAZzarAwQBZ2GMAwQBZ5vEMA0EAgACMAcDBQAkBnZAMA0GCSqGSIb3DQEB CwUAA4IBAQA1xkRr5qR4ZHMqMRfSOXObt8hhBM1YafVI5M6izJlYtyK8r1k+BOG5 X6FMrKAok1kzwDe/ivHTnM8XaejouiD7Qy68/Wos4UyFQ46ncVOdeKH4cYbpmKz0 kjJXeTcDtvKIUkpTq+K63zqiLGEdM9QIiX3Nv6A1nkibpvMN2Nzr8cUcNHIm20Pk umA0O6t5Lhr3RO1VljAJuTOy6u85dyf7/JT98zz4zNKuhKV75OFW+4LBKgXWXcDm 4QBwpjMKd5Cjxpaf3sNjIGIjigyAZ++2W8yAnAc6xkSw8WbAusEGnwgGfyovJNsI ++L3OhfYfku3fxH0LISmtaDGVKCbJzVz -----END CERTIFICATE-----Generated at Tue May 12 22:42:04 2026 by rpki-client