$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa File: AS141902.roa (raw, json) Hash identifier: d7es62A+TxufBnEtflJgw7APzMsoWXTKgKk87WY5fHo= Subject key identifier: FA:7A:C1:26:1A:70:C3:F0:2B:B0:1A:1A:FA:02:4A:E7:C7:BB:52:E6 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4B4452609AE450EDE5DE69B1747BA01A5ECE4121 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa Signing time: Sun 03 May 2026 05:38:33 +0000 ROA not before: Sun 03 May 2026 05:33:33 +0000 ROA not after: Sun 02 May 2027 05:38:33 +0000 asID: 141902 IP address blocks: 103.163.134.0/23 maxlen: 24 103.187.222.0/24 maxlen: 24 2001:df0:3f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:44:52:60:9a:e4:50:ed:e5:de:69:b1:74:7b:a0:1a:5e:ce:41:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:33:33 2026 GMT Not After : May 2 05:38:33 2027 GMT Subject: CN=FA7AC1261A70C3F02BB01A1AFA024AE7C7BB52E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:54:c4:ed:27:8d:be:e9:4f:ed:fa:ef:e3: 30:e3:bd:7b:88:1c:89:02:e5:95:00:ea:7d:09:46: 15:14:06:8b:ac:57:40:ad:7f:51:1e:d8:c2:04:7b: bc:83:cb:08:53:c3:6f:85:a1:a8:db:3e:dd:5b:fc: 38:4a:f9:ea:86:64:81:c1:5f:d5:89:cb:f1:21:3c: 7e:3e:5c:e0:53:ad:d9:61:bf:51:07:49:19:24:e6: 2e:ae:c8:7b:de:2b:53:99:c3:d6:a6:ce:44:c1:f7: b0:9d:54:da:58:d1:a3:01:4e:cc:1f:b1:f9:6e:d1: b5:f5:e0:fd:d2:5f:a6:0f:67:3d:da:eb:1a:5b:9c: c9:46:05:e6:16:2f:d9:2a:a2:0e:e6:c3:f8:1a:c5: 93:6c:cb:7e:f1:71:fc:77:07:95:53:27:5a:75:e2: b0:d7:39:d2:25:bf:17:84:4c:1a:40:8d:76:4d:7b: 4a:43:c7:d5:dd:c3:2b:d5:25:dd:9e:b2:b8:64:b9: 22:af:62:47:a1:63:4c:0b:64:56:b3:a0:43:75:0e: 0a:4d:2f:76:d3:a5:20:00:a3:1e:a5:a1:2d:8c:df: fc:98:15:d3:90:64:da:fb:0e:40:1f:c7:7e:94:ce: e6:dc:2f:bf:5f:26:42:8b:18:e3:cc:9a:2d:aa:04: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7A:C1:26:1A:70:C3:F0:2B:B0:1A:1A:FA:02:4A:E7:C7:BB:52:E6 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141902.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.134.0/23 103.187.222.0/24 IPv6: 2001:df0:3f40::/48 Signature Algorithm: sha256WithRSAEncryption 02:43:78:6c:2b:dd:d2:59:e0:1a:a2:ea:aa:f9:ec:5a:18:df: f1:12:33:df:af:6b:2b:06:f0:2f:15:50:b0:fa:32:7a:ae:58: a0:8e:63:b5:b7:46:4a:cb:50:c2:6b:dd:e6:31:51:a3:59:a9: 4f:14:8a:5d:f0:b4:a6:96:e3:ae:0d:9b:fb:61:70:ec:4e:1a: ae:cb:00:2f:12:89:3b:fb:a2:4b:9c:5e:84:40:04:a9:b0:df: 3d:e2:e0:30:01:4e:b0:66:ae:09:76:d4:46:38:a8:c7:1a:5d: 3b:5b:46:5a:69:3c:85:b9:81:f4:5c:d3:60:54:6e:65:49:f2: 83:9b:89:66:78:8b:a9:76:7d:24:74:25:60:52:94:05:d6:b5: 3a:1c:60:54:54:dd:04:fa:a9:53:56:ab:e9:bc:84:47:77:07: 2f:1d:ca:1a:9e:a0:a2:e2:18:b1:7b:cc:cf:94:50:67:e9:56: 88:34:78:98:68:24:d4:e3:8d:13:81:3c:f1:e7:f0:e4:c9:1a: 5a:63:36:68:0a:12:dc:2a:bf:de:1a:52:a2:1d:20:50:ae:c1: eb:dd:70:b5:a9:0d:8a:fb:ed:db:ed:91:75:89:10:e2:41:13: e6:11:89:ea:cf:0b:c7:84:0f:a0:54:fe:fc:92:98:9b:f0:b2: 46:32:18:a8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUS0RSYJrkUO3l3mmxdHugGl7OQSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1MzMzM1oX DTI3MDUwMjA1MzgzM1owMzExMC8GA1UEAxMoRkE3QUMxMjYxQTcwQzNGMDJCQjAx QTFBRkEwMjRBRTdDN0JCNTJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgPVMTtJ42+6U/t+u/jMOO9e4gciQLllQDqfQlGFRQGi6xXQK1/UR7YwgR7 vIPLCFPDb4WhqNs+3Vv8OEr56oZkgcFf1YnL8SE8fj5c4FOt2WG/UQdJGSTmLq7I e94rU5nD1qbORMH3sJ1U2ljRowFOzB+x+W7RtfXg/dJfpg9nPdrrGlucyUYF5hYv 2SqiDubD+BrFk2zLfvFx/HcHlVMnWnXisNc50iW/F4RMGkCNdk17SkPH1d3DK9Ul 3Z6yuGS5Iq9iR6FjTAtkVrOgQ3UOCk0vdtOlIACjHqWhLYzf/JgV05Bk2vsOQB/H fpTO5twvv18mQosY48yaLaoEPYkCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBT6esEm GnDD8CuwGhr6Akrnx7tS5jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTAyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBZ6OGAwQAZ7veMA8EAgACMAkDBwAgAQ3wP0AwDQYJKoZIhvcNAQELBQAD ggEBAAJDeGwr3dJZ4Bqi6qr57FoY3/ESM9+vaysG8C8VULD6MnquWKCOY7W3RkrL UMJr3eYxUaNZqU8Uil3wtKaW464Nm/thcOxOGq7LAC8SiTv7okucXoRABKmw3z3i 4DABTrBmrgl21EY4qMcaXTtbRlppPIW5gfRc02BUbmVJ8oObiWZ4i6l2fSR0JWBS lAXWtTocYFRU3QT6qVNWq+m8hEd3By8dyhqeoKLiGLF7zM+UUGfpVog0eJhoJNTj jROBPPHn8OTJGlpjNmgKEtwqv94aUqIdIFCuwevdcLWpDYr77dvtkXWJEOJBE+YR ierPC8eED6BU/vySmJvwskYyGKg= -----END CERTIFICATE-----Generated at Tue May 12 22:42:16 2026 by rpki-client