$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa File: AS141939.roa (raw, json) Hash identifier: d9g5ABwrWylDktxbX0mlXAn/uRLJu+39UJ9i/GOV+rw= Subject key identifier: 6E:54:53:FB:69:E5:6D:9D:74:FE:F6:A9:AD:80:BC:C8:2F:57:95:7C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78BBE220DBF1C1E358AC2CCDC8A1C624D7CD11AC Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa Signing time: Sun 03 May 2026 05:38:11 +0000 ROA not before: Sun 03 May 2026 05:33:11 +0000 ROA not after: Sun 02 May 2027 05:38:11 +0000 asID: 141939 IP address blocks: 103.164.192.0/23 maxlen: 23 103.164.192.0/23 maxlen: 24 2001:df1:1bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bb:e2:20:db:f1:c1:e3:58:ac:2c:cd:c8:a1:c6:24:d7:cd:11:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 05:33:11 2026 GMT Not After : May 2 05:38:11 2027 GMT Subject: CN=6E5453FB69E56D9D74FEF6A9AD80BCC82F57957C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a1:a9:cd:77:08:68:87:9d:bb:34:29:92:ae: 0d:a9:29:fb:b4:6d:94:db:5b:d6:bd:f7:50:de:95: 4b:ec:25:6b:ed:2e:dc:83:24:a5:a3:11:ef:4c:de: 9b:9c:89:90:01:5c:7d:84:67:48:d5:2c:ea:d5:23: 3b:64:61:5d:2d:db:5a:bf:12:e7:f7:d1:8a:22:e0: 55:e7:80:33:62:7e:e1:c4:d3:c7:73:05:67:50:8f: 5f:f6:ba:4f:14:ce:5a:48:ba:c4:96:07:73:f4:10: 62:56:47:42:25:30:1e:9a:7a:72:b5:cb:e9:16:5a: fa:db:6d:40:5b:e4:22:10:52:1d:cf:c6:80:c9:42: 3d:b6:e9:ff:a1:45:b7:c1:74:54:d2:4e:5e:fd:34: 1e:eb:38:cb:60:de:8a:6d:52:0e:65:5d:ef:ab:e3: 47:e7:3c:4d:db:36:de:fc:92:ac:42:d6:54:40:ac: a8:29:ca:67:57:95:d9:43:6f:73:cf:18:54:7a:c1: 0c:11:5e:b0:be:bc:fd:6b:31:61:8c:ec:a1:3b:d0: 8c:ba:62:ac:52:a9:67:87:8c:66:31:cc:bf:44:d5: ba:e2:3b:47:b1:a0:5c:d5:d4:08:1f:12:f2:98:9e: d6:fa:d7:bb:94:e4:96:7a:59:ca:8f:fb:38:3f:36: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:54:53:FB:69:E5:6D:9D:74:FE:F6:A9:AD:80:BC:C8:2F:57:95:7C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.192.0/23 IPv6: 2001:df1:1bc0::/48 Signature Algorithm: sha256WithRSAEncryption 09:9c:28:18:bd:b8:4b:40:64:94:fd:fd:34:2c:41:cc:39:73: 50:a3:8e:eb:4d:4c:25:1f:f1:8a:3b:8c:80:5f:a7:b7:e6:da: 49:53:94:ef:cd:14:2f:cf:34:78:ed:94:e1:48:2a:f4:01:d6: 47:30:20:cd:10:fe:a0:68:74:33:53:99:53:3c:3e:23:07:00: 25:78:f1:c5:e9:7d:cf:a6:6d:2c:31:98:7d:c7:3f:da:ee:d5: 77:14:84:c1:64:1a:ae:84:87:a0:a6:4c:ed:57:c2:f1:e0:d4: 62:49:de:cf:da:ba:9c:d2:85:d2:29:2e:66:61:e6:07:3e:ea: 39:bd:d8:da:e4:99:d7:30:f1:58:c8:5c:02:81:71:a9:4f:7e: 03:5e:97:d5:46:61:54:b4:1b:dd:d1:d9:54:56:3e:40:fc:2f: f0:c8:cd:2c:7b:61:0b:48:7e:ca:6d:67:82:8b:c9:54:55:8a: c0:b1:7e:23:c3:ca:e4:59:6a:58:50:d9:80:2d:7e:63:0f:eb: 58:65:4d:af:af:00:8f:3f:a0:0d:fa:23:45:0d:80:8b:cf:76: 5a:37:a9:b7:ea:59:63:e7:b1:6f:29:39:26:22:04:61:78:ea: 04:9f:e7:b5:f0:6a:f2:93:a8:f2:37:5d:c8:84:f9:ee:18:0f: ff:fb:c1:f5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeLviINvxweNYrCzNyKHGJNfNEawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzA1MzMxMVoX DTI3MDUwMjA1MzgxMVowMzExMC8GA1UEAxMoNkU1NDUzRkI2OUU1NkQ5RDc0RkVG NkE5QUQ4MEJDQzgyRjU3OTU3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6hqc13CGiHnbs0KZKuDakp+7RtlNtb1r33UN6VS+wla+0u3IMkpaMR70ze m5yJkAFcfYRnSNUs6tUjO2RhXS3bWr8S5/fRiiLgVeeAM2J+4cTTx3MFZ1CPX/a6 TxTOWki6xJYHc/QQYlZHQiUwHpp6crXL6RZa+tttQFvkIhBSHc/GgMlCPbbp/6FF t8F0VNJOXv00Hus4y2Deim1SDmVd76vjR+c8Tds23vySrELWVECsqCnKZ1eV2UNv c88YVHrBDBFesL68/WsxYYzsoTvQjLpirFKpZ4eMZjHMv0TVuuI7R7GgXNXUCB8S 8pie1vrXu5TklnpZyo/7OD82270CAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRuVFP7 aeVtnXT+9qmtgLzIL1eVfDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBZ6TAMA8EAgACMAkDBwAgAQ3xG8AwDQYJKoZIhvcNAQELBQADggEBAAmc KBi9uEtAZJT9/TQsQcw5c1CjjutNTCUf8Yo7jIBfp7fm2klTlO/NFC/PNHjtlOFI KvQB1kcwIM0Q/qBodDNTmVM8PiMHACV48cXpfc+mbSwxmH3HP9ru1XcUhMFkGq6E h6CmTO1XwvHg1GJJ3s/aupzShdIpLmZh5gc+6jm92Nrkmdcw8VjIXAKBcalPfgNe l9VGYVS0G93R2VRWPkD8L/DIzSx7YQtIfsptZ4KLyVRVisCxfiPDyuRZalhQ2YAt fmMP61hlTa+vAI8/oA36I0UNgIvPdlo3qbfqWWPnsW8pOSYiBGF46gSf57XwavKT qPI3XciE+e4YD//7wfU= -----END CERTIFICATE-----Generated at Tue May 12 22:11:31 2026 by rpki-client