$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa File: AS141961.roa (raw, json) Hash identifier: 56dFZpr8rrog0O6FS93OGDOPIovzo244US9X1FjjRa8= Subject key identifier: 70:E3:0D:26:14:01:3E:9F:5E:6E:CB:A6:60:7B:49:1C:B6:4C:BD:B8 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2CB9CF7D94C42377735C879DC3EE07AF62F4A3F1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa Signing time: Sun 03 May 2026 15:10:57 +0000 ROA not before: Sun 03 May 2026 15:05:57 +0000 ROA not after: Sun 02 May 2027 15:10:57 +0000 asID: 141961 IP address blocks: 103.166.192.0/24 maxlen: 24 103.214.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b9:cf:7d:94:c4:23:77:73:5c:87:9d:c3:ee:07:af:62:f4:a3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 15:05:57 2026 GMT Not After : May 2 15:10:57 2027 GMT Subject: CN=70E30D2614013E9F5E6ECBA6607B491CB64CBDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:40:23:d6:07:67:b6:8d:7b:a5:56:1e:fc: 9e:c7:d0:37:e2:40:f2:97:58:4d:88:af:cc:29:47: f1:f0:e4:49:bf:9e:95:68:6d:ff:ea:f3:4c:f5:9f: e1:0a:8b:92:ab:1c:bf:65:45:3f:5a:14:25:c2:c3: 94:9e:d9:a3:d0:e6:13:12:e7:b5:51:7f:b2:b9:de: 43:6a:a2:49:6e:86:29:07:37:54:92:fc:c7:ce:6e: 4d:04:bc:a4:88:a5:60:d4:b7:fa:e1:fd:e5:b1:1f: 55:fe:2d:67:66:ba:3b:a7:6b:6a:0d:2d:74:1b:50: e6:3d:d3:98:3d:2d:1c:d5:c5:c3:d3:96:ea:c2:3b: 8c:f5:e1:60:c3:c9:e1:bb:ab:f3:fa:1f:33:92:4d: ae:b3:54:51:be:a7:15:97:9a:b9:1a:73:34:3e:b0: eb:c5:6a:b3:cb:aa:d9:de:2a:e6:b2:a0:00:03:38: fd:ce:4e:c8:5e:d0:47:d7:5a:8d:2d:1d:a2:ec:f3: f9:da:ac:0a:6f:19:27:70:3f:0c:a1:17:43:a2:f1: 9f:71:33:1f:31:58:c7:a0:be:5f:c5:f0:48:94:a6: 57:ca:2a:a7:99:1e:f1:ea:5c:c9:1d:48:42:f9:ad: 24:b1:3f:e9:9e:d2:00:26:99:f4:aa:84:44:4a:8a: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E3:0D:26:14:01:3E:9F:5E:6E:CB:A6:60:7B:49:1C:B6:4C:BD:B8 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141961.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.192.0/24 103.214.176.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c6:3f:98:1a:83:f4:71:1c:d5:3a:23:81:8e:14:d3:da:42: af:a3:2a:20:de:2a:55:ee:38:40:76:d4:40:a4:89:d2:dc:2e: 70:aa:2b:90:6f:c1:d9:1a:f0:c2:72:1f:89:7f:58:6b:4a:76: 2e:fa:f3:31:a9:30:f6:20:04:98:45:c1:23:99:9c:e3:05:fe: 31:07:13:8b:a4:b7:4a:15:45:73:8e:02:ff:2f:b5:dd:41:e2: b7:82:ed:c9:79:ff:4a:ef:ca:17:36:81:7f:bf:ad:72:af:db: 8d:93:ef:0f:80:32:51:ae:82:f6:85:a1:18:0f:7d:a4:8b:a7: 6b:a3:b8:44:9e:05:66:64:a2:8e:61:cb:02:c8:78:dd:1f:c9: c1:aa:a5:0f:63:04:16:4e:05:47:df:2f:98:92:ac:8f:dc:9c: fe:38:44:d7:c7:d3:91:31:56:f5:ba:fe:e4:fd:12:51:55:f6: 42:db:55:c8:8c:f5:a1:8a:43:a1:3c:6a:a2:51:aa:8f:8c:0a: 17:1b:c9:70:5b:5b:12:d0:b9:fe:61:d2:e3:07:fd:a4:ad:21: 38:be:a9:35:b8:e5:9a:a0:fe:dc:7b:89:ab:c0:a9:cb:36:bd: 93:a1:93:b7:71:52:4f:48:e8:6d:9a:48:30:4c:eb:f3:12:6d: 8c:11:cb:68 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIULLnPfZTEI3dzXIedw+4Hr2L0o/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzE1MDU1N1oX DTI3MDUwMjE1MTA1N1owMzExMC8GA1UEAxMoNzBFMzBEMjYxNDAxM0U5RjVFNkVD QkE2NjA3QjQ5MUNCNjRDQkRCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUYQCPWB2e2jXulVh78nsfQN+JA8pdYTYivzClH8fDkSb+elWht/+rzTPWf 4QqLkqscv2VFP1oUJcLDlJ7Zo9DmExLntVF/srneQ2qiSW6GKQc3VJL8x85uTQS8 pIilYNS3+uH95bEfVf4tZ2a6O6drag0tdBtQ5j3TmD0tHNXFw9OW6sI7jPXhYMPJ 4bur8/ofM5JNrrNUUb6nFZeauRpzND6w68Vqs8uq2d4q5rKgAAM4/c5OyF7QR9da jS0douzz+dqsCm8ZJ3A/DKEXQ6Lxn3EzHzFYx6C+X8XwSJSmV8oqp5ke8epcyR1I QvmtJLE/6Z7SACaZ9KqEREqKfrMCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRw4w0m FAE+n15uy6Zge0kctky9uDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ6bAAwQAZ9awMA0GCSqGSIb3DQEBCwUAA4IBAQAJxj+YGoP0cRzVOiOB jhTT2kKvoyog3ipV7jhAdtRApInS3C5wqiuQb8HZGvDCch+Jf1hrSnYu+vMxqTD2 IASYRcEjmZzjBf4xBxOLpLdKFUVzjgL/L7XdQeK3gu3Jef9K78oXNoF/v61yr9uN k+8PgDJRroL2haEYD32ki6dro7hEngVmZKKOYcsCyHjdH8nBqqUPYwQWTgVH3y+Y kqyP3Jz+OETXx9ORMVb1uv7k/RJRVfZC21XIjPWhikOhPGqiUaqPjAoXG8lwW1sS 0Ln+YdLjB/2krSE4vqk1uOWaoP7ce4mrwKnLNr2ToZO3cVJPSOhtmkgwTOvzEm2M Ecto -----END CERTIFICATE-----Generated at Tue May 12 23:03:43 2026 by rpki-client