$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141968.roa File: AS141968.roa (raw, json) Hash identifier: iI4drEljaGlEye48loUzzolSvDG4JHqidybEnaelVd8= Subject key identifier: 15:E5:FF:E0:73:95:DD:C0:58:41:39:E4:4D:E2:73:8B:F6:34:63:AC Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 168430509A259F588E37A5D91E4F328CC66691B7 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141968.roa Signing time: Tue 15 Sep 2026 07:41:57 +0000 ROA not before: Tue 15 Sep 2026 07:36:57 +0000 ROA not after: Tue 14 Sep 2027 07:41:57 +0000 asID: 141968 IP address blocks: 103.119.237.0/24 maxlen: 24 103.177.94.0/23 maxlen: 24 103.180.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:84:30:50:9a:25:9f:58:8e:37:a5:d9:1e:4f:32:8c:c6:66:91:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 15 07:36:57 2026 GMT Not After : Sep 14 07:41:57 2027 GMT Subject: CN=15E5FFE07395DDC0584139E44DE2738BF63463AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:1c:e1:d6:ce:0c:c9:9a:81:de:5b:ea:54: ee:66:f3:76:09:71:4c:86:04:12:77:af:fb:9d:bd: 19:18:e0:17:ab:79:07:d1:9f:8f:e8:15:55:7d:c8: d1:42:21:59:e2:0a:22:41:32:f7:3e:f6:cd:a1:a7: 58:22:f2:23:77:be:5b:86:4d:43:68:f9:41:2f:14: 7f:3a:61:af:fe:3d:e9:cc:e8:1c:8b:fa:85:c9:84: 56:f3:c1:4f:f7:ca:6d:d6:ce:c0:df:12:48:2a:2f: b0:60:8c:99:bf:31:fa:f3:0d:39:e6:09:70:e9:e2: ac:cf:1b:c2:a0:c7:72:d6:05:22:f5:d3:b5:01:0c: 2c:00:b3:d0:86:da:67:be:ad:e4:c1:ef:74:b6:ed: 7c:05:90:c6:ad:c0:0e:cf:3c:9b:f7:49:dd:1a:b6: b9:f0:55:84:cc:98:cd:91:0a:6a:26:18:15:21:fe: f1:c3:3c:01:23:11:ae:83:39:cb:89:3f:ce:9d:41: 7a:6b:0f:3c:01:f8:af:0d:b0:50:c4:5b:7d:93:25: 63:85:e3:75:b1:b4:87:ed:cc:d8:65:5c:06:a8:95: df:43:98:88:51:13:aa:75:94:89:18:36:f5:4d:17: cc:da:fc:f5:36:5c:64:ff:db:d7:f1:da:f6:25:4e: c0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E5:FF:E0:73:95:DD:C0:58:41:39:E4:4D:E2:73:8B:F6:34:63:AC X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141968.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.237.0/24 103.177.94.0/23 103.180.124.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:b6:d3:b7:33:cc:0c:0f:69:52:76:27:10:28:32:ac:d3:22: 89:6e:54:59:0f:44:18:fc:6c:84:85:bb:21:2b:27:fe:98:55: 3d:ae:b1:cf:a0:4d:1a:46:42:c0:5d:cb:61:cc:5e:c9:42:6b: 84:e8:a5:64:70:d2:bb:c1:cc:ff:0c:a7:b1:16:76:41:a8:53: 7e:fb:8c:2e:8f:d0:1e:c1:8f:2e:b3:9c:e9:8b:c0:50:ec:0f: fb:6c:55:28:3a:6d:5b:7e:f3:72:86:20:28:8d:04:40:20:c9: 67:f3:67:6a:ee:2a:9f:f1:19:48:f9:f7:02:5c:6e:1d:db:81: 11:69:88:1c:41:46:2f:ce:a3:8f:a7:ea:22:4a:27:a9:7a:55: 5f:5c:1f:d7:77:c2:d0:cb:eb:0b:a4:63:52:81:58:29:a8:cf: ae:10:5a:0b:02:ea:b0:be:cb:86:fe:a2:e4:0d:69:0a:0d:da: 71:8a:23:fc:ab:df:39:ee:21:92:19:fd:9e:d0:70:f2:4e:1c: 32:a5:7f:48:fe:aa:f3:89:08:14:aa:4c:96:d5:9b:af:9c:9c: 3f:b5:1a:b7:b0:0d:fb:73:8e:5c:ee:ab:32:a3:52:35:1a:21: 66:84:d7:d1:7a:11:55:16:ca:cb:e3:e5:43:15:6f:89:2f:f8: bb:39:e4:4f -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUFoQwUJoln1iON6XZHk8yjMZmkbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkxNTA3MzY1N1oX DTI3MDkxNDA3NDE1N1owMzExMC8GA1UEAxMoMTVFNUZGRTA3Mzk1RERDMDU4NDEz OUU0NERFMjczOEJGNjM0NjNBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJiIHOHWzgzJmoHeW+pU7mbzdglxTIYEEnev+529GRjgF6t5B9Gfj+gVVX3I 0UIhWeIKIkEy9z72zaGnWCLyI3e+W4ZNQ2j5QS8Ufzphr/496czoHIv6hcmEVvPB T/fKbdbOwN8SSCovsGCMmb8x+vMNOeYJcOnirM8bwqDHctYFIvXTtQEMLACz0Iba Z76t5MHvdLbtfAWQxq3ADs88m/dJ3Rq2ufBVhMyYzZEKaiYYFSH+8cM8ASMRroM5 y4k/zp1BemsPPAH4rw2wUMRbfZMlY4XjdbG0h+3M2GVcBqiV30OYiFETqnWUiRg2 9U0XzNr89TZcZP/b1/Ha9iVOwBsCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBQV5f/g c5XdwFhBOeRN4nOL9jRjrDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxOTY4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIA ATASAwQAZ3ftAwQBZ7FeAwQBZ7R8MA0GCSqGSIb3DQEBCwUAA4IBAQCfttO3M8wM D2lSdicQKDKs0yKJblRZD0QY/GyEhbshKyf+mFU9rrHPoE0aRkLAXcthzF7JQmuE 6KVkcNK7wcz/DKexFnZBqFN++4wuj9AewY8us5zpi8BQ7A/7bFUoOm1bfvNyhiAo jQRAIMln82dq7iqf8RlI+fcCXG4d24ERaYgcQUYvzqOPp+oiSiepelVfXB/Xd8LQ y+sLpGNSgVgpqM+uEFoLAuqwvsuG/qLkDWkKDdpxiiP8q9857iGSGf2e0HDyThwy pX9I/qrziQgUqkyW1ZuvnJw/tRq3sA37c45c7qsyo1I1GiFmhNfRehFVFsrL4+VD FW+JL/i7OeRP -----END CERTIFICATE-----Generated at Mon Sep 21 12:11:36 2026 by rpki-client