$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS141142.roa File: AS141142.roa (raw, json) Hash identifier: poT/GGw3g7rogWtcF2bX5qXBdNAUAd8+j0uVXWWpgqk= Subject key identifier: 8A:B5:60:06:6C:79:BF:60:F5:8A:46:82:BF:8E:98:DB:18:3D:8F:6C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5A6E1A30649E53A0D3C48B022FD2A37956066774 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141142.roa Signing time: Mon 29 Jun 2026 07:55:10 +0000 ROA not before: Mon 29 Jun 2026 07:50:10 +0000 ROA not after: Mon 28 Jun 2027 07:55:10 +0000 asID: 141142 IP address blocks: 122.248.42.0/24 maxlen: 24 122.248.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 09:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6e:1a:30:64:9e:53:a0:d3:c4:8b:02:2f:d2:a3:79:56:06:67:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Jun 29 07:50:10 2026 GMT Not After : Jun 28 07:55:10 2027 GMT Subject: CN=8AB560066C79BF60F58A4682BF8E98DB183D8F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:dc:fb:16:23:dd:b0:b3:1e:4a:3c:9f:e6: 50:3e:41:88:2b:8d:e6:c3:55:1f:4f:9a:35:4e:f0: ff:81:d6:f3:67:03:9a:58:5f:d6:25:0b:68:af:3a: 94:ff:aa:a3:1b:7b:f6:ef:46:77:76:65:f7:8b:27: 0c:e0:7f:61:cd:dd:05:bb:67:7b:cd:8a:b0:a5:36: bc:88:91:9b:a4:fd:14:c8:08:9c:e9:4c:a1:99:5f: 10:43:f7:e2:6c:4e:5e:ec:14:12:d8:23:e1:8d:97: 94:a0:b2:e1:a6:a8:88:12:35:16:85:b9:d8:7d:04: 49:a3:a0:0d:4a:77:36:bf:b0:1e:8d:83:4c:cc:0c: e1:35:32:b1:d8:91:4b:7c:35:4b:4e:b1:79:75:5a: 73:68:4b:47:89:aa:5d:de:d9:dc:1f:e7:f0:47:3b: 43:22:30:97:50:77:b1:83:a1:0c:b2:54:22:09:50: 21:8d:c3:97:c6:86:19:13:1c:7f:a3:4e:75:ce:a5: c0:d4:be:80:47:1f:a6:a3:06:7d:ce:b2:78:90:b0: 77:9f:eb:cb:2a:16:9e:51:d1:6c:36:51:b3:c2:5d: 21:8d:20:7e:17:52:8b:7f:ec:d6:18:43:1f:52:1d: 8e:7b:49:ed:08:b1:a0:f1:6e:cb:5c:48:26:f4:2f: e7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B5:60:06:6C:79:BF:60:F5:8A:46:82:BF:8E:98:DB:18:3D:8F:6C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS141142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.42.0/24 122.248.44.0/24 Signature Algorithm: sha256WithRSAEncryption a6:03:b5:38:f2:43:38:7d:ca:3d:e8:0b:cd:e9:22:28:75:b0: 57:34:66:d8:12:56:e8:aa:ef:6f:19:de:6d:7a:87:32:46:d3: b3:78:09:a3:50:dd:2a:9d:ee:43:59:c9:32:93:1a:d1:4a:2b: 38:5d:ef:79:1e:3a:1d:dd:61:a1:df:d9:52:89:9a:be:1f:52: 0d:03:bd:01:85:1e:6f:ec:90:66:d0:eb:68:fd:c0:4b:c3:67: ac:a3:1b:07:6f:cb:e1:89:c9:ef:44:f5:30:ba:55:a2:79:a5: c2:06:74:ee:f1:dd:0e:fd:0f:ff:47:ff:e9:f1:ef:a5:95:46: b8:f6:5d:44:05:59:41:42:a8:c6:ef:f3:b3:4d:bf:c6:d5:23: bc:1f:8a:6a:31:16:68:8a:fa:8b:79:74:3e:86:c9:a6:a4:7b: 18:ca:1c:66:9f:af:e0:d4:95:a5:84:e5:6b:17:84:f4:2b:9c: fe:7e:74:c6:c4:7c:fb:ad:47:bb:d5:7f:55:73:6e:b9:63:72: 2e:da:a8:f8:5f:de:4d:7a:98:de:98:c5:92:50:96:b9:a5:73: 62:24:59:22:6a:32:d1:05:0d:db:f5:f3:e6:7d:f9:29:16:ae: 96:a3:c2:49:c4:cd:86:c9:7b:56:09:46:10:1f:54:ea:95:06: cd:40:3d:25 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUWm4aMGSeU6DTxIsCL9KjeVYGZ3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTA3NTAxMFoX DTI3MDYyODA3NTUxMFowMzExMC8GA1UEAxMoOEFCNTYwMDY2Qzc5QkY2MEY1OEE0 NjgyQkY4RTk4REIxODNEOEY2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLD3PsWI92wsx5KPJ/mUD5BiCuN5sNVH0+aNU7w/4HW82cDmlhf1iULaK86 lP+qoxt79u9Gd3Zl94snDOB/Yc3dBbtne82KsKU2vIiRm6T9FMgInOlMoZlfEEP3 4mxOXuwUEtgj4Y2XlKCy4aaoiBI1FoW52H0ESaOgDUp3Nr+wHo2DTMwM4TUysdiR S3w1S06xeXVac2hLR4mqXd7Z3B/n8Ec7QyIwl1B3sYOhDLJUIglQIY3Dl8aGGRMc f6NOdc6lwNS+gEcfpqMGfc6yeJCwd5/ryyoWnlHRbDZRs8JdIY0gfhdSi3/s1hhD H1IdjntJ7QixoPFuy1xIJvQv5+8CAwEAAaOCAdIwggHOMB0GA1UdDgQWBBSKtWAG bHm/YPWKRoK/jpjbGD2PbDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQxMTQyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAevgqAwQAevgsMA0GCSqGSIb3DQEBCwUAA4IBAQCmA7U48kM4fco96AvN 6SIodbBXNGbYElboqu9vGd5teocyRtOzeAmjUN0qne5DWckykxrRSis4Xe95Hjod 3WGh39lSiZq+H1INA70BhR5v7JBm0Oto/cBLw2esoxsHb8vhicnvRPUwulWieaXC BnTu8d0O/Q//R//p8e+llUa49l1EBVlBQqjG7/OzTb/G1SO8H4pqMRZoivqLeXQ+ hsmmpHsYyhxmn6/g1JWlhOVrF4T0K5z+fnTGxHz7rUe71X9Vc265Y3Iu2qj4X95N epjemMWSUJa5pXNiJFkiajLRBQ3b9fPmffkpFq6Wo8JJxM2GyXtWCUYQH1TqlQbN QD0l -----END CERTIFICATE-----Generated at Mon Jul 20 19:27:42 2026 by rpki-client