
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142362.roa
File: AS142362.roa (raw, json)
Hash identifier: GorY4/a7z894weuHyYHNRNEq7Keh703JkDG1QkvoK/Y=
Subject key identifier: 6F:49:0A:97:12:5A:F6:F4:26:E1:29:BA:53:15:42:4F:E4:EC:C2:CE
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 5FBE9E0020E52DE8D38967E63E6C832DEC8D60D4
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142362.roa
Signing time: Mon 29 Jun 2026 07:56:38 +0000
ROA not before: Mon 29 Jun 2026 07:51:38 +0000
ROA not after: Mon 28 Jun 2027 07:56:38 +0000
asID: 142362
IP address blocks: 103.169.232.0/23 maxlen: 24
103.169.232.0/24 maxlen: 24
103.169.233.0/24 maxlen: 24
114.141.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 09:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:9e:00:20:e5:2d:e8:d3:89:67:e6:3e:6c:83:2d:ec:8d:60:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Jun 29 07:51:38 2026 GMT
Not After : Jun 28 07:56:38 2027 GMT
Subject: CN=6F490A97125AF6F426E129BA5315424FE4ECC2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:1e:a6:53:eb:86:29:aa:be:8b:36:44:28:
57:5f:40:77:4b:9a:df:63:d9:89:7b:3d:49:51:6c:
ac:55:72:44:5b:2e:0f:0b:f1:ee:33:dc:51:c6:14:
a6:65:4f:88:1a:e8:e8:7e:25:27:6a:bf:34:77:91:
86:d9:c2:bc:3e:b5:8e:90:70:d5:32:d9:de:ed:1e:
69:4a:96:5b:c6:c2:78:71:b1:22:ad:36:a2:5d:f4:
67:51:b0:7e:31:95:79:d5:69:22:f5:4d:ba:6d:d1:
d9:24:f7:ba:a1:5b:89:5f:09:87:ae:1b:c1:d2:8b:
84:b6:8e:64:4f:fa:9f:cd:1e:02:98:6a:33:dd:3a:
d4:17:a1:1d:b5:6e:80:b3:f3:f9:d1:cc:5e:cd:2a:
b4:a7:f8:89:0e:24:6c:9e:fe:eb:78:7d:86:40:cd:
1f:6e:a3:7e:61:7b:0f:49:e5:c1:de:9f:22:23:bb:
99:d6:49:bc:67:3a:47:be:2f:1d:00:3d:06:85:3e:
93:91:38:34:af:56:6d:5c:bd:fe:d5:04:a4:fd:b8:
81:a6:d2:11:e8:2d:16:87:65:af:6d:09:16:04:d6:
bc:1c:c8:5f:94:45:35:ce:79:20:34:3c:df:c6:d9:
a1:34:fe:dc:da:f6:bc:bc:10:b3:25:c4:49:6b:0c:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:0A:97:12:5A:F6:F4:26:E1:29:BA:53:15:42:4F:E4:EC:C2:CE
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.232.0/23
114.141.58.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3d:be:1b:c6:30:9d:31:08:4e:2c:d6:74:3d:88:f8:5d:31:
ee:f4:45:10:1f:d5:9c:5c:43:a6:4e:28:52:e1:0e:89:c4:e6:
be:41:ff:7c:ef:4d:94:5b:fb:38:2a:e7:60:1f:8c:9e:1d:75:
60:f6:f7:86:e1:5b:f3:94:8b:76:63:9f:2b:0e:f4:54:ed:5b:
4b:71:11:3a:e7:4d:69:cd:45:94:dd:c5:d0:70:63:1b:76:7b:
35:b1:a5:73:98:7a:eb:1b:2e:91:b1:21:28:a4:fd:90:86:f8:
3c:92:50:1d:03:b2:87:b9:7c:f8:4a:06:41:eb:68:8e:3f:8a:
7f:f6:3d:bd:38:64:2d:3c:5d:3e:c6:27:d4:70:8d:a5:86:c3:
5a:70:9c:7a:b8:19:96:54:e9:7b:52:14:83:c0:34:42:46:9a:
ed:c1:4b:76:33:79:61:6b:56:50:64:95:60:4b:f6:e0:2f:d0:
5c:09:f3:d8:15:21:4c:09:3a:08:10:eb:30:ec:ed:15:49:73:
95:e5:bb:04:9d:d4:e4:ac:9f:ad:98:b9:79:40:18:30:41:c8:
38:b5:37:5f:98:f6:fb:67:06:92:8a:3f:c9:4b:f3:10:bf:04:
3d:9e:6d:bd:3e:94:64:b9:be:3a:6a:57:e5:ec:f3:6f:c4:19:
c8:fc:6e:8d
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUX76eACDlLejTiWfmPmyDLeyNYNQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4
QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDYyOTA3NTEzOFoX
DTI3MDYyODA3NTYzOFowMzExMC8GA1UEAxMoNkY0OTBBOTcxMjVBRjZGNDI2RTEy
OUJBNTMxNTQyNEZFNEVDQzJDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL4jHqZT64Ypqr6LNkQoV19Ad0ua32PZiXs9SVFsrFVyRFsuDwvx7jPcUcYU
pmVPiBro6H4lJ2q/NHeRhtnCvD61jpBw1TLZ3u0eaUqWW8bCeHGxIq02ol30Z1Gw
fjGVedVpIvVNum3R2ST3uqFbiV8Jh64bwdKLhLaOZE/6n80eAphqM9061BehHbVu
gLPz+dHMXs0qtKf4iQ4kbJ7+63h9hkDNH26jfmF7D0nlwd6fIiO7mdZJvGc6R74v
HQA9BoU+k5E4NK9WbVy9/tUEpP24gabSEegtFodlr20JFgTWvBzIX5RFNc55IDQ8
38bZoTT+3Nr2vLwQsyXESWsM8/sCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBRvSQqX
Elr29CbhKbpTFUJP5OzCzjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu
njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5
NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO
OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v
cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzYyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA
ATAMAwQBZ6noAwQAco06MA0GCSqGSIb3DQEBCwUAA4IBAQACPb4bxjCdMQhOLNZ0
PYj4XTHu9EUQH9WcXEOmTihS4Q6JxOa+Qf98702UW/s4KudgH4yeHXVg9veG4Vvz
lIt2Y58rDvRU7VtLcRE6501pzUWU3cXQcGMbdns1saVzmHrrGy6RsSEopP2Qhvg8
klAdA7KHuXz4SgZB62iOP4p/9j29OGQtPF0+xifUcI2lhsNacJx6uBmWVOl7UhSD
wDRCRprtwUt2M3lha1ZQZJVgS/bgL9BcCfPYFSFMCToIEOsw7O0VSXOV5bsEndTk
rJ+tmLl5QBgwQcg4tTdfmPb7ZwaSij/JS/MQvwQ9nm29PpRkub46alfl7PNvxBnI
/G6N
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:18:03 2026 by rpki-client