$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142188.roa File: AS142188.roa (raw, json) Hash identifier: LEQ9dJhrbTz6bWzaLCkib4j0wNkEtj5BGsjqdxkt4n4= Subject key identifier: E9:F6:AE:0C:A8:3F:CA:F5:94:09:D2:9C:C5:17:95:58:85:E0:52:10 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 14CC217673889337E5EBD007B597872B2B54A836 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142188.roa Signing time: Sat 02 May 2026 09:23:03 +0000 ROA not before: Sat 02 May 2026 09:18:03 +0000 ROA not after: Sat 01 May 2027 09:23:03 +0000 asID: 142188 IP address blocks: 144.79.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cc:21:76:73:88:93:37:e5:eb:d0:07:b5:97:87:2b:2b:54:a8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:18:03 2026 GMT Not After : May 1 09:23:03 2027 GMT Subject: CN=E9F6AE0CA83FCAF59409D29CC517955885E05210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:e0:fb:7a:1f:1b:c9:21:99:60:a8:68:89: 7b:c4:7b:69:e8:8d:4d:0f:3e:79:c1:e9:68:10:9a: 1a:74:be:f2:69:f3:fe:47:9e:f0:57:39:88:d6:31: 7a:7a:58:03:9b:10:82:a6:cb:58:83:c3:9b:00:a7: a6:ec:45:14:0f:ad:90:66:1b:8d:0f:68:b3:2d:74: 44:df:7c:6b:71:a9:1b:e3:f5:13:fb:c6:f2:0b:96: 6d:c8:8e:b8:91:cb:09:18:60:1e:b4:2f:5a:28:a8: 45:28:1f:17:ab:33:b3:de:f1:4a:ce:90:5b:d9:3f: 5c:01:38:25:97:d2:75:cf:23:de:4b:e6:0f:05:9b: dc:49:f3:a0:f0:6a:b7:f1:a1:22:06:c6:a6:13:5c: 4e:4e:4b:80:fe:8b:62:b3:3e:d6:43:a1:da:1c:1c: de:0e:d1:28:ea:1f:b2:6c:ff:bb:99:c7:d4:9e:1a: 1f:c4:4f:9d:a6:1c:6c:4f:1f:e8:7f:81:46:60:83: c7:5a:ef:6d:23:bc:b9:8a:8d:64:1c:6b:3c:c7:1c: c2:3d:3e:dd:24:33:89:ee:93:55:85:a8:22:e0:e0: 5c:32:8a:8f:2e:e7:fc:70:85:ad:3e:e3:d5:c9:30: 60:88:91:ce:d1:2e:a8:a8:24:30:03:ec:f3:75:c0: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F6:AE:0C:A8:3F:CA:F5:94:09:D2:9C:C5:17:95:58:85:E0:52:10 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142188.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:e7:e4:f0:78:3c:d3:7e:c1:f2:e6:51:24:cc:72:a5:2a:54: b9:18:6d:b3:db:80:22:03:36:1e:ae:20:44:d5:12:83:f4:3e: c0:9c:87:69:1c:1c:ab:33:a6:3c:36:32:bd:7b:3e:f0:ea:21: a0:f0:fd:b7:b8:1e:ac:e5:0d:0e:b4:23:93:8c:86:41:dd:ee: a5:d7:87:7d:42:f0:a3:8c:7d:48:a5:79:f8:32:43:80:a0:9a: 31:0f:b1:0b:5a:0f:85:f2:79:05:2f:91:07:ec:92:0d:38:9a: 96:85:49:f0:a1:ab:7e:6e:b7:e3:fa:19:73:f0:f5:1a:e9:9e: 84:70:0a:f0:d3:7f:c9:11:8b:9f:3b:32:6a:8f:ea:21:25:1b: c5:1b:2f:a1:f5:2e:93:bf:2d:00:77:c2:de:62:94:cd:84:c6: df:22:6e:d4:8f:e2:bc:d3:06:0c:d4:2e:d8:97:34:02:a4:1a: 1a:b4:2b:fc:d4:a9:82:43:27:fe:85:b8:a6:b9:49:49:f7:12: 69:0c:36:a9:dc:1e:73:7e:c8:9c:73:bb:48:57:39:0b:91:e7: 81:30:9f:8a:dd:5c:30:56:ad:e7:b2:f3:aa:d6:e6:97:68:cc: 3a:b3:f0:87:a4:7c:3c:c8:5d:aa:b4:6c:47:68:4d:5f:0c:4e: ad:41:79:00 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUFMwhdnOIkzfl69AHtZeHKytUqDYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTgwM1oX DTI3MDUwMTA5MjMwM1owMzExMC8GA1UEAxMoRTlGNkFFMENBODNGQ0FGNTk0MDlE MjlDQzUxNzk1NTg4NUUwNTIxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMig4Pt6HxvJIZlgqGiJe8R7aeiNTQ8+ecHpaBCaGnS+8mnz/kee8Fc5iNYx enpYA5sQgqbLWIPDmwCnpuxFFA+tkGYbjQ9osy10RN98a3GpG+P1E/vG8guWbciO uJHLCRhgHrQvWiioRSgfF6szs97xSs6QW9k/XAE4JZfSdc8j3kvmDwWb3EnzoPBq t/GhIgbGphNcTk5LgP6LYrM+1kOh2hwc3g7RKOofsmz/u5nH1J4aH8RPnaYcbE8f 6H+BRmCDx1rvbSO8uYqNZBxrPMccwj0+3SQzie6TVYWoIuDgXDKKjy7n/HCFrT7j 1ckwYIiRztEuqKgkMAPs83XAz9cCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTp9q4M qD/K9ZQJ0pzFF5VYheBSEDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyMTg4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE/xMA0GCSqGSIb3DQEBCwUAA4IBAQBf5+TweDzTfsHy5lEkzHKlKlS5 GG2z24AiAzYeriBE1RKD9D7AnIdpHByrM6Y8NjK9ez7w6iGg8P23uB6s5Q0OtCOT jIZB3e6l14d9QvCjjH1IpXn4MkOAoJoxD7ELWg+F8nkFL5EH7JINOJqWhUnwoat+ brfj+hlz8PUa6Z6EcArw03/JEYufOzJqj+ohJRvFGy+h9S6Tvy0Ad8LeYpTNhMbf Im7Uj+K80wYM1C7YlzQCpBoatCv81KmCQyf+hbimuUlJ9xJpDDap3B5zfsicc7tI VzkLkeeBMJ+K3VwwVq3nsvOq1uaXaMw6s/CHpHw8yF2qtGxHaE1fDE6tQXkA -----END CERTIFICATE-----Generated at Sat May 2 21:03:46 2026 by rpki-client