$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142189.roa File: AS142189.roa (raw, json) Hash identifier: 95L+tdAaapgQWfCiKZ9sG+CA9nGiVPHeNbktli4/RFQ= Subject key identifier: B1:5B:2E:D1:58:AB:79:54:E6:18:E7:57:52:8E:66:8B:BC:7B:08:60 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 32513C19145134FD780372E7F42F7CE677751C34 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142189.roa Signing time: Sat 02 May 2026 09:22:53 +0000 ROA not before: Sat 02 May 2026 09:17:53 +0000 ROA not after: Sat 01 May 2027 09:22:53 +0000 asID: 142189 IP address blocks: 144.79.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:51:3c:19:14:51:34:fd:78:03:72:e7:f4:2f:7c:e6:77:75:1c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:53 2026 GMT Not After : May 1 09:22:53 2027 GMT Subject: CN=B15B2ED158AB7954E618E757528E668BBC7B0860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:80:2d:a3:e9:58:a5:8c:5e:36:05:55:0d:1d: 39:e3:ad:ca:30:2c:5a:ad:7a:37:93:89:59:a1:f9: a5:7a:17:5f:e7:c6:62:d8:b6:fb:c1:13:e4:76:a5: d4:70:a6:d7:7b:6c:f0:45:c5:ce:5c:fb:8c:6f:d1: d5:69:5b:d5:d9:20:b0:ec:47:e4:7e:be:54:a4:5a: 26:fd:21:89:26:bb:88:3e:e9:86:9f:0e:24:86:3e: ff:ff:c6:ff:7f:97:ba:6d:f9:e1:87:3e:d5:82:62: a6:d1:2b:72:4e:b1:d4:64:3c:36:60:8a:c0:79:d0: 33:96:76:43:1c:cd:16:4a:61:09:f4:46:d2:96:a0: ff:c0:dc:47:fa:2a:35:64:4d:41:da:63:46:d4:75: 74:b9:7c:6e:1a:1f:ae:79:2d:be:60:0e:f7:bb:47: 42:ae:c0:ee:53:3f:22:7c:0f:64:48:98:bd:ac:f1: 88:d8:c2:66:44:7e:07:c5:74:c8:d8:b5:0a:67:80: d9:43:67:35:9d:12:ac:aa:9d:db:9a:37:bf:21:41: 47:68:0e:09:5b:ee:da:8e:92:65:e5:28:11:d7:5b: 51:c0:27:71:e1:95:19:9e:be:01:d5:00:47:ba:81: 47:18:c4:50:21:b0:32:85:61:53:6f:4b:a8:85:a4: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5B:2E:D1:58:AB:79:54:E6:18:E7:57:52:8E:66:8B:BC:7B:08:60 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142189.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.228.0/24 Signature Algorithm: sha256WithRSAEncryption 03:4c:75:84:df:6c:a6:68:ff:b5:d3:52:6b:f9:fe:9f:c3:3b: f5:aa:de:e1:95:a5:d8:4f:bb:a2:73:d4:05:ac:82:8b:1c:20: 27:bf:34:d2:6d:6a:73:b0:95:5d:5d:08:f2:49:c0:7c:3a:e4: 43:16:bb:54:f8:08:32:b1:83:19:70:91:bd:37:dc:fe:4a:2b: 8a:c2:0d:9c:97:9a:74:cb:b5:49:69:88:00:7b:e1:b1:59:3c: ca:0e:49:85:bf:67:50:fd:4d:26:7c:cc:74:e8:32:98:d5:91: 1e:9f:ad:11:85:74:47:08:2c:22:79:74:e6:20:af:c2:27:74: ac:e3:4c:48:49:da:0d:5c:bf:89:62:5a:3c:75:61:b2:ba:47: 5c:92:43:c4:6a:e0:73:78:13:a5:94:8d:c7:29:94:7b:a7:75: c8:ba:92:1e:45:22:4e:39:bd:be:42:a5:c9:47:f5:7a:c2:f5: e3:08:71:0b:30:01:27:cd:f3:13:d2:2e:b5:3a:21:82:a5:94: 9f:be:6e:4e:29:0c:11:97:00:00:09:3c:70:6f:c6:c0:a7:c7: d9:47:88:79:22:4e:2f:6e:5c:6c:76:1d:21:17:70:ef:96:f3: 12:7f:ec:d3:fd:2f:be:f3:74:37:2f:43:2c:2d:f7:38:55:50: c7:c6:72:2b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMlE8GRRRNP14A3Ln9C985nd1HDQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc1M1oX DTI3MDUwMTA5MjI1M1owMzExMC8GA1UEAxMoQjE1QjJFRDE1OEFCNzk1NEU2MThF NzU3NTI4RTY2OEJCQzdCMDg2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKALaPpWKWMXjYFVQ0dOeOtyjAsWq16N5OJWaH5pXoXX+fGYti2+8ET5Hal 1HCm13ts8EXFzlz7jG/R1Wlb1dkgsOxH5H6+VKRaJv0hiSa7iD7php8OJIY+///G /3+Xum354Yc+1YJiptErck6x1GQ8NmCKwHnQM5Z2QxzNFkphCfRG0pag/8DcR/oq NWRNQdpjRtR1dLl8bhofrnktvmAO97tHQq7A7lM/InwPZEiYvazxiNjCZkR+B8V0 yNi1CmeA2UNnNZ0SrKqd25o3vyFBR2gOCVvu2o6SZeUoEddbUcAnceGVGZ6+AdUA R7qBRxjEUCGwMoVhU29LqIWkuyECAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSxWy7R WKt5VOYY51dSjmaLvHsIYDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyMTg5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE/kMA0GCSqGSIb3DQEBCwUAA4IBAQADTHWE32ymaP+101Jr+f6fwzv1 qt7hlaXYT7uic9QFrIKLHCAnvzTSbWpzsJVdXQjyScB8OuRDFrtU+AgysYMZcJG9 N9z+SiuKwg2cl5p0y7VJaYgAe+GxWTzKDkmFv2dQ/U0mfMx06DKY1ZEen60RhXRH CCwieXTmIK/CJ3Ss40xISdoNXL+JYlo8dWGyukdckkPEauBzeBOllI3HKZR7p3XI upIeRSJOOb2+QqXJR/V6wvXjCHELMAEnzfMT0i61OiGCpZSfvm5OKQwRlwAACTxw b8bAp8fZR4h5Ik4vblxsdh0hF3DvlvMSf+zT/S++83Q3L0MsLfc4VVDHxnIr -----END CERTIFICATE-----Generated at Sat May 2 21:03:45 2026 by rpki-client