$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142231.roa File: AS142231.roa (raw, json) Hash identifier: rSXnAcC66jZ5lbhlpUYZVcAHfdRJzYLDipdzp4IdWjk= Subject key identifier: 4A:21:D7:80:4C:49:65:5D:F8:6C:97:85:F8:B6:4D:5F:2A:0C:1A:78 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 7839924F8899A40A29417DC57C63ECA8436B880E Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142231.roa Signing time: Sat 02 May 2026 09:22:44 +0000 ROA not before: Sat 02 May 2026 09:17:44 +0000 ROA not after: Sat 01 May 2027 09:22:44 +0000 asID: 142231 IP address blocks: 144.79.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:39:92:4f:88:99:a4:0a:29:41:7d:c5:7c:63:ec:a8:43:6b:88:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:17:44 2026 GMT Not After : May 1 09:22:44 2027 GMT Subject: CN=4A21D7804C49655DF86C9785F8B64D5F2A0C1A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:d8:18:7d:2c:2b:33:80:73:10:f3:48:ef: d3:f7:b0:77:ad:8a:43:81:1c:5a:13:93:65:91:42: fc:29:c4:20:95:1c:90:a2:f5:f6:70:ff:15:76:e4: 8f:c0:45:a8:02:90:92:22:c3:97:3f:dd:85:e3:a7: 77:90:b3:cd:cd:a3:e2:b6:c4:bf:3b:6d:d4:2a:22: e4:c1:95:cf:16:83:f8:a1:4e:84:c6:80:fb:95:95: c8:5c:6b:1a:c5:4e:12:d6:d0:cb:33:3a:77:ec:74: 55:6a:6e:d2:27:05:2f:e3:a4:93:75:58:bb:1f:31: 22:a8:c8:71:2e:df:42:c1:8c:1d:cc:3d:f6:1f:b0: fe:6f:63:c7:7c:30:7d:73:ff:fb:01:81:15:85:bc: fd:58:88:1c:fc:c3:4b:a3:49:b6:d4:21:32:6f:fd: 32:3a:ec:c6:20:c1:55:cd:e0:4c:98:dd:05:09:e6: 86:61:76:76:61:e5:6e:24:b2:71:64:bc:9b:28:5a: 3b:85:bc:79:5c:17:74:9e:9a:02:cc:3e:82:5b:ae: a5:7c:0c:b2:b8:5b:1d:ad:70:35:40:3a:3e:a9:30: 31:25:05:d4:4c:e9:96:e8:9b:56:8d:e9:9f:53:be: d4:c0:15:ea:14:b9:67:f1:82:8e:42:0f:f9:18:d3: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:D7:80:4C:49:65:5D:F8:6C:97:85:F8:B6:4D:5F:2A:0C:1A:78 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.142.0/24 Signature Algorithm: sha256WithRSAEncryption 19:27:7a:aa:e2:de:ba:d2:bd:c7:f6:2a:bf:3a:37:06:a4:9a: e5:a9:e1:ff:40:d4:62:4e:7c:ac:3f:88:a7:3f:ae:e1:e9:02: e5:66:85:c9:50:13:84:73:cf:15:13:72:46:09:a9:31:7d:f2: 78:47:0d:93:64:62:d9:0e:c8:30:fc:3c:14:fc:a2:2b:95:56: 30:10:fa:21:18:49:d4:93:94:1d:63:1e:30:0f:db:34:cd:8f: 15:03:1a:a1:40:40:fa:31:ff:6f:29:00:fb:ec:10:a5:bc:11: 6b:2a:dd:2b:33:3b:c2:5f:42:55:06:02:3d:15:5f:4d:62:09: 04:c6:bd:d7:33:00:f9:dc:52:ed:27:b2:cd:02:55:38:01:d5: 33:16:e3:ea:9f:e9:7f:fb:9c:ef:cd:38:34:6d:21:1c:df:52: c9:77:11:7e:e1:c1:53:a3:a6:a7:aa:dc:01:7f:0c:06:dd:fc: 6a:8f:56:fe:bd:44:4b:29:1a:a1:6f:5a:66:ae:e2:39:4f:40: 05:c1:4f:5a:32:a5:06:33:b5:66:cd:32:8f:f8:5b:17:43:38: 1c:ac:46:85:ee:89:af:e5:a4:cf:7f:70:71:78:66:a5:6a:aa: 74:40:e0:e6:49:28:c2:02:be:dd:55:e9:bf:20:7b:39:55:a0: d0:d0:23:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeDmST4iZpAopQX3FfGPsqENriA4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTc0NFoX DTI3MDUwMTA5MjI0NFowMzExMC8GA1UEAxMoNEEyMUQ3ODA0QzQ5NjU1REY4NkM5 Nzg1RjhCNjRENUYyQTBDMUE3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMf72Bh9LCszgHMQ80jv0/ewd62KQ4EcWhOTZZFC/CnEIJUckKL19nD/FXbk j8BFqAKQkiLDlz/dheOnd5Czzc2j4rbEvztt1Coi5MGVzxaD+KFOhMaA+5WVyFxr GsVOEtbQyzM6d+x0VWpu0icFL+Okk3VYux8xIqjIcS7fQsGMHcw99h+w/m9jx3ww fXP/+wGBFYW8/ViIHPzDS6NJttQhMm/9MjrsxiDBVc3gTJjdBQnmhmF2dmHlbiSy cWS8myhaO4W8eVwXdJ6aAsw+gluupXwMsrhbHa1wNUA6PqkwMSUF1EzpluibVo3p n1O+1MAV6hS5Z/GCjkIP+RjT59kCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRKIdeA TEllXfhsl4X4tk1fKgwaeDAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyMjMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAkE+OMA0GCSqGSIb3DQEBCwUAA4IBAQAZJ3qq4t660r3H9iq/OjcGpJrl qeH/QNRiTnysP4inP67h6QLlZoXJUBOEc88VE3JGCakxffJ4Rw2TZGLZDsgw/DwU /KIrlVYwEPohGEnUk5QdYx4wD9s0zY8VAxqhQED6Mf9vKQD77BClvBFrKt0rMzvC X0JVBgI9FV9NYgkExr3XMwD53FLtJ7LNAlU4AdUzFuPqn+l/+5zvzTg0bSEc31LJ dxF+4cFTo6anqtwBfwwG3fxqj1b+vURLKRqhb1pmruI5T0AFwU9aMqUGM7VmzTKP +FsXQzgcrEaF7omv5aTPf3BxeGalaqp0QODmSSjCAr7dVem/IHs5VaDQ0CPw -----END CERTIFICATE-----Generated at Sat May 2 21:05:29 2026 by rpki-client