$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142427.roa File: AS142427.roa (raw, json) Hash identifier: mrcm0/7SGSwhI616Nn48ePyThEzQvsfiMP2nssD3tYo= Subject key identifier: 72:72:8C:F6:A5:E4:C5:8F:D8:E4:F8:46:AD:D5:B7:17:41:16:CA:01 Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 2C3578174549F966D58554AE024CD84AFAF34632 Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142427.roa Signing time: Sat 02 May 2026 09:24:13 +0000 ROA not before: Sat 02 May 2026 09:19:13 +0000 ROA not after: Sat 01 May 2027 09:24:13 +0000 asID: 142427 IP address blocks: 162.4.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:78:17:45:49:f9:66:d5:85:54:ae:02:4c:d8:4a:fa:f3:46:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:19:13 2026 GMT Not After : May 1 09:24:13 2027 GMT Subject: CN=72728CF6A5E4C58FD8E4F846ADD5B7174116CA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:cd:f2:9d:ed:be:ae:5b:d4:e7:8f:58:10: 68:15:e5:4f:e6:c1:a2:3a:aa:5d:ad:fb:d4:d2:da: fe:b5:5a:eb:ea:36:6a:b1:a1:93:da:af:f1:41:55: ef:ff:f9:bc:5c:6b:61:c1:f1:4a:1d:e9:79:6d:33: 06:7e:75:44:2d:2a:be:e3:fc:f5:ea:18:8f:2b:19: 2a:fd:d7:c2:10:fa:b6:00:d1:77:64:71:0d:6f:2c: 9c:09:6d:6e:e2:25:14:8a:36:a5:96:55:d5:50:57: ff:dd:37:17:ff:be:a8:ca:e1:93:44:82:cf:11:23: 4b:5a:6c:3f:74:90:9c:be:5c:0d:8e:ed:9f:98:81: 8c:51:85:de:94:5a:aa:63:58:30:bd:7c:d3:76:9c: c4:d0:27:be:b5:59:0a:ea:09:1d:d1:ce:d3:63:3b: d5:18:44:cd:3b:60:5e:09:a5:54:c7:ec:82:69:8c: fc:a3:74:cb:ec:ac:b9:6b:cb:b6:2e:40:91:02:09: 25:79:18:08:69:96:12:84:4a:aa:82:0f:ae:b0:8d: 36:12:1c:58:f3:ca:c7:1c:7b:62:68:91:6f:40:23: 79:12:41:8f:96:74:3f:2d:a4:09:8a:24:65:10:36: 07:65:60:ac:9c:72:e0:51:5e:f4:fe:78:8f:da:0c: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:72:8C:F6:A5:E4:C5:8F:D8:E4:F8:46:AD:D5:B7:17:41:16:CA:01 X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.36.0/23 Signature Algorithm: sha256WithRSAEncryption 55:d1:41:7f:b2:51:ab:9d:69:26:2c:af:a7:27:fa:ba:d4:32: bc:0e:03:f4:a7:1b:01:68:71:62:52:c7:46:db:e8:19:e7:f4: 53:8c:5a:36:c8:2b:aa:1e:e2:1b:92:95:5a:a6:79:94:df:7e: b9:47:6f:1f:61:43:98:ef:67:68:cd:be:99:d5:92:2d:a2:25: 0c:68:f1:af:a0:02:48:c3:0b:0e:6a:60:07:38:9f:8b:47:a2: b2:03:9a:6a:da:d8:f8:c7:a4:37:2d:45:fe:41:37:43:88:64: 61:ca:02:15:71:02:d3:da:ce:7d:f9:39:3b:f4:28:48:93:9e: 34:c0:12:58:da:4d:cd:12:15:f9:3d:bb:ec:52:c7:34:61:7f: 89:fd:11:94:3b:ea:31:74:c2:90:85:ca:f5:3e:f4:5a:3c:cf: ae:a1:63:b1:6f:c9:0f:ee:61:92:52:16:e5:6b:f0:f5:c6:34: 03:6c:f7:84:2b:e7:ad:d0:1b:01:1e:71:f1:ea:bf:42:04:5e: 22:de:8d:00:53:92:5d:cb:3b:b0:b5:7e:d5:2b:e2:00:05:96: 56:57:6f:f7:82:d9:d8:53:af:e3:ed:10:83:4e:39:26:40:40: 8e:f1:ff:40:a9:56:17:33:96:67:29:70:a5:7c:7a:1a:5d:31: 40:83:21:52 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULDV4F0VJ+WbVhVSuAkzYSvrzRjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MTkxM1oX DTI3MDUwMTA5MjQxM1owMzExMC8GA1UEAxMoNzI3MjhDRjZBNUU0QzU4RkQ4RTRG ODQ2QURENUI3MTc0MTE2Q0EwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPkzfKd7b6uW9Tnj1gQaBXlT+bBojqqXa371NLa/rVa6+o2arGhk9qv8UFV 7//5vFxrYcHxSh3peW0zBn51RC0qvuP89eoYjysZKv3XwhD6tgDRd2RxDW8snAlt buIlFIo2pZZV1VBX/903F/++qMrhk0SCzxEjS1psP3SQnL5cDY7tn5iBjFGF3pRa qmNYML1803acxNAnvrVZCuoJHdHO02M71RhEzTtgXgmlVMfsgmmM/KN0y+ysuWvL ti5AkQIJJXkYCGmWEoRKqoIPrrCNNhIcWPPKxxx7YmiRb0AjeRJBj5Z0Py2kCYok ZRA2B2VgrJxy4FFe9P54j9oM/CkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRycoz2 peTFj9jk+Eat1bcXQRbKATAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyNDI3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogQkMA0GCSqGSIb3DQEBCwUAA4IBAQBV0UF/slGrnWkmLK+nJ/q61DK8 DgP0pxsBaHFiUsdG2+gZ5/RTjFo2yCuqHuIbkpVapnmU3365R28fYUOY72dozb6Z 1ZItoiUMaPGvoAJIwwsOamAHOJ+LR6KyA5pq2tj4x6Q3LUX+QTdDiGRhygIVcQLT 2s59+Tk79ChIk540wBJY2k3NEhX5PbvsUsc0YX+J/RGUO+oxdMKQhcr1PvRaPM+u oWOxb8kP7mGSUhbla/D1xjQDbPeEK+et0BsBHnHx6r9CBF4i3o0AU5JdyzuwtX7V K+IABZZWV2/3gtnYU6/j7RCDTjkmQECO8f9AqVYXM5ZnKXClfHoaXTFAgyFS -----END CERTIFICATE-----Generated at Sat May 2 21:05:38 2026 by rpki-client