$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142043.roa File: AS142043.roa (raw, json) Hash identifier: QBRwxPZTT2/iT7KUGSLJY/lsaOdLCx357FrL2+kn3Os= Subject key identifier: 56:AA:94:EF:6D:1F:71:40:A3:C1:5A:EC:6C:67:BA:63:EB:B6:6B:78 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 76F35C0A49325C4EF6694D81DC41E5436E73B69E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142043.roa Signing time: Sat 02 May 2026 21:30:31 +0000 ROA not before: Sat 02 May 2026 21:25:31 +0000 ROA not after: Sat 01 May 2027 21:30:31 +0000 asID: 142043 IP address blocks: 203.2.151.0/24 maxlen: 24 2001:df5:f840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f3:5c:0a:49:32:5c:4e:f6:69:4d:81:dc:41:e5:43:6e:73:b6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:25:31 2026 GMT Not After : May 1 21:30:31 2027 GMT Subject: CN=56AA94EF6D1F7140A3C15AEC6C67BA63EBB66B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:2f:1d:ed:3d:57:5c:ce:7b:e7:a2:ef:13: f4:6b:35:42:2c:70:0d:33:9b:ea:de:69:3b:43:a6: 2c:77:8a:08:18:17:4b:a6:47:97:b5:6b:11:aa:44: 4a:b8:a2:14:26:c8:de:0c:ed:3a:88:a8:3b:c1:b1: 65:ee:d9:88:82:18:0a:4a:9a:60:6a:42:94:62:b9: 27:de:79:e3:e2:94:bd:b6:a0:d4:3c:3a:33:8c:c5: 93:85:78:73:b9:0d:2e:90:5a:a5:6e:13:a4:f8:be: cf:b6:65:8e:db:74:61:74:90:db:83:3c:26:15:a1: 1b:50:bc:b6:38:ba:28:1a:c6:47:9e:5f:44:93:e6: 01:2d:20:bf:d5:25:7c:91:60:9f:34:a1:5b:66:e9: 44:4e:ed:8b:ad:39:5f:46:d0:c4:3c:58:b7:aa:d8: ea:07:22:aa:e3:15:bd:29:53:1c:94:cf:1c:4b:cc: de:96:c5:bc:b4:52:cc:e5:38:ab:34:11:43:b4:03: 66:5b:a2:3a:b6:81:25:62:34:8d:fe:ac:d2:ae:fb: 19:f6:e8:35:09:e2:55:99:e3:ae:eb:50:b6:0b:6a: a6:2c:f3:4b:94:59:1a:7f:17:2e:74:82:ae:59:59: 4e:1a:11:5a:92:da:3a:ea:7c:16:48:23:33:4b:c3: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AA:94:EF:6D:1F:71:40:A3:C1:5A:EC:6C:67:BA:63:EB:B6:6B:78 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.2.151.0/24 IPv6: 2001:df5:f840::/48 Signature Algorithm: sha256WithRSAEncryption 09:9a:85:e9:29:2c:b3:a1:ff:1a:18:0a:cb:3d:e7:94:3a:f4: 29:ae:e1:3e:6d:f2:d7:7f:9a:83:72:93:bb:d1:73:b7:2b:ea: 1e:f9:11:54:eb:84:91:89:2a:b2:d9:c4:25:e0:c9:30:f4:62: 33:ac:ec:9b:1b:ee:0a:ca:bd:b6:e7:d1:8b:18:1d:79:12:3f: 97:35:00:79:58:77:1f:71:39:de:ba:9e:e0:44:38:82:61:3f: d5:e0:46:8e:1a:5f:cd:a8:c8:d4:27:d1:db:47:04:a3:1f:be: e9:f3:df:62:b2:32:f3:c2:ce:ca:b9:66:d0:48:35:9d:f7:da: 00:eb:07:c3:e3:98:30:c0:09:3d:90:ce:97:1f:65:73:3f:99: 9b:04:a0:d5:e8:a0:21:5b:9e:e1:e7:0d:fe:f3:10:68:be:0f: d7:d6:22:a0:7d:06:c8:89:0e:53:31:b4:57:55:3c:0e:be:94: e8:c9:65:17:68:ff:4e:33:9d:49:a8:b8:92:84:9f:52:31:8e: a9:be:c7:f6:cb:b4:6c:5e:85:d3:2e:b2:1a:9f:3f:59:76:b6: 3e:0e:52:3e:41:fe:78:2e:cb:7e:15:72:44:e3:33:2c:5b:9f: f6:76:7b:5c:a6:c2:3f:46:21:a4:4b:4b:f0:0a:4b:03:0b:66: 3c:e7:db:96 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdvNcCkkyXE72aU2B3EHlQ25ztp4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjUzMVoX DTI3MDUwMTIxMzAzMVowMzExMC8GA1UEAxMoNTZBQTk0RUY2RDFGNzE0MEEzQzE1 QUVDNkM2N0JBNjNFQkI2NkI3ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkPLx3tPVdcznvnou8T9Gs1QixwDTOb6t5pO0OmLHeKCBgXS6ZHl7VrEapE SriiFCbI3gztOoioO8GxZe7ZiIIYCkqaYGpClGK5J9554+KUvbag1Dw6M4zFk4V4 c7kNLpBapW4TpPi+z7Zljtt0YXSQ24M8JhWhG1C8tji6KBrGR55fRJPmAS0gv9Ul fJFgnzShW2bpRE7ti605X0bQxDxYt6rY6gciquMVvSlTHJTPHEvM3pbFvLRSzOU4 qzQRQ7QDZluiOraBJWI0jf6s0q77GfboNQniVZnjrutQtgtqpizzS5RZGn8XLnSC rllZThoRWpLaOup8FkgjM0vDBpcCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBRWqpTv bR9xQKPBWuxsZ7pj67ZreDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMDQzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAywKXMA8EAgACMAkDBwAgAQ31+EAwDQYJKoZIhvcNAQELBQADggEBAAma hekpLLOh/xoYCss955Q69Cmu4T5t8td/moNyk7vRc7cr6h75EVTrhJGJKrLZxCXg yTD0YjOs7Jsb7grKvbbn0YsYHXkSP5c1AHlYdx9xOd66nuBEOIJhP9XgRo4aX82o yNQn0dtHBKMfvunz32KyMvPCzsq5ZtBINZ332gDrB8PjmDDACT2QzpcfZXM/mZsE oNXooCFbnuHnDf7zEGi+D9fWIqB9BsiJDlMxtFdVPA6+lOjJZRdo/04znUmouJKE n1Ixjqm+x/bLtGxehdMushqfP1l2tj4OUj5B/nguy34VckTjMyxbn/Z2e1ymwj9G IaRLS/AKSwMLZjzn25Y= -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client