$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142145.roa File: AS142145.roa (raw, json) Hash identifier: K/Z0u9/d8ZgMxO/MHodtICyjlB4Xyo2IVUm/XJ4IzlM= Subject key identifier: 35:37:58:63:5F:02:D7:F6:E2:BA:62:A6:63:EA:49:9B:28:4B:16:07 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 791521F3B2DD00A1154E62C8AA380848B9D18B66 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142145.roa Signing time: Sat 02 May 2026 09:26:13 +0000 ROA not before: Sat 02 May 2026 09:21:13 +0000 ROA not after: Sat 01 May 2027 09:26:13 +0000 asID: 142145 IP address blocks: 49.213.42.0/23 maxlen: 24 2001:df5:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:21:f3:b2:dd:00:a1:15:4e:62:c8:aa:38:08:48:b9:d1:8b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:13 2026 GMT Not After : May 1 09:26:13 2027 GMT Subject: CN=353758635F02D7F6E2BA62A663EA499B284B1607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:ed:20:a6:fd:c7:f0:60:63:53:b2:99:29: 8e:de:01:53:13:fb:b2:4f:cc:84:31:4d:b5:1c:77: 7c:82:3a:13:6a:eb:6a:a5:d3:f2:2f:b1:15:8c:4a: fe:e5:8b:98:91:01:64:66:b8:dc:96:fc:24:05:00: d5:d7:46:45:97:f6:51:2f:10:e7:53:0b:69:ce:be: 2a:2d:3a:2b:b5:07:21:ba:aa:89:79:ec:41:ac:65: a2:6d:4e:90:7a:71:f1:a5:c0:69:d5:61:e5:c8:2c: 40:bf:0b:c5:f7:a4:20:66:9a:4c:16:a6:b0:4f:d0: 34:04:c9:41:1e:8e:fc:2d:cf:69:2e:fc:b0:df:15: 5e:42:6d:34:96:fd:64:c1:b0:5a:28:53:22:9b:55: 3f:55:31:08:ca:18:1c:73:7c:33:01:f4:eb:e3:1f: 43:e1:45:ac:df:0b:b7:28:a2:23:34:9b:9d:b0:d9: 6d:ab:b1:d7:2c:d9:78:11:d4:ca:59:85:3e:27:17: 9e:cf:75:a5:c7:51:7b:a8:88:75:49:19:af:3a:54: 38:f2:e0:98:9f:02:90:53:4e:28:f9:7c:3a:ec:7a: 99:e7:f6:dc:73:33:dd:14:7c:81:ea:b4:ed:e3:dd: dc:33:06:ad:61:cf:9c:67:bd:0a:42:e8:3c:e9:8f: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:58:63:5F:02:D7:F6:E2:BA:62:A6:63:EA:49:9B:28:4B:16:07 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142145.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.213.42.0/23 IPv6: 2001:df5:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:4e:a6:e1:19:f7:86:3e:69:6d:50:ae:dc:4e:d0:e3:43:0f: 0e:6e:0b:03:24:8f:59:27:3c:37:4c:d7:9b:4b:14:e7:f6:55: 10:d8:d5:3b:48:50:66:6c:2a:a1:c4:b9:1b:da:4d:22:74:5b: 2d:8f:d8:64:a3:69:b1:d2:95:9f:d2:eb:69:43:e9:e5:88:2c: 29:04:aa:ad:4f:15:50:2b:da:83:d1:de:8e:20:d4:ee:f5:d7: 2f:bc:e4:19:c4:29:9a:a7:16:1e:45:7f:46:0e:e6:dc:94:d2: 85:a9:a3:e1:09:be:4e:b8:93:5e:25:55:77:3a:c3:62:34:d2: 46:31:35:74:52:d8:41:4f:f6:39:fc:9d:be:7f:dc:9b:26:ba: 43:c4:f9:f9:f8:c1:39:0d:c7:2a:29:2d:cc:0a:95:fe:f2:b4: 09:af:f4:26:53:e7:b1:9d:6b:3c:63:1c:85:5c:ba:e4:aa:22: ed:fd:a3:5a:64:e5:42:f7:bc:b8:71:5e:cb:b9:d7:29:79:a6: 31:38:60:e1:48:d4:74:41:4d:0b:20:c8:94:1a:6a:26:9b:68: fa:b0:37:50:52:3f:ae:e0:b9:6b:fc:ea:54:37:6b:fa:72:f8: 24:3b:da:5f:2b:39:29:d0:c4:28:7f:03:a5:cf:21:11:f3:87: af:ee:2e:52 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeRUh87LdAKEVTmLIqjgISLnRi2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjExM1oX DTI3MDUwMTA5MjYxM1owMzExMC8GA1UEAxMoMzUzNzU4NjM1RjAyRDdGNkUyQkE2 MkE2NjNFQTQ5OUIyODRCMTYwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+d7SCm/cfwYGNTspkpjt4BUxP7sk/MhDFNtRx3fII6E2rraqXT8i+xFYxK /uWLmJEBZGa43Jb8JAUA1ddGRZf2US8Q51MLac6+Ki06K7UHIbqqiXnsQaxlom1O kHpx8aXAadVh5cgsQL8LxfekIGaaTBamsE/QNATJQR6O/C3PaS78sN8VXkJtNJb9 ZMGwWihTIptVP1UxCMoYHHN8MwH06+MfQ+FFrN8LtyiiIzSbnbDZbaux1yzZeBHU ylmFPicXns91pcdRe6iIdUkZrzpUOPLgmJ8CkFNOKPl8Oux6mef23HMz3RR8geq0 7ePd3DMGrWHPnGe9CkLoPOmPMwECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQ1N1hj XwLX9uK6YqZj6kmbKEsWBzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMTQ1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQBMdUqMA8EAgACMAkDBwAgAQ31+8AwDQYJKoZIhvcNAQELBQADggEBAIpO puEZ94Y+aW1QrtxO0ONDDw5uCwMkj1knPDdM15tLFOf2VRDY1TtIUGZsKqHEuRva TSJ0Wy2P2GSjabHSlZ/S62lD6eWILCkEqq1PFVAr2oPR3o4g1O711y+85BnEKZqn Fh5Ff0YO5tyU0oWpo+EJvk64k14lVXc6w2I00kYxNXRS2EFP9jn8nb5/3JsmukPE +fn4wTkNxyopLcwKlf7ytAmv9CZT57GdazxjHIVcuuSqIu39o1pk5UL3vLhxXsu5 1yl5pjE4YOFI1HRBTQsgyJQaaiabaPqwN1BSP67guWv86lQ3a/py+CQ72l8rOSnQ xCh/A6XPIRHzh6/uLlI= -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client