$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142170.roa File: AS142170.roa (raw, json) Hash identifier: BvvkPes4Caj1wEl0wacvcE7YtSvUeBjuX3IvlfpqnLM= Subject key identifier: 86:1C:5B:8D:98:21:BD:F3:AD:BE:56:0A:1C:66:D8:E0:15:42:C0:2C Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 5B05F27665F6FCD28A5EAB941D458CDFA84F6682 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142170.roa Signing time: Sat 02 May 2026 08:36:44 +0000 ROA not before: Sat 02 May 2026 08:31:44 +0000 ROA not after: Sat 01 May 2027 08:36:44 +0000 asID: 142170 IP address blocks: 163.128.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:05:f2:76:65:f6:fc:d2:8a:5e:ab:94:1d:45:8c:df:a8:4f:66:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:44 2026 GMT Not After : May 1 08:36:44 2027 GMT Subject: CN=861C5B8D9821BDF3ADBE560A1C66D8E01542C02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:96:81:00:98:29:ee:33:e1:68:34:49:69:94: d6:75:20:69:e3:62:a0:77:d6:a7:6f:a5:84:83:a1: 31:5f:5d:f1:c3:3e:df:13:1e:99:ee:cb:55:6d:52: ff:2b:34:fd:ef:f7:80:a8:7f:f4:4b:c4:34:ae:17: dc:c1:51:2f:51:a6:c4:b2:49:a2:50:f2:c2:33:b7: d0:16:ac:a0:a2:c2:bc:a9:5a:96:23:11:31:35:5c: 52:e1:d7:ba:34:5f:49:72:3d:cb:e1:78:cc:33:31: 9a:23:1a:9d:f6:00:08:ee:22:73:76:58:ff:b0:f3: 14:39:d7:9e:78:73:f1:23:38:23:7d:2c:b5:20:2a: 87:c4:c8:47:7c:cf:24:ea:86:30:70:cf:e8:3a:3c: b7:6d:bb:7d:fe:0d:18:04:38:50:47:51:e3:2f:84: 00:22:a7:39:0a:67:ab:76:34:93:96:f7:73:1d:d3: 60:f9:20:92:e6:43:71:c7:7e:c6:c4:c2:56:2e:99: b5:f6:91:8a:5d:a6:e0:1b:9f:1e:83:eb:6a:c7:e2: c3:3c:eb:ad:62:19:f0:c1:85:f1:9d:a9:b7:83:d8: 7c:4a:3e:75:40:a1:f7:32:8a:72:25:96:29:d0:45: ce:44:f4:8d:d1:63:b4:18:e1:7e:f2:4a:de:72:4a: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:5B:8D:98:21:BD:F3:AD:BE:56:0A:1C:66:D8:E0:15:42:C0:2C X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142170.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.176.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ce:7f:ec:d3:7c:5c:92:48:58:7c:2e:de:51:aa:75:28:2f: aa:19:c1:0a:ef:e1:fa:98:97:39:07:a9:bd:0a:6a:5d:08:3b: f4:c7:aa:a3:b4:a7:13:89:0d:0d:d3:29:b3:b4:e6:90:7d:5e: b5:a9:eb:2f:1e:ef:1c:fd:8d:e0:7e:ee:a5:81:7f:58:36:af: d7:15:3d:b0:ac:a5:8f:20:ed:6e:ad:9d:79:a8:3f:7c:90:2e: d3:57:3e:27:0a:91:3f:8f:9c:49:a9:26:80:e7:98:b1:c1:75: ad:a9:11:8f:e1:20:1e:b6:0d:f9:5e:3f:c3:ef:03:59:9d:cf: b8:ab:40:05:a2:2b:d6:95:3e:07:aa:c7:8a:52:31:39:bd:66: e0:ce:02:87:3a:e5:ed:08:72:57:ee:95:30:22:1e:10:fb:9a: 8f:c8:ae:2f:88:5d:8b:0c:c6:19:e8:94:ad:b6:ef:e7:6b:63: 17:db:cb:33:74:59:73:6a:fd:4c:99:4d:f5:25:c4:b9:5a:84: 20:22:ed:2e:59:52:f2:be:83:96:76:e7:7f:99:27:3d:ef:5e: fd:17:01:0d:80:c4:f0:29:17:22:27:22:57:4e:63:35:07:33: 95:30:62:21:b8:f0:62:a8:42:7d:43:1b:4a:66:8a:f9:ba:8b: 1b:19:46:38 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWwXydmX2/NKKXquUHUWM36hPZoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0NFoX DTI3MDUwMTA4MzY0NFowMzExMC8GA1UEAxMoODYxQzVCOEQ5ODIxQkRGM0FEQkU1 NjBBMUM2NkQ4RTAxNTQyQzAyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPSWgQCYKe4z4Wg0SWmU1nUgaeNioHfWp2+lhIOhMV9d8cM+3xMeme7LVW1S /ys0/e/3gKh/9EvENK4X3MFRL1GmxLJJolDywjO30BasoKLCvKlaliMRMTVcUuHX ujRfSXI9y+F4zDMxmiManfYACO4ic3ZY/7DzFDnXnnhz8SM4I30stSAqh8TIR3zP JOqGMHDP6Do8t227ff4NGAQ4UEdR4y+EACKnOQpnq3Y0k5b3cx3TYPkgkuZDccd+ xsTCVi6ZtfaRil2m4BufHoPrasfiwzzrrWIZ8MGF8Z2pt4PYfEo+dUCh9zKKciWW KdBFzkT0jdFjtBjhfvJK3nJKSsUCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBSGHFuN mCG9862+VgocZtjgFULALDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMTcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAo4CwMA0GCSqGSIb3DQEBCwUAA4IBAQAezn/s03xckkhYfC7eUap1KC+q GcEK7+H6mJc5B6m9CmpdCDv0x6qjtKcTiQ0N0ymztOaQfV61qesvHu8c/Y3gfu6l gX9YNq/XFT2wrKWPIO1urZ15qD98kC7TVz4nCpE/j5xJqSaA55ixwXWtqRGP4SAe tg35Xj/D7wNZnc+4q0AFoivWlT4HqseKUjE5vWbgzgKHOuXtCHJX7pUwIh4Q+5qP yK4viF2LDMYZ6JSttu/na2MX28szdFlzav1MmU31JcS5WoQgIu0uWVLyvoOWdud/ mSc97179FwENgMTwKRciJyJXTmM1BzOVMGIhuPBiqEJ9QxtKZor5uosbGUY4 -----END CERTIFICATE-----Generated at Sun May 3 00:39:42 2026 by rpki-client