$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142311.roa File: AS142311.roa (raw, json) Hash identifier: tAoGxeDGeLyDqqXUzGft98wj04bAJ4eAjdBJlmHiMuo= Subject key identifier: 53:2F:FC:12:4A:86:A4:4F:71:49:45:DB:56:85:F0:D0:04:A5:78:0D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0FE8626049C215996DF868E9ACD71B8D32F213AD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142311.roa Signing time: Sat 02 May 2026 09:20:05 +0000 ROA not before: Sat 02 May 2026 09:15:05 +0000 ROA not after: Sat 01 May 2027 09:20:05 +0000 asID: 142311 IP address blocks: 103.168.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:62:60:49:c2:15:99:6d:f8:68:e9:ac:d7:1b:8d:32:f2:13:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:05 2026 GMT Not After : May 1 09:20:05 2027 GMT Subject: CN=532FFC124A86A44F714945DB5685F0D004A5780D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:5e:3b:69:60:fd:cf:c7:fd:51:0a:bf:61: 9a:81:f5:88:c8:df:fd:f8:71:11:54:d1:89:a9:32: 0a:00:1d:67:73:d7:30:9e:19:49:42:ea:05:c8:c4: 99:c2:f8:d9:18:1a:92:77:a4:af:a7:e4:0b:b5:fb: 02:8f:0c:a4:62:aa:eb:80:ec:78:7a:b3:48:34:b7: fd:59:b4:61:a1:ae:7b:00:a9:2f:6f:c3:f4:1f:0b: 37:da:2a:95:f4:db:34:41:8d:aa:43:ef:95:4f:19: 6b:32:b4:72:6c:e0:f8:83:d2:35:21:16:8f:55:ef: 62:72:51:cc:4e:6f:63:0f:9b:96:ad:a2:30:db:20: 0c:36:a8:dc:e7:75:50:85:a9:23:b1:a3:bf:dd:6f: 03:ea:92:88:a8:f7:36:61:40:31:68:67:f4:51:f7: 1f:b2:00:01:24:34:78:d5:ab:8c:c4:bc:e4:ff:51: 47:51:d2:ca:a9:2c:fd:02:aa:a4:23:8f:60:fe:6a: d8:c3:dd:f0:f1:8c:03:b3:b1:4f:b5:e9:34:32:df: e9:fa:78:e6:7b:e8:b0:9f:9c:2a:fe:f5:07:91:e8: e2:26:39:59:c6:ed:bc:c6:98:84:f6:52:be:57:34: 56:7d:89:f7:ab:cb:23:6f:2a:a0:07:4e:1e:67:63: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2F:FC:12:4A:86:A4:4F:71:49:45:DB:56:85:F0:D0:04:A5:78:0D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.150.0/23 Signature Algorithm: sha256WithRSAEncryption 68:57:a3:6a:70:57:5a:bd:8d:07:a0:89:45:5f:08:90:3d:04: fb:95:33:53:9e:fc:08:71:03:3a:d7:15:67:2e:7f:ee:88:65: 4f:13:83:2e:40:39:80:47:0c:61:b8:ac:34:14:22:68:0e:13: a1:02:3f:b0:9e:b5:d8:84:db:be:4b:c4:21:94:10:c6:6a:5c: 40:91:13:80:a3:a0:6b:e7:ce:76:c0:01:f2:62:9e:12:2d:7c: 3c:4a:1f:29:8f:0f:18:91:e6:d2:11:25:21:51:80:38:12:ea: fb:f3:7b:d3:96:07:d5:55:a7:c9:98:47:bf:cb:a8:0d:d8:62: 90:5a:88:cb:48:90:ab:27:bc:d1:f8:9d:6c:a4:8a:bf:75:88: 8e:7e:19:b9:f0:31:86:b8:10:df:a3:c9:eb:f7:b3:9b:45:ca: 51:fd:8e:96:a2:c0:75:d7:b6:f9:f7:6a:ae:49:0a:bb:da:57: 95:39:2f:3c:57:dc:ab:3d:2d:d7:ac:93:ac:7e:a6:79:93:c1: 54:7b:3d:1a:d5:28:1b:d9:08:b3:99:ab:a4:7d:cb:73:fa:e9: 13:0c:2c:88:8b:49:c6:da:bf:0e:a5:22:af:84:b0:e9:7c:80: d8:26:72:cd:4d:60:5c:91:46:bf:9f:f6:17:5e:11:af:c0:e4: d0:b7:6e:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUD+hiYEnCFZlt+GjprNcbjTLyE60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwNVoX DTI3MDUwMTA5MjAwNVowMzExMC8GA1UEAxMoNTMyRkZDMTI0QTg2QTQ0RjcxNDk0 NURCNTY4NUYwRDAwNEE1NzgwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9JXjtpYP3Px/1RCr9hmoH1iMjf/fhxEVTRiakyCgAdZ3PXMJ4ZSULqBcjE mcL42Rgaknekr6fkC7X7Ao8MpGKq64DseHqzSDS3/Vm0YaGuewCpL2/D9B8LN9oq lfTbNEGNqkPvlU8ZazK0cmzg+IPSNSEWj1XvYnJRzE5vYw+blq2iMNsgDDao3Od1 UIWpI7Gjv91vA+qSiKj3NmFAMWhn9FH3H7IAASQ0eNWrjMS85P9RR1HSyqks/QKq pCOPYP5q2MPd8PGMA7OxT7XpNDLf6fp45nvosJ+cKv71B5Ho4iY5WcbtvMaYhPZS vlc0Vn2J96vLI28qoAdOHmdjdmkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRTL/wS SoakT3FJRdtWhfDQBKV4DTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzExLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6iWMA0GCSqGSIb3DQEBCwUAA4IBAQBoV6NqcFdavY0HoIlFXwiQPQT7 lTNTnvwIcQM61xVnLn/uiGVPE4MuQDmARwxhuKw0FCJoDhOhAj+wnrXYhNu+S8Qh lBDGalxAkROAo6Br5852wAHyYp4SLXw8Sh8pjw8YkebSESUhUYA4Eur783vTlgfV VafJmEe/y6gN2GKQWojLSJCrJ7zR+J1spIq/dYiOfhm58DGGuBDfo8nr97ObRcpR /Y6WosB117b592quSQq72leVOS88V9yrPS3XrJOsfqZ5k8FUez0a1Sgb2Qizmauk fctz+ukTDCyIi0nG2r8OpSKvhLDpfIDYJnLNTWBckUa/n/YXXhGvwOTQt27z -----END CERTIFICATE-----Generated at Sun May 3 00:42:18 2026 by rpki-client