$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142313.roa File: AS142313.roa (raw, json) Hash identifier: YqXymkzZc7bbnIVGYEDKYGyefL2wlr2XOYgio9AGXT8= Subject key identifier: A1:C2:1A:6D:55:C6:2B:E3:A8:20:30:1B:8F:B6:84:FA:7C:4E:98:D9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F6147B2F3F6B2A4132B6117510EB09B75E39FB9 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142313.roa Signing time: Sat 02 May 2026 08:36:56 +0000 ROA not before: Sat 02 May 2026 08:31:56 +0000 ROA not after: Sat 01 May 2027 08:36:56 +0000 asID: 142313 IP address blocks: 103.168.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:61:47:b2:f3:f6:b2:a4:13:2b:61:17:51:0e:b0:9b:75:e3:9f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:56 2026 GMT Not After : May 1 08:36:56 2027 GMT Subject: CN=A1C21A6D55C62BE3A820301B8FB684FA7C4E98D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:1d:f9:69:5a:46:09:a7:0a:89:b7:67:b8: 5b:4f:c0:46:5d:24:c7:3f:48:80:84:26:1b:90:73: ef:c1:24:6a:e6:16:15:34:11:6f:90:08:90:ac:f7: c0:02:d8:12:ec:a5:2c:d3:11:f5:08:e2:26:63:9a: e3:b4:58:31:2a:aa:ea:4e:f7:4f:2b:6b:2f:06:eb: 57:77:15:59:9a:fe:6e:c9:2f:db:01:83:f0:38:cb: 43:de:85:ce:0b:8f:bb:1c:57:94:eb:c1:26:3b:3d: d5:91:fb:52:43:33:ad:82:ca:32:1c:4b:eb:44:dd: be:9c:6e:03:de:a6:50:6c:22:c1:da:aa:a8:58:c5: b2:10:d3:2e:22:7d:7d:65:b7:ca:d0:af:17:d7:a1: ff:f2:a7:b0:c6:0e:47:79:b4:40:5b:f1:e8:90:f9: 67:7f:70:c6:3f:47:a9:bd:23:0d:6e:fa:1c:a9:32: 15:a4:37:3f:7a:f0:5d:30:17:5b:2f:13:bb:ff:b0: 14:6a:f8:7f:ff:54:b7:f8:6e:ac:b0:14:2b:6a:1f: 6e:69:49:93:35:8f:59:a0:4e:d6:44:eb:ee:24:8d: dd:70:49:03:b0:a9:b0:df:af:eb:03:88:7d:dc:b4: 7a:fb:6c:4f:73:0c:ce:6f:36:5e:c4:58:56:8f:b1: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C2:1A:6D:55:C6:2B:E3:A8:20:30:1B:8F:B6:84:FA:7C:4E:98:D9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142313.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.153.0/24 Signature Algorithm: sha256WithRSAEncryption 08:0c:ae:52:2a:f4:a0:34:d4:26:2f:0c:b5:10:b7:44:ab:01: 55:24:3c:98:ac:55:e9:e5:d5:3f:eb:b6:7a:3e:93:cb:f1:f6: 4c:ce:14:02:f8:e2:47:5a:ff:fb:04:47:6f:fa:2e:a9:de:b4: bc:6a:b4:f4:03:2d:02:20:63:c1:00:9e:e6:78:f3:2a:0c:d4: 90:67:5f:70:d4:9e:9d:5d:ee:ad:18:68:06:f8:57:98:c5:00: 92:41:e8:8e:15:82:d8:62:07:54:b2:08:aa:b6:fc:a2:c8:f5: e5:a0:63:5e:e0:46:e1:68:95:fc:c6:34:7d:21:36:af:17:96: 46:f9:87:d2:18:eb:28:7d:dc:9e:3b:a5:12:0f:cf:7a:a7:41: b8:b0:7d:4b:ce:58:77:31:5c:0c:cc:56:a0:a0:63:80:83:fd: f0:99:0d:7c:f5:ab:24:59:9a:ff:64:a4:6a:8a:04:de:56:84: 84:c0:0b:13:c2:5c:8e:44:55:1c:8d:c6:a4:33:b8:fa:f6:15: d8:68:15:93:79:21:da:2f:b7:3f:ee:c0:55:19:92:36:1e:f2: 20:0f:af:63:3c:da:47:94:9c:31:36:35:89:ac:68:28:c9:8d: 9f:cb:44:b7:8a:65:f7:bc:c3:98:d1:2b:6c:5a:25:bc:67:19: 3c:b4:9f:a2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUL2FHsvP2sqQTK2EXUQ6wm3Xjn7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1NloX DTI3MDUwMTA4MzY1NlowMzExMC8GA1UEAxMoQTFDMjFBNkQ1NUM2MkJFM0E4MjAz MDFCOEZCNjg0RkE3QzRFOThEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgQHflpWkYJpwqJt2e4W0/ARl0kxz9IgIQmG5Bz78EkauYWFTQRb5AIkKz3 wALYEuylLNMR9QjiJmOa47RYMSqq6k73TytrLwbrV3cVWZr+bskv2wGD8DjLQ96F zguPuxxXlOvBJjs91ZH7UkMzrYLKMhxL60TdvpxuA96mUGwiwdqqqFjFshDTLiJ9 fWW3ytCvF9eh//KnsMYOR3m0QFvx6JD5Z39wxj9Hqb0jDW76HKkyFaQ3P3rwXTAX Wy8Tu/+wFGr4f/9Ut/hurLAUK2ofbmlJkzWPWaBO1kTr7iSN3XBJA7CpsN+v6wOI fdy0evtsT3MMzm82XsRYVo+xxD8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBShwhpt VcYr46ggMBuPtoT6fE6Y2TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzEzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6iZMA0GCSqGSIb3DQEBCwUAA4IBAQAIDK5SKvSgNNQmLwy1ELdEqwFV JDyYrFXp5dU/67Z6PpPL8fZMzhQC+OJHWv/7BEdv+i6p3rS8arT0Ay0CIGPBAJ7m ePMqDNSQZ19w1J6dXe6tGGgG+FeYxQCSQeiOFYLYYgdUsgiqtvyiyPXloGNe4Ebh aJX8xjR9ITavF5ZG+YfSGOsofdyeO6USD896p0G4sH1Lzlh3MVwMzFagoGOAg/3w mQ189askWZr/ZKRqigTeVoSEwAsTwlyORFUcjcakM7j69hXYaBWTeSHaL7c/7sBV GZI2HvIgD69jPNpHlJwxNjWJrGgoyY2fy0S3imX3vMOY0StsWiW8Zxk8tJ+i -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client