$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142319.roa File: AS142319.roa (raw, json) Hash identifier: m+YY2Imm6PtsGyJQaHr/o0ezJkO5oqxy/cvN+uaM8g8= Subject key identifier: 7F:24:52:AE:10:D1:DD:30:C0:23:28:88:8C:D5:A0:9F:35:37:8B:2E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 24033358CE0B20A61A2011434E33B5C5F1394258 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142319.roa Signing time: Sat 02 May 2026 09:21:56 +0000 ROA not before: Sat 02 May 2026 09:16:56 +0000 ROA not after: Sat 01 May 2027 09:21:56 +0000 asID: 142319 IP address blocks: 103.26.188.0/23 maxlen: 24 103.186.35.0/24 maxlen: 24 2001:df4:c2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:03:33:58:ce:0b:20:a6:1a:20:11:43:4e:33:b5:c5:f1:39:42:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:16:56 2026 GMT Not After : May 1 09:21:56 2027 GMT Subject: CN=7F2452AE10D1DD30C02328888CD5A09F35378B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:9f:96:0c:68:85:d4:8c:f8:97:6d:1c:ee: c0:15:f5:d3:a3:6d:5a:69:10:83:e8:f4:ff:70:31: 7e:0c:9e:66:b0:ca:78:4c:43:50:7b:87:3f:cf:07: 67:00:f9:30:c1:a2:a6:1a:e5:37:71:ff:f7:12:66: 50:67:e2:c0:b4:e0:ea:a1:63:b6:85:2e:a8:69:9c: 4d:32:7b:67:bf:5e:0e:e0:84:e6:86:6b:a0:ab:b3: 90:38:e1:fb:20:6b:83:22:11:e0:b6:dc:32:12:4f: 01:f6:e8:71:64:23:4f:47:e6:90:6f:aa:a1:a7:41: e2:07:06:07:37:3d:2e:55:39:a6:5a:74:c5:36:94: 3d:3a:cb:70:a6:4b:1b:b9:2a:a9:d4:22:78:b2:dd: 91:ed:5b:17:50:39:38:f2:0f:9b:09:b0:1c:64:d8: 3b:82:b5:bc:46:75:32:0a:ac:97:8e:65:d4:fb:32: 49:cf:ac:56:fb:51:97:dd:99:bd:7c:ac:99:6d:55: a9:c2:26:9f:c9:96:28:50:dd:23:c2:c6:5b:bc:7d: 6d:cb:9d:3e:ab:17:ac:bd:07:6f:e0:71:de:29:40: bf:f6:41:54:af:a2:b1:08:6a:fa:1b:06:48:77:09: 45:08:30:b1:e1:ac:4f:05:cf:a7:8e:56:41:b6:dd: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:52:AE:10:D1:DD:30:C0:23:28:88:8C:D5:A0:9F:35:37:8B:2E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142319.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.188.0/23 103.186.35.0/24 IPv6: 2001:df4:c2c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:8c:75:47:a5:49:5d:fe:88:1e:1c:1c:8c:a3:86:89:34:09: 84:74:64:31:b5:87:e8:b5:f7:df:7f:a8:57:18:e3:23:66:4b: 57:a6:b0:79:4e:9a:13:86:83:7d:a8:fe:8d:ec:6d:44:7b:77: 45:ef:88:69:1e:c3:fa:72:9c:e8:61:9c:b8:3a:f5:c4:7d:a7: 1a:82:95:5b:0f:d8:aa:f7:cc:a5:4e:bc:8f:d0:e1:e9:5c:cd: 20:0d:f3:fc:d1:e5:40:6e:70:f6:42:b1:24:9b:cb:c7:62:83: df:27:fc:b3:11:8f:19:9d:21:54:5d:44:ce:0f:f0:5c:ae:53: 8e:e5:f5:b8:fb:66:d5:95:58:17:44:15:f5:62:41:15:ec:57: 81:ed:0e:7b:c4:06:3d:49:1e:8f:3e:e2:c8:cb:7f:c0:f1:41: 24:f1:6e:ca:72:41:61:71:bb:ad:07:0e:ea:f8:06:c5:a0:95: 9c:e7:37:06:34:d3:6e:60:38:a7:c4:6b:21:5c:78:7e:73:c1: dc:a8:60:0b:34:af:0f:9a:6e:b0:60:0d:d1:4f:28:7e:f8:28: 1a:5e:95:23:42:67:20:9e:2f:08:a7:14:09:aa:16:e7:db:48: 05:9c:30:e0:83:f9:3a:51:a2:95:95:14:b9:88:c0:64:7d:b8: fa:98:fd:7c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUJAMzWM4LIKYaIBFDTjO1xfE5QlgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTY1NloX DTI3MDUwMTA5MjE1NlowMzExMC8GA1UEAxMoN0YyNDUyQUUxMEQxREQzMEMwMjMy ODg4OENENUEwOUYzNTM3OEIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANb1n5YMaIXUjPiXbRzuwBX106NtWmkQg+j0/3AxfgyeZrDKeExDUHuHP88H ZwD5MMGiphrlN3H/9xJmUGfiwLTg6qFjtoUuqGmcTTJ7Z79eDuCE5oZroKuzkDjh +yBrgyIR4LbcMhJPAfbocWQjT0fmkG+qoadB4gcGBzc9LlU5plp0xTaUPTrLcKZL G7kqqdQieLLdke1bF1A5OPIPmwmwHGTYO4K1vEZ1Mgqsl45l1PsySc+sVvtRl92Z vXysmW1VqcImn8mWKFDdI8LGW7x9bcudPqsXrL0Hb+Bx3ilAv/ZBVK+isQhq+hsG SHcJRQgwseGsTwXPp45WQbbdXQ0CAwEAAaOCAeMwggHfMB0GA1UdDgQWBBR/JFKu ENHdMMAjKIiM1aCfNTeLLjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzE5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIA ATAMAwQBZxq8AwQAZ7ojMA8EAgACMAkDBwAgAQ30wsAwDQYJKoZIhvcNAQELBQAD ggEBAIGMdUelSV3+iB4cHIyjhok0CYR0ZDG1h+i1999/qFcY4yNmS1emsHlOmhOG g32o/o3sbUR7d0XviGkew/pynOhhnLg69cR9pxqClVsP2Kr3zKVOvI/Q4elczSAN 8/zR5UBucPZCsSSby8dig98n/LMRjxmdIVRdRM4P8FyuU47l9bj7ZtWVWBdEFfVi QRXsV4HtDnvEBj1JHo8+4sjLf8DxQSTxbspyQWFxu60HDur4BsWglZznNwY0025g OKfEayFceH5zwdyoYAs0rw+abrBgDdFPKH74KBpelSNCZyCeLwinFAmqFufbSAWc MOCD+TpRopWVFLmIwGR9uPqY/Xw= -----END CERTIFICATE-----Generated at Sun May 3 00:42:24 2026 by rpki-client