$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142324.roa File: AS142324.roa (raw, json) Hash identifier: NqqLOw3faPVqEZjX0U/t2FPyUYNfqIn25pV0hmEmc1U= Subject key identifier: 11:E7:4F:DF:90:6E:6B:52:C0:0D:5B:98:BE:F4:CF:ED:BF:C6:CC:69 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1CCAE1EE30143F19C814C7F3716C83C7C8D97050 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142324.roa Signing time: Sat 02 May 2026 09:20:08 +0000 ROA not before: Sat 02 May 2026 09:15:08 +0000 ROA not after: Sat 01 May 2027 09:20:08 +0000 asID: 142324 IP address blocks: 103.168.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ca:e1:ee:30:14:3f:19:c8:14:c7:f3:71:6c:83:c7:c8:d9:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:08 2026 GMT Not After : May 1 09:20:08 2027 GMT Subject: CN=11E74FDF906E6B52C00D5B98BEF4CFEDBFC6CC69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:c2:02:ae:39:e1:f2:03:78:5a:db:60:f4: 9c:1a:28:e7:09:4e:40:1d:4e:3f:43:1e:ad:b6:f9: 6a:12:b9:4a:16:5b:7f:75:f6:a1:4e:bb:b4:07:ce: 93:27:46:e7:8e:e0:11:c0:eb:d8:a9:3f:16:23:17: c0:d0:a3:f2:91:eb:41:f6:bf:a7:08:6e:e3:2c:b9: 81:b2:55:89:d4:20:7f:ba:45:4c:bf:03:60:14:c9: 3b:65:ae:36:a9:e9:33:cd:fb:4a:14:58:ae:f1:c4: 9e:27:ba:2c:03:43:eb:55:14:74:4d:6c:c5:24:ad: f7:cb:13:00:98:34:01:44:ae:cd:8b:a6:e9:86:62: 02:d9:18:2b:77:b4:dc:a7:ab:c0:68:8a:e7:3b:3c: ae:e8:5b:54:2d:e3:d3:8e:ce:75:c6:70:7f:67:67: df:bc:9c:bf:12:d8:7f:a5:b0:34:b7:4f:3a:88:d0: 86:a3:1c:2f:fc:d2:e8:10:90:44:ca:9f:d6:6a:7c: 79:69:b1:dd:1e:a7:d2:50:7c:19:c6:49:44:74:be: 0c:80:5b:02:1b:ec:9e:2f:af:28:1c:12:f3:38:8f: 49:10:4e:cf:40:9f:58:ab:46:ff:b4:33:97:4f:05: 23:67:7b:a5:41:26:ff:4a:2d:7b:c4:91:3b:4a:35: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:4F:DF:90:6E:6B:52:C0:0D:5B:98:BE:F4:CF:ED:BF:C6:CC:69 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142324.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.191.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ba:3e:da:0e:4b:78:07:f7:7c:7f:1c:48:8a:f2:94:29:0a: aa:37:d4:c3:5f:74:48:e3:81:91:4a:2d:d7:3a:f8:a0:17:3e: 0a:2c:45:f1:e9:cf:be:ce:55:91:32:49:d3:b3:85:84:6e:5a: b2:44:90:b6:76:e8:45:bf:c7:94:cc:16:5c:57:a5:c9:c0:f9: b6:79:76:33:57:6b:0d:18:cd:73:a6:5f:c7:19:61:a8:14:2e: f8:5f:32:96:81:22:6c:05:cf:46:64:72:7e:38:6f:ee:45:96: 87:0c:e5:76:99:08:1e:9a:9a:86:8f:72:a1:d3:97:6c:fa:51: f3:3f:0f:7d:32:33:90:fe:6e:04:9d:b9:88:51:f0:3e:3f:06: 2e:e1:c2:b1:39:20:f1:8b:05:59:c5:37:49:45:1d:97:aa:34: f6:d8:d5:d9:dd:40:f1:fe:b8:62:fc:7e:ba:4e:9f:6b:88:fe: e1:c4:5b:2e:21:57:de:a5:a6:a5:d1:5e:2d:f1:e8:f9:43:37: c8:a2:7d:02:9c:10:e1:11:ac:95:b1:f5:83:1c:1f:87:77:a9: 4c:86:3a:7f:04:41:cb:16:5d:f8:67:b8:f7:bb:35:9e:93:21: 17:09:41:fb:91:d2:64:0e:79:ce:d8:28:d4:58:f7:4e:73:cd: 30:e3:a6:1b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUHMrh7jAUPxnIFMfzcWyDx8jZcFAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwOFoX DTI3MDUwMTA5MjAwOFowMzExMC8GA1UEAxMoMTFFNzRGREY5MDZFNkI1MkMwMEQ1 Qjk4QkVGNENGRURCRkM2Q0M2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNtwgKuOeHyA3ha22D0nBoo5wlOQB1OP0Merbb5ahK5ShZbf3X2oU67tAfO kydG547gEcDr2Kk/FiMXwNCj8pHrQfa/pwhu4yy5gbJVidQgf7pFTL8DYBTJO2Wu NqnpM837ShRYrvHEnie6LAND61UUdE1sxSSt98sTAJg0AUSuzYum6YZiAtkYK3e0 3KerwGiK5zs8ruhbVC3j047OdcZwf2dn37ycvxLYf6WwNLdPOojQhqMcL/zS6BCQ RMqf1mp8eWmx3R6n0lB8GcZJRHS+DIBbAhvsni+vKBwS8ziPSRBOz0CfWKtG/7Qz l08FI2d7pUEm/0ote8SRO0o1efkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQR50/f kG5rUsANW5i+9M/tv8bMaTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6i/MA0GCSqGSIb3DQEBCwUAA4IBAQCGuj7aDkt4B/d8fxxIivKUKQqq N9TDX3RI44GRSi3XOvigFz4KLEXx6c++zlWRMknTs4WEblqyRJC2duhFv8eUzBZc V6XJwPm2eXYzV2sNGM1zpl/HGWGoFC74XzKWgSJsBc9GZHJ+OG/uRZaHDOV2mQge mpqGj3Kh05ds+lHzPw99MjOQ/m4EnbmIUfA+PwYu4cKxOSDxiwVZxTdJRR2XqjT2 2NXZ3UDx/rhi/H66Tp9riP7hxFsuIVfepaal0V4t8ej5QzfIon0CnBDhEayVsfWD HB+Hd6lMhjp/BEHLFl34Z7j3uzWekyEXCUH7kdJkDnnO2CjUWPdOc80w46Yb -----END CERTIFICATE-----Generated at Sun May 3 00:42:21 2026 by rpki-client