$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142329.roa File: AS142329.roa (raw, json) Hash identifier: ecNnYZnB7bXMELuT1PrmgkPdtuN83W633o1QOan8rDs= Subject key identifier: BC:3E:62:54:EA:21:21:9E:13:63:4F:1E:FF:81:DF:6B:72:09:46:1E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 090BF7E8A1D86800D111A1BE262234393E9100D6 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142329.roa Signing time: Sat 02 May 2026 09:20:18 +0000 ROA not before: Sat 02 May 2026 09:15:18 +0000 ROA not after: Sat 01 May 2027 09:20:18 +0000 asID: 142329 IP address blocks: 103.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0b:f7:e8:a1:d8:68:00:d1:11:a1:be:26:22:34:39:3e:91:00:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:18 2026 GMT Not After : May 1 09:20:18 2027 GMT Subject: CN=BC3E6254EA21219E13634F1EFF81DF6B7209461E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:4c:c4:f0:63:ee:74:07:a6:7d:30:dc:9a: a4:a4:92:6c:58:fe:1b:41:a3:bf:cf:78:f4:0d:75: 84:57:c1:96:64:15:77:8c:e6:7a:96:f8:7e:8d:62: 9d:e8:de:2d:f1:01:72:c9:65:b8:f9:a5:63:d6:7d: 44:a2:5c:50:97:64:69:34:45:d9:de:2e:3b:ea:bf: b8:a8:44:0d:f6:47:67:e4:56:fc:a0:52:84:ee:44: 8b:65:13:68:73:de:fe:db:0e:94:d7:7c:15:79:1c: 60:b1:d2:d2:56:3e:b4:fd:4d:8d:fe:5c:29:d3:da: fd:12:df:16:68:7b:25:68:8e:b1:bd:f8:e1:ab:c1: a6:7f:60:70:f3:1b:41:2f:99:1c:84:a9:41:da:5e: ec:e3:89:cc:ed:69:7c:cc:8d:c6:41:c1:c2:08:57: 02:15:2d:62:56:77:5c:89:16:63:61:d9:0e:00:82: 07:45:3e:89:2d:da:7e:b1:70:ea:7a:72:b5:2f:1f: 69:08:50:7b:3e:9d:df:96:73:7f:b5:5b:fc:ee:26: ea:4d:99:4e:1a:be:07:3d:ea:bc:b2:06:8f:38:92: 0f:2a:15:98:e9:a8:a1:b1:3e:3d:60:26:9d:3e:44: 7b:24:b0:0c:6a:03:71:8b:46:1e:d9:0c:36:92:12: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:62:54:EA:21:21:9E:13:63:4F:1E:FF:81:DF:6B:72:09:46:1E X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142329.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.21.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:4b:c9:d5:3c:32:5f:8d:ce:76:de:8a:43:42:0b:7d:aa:2c: 6c:8f:bd:bd:a4:35:69:99:98:3c:b3:f2:64:1d:a2:ee:8b:a2: d0:46:f6:6f:f5:59:4e:ca:94:c8:b0:3a:81:59:f6:11:81:ee: d7:a1:12:3f:7b:e1:ba:44:65:d3:24:1b:bd:6a:af:4c:13:85: 3b:92:92:cc:ef:30:95:79:34:7e:41:e6:50:68:0a:64:91:10: 03:01:41:48:58:ba:9c:26:56:a1:f3:13:df:66:7e:b0:eb:30: 5c:55:9a:29:ed:f3:17:e2:2c:3e:d3:68:87:10:03:da:9d:85: 01:e2:d7:f3:03:0a:3c:c4:8a:d4:c9:af:93:61:f9:02:6a:59: 56:b3:be:82:f6:23:11:ec:59:b9:e0:cd:82:ea:41:60:5c:12: e7:bd:88:9b:f1:38:59:45:02:4a:68:c3:bd:b3:5f:a7:84:dd: 36:60:f2:bf:e1:d1:d1:8b:d7:91:7a:50:33:ba:3f:8a:79:d2: 1f:40:8f:e0:ff:34:3e:71:2a:de:93:a5:68:1e:22:6f:82:a1: 42:d4:b9:52:e9:be:bb:d6:66:d8:b3:8a:6b:43:30:b8:01:ee: 43:11:74:d9:68:69:87:96:48:d9:9a:d0:94:37:ba:69:2e:ae: ce:54:53:ca -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUCQv36KHYaADREaG+JiI0OT6RANYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUxOFoX DTI3MDUwMTA5MjAxOFowMzExMC8GA1UEAxMoQkMzRTYyNTRFQTIxMjE5RTEzNjM0 RjFFRkY4MURGNkI3MjA5NDYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJWQTMTwY+50B6Z9MNyapKSSbFj+G0Gjv8949A11hFfBlmQVd4zmepb4fo1i nejeLfEBcslluPmlY9Z9RKJcUJdkaTRF2d4uO+q/uKhEDfZHZ+RW/KBShO5Ei2UT aHPe/tsOlNd8FXkcYLHS0lY+tP1Njf5cKdPa/RLfFmh7JWiOsb344avBpn9gcPMb QS+ZHISpQdpe7OOJzO1pfMyNxkHBwghXAhUtYlZ3XIkWY2HZDgCCB0U+iS3afrFw 6npytS8faQhQez6d35Zzf7Vb/O4m6k2ZThq+Bz3qvLIGjziSDyoVmOmoobE+PWAm nT5EeySwDGoDcYtGHtkMNpISWI8CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBS8PmJU 6iEhnhNjTx7/gd9rcglGHjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzI5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ6gVMA0GCSqGSIb3DQEBCwUAA4IBAQCcS8nVPDJfjc523opDQgt9qixs j729pDVpmZg8s/JkHaLui6LQRvZv9VlOypTIsDqBWfYRge7XoRI/e+G6RGXTJBu9 aq9ME4U7kpLM7zCVeTR+QeZQaApkkRADAUFIWLqcJlah8xPfZn6w6zBcVZop7fMX 4iw+02iHEAPanYUB4tfzAwo8xIrUya+TYfkCallWs76C9iMR7Fm54M2C6kFgXBLn vYib8ThZRQJKaMO9s1+nhN02YPK/4dHRi9eRelAzuj+KedIfQI/g/zQ+cSrek6Vo HiJvgqFC1LlS6b671mbYs4prQzC4Ae5DEXTZaGmHlkjZmtCUN7ppLq7OVFPK -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client