$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142334.roa File: AS142334.roa (raw, json) Hash identifier: OUxY9kXLeXi4TJJco9rW9SU7D0LwAUbxS9NBKMepGSY= Subject key identifier: F3:56:FC:B4:D0:0B:18:9C:13:02:6C:94:27:EB:9D:FA:F8:05:DB:19 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 10D4992960FC92CB6A9378566DEA35A7B0D51716 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142334.roa Signing time: Sat 02 May 2026 09:20:09 +0000 ROA not before: Sat 02 May 2026 09:15:09 +0000 ROA not after: Sat 01 May 2027 09:20:09 +0000 asID: 142334 IP address blocks: 103.168.245.0/24 maxlen: 24 2001:df6:e780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:99:29:60:fc:92:cb:6a:93:78:56:6d:ea:35:a7:b0:d5:17:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:09 2026 GMT Not After : May 1 09:20:09 2027 GMT Subject: CN=F356FCB4D00B189C13026C9427EB9DFAF805DB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:c8:da:5f:94:94:2b:47:63:2a:96:03:ef: 0c:2b:c7:cf:06:50:9f:21:c6:df:8f:92:a3:e8:97: 17:80:55:31:ba:02:e3:ac:98:86:1e:d5:61:e8:15: 5b:aa:1d:dc:8a:ca:72:b9:3c:82:82:b7:ce:55:51: ce:0f:95:8f:b2:28:c7:85:9e:1e:d4:41:42:f5:83: bb:aa:c0:d4:27:01:ca:5d:18:e5:b1:83:f1:ca:b2: b6:73:b8:7a:2a:f0:32:23:36:47:48:bf:6c:ee:e8: f9:85:52:f9:4e:f7:af:c5:3a:3b:26:df:e6:93:3a: f7:2a:5c:25:94:45:7b:09:28:9c:2e:d1:1c:30:dc: 63:09:ac:12:14:9e:9f:eb:eb:53:6d:30:31:33:88: 85:00:d5:a6:37:1c:89:70:7d:99:c2:b0:2e:e8:79: 8b:15:d1:23:8a:71:63:bd:26:ce:46:1c:24:b4:9a: d3:86:2b:1a:36:62:63:11:1d:1a:9f:ee:89:e5:a4: a6:82:69:df:d0:81:0b:f9:b4:23:f4:33:20:4c:cb: 1b:21:47:57:ce:f8:51:a0:7f:cf:97:e4:0d:44:8e: a8:cf:48:a9:4a:e5:07:fd:4b:a2:38:7a:3c:f3:d0: 70:52:9c:77:d4:1b:3e:f7:73:6a:8f:dc:12:42:7c: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:56:FC:B4:D0:0B:18:9C:13:02:6C:94:27:EB:9D:FA:F8:05:DB:19 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.245.0/24 IPv6: 2001:df6:e780::/48 Signature Algorithm: sha256WithRSAEncryption 05:db:46:16:87:5b:c7:45:a7:70:17:14:f3:a6:20:39:eb:65: 2a:04:c7:34:e9:ba:dc:63:2f:59:85:17:33:37:d5:66:7b:1f: 03:29:02:4f:4a:f3:75:0c:0d:86:0c:b9:29:e8:fb:9e:b9:36: e3:b4:38:14:89:a7:8f:b6:59:d9:5f:23:a5:ec:39:ed:72:60: 47:16:74:35:78:28:48:60:f8:43:38:26:13:51:86:42:5f:e1: 30:1f:27:af:30:4b:d8:7f:4a:16:00:91:6f:51:94:18:4c:75: 0b:5c:1a:d0:08:3a:36:a9:97:3a:11:ab:08:22:91:bc:17:5a: f5:0a:aa:cd:11:12:52:6f:b9:1f:44:3a:87:f3:57:45:ef:22: e7:bc:43:26:01:d3:9e:18:31:d9:fd:f3:4f:84:a3:52:1f:31: 3e:4d:2d:59:39:c7:98:5c:25:6f:a4:0a:d0:d2:e3:f5:15:1c: 63:0d:2a:5e:18:2c:e8:8b:74:c1:68:e3:cd:b2:42:9a:9c:f3: 73:98:de:3d:38:1e:c9:aa:10:62:a5:fd:4e:57:b1:df:7d:e0: d2:8e:1e:f7:bd:6b:5b:91:61:a2:99:6f:89:7d:f1:41:45:4a: 0e:5d:67:77:32:1e:5a:e1:10:f7:ee:f6:48:8c:b6:99:26:47: 39:70:7a:8c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUENSZKWD8kstqk3hWbeo1p7DVFxYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTUwOVoX DTI3MDUwMTA5MjAwOVowMzExMC8GA1UEAxMoRjM1NkZDQjREMDBCMTg5QzEzMDI2 Qzk0MjdFQjlERkFGODA1REIxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEpyNpflJQrR2MqlgPvDCvHzwZQnyHG34+So+iXF4BVMboC46yYhh7VYegV W6od3IrKcrk8goK3zlVRzg+Vj7Iox4WeHtRBQvWDu6rA1CcByl0Y5bGD8cqytnO4 eirwMiM2R0i/bO7o+YVS+U73r8U6Oybf5pM69ypcJZRFewkonC7RHDDcYwmsEhSe n+vrU20wMTOIhQDVpjcciXB9mcKwLuh5ixXRI4pxY70mzkYcJLSa04YrGjZiYxEd Gp/uieWkpoJp39CBC/m0I/QzIEzLGyFHV874UaB/z5fkDUSOqM9IqUrlB/1Lojh6 PPPQcFKcd9QbPvdzao/cEkJ8S2ECAwEAAaOCAd0wggHZMB0GA1UdDgQWBBTzVvy0 0AsYnBMCbJQn6536+AXbGTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ6j1MA8EAgACMAkDBwAgAQ3254AwDQYJKoZIhvcNAQELBQADggEBAAXb RhaHW8dFp3AXFPOmIDnrZSoExzTputxjL1mFFzM31WZ7HwMpAk9K83UMDYYMuSno +565NuO0OBSJp4+2WdlfI6XsOe1yYEcWdDV4KEhg+EM4JhNRhkJf4TAfJ68wS9h/ ShYAkW9RlBhMdQtcGtAIOjaplzoRqwgikbwXWvUKqs0RElJvuR9EOofzV0XvIue8 QyYB054YMdn980+Eo1IfMT5NLVk5x5hcJW+kCtDS4/UVHGMNKl4YLOiLdMFo482y Qpqc83OY3j04HsmqEGKl/U5Xsd994NKOHve9a1uRYaKZb4l98UFFSg5dZ3cyHlrh EPfu9kiMtpkmRzlweow= -----END CERTIFICATE-----Generated at Sun May 3 01:44:56 2026 by rpki-client