$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142339.roa File: AS142339.roa (raw, json) Hash identifier: 4Am9GEzBS1nb4HGpiluZsWw3ajA6of7k/wLkRL3jod8= Subject key identifier: 55:D8:D1:78:F0:8F:A4:7B:2A:A5:55:7D:A8:23:DF:E2:C2:17:18:B7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 78086184633C889F003EC09FF1C5285AE1FBC066 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142339.roa Signing time: Sat 02 May 2026 09:20:55 +0000 ROA not before: Sat 02 May 2026 09:15:55 +0000 ROA not after: Sat 01 May 2027 09:20:55 +0000 asID: 142339 IP address blocks: 103.18.112.0/23 maxlen: 23 103.18.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:08:61:84:63:3c:88:9f:00:3e:c0:9f:f1:c5:28:5a:e1:fb:c0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:55 2026 GMT Not After : May 1 09:20:55 2027 GMT Subject: CN=55D8D178F08FA47B2AA5557DA823DFE2C21718B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:56:dd:bd:c2:36:96:e0:04:6a:40:8d:13: 41:fd:e5:6e:3d:77:01:53:5f:db:59:f6:a8:24:4e: 89:94:03:9e:6d:2d:a5:58:4a:47:62:4f:51:10:df: 0e:4d:40:9e:eb:d4:3c:9d:d1:7b:58:e2:97:28:85: a4:bd:6e:38:cd:f9:6c:0f:6a:cb:da:17:eb:6b:ea: 6e:5e:2d:b7:1d:5e:a5:21:72:b2:1f:87:49:27:4b: 69:b8:bf:69:d5:19:0a:98:04:3e:a6:42:89:59:dc: 5a:88:05:60:fa:e3:04:5d:ad:3d:2d:b6:e5:ca:2d: 8e:72:94:c2:4a:f7:3f:12:58:f2:07:14:51:3a:9a: 06:9a:b6:05:6b:e3:f2:45:30:e1:99:05:fd:0b:09: 65:5d:8d:8c:88:fb:1c:33:a2:c9:0b:55:e1:11:fc: 5e:61:bd:c9:f7:08:ef:b7:a1:39:c5:56:2f:15:e8: 73:a6:1a:fc:1d:00:a6:15:2d:97:ee:b2:22:33:a0: 41:d4:87:49:35:cf:69:ab:16:cf:cd:d9:40:68:bb: 61:b8:51:9b:fe:75:12:0f:15:8f:93:a3:9f:72:ee: 32:56:ed:d9:bc:60:f2:5e:2b:57:6b:87:bb:1f:7e: 28:27:c3:00:48:d4:46:ca:89:9d:7f:29:71:10:d2: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:D1:78:F0:8F:A4:7B:2A:A5:55:7D:A8:23:DF:E2:C2:17:18:B7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.112.0/23 Signature Algorithm: sha256WithRSAEncryption 75:7b:ad:54:73:f0:38:31:98:60:5a:b3:71:a9:2f:c4:65:6f: 4b:59:9a:0c:0d:65:5e:a0:72:a7:2a:6d:cd:59:f7:15:4a:9d: 37:c3:3a:3f:1f:4c:77:1c:0e:dd:68:49:11:79:7a:f8:e7:bf: 00:09:b5:06:e6:b0:0d:db:e3:54:14:96:56:f0:b8:f8:05:cf: ae:72:0d:f8:9e:58:6c:da:ca:99:3d:54:5a:08:6e:f2:87:23: 34:fe:ee:04:84:fe:81:6b:8f:2b:3b:32:91:60:a3:5b:fa:b3: 9c:00:82:ef:16:e3:d8:b7:ba:e9:f1:b0:be:57:c0:0a:dd:60: 75:97:52:85:71:2b:69:6a:64:44:25:9a:d9:41:71:be:f1:c9: a5:eb:e5:d0:84:90:21:4a:0c:7c:9c:3f:5f:4a:8c:a3:63:4c: 5d:06:8a:b3:c0:d6:c1:12:be:e3:f8:46:21:2d:96:2d:6d:ee: 0d:48:15:9b:ab:dc:4d:6f:be:c7:4d:33:a9:f1:80:fd:ef:1c: 0f:8f:40:7a:af:85:66:44:a5:83:d2:be:da:6e:70:27:c4:99: 39:c5:47:25:20:c0:bf:fb:8c:31:8d:86:8b:1b:22:66:c2:a7: b2:ce:3a:56:04:4b:15:cb:30:80:64:ce:d3:56:4f:86:11:6e: f9:a1:dd:43 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUeAhhhGM8iJ8APsCf8cUoWuH7wGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1NVoX DTI3MDUwMTA5MjA1NVowMzExMC8GA1UEAxMoNTVEOEQxNzhGMDhGQTQ3QjJBQTU1 NTdEQTgyM0RGRTJDMjE3MThCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ2NVt29wjaW4ARqQI0TQf3lbj13AVNf21n2qCROiZQDnm0tpVhKR2JPURDf Dk1AnuvUPJ3Re1jilyiFpL1uOM35bA9qy9oX62vqbl4ttx1epSFysh+HSSdLabi/ adUZCpgEPqZCiVncWogFYPrjBF2tPS225cotjnKUwkr3PxJY8gcUUTqaBpq2BWvj 8kUw4ZkF/QsJZV2NjIj7HDOiyQtV4RH8XmG9yfcI77ehOcVWLxXoc6Ya/B0AphUt l+6yIjOgQdSHSTXPaasWz83ZQGi7YbhRm/51Eg8Vj5Ojn3LuMlbt2bxg8l4rV2uH ux9+KCfDAEjURsqJnX8pcRDSg30CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRV2NF4 8I+keyqlVX2oI9/iwhcYtzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZxJwMA0GCSqGSIb3DQEBCwUAA4IBAQB1e61Uc/A4MZhgWrNxqS/EZW9L WZoMDWVeoHKnKm3NWfcVSp03wzo/H0x3HA7daEkReXr4578ACbUG5rAN2+NUFJZW 8Lj4Bc+ucg34nlhs2sqZPVRaCG7yhyM0/u4EhP6Ba48rOzKRYKNb+rOcAILvFuPY t7rp8bC+V8AK3WB1l1KFcStpamREJZrZQXG+8cml6+XQhJAhSgx8nD9fSoyjY0xd BoqzwNbBEr7j+EYhLZYtbe4NSBWbq9xNb77HTTOp8YD97xwPj0B6r4VmRKWD0r7a bnAnxJk5xUclIMC/+4wxjYaLGyJmwqeyzjpWBEsVyzCAZM7TVk+GEW75od1D -----END CERTIFICATE-----Generated at Sun May 3 00:42:28 2026 by rpki-client