$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142376.roa File: AS142376.roa (raw, json) Hash identifier: 25f2MJzDQlfQ80HRHyMcZZ4Pjmzbst2OgVoNEUhu1p4= Subject key identifier: F3:98:AB:5D:41:50:60:BB:77:A9:CE:EE:D0:BD:87:1E:4A:6B:F6:F9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 185825D06BE1CE2CA7A4C71A7477CF9377F6188D Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142376.roa Signing time: Sat 02 May 2026 09:20:59 +0000 ROA not before: Sat 02 May 2026 09:15:59 +0000 ROA not after: Sat 01 May 2027 09:20:59 +0000 asID: 142376 IP address blocks: 103.187.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:25:d0:6b:e1:ce:2c:a7:a4:c7:1a:74:77:cf:93:77:f6:18:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:15:59 2026 GMT Not After : May 1 09:20:59 2027 GMT Subject: CN=F398AB5D415060BB77A9CEEED0BD871E4A6BF6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:bf:fb:26:b4:26:4b:51:1f:ea:fd:c2:89: 09:b6:30:3e:0e:f6:71:17:ac:15:20:c9:c4:39:0a: 1f:10:87:91:a2:f3:cd:87:4f:34:71:39:2d:93:de: 64:74:6c:bf:6c:da:29:9e:96:53:ea:d8:5f:d2:d8: 10:af:4e:36:38:e8:97:66:18:02:4e:93:58:96:07: 65:28:38:d1:71:7c:16:d8:42:bf:f8:b9:8a:a0:32: 38:bf:84:8d:d5:e6:9d:4a:7d:38:45:5b:5d:9d:bc: 8d:c4:75:f1:4e:91:8b:aa:da:87:d1:68:ac:0a:2a: 8c:e7:71:dd:52:26:81:8f:08:3d:d7:db:70:41:16: c0:ec:2e:b9:18:c4:47:38:90:6e:87:d5:dd:07:5b: d1:8a:bd:3c:65:f0:e3:5b:6f:06:d8:20:6e:a3:39: 97:a8:88:57:81:9b:59:02:d7:83:d5:c0:31:ea:07: 20:8a:c7:81:99:f1:69:cf:0c:3f:d0:6e:d5:c4:c0: 70:da:c1:b4:f2:60:56:89:c0:e5:22:4e:38:61:34: f4:0a:04:45:9b:cc:2c:07:2b:1c:62:02:65:81:a8: e6:88:f1:3c:4a:83:8a:b7:eb:4d:c2:be:46:5d:21: 0c:c5:87:ce:9e:0b:41:9f:de:bc:9b:0e:09:d8:b9: cb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:AB:5D:41:50:60:BB:77:A9:CE:EE:D0:BD:87:1E:4A:6B:F6:F9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142376.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.106.0/24 Signature Algorithm: sha256WithRSAEncryption 60:14:0c:00:2e:85:e6:0a:94:09:d1:7c:b9:83:1d:9a:1e:0f: ee:27:89:ad:61:e5:c5:70:b2:dd:ce:37:66:cb:12:01:48:43: d9:75:56:4d:9c:ab:6b:54:4e:a4:85:5c:94:8b:34:67:9d:e2: 68:de:b5:a0:af:60:13:56:81:78:64:05:0c:d0:61:8e:e6:86: 59:43:a2:65:4f:62:7f:89:eb:4c:bf:df:88:89:06:bb:9f:9d: 81:a1:6f:60:b8:2c:9c:9e:51:f8:5f:1e:fd:f0:76:e2:bc:4d: b8:8c:a2:ab:0e:d8:2b:bd:42:d8:8b:4b:4b:22:36:c2:91:d4: 8f:e3:8b:d1:a8:59:f1:cd:16:26:cb:80:67:43:d3:f0:5c:d7: 10:09:ed:6a:05:00:b5:8c:0c:36:fd:45:09:77:6f:df:1e:8b: 32:f4:93:3c:0b:f7:98:c8:3b:e9:e6:ce:4e:a1:bb:fb:14:ad: 2d:41:61:20:c6:f7:09:43:07:b6:2c:e3:f2:77:58:f3:82:dd: 15:5e:d9:f3:0d:7f:ed:0f:1d:63:8a:1b:5f:4f:e9:7c:7d:54: 6a:6a:6b:3a:76:10:52:70:61:58:d3:99:c2:1e:7a:8f:1c:f5: cc:85:d2:82:54:51:84:8b:b1:99:7f:02:76:8e:4e:86:9d:e7: 38:05:11:2f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGFgl0GvhziynpMcadHfPk3f2GI0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MTU1OVoX DTI3MDUwMTA5MjA1OVowMzExMC8GA1UEAxMoRjM5OEFCNUQ0MTUwNjBCQjc3QTlD RUVFRDBCRDg3MUU0QTZCRjZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuBv/smtCZLUR/q/cKJCbYwPg72cResFSDJxDkKHxCHkaLzzYdPNHE5LZPe ZHRsv2zaKZ6WU+rYX9LYEK9ONjjol2YYAk6TWJYHZSg40XF8FthCv/i5iqAyOL+E jdXmnUp9OEVbXZ28jcR18U6Ri6rah9ForAoqjOdx3VImgY8IPdfbcEEWwOwuuRjE RziQbofV3Qdb0Yq9PGXw41tvBtggbqM5l6iIV4GbWQLXg9XAMeoHIIrHgZnxac8M P9Bu1cTAcNrBtPJgVonA5SJOOGE09AoERZvMLAcrHGICZYGo5ojxPEqDirfrTcK+ Rl0hDMWHzp4LQZ/evJsOCdi5y68CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBTzmKtd QVBgu3epzu7QvYceSmv2+TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzc2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ7tqMA0GCSqGSIb3DQEBCwUAA4IBAQBgFAwALoXmCpQJ0Xy5gx2aHg/u J4mtYeXFcLLdzjdmyxIBSEPZdVZNnKtrVE6khVyUizRnneJo3rWgr2ATVoF4ZAUM 0GGO5oZZQ6JlT2J/ietMv9+IiQa7n52BoW9guCycnlH4Xx798HbivE24jKKrDtgr vULYi0tLIjbCkdSP44vRqFnxzRYmy4BnQ9PwXNcQCe1qBQC1jAw2/UUJd2/fHosy 9JM8C/eYyDvp5s5Oobv7FK0tQWEgxvcJQwe2LOPyd1jzgt0VXtnzDX/tDx1jihtf T+l8fVRqams6dhBScGFY05nCHnqPHPXMhdKCVFGEi7GZfwJ2jk6Gnec4BREv -----END CERTIFICATE-----Generated at Sun May 3 00:41:58 2026 by rpki-client