$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142381.roa File: AS142381.roa (raw, json) Hash identifier: LyXi7qOUUlUCiRG5aCCJA0D8DMQFdRNjYkEsBn4roYU= Subject key identifier: 37:0F:1E:C3:01:46:A9:2B:BE:83:E5:14:C5:42:2A:3F:12:39:DA:E7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1F840A318E49FB7D5D8914FEB7ECE73F5286506E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142381.roa Signing time: Sat 02 May 2026 08:36:51 +0000 ROA not before: Sat 02 May 2026 08:31:51 +0000 ROA not after: Sat 01 May 2027 08:36:51 +0000 asID: 142381 IP address blocks: 103.189.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:84:0a:31:8e:49:fb:7d:5d:89:14:fe:b7:ec:e7:3f:52:86:50:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:51 2026 GMT Not After : May 1 08:36:51 2027 GMT Subject: CN=370F1EC30146A92BBE83E514C5422A3F1239DAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:aa:1d:d9:12:31:d4:26:62:19:43:26:d6: c9:d4:e8:af:77:74:bd:ba:df:9c:ef:56:91:23:6d: 8e:68:50:27:7a:ff:c9:a8:46:ce:f9:72:9d:ad:2d: d8:66:91:62:90:63:4a:f9:b7:02:1f:92:49:9a:f0: b9:d9:f3:5e:79:db:c3:13:2a:76:c7:ff:58:7e:16: 93:7d:b1:f6:b9:50:44:fa:fb:66:bb:60:5f:ff:07: c5:c7:f3:a7:87:ae:34:99:d9:a9:40:21:33:4b:dc: 93:c9:99:c2:3f:f4:08:d5:28:0c:1d:2b:55:00:0d: a2:a0:c4:ee:20:28:cb:47:9c:f1:e7:83:3b:98:b2: 20:fe:5c:88:44:76:c7:e3:14:dc:bf:f5:c4:95:0c: a3:d4:f4:bd:f1:b0:be:49:e7:3c:79:f6:ec:56:26: 5f:ce:b0:f6:0f:a5:ba:e9:6f:2e:0d:d0:9a:d0:ed: 5d:a1:45:a7:80:ab:9f:a2:af:34:78:69:da:dd:22: af:f6:ab:71:38:ad:0f:2a:cb:61:1e:9b:3f:cb:0e: ce:10:2e:a6:be:9d:8d:41:c6:5b:40:d4:75:67:11: bc:cd:61:e0:a1:05:b5:b9:30:a0:e4:cc:3f:cd:b1: 77:ed:71:e3:78:23:05:d3:47:92:8b:a4:f4:1c:3b: 4f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:1E:C3:01:46:A9:2B:BE:83:E5:14:C5:42:2A:3F:12:39:DA:E7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.231.0/24 Signature Algorithm: sha256WithRSAEncryption 56:db:c5:59:9b:74:6e:2b:7b:1d:ef:25:fd:00:13:c6:74:ed: c0:25:5b:5c:6b:4f:75:26:96:30:9c:e1:b3:6e:d8:e1:b5:6f: 1e:77:94:9f:5f:e6:a1:b4:9e:83:00:64:1d:b6:96:a4:bb:e0: 9c:60:c0:01:51:93:e4:f5:91:f9:e2:fc:02:a9:ca:16:60:7f: 28:a1:dc:99:c0:4f:af:b2:93:a1:39:09:6b:0b:f8:b8:f7:4b: c9:97:76:97:44:a8:b9:f3:52:87:d0:df:34:33:f5:c3:c5:58: f3:d1:c9:53:08:69:8b:c3:92:b4:09:b9:4c:5e:0d:43:d0:3f: 41:c7:37:65:08:4f:4f:96:ad:57:2e:e1:e0:22:9b:b0:5c:27: ff:1d:2e:f1:6c:99:63:87:8e:51:46:4d:84:3a:8f:99:b1:ed: b3:5a:2a:68:a3:86:94:1a:54:bd:c5:13:10:c1:84:82:3e:03: bf:33:eb:3b:2b:ba:82:17:4c:b8:84:b2:fd:e2:ca:9e:f2:4a: b0:49:21:ef:d1:72:55:c3:6b:0e:a0:4f:a0:47:7a:b9:21:35: 3d:27:d8:3b:ce:43:e8:33:02:62:33:fc:b3:2b:bc:2d:2f:60: ee:43:0a:e7:a2:8a:00:8e:5b:6f:f0:cf:b2:56:5f:00:ab:3d: 4d:5f:80:75 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUH4QKMY5J+31diRT+t+znP1KGUG4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE1MVoX DTI3MDUwMTA4MzY1MVowMzExMC8GA1UEAxMoMzcwRjFFQzMwMTQ2QTkyQkJFODNF NTE0QzU0MjJBM0YxMjM5REFFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJrIqh3ZEjHUJmIZQybWydTor3d0vbrfnO9WkSNtjmhQJ3r/yahGzvlyna0t 2GaRYpBjSvm3Ah+SSZrwudnzXnnbwxMqdsf/WH4Wk32x9rlQRPr7ZrtgX/8Hxcfz p4euNJnZqUAhM0vck8mZwj/0CNUoDB0rVQANoqDE7iAoy0ec8eeDO5iyIP5ciER2 x+MU3L/1xJUMo9T0vfGwvknnPHn27FYmX86w9g+luulvLg3QmtDtXaFFp4Crn6Kv NHhp2t0ir/arcTitDyrLYR6bP8sOzhAupr6djUHGW0DUdWcRvM1h4KEFtbkwoOTM P82xd+1x43gjBdNHkouk9Bw7TzsCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ3Dx7D AUapK76D5RTFQio/Ejna5zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAZ73nMA0GCSqGSIb3DQEBCwUAA4IBAQBW28VZm3RuK3sd7yX9ABPGdO3A JVtca091JpYwnOGzbtjhtW8ed5SfX+ahtJ6DAGQdtpaku+CcYMABUZPk9ZH54vwC qcoWYH8oodyZwE+vspOhOQlrC/i490vJl3aXRKi581KH0N80M/XDxVjz0clTCGmL w5K0CblMXg1D0D9BxzdlCE9Plq1XLuHgIpuwXCf/HS7xbJljh45RRk2EOo+Zse2z Wipoo4aUGlS9xRMQwYSCPgO/M+s7K7qCF0y4hLL94sqe8kqwSSHv0XJVw2sOoE+g R3q5ITU9J9g7zkPoMwJiM/yzK7wtL2DuQwrnoooAjltv8M+yVl8Aqz1NX4B1 -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client