$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142383.roa File: AS142383.roa (raw, json) Hash identifier: GGW3K4BDouxeLHbR3oc0UHgBCt6jxBQZt32Jr2M2M6I= Subject key identifier: 34:FE:FC:13:15:EC:B3:88:77:B6:D3:BE:5A:DA:8C:5F:A7:2E:2B:E9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 480BF8EC7589D947774702025496A26F97321E1E Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142383.roa Signing time: Sat 02 May 2026 08:34:39 +0000 ROA not before: Sat 02 May 2026 08:29:39 +0000 ROA not after: Sat 01 May 2027 08:34:39 +0000 asID: 142383 IP address blocks: 103.172.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0b:f8:ec:75:89:d9:47:77:47:02:02:54:96:a2:6f:97:32:1e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:29:39 2026 GMT Not After : May 1 08:34:39 2027 GMT Subject: CN=34FEFC1315ECB38877B6D3BE5ADA8C5FA72E2BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:10:de:26:bf:4a:fd:44:3e:fa:a9:5b:63:13: ad:b5:bc:0a:a6:68:33:69:1b:87:60:ca:16:f1:6d: 1b:2f:96:5e:32:a7:26:b5:09:93:5b:9d:64:99:66: e0:a9:bb:84:3a:d2:ca:58:6f:c5:d0:41:ad:c7:e4: 5b:21:55:61:31:d7:2a:f2:70:04:57:2c:d9:20:46: 0b:39:5c:60:e3:a9:1a:05:0c:c9:84:98:b4:9e:dc: fd:ec:5e:00:ed:e9:6d:dc:83:b4:cc:27:c2:c6:b8: a9:8d:b7:2c:7f:44:15:11:5c:3c:de:b1:06:8c:59: 93:e2:e7:b0:1a:59:49:fb:bc:c6:39:f7:ce:9d:29: b2:62:22:ea:02:f8:35:a3:53:65:85:a1:e1:ab:05: a4:81:49:13:72:dd:dc:ec:fc:95:99:ee:80:a1:a7: 83:77:51:48:a8:9e:ed:57:1a:fa:7c:56:32:c8:f6: 78:d2:3e:1e:c7:ef:bd:78:c6:3f:57:3e:7d:ca:54: bc:fd:e1:56:fb:cd:3b:b5:5d:1a:28:82:30:76:8e: b2:57:71:30:54:e7:b0:ca:19:f8:e2:94:95:d0:f6: 79:09:48:af:15:26:59:21:37:3e:fd:73:1f:17:0f: fe:c7:4d:11:f1:56:eb:aa:d8:df:d5:26:35:29:70: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FE:FC:13:15:EC:B3:88:77:B6:D3:BE:5A:DA:8C:5F:A7:2E:2B:E9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142383.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.20.0/23 Signature Algorithm: sha256WithRSAEncryption a5:29:e5:aa:03:85:b2:8a:50:a4:ca:c1:a1:d9:d9:5c:b7:7d: 84:30:c2:3b:03:1b:49:05:5d:e3:88:3b:98:14:a6:af:a2:3a: 66:06:ba:df:bc:2e:77:78:3c:4c:21:74:45:1d:55:d5:29:af: f7:5b:72:19:30:88:0f:da:e4:3a:ba:6f:23:6b:55:1e:fe:e0: 5d:6e:21:24:4b:84:ea:ef:e3:b1:f3:fc:0f:5b:f3:f1:35:ec: 57:2c:be:90:64:e3:b0:00:9d:b6:d6:34:83:6a:07:cb:11:88: 36:94:6c:0c:a5:d9:b1:85:26:7b:4a:c4:fa:29:ec:75:b6:08: 21:34:0a:a7:74:f1:97:db:05:4e:85:15:b9:54:09:38:c8:6c: ca:51:c3:a6:e3:3c:86:1d:f0:b9:92:f6:6e:52:2b:e6:c1:a2: 79:36:06:04:c5:0f:84:32:e0:61:d5:0a:a6:23:40:be:cd:2b: 39:52:cc:9b:2c:40:3e:f7:06:17:53:ce:f9:73:00:5d:2d:18: 95:87:ff:56:11:20:42:39:35:7a:1d:c9:05:ab:d0:12:00:3d: 9d:db:cb:be:06:fb:2f:1a:71:6c:2d:90:ce:5a:37:b5:2f:66: fe:0a:49:a4:a0:0c:5f:de:74:86:4d:bd:cc:3b:da:d4:1a:02: d5:23:27:a5 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSAv47HWJ2Ud3RwICVJaib5cyHh4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MjkzOVoX DTI3MDUwMTA4MzQzOVowMzExMC8GA1UEAxMoMzRGRUZDMTMxNUVDQjM4ODc3QjZE M0JFNUFEQThDNUZBNzJFMkJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO4Q3ia/Sv1EPvqpW2MTrbW8CqZoM2kbh2DKFvFtGy+WXjKnJrUJk1udZJlm 4Km7hDrSylhvxdBBrcfkWyFVYTHXKvJwBFcs2SBGCzlcYOOpGgUMyYSYtJ7c/exe AO3pbdyDtMwnwsa4qY23LH9EFRFcPN6xBoxZk+LnsBpZSfu8xjn3zp0psmIi6gL4 NaNTZYWh4asFpIFJE3Ld3Oz8lZnugKGng3dRSKie7Vca+nxWMsj2eNI+HsfvvXjG P1c+fcpUvP3hVvvNO7VdGiiCMHaOsldxMFTnsMoZ+OKUldD2eQlIrxUmWSE3Pv1z HxcP/sdNEfFW66rY39UmNSlwoX0CAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQ0/vwT FeyziHe2075a2oxfpy4r6TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6wUMA0GCSqGSIb3DQEBCwUAA4IBAQClKeWqA4WyilCkysGh2dlct32E MMI7AxtJBV3jiDuYFKavojpmBrrfvC53eDxMIXRFHVXVKa/3W3IZMIgP2uQ6um8j a1Ue/uBdbiEkS4Tq7+Ox8/wPW/PxNexXLL6QZOOwAJ221jSDagfLEYg2lGwMpdmx hSZ7SsT6Kex1tgghNAqndPGX2wVOhRW5VAk4yGzKUcOm4zyGHfC5kvZuUivmwaJ5 NgYExQ+EMuBh1QqmI0C+zSs5UsybLEA+9wYXU875cwBdLRiVh/9WESBCOTV6HckF q9ASAD2d28u+BvsvGnFsLZDOWje1L2b+CkmkoAxf3nSGTb3MO9rUGgLVIyel -----END CERTIFICATE-----Generated at Sun May 3 00:41:52 2026 by rpki-client