$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142384.roa File: AS142384.roa (raw, json) Hash identifier: S3996l0RUdpBbrkKhUDXkhGbIWbnQGE9Clvh5RQWVJk= Subject key identifier: C8:83:A0:41:67:6D:AE:FF:08:BA:15:59:41:05:D0:38:17:EB:84:4B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 74D49CE3FB957C8C0B0F96D172A749D048B6A389 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142384.roa Signing time: Sat 02 May 2026 21:15:42 +0000 ROA not before: Sat 02 May 2026 21:10:42 +0000 ROA not after: Sat 01 May 2027 21:15:42 +0000 asID: 142384 IP address blocks: 103.184.30.0/24 maxlen: 24 103.225.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:9c:e3:fb:95:7c:8c:0b:0f:96:d1:72:a7:49:d0:48:b6:a3:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:10:42 2026 GMT Not After : May 1 21:15:42 2027 GMT Subject: CN=C883A041676DAEFF08BA15594105D03817EB844B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:4b:b8:8a:31:f2:92:cf:75:34:a8:4d:08: 8d:96:e7:a7:53:45:99:67:b4:56:50:ab:ee:bb:df: f7:14:6f:d6:60:08:e8:ad:e5:ce:10:06:c2:38:b5: b9:94:68:79:ba:c3:bd:f0:5f:64:ea:c0:45:04:05: 33:97:e1:de:b8:1c:d0:49:27:0e:a8:5c:00:a1:4f: c9:a2:f0:7c:71:5c:f1:92:bd:5b:5e:da:17:f9:93: fd:fe:d0:73:98:9e:1f:7c:8e:8b:8c:12:a9:be:37: 30:92:55:0d:da:4e:99:37:a6:73:eb:dc:5f:d3:ee: 55:4b:db:f3:25:22:dc:89:76:4d:d3:e0:a9:ab:f1: 41:1d:e1:01:fc:7b:e7:e8:90:52:0b:91:c4:ee:ee: 27:4c:43:a0:ff:a3:2c:c1:5f:c3:b6:74:22:6e:07: 65:47:e3:ef:82:2e:63:4f:52:c6:70:6c:4e:f1:2d: c1:61:cf:fd:3c:20:d7:89:e8:88:b6:a3:dd:2d:37: 3c:dd:22:ad:86:00:1e:79:41:ed:4b:48:04:e5:49: c2:c2:93:30:a9:eb:7c:34:db:10:c6:3f:a9:11:4d: 94:a2:e5:89:81:9d:a9:83:c2:6d:07:12:ad:c8:d5: 26:c5:e7:c2:dd:49:ae:69:24:0d:96:56:f7:54:96: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:A0:41:67:6D:AE:FF:08:BA:15:59:41:05:D0:38:17:EB:84:4B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.30.0/24 103.225.19.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a1:97:f8:59:54:2f:00:b4:ed:d3:5d:de:06:06:d2:f6:b9: 24:66:90:c5:23:f5:bd:41:49:2b:fe:ca:8c:92:8e:a5:83:78: c4:c3:7b:ed:e0:2f:3b:62:27:58:6d:e0:63:a4:2d:4a:a6:bd: 26:f8:b4:0e:11:c2:6b:2e:60:85:71:35:d1:1a:79:72:a0:d6: 36:3f:1c:70:4d:94:f6:42:a9:a5:c6:5b:05:9a:16:c0:ee:dc: c6:aa:21:cb:5c:61:6c:a3:50:5e:5c:2f:db:0d:df:b4:f9:0c: a0:76:f0:e2:90:68:c1:d4:6b:2c:9f:5f:75:f3:3f:12:2c:a2: 18:18:54:ab:c4:51:b3:10:b4:ac:9f:6b:75:23:ac:3d:e6:3e: 3c:25:e7:6d:ed:60:c6:22:61:1c:86:9a:18:aa:9c:0f:9c:1e: e0:f2:fb:83:d9:8a:16:77:91:f7:39:47:43:f2:f8:61:9c:94: 6d:a3:69:81:10:6f:44:db:2a:c7:03:05:3f:e8:4d:49:0d:78: 1d:37:65:61:ff:3c:76:22:78:86:31:3f:1b:5b:44:1f:04:90: 45:8c:06:ab:51:55:81:6a:73:bc:3d:c7:bc:45:9f:49:05:76: 3f:64:f0:1c:cf:f2:53:e9:ee:a3:72:5c:ca:9b:d4:a4:90:22: 49:af:a4:4b -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUdNSc4/uVfIwLD5bRcqdJ0Ei2o4kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTA0MloX DTI3MDUwMTIxMTU0MlowMzExMC8GA1UEAxMoQzg4M0EwNDE2NzZEQUVGRjA4QkEx NTU5NDEwNUQwMzgxN0VCODQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAcS7iKMfKSz3U0qE0IjZbnp1NFmWe0VlCr7rvf9xRv1mAI6K3lzhAGwji1 uZRoebrDvfBfZOrARQQFM5fh3rgc0EknDqhcAKFPyaLwfHFc8ZK9W17aF/mT/f7Q c5ieH3yOi4wSqb43MJJVDdpOmTemc+vcX9PuVUvb8yUi3Il2TdPgqavxQR3hAfx7 5+iQUguRxO7uJ0xDoP+jLMFfw7Z0Im4HZUfj74IuY09SxnBsTvEtwWHP/Twg14no iLaj3S03PN0irYYAHnlB7UtIBOVJwsKTMKnrfDTbEMY/qRFNlKLliYGdqYPCbQcS rcjVJsXnwt1JrmkkDZZW91SWcekCAwEAAaOCAdIwggHOMB0GA1UdDgQWBBTIg6BB Z22u/wi6FVlBBdA4F+uESzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAZ7geAwQAZ+ETMA0GCSqGSIb3DQEBCwUAA4IBAQBQoZf4WVQvALTt013e BgbS9rkkZpDFI/W9QUkr/sqMko6lg3jEw3vt4C87YidYbeBjpC1Kpr0m+LQOEcJr LmCFcTXRGnlyoNY2PxxwTZT2QqmlxlsFmhbA7tzGqiHLXGFso1BeXC/bDd+0+Qyg dvDikGjB1Gssn1918z8SLKIYGFSrxFGzELSsn2t1I6w95j48Jedt7WDGImEchpoY qpwPnB7g8vuD2YoWd5H3OUdD8vhhnJRto2mBEG9E2yrHAwU/6E1JDXgdN2Vh/zx2 IniGMT8bW0QfBJBFjAarUVWBanO8Pce8RZ9JBXY/ZPAcz/JT6e6jclzKm9SkkCJJ r6RL -----END CERTIFICATE-----Generated at Sun May 3 00:42:13 2026 by rpki-client