$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142385.roa File: AS142385.roa (raw, json) Hash identifier: UZCqXE4VDEl+DI5xlQRdSj8oOtX4wEuHa+1HyEgptx8= Subject key identifier: 24:9F:41:90:8F:1E:93:1D:6A:36:19:9D:DF:71:24:E6:62:0E:B6:83 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3BFB367294EB45FB0C7B42EEF84424F691ADF51B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142385.roa Signing time: Sat 02 May 2026 09:25:54 +0000 ROA not before: Sat 02 May 2026 09:20:54 +0000 ROA not after: Sat 01 May 2027 09:25:54 +0000 asID: 142385 IP address blocks: 103.172.43.0/24 maxlen: 24 2001:df2:ad40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fb:36:72:94:eb:45:fb:0c:7b:42:ee:f8:44:24:f6:91:ad:f5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:54 2026 GMT Not After : May 1 09:25:54 2027 GMT Subject: CN=249F41908F1E931D6A36199DDF7124E6620EB683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:e0:47:9e:db:14:df:f6:86:28:f2:f1:8e: 9b:01:44:34:d8:cb:79:ca:48:e0:8c:23:4e:2e:87: 1f:4d:60:93:cb:3a:5f:9a:95:79:e9:c5:3f:4a:5e: 1a:c9:35:94:41:66:89:aa:0c:ea:38:8b:cc:ca:9a: 19:64:8a:10:92:72:1f:ac:44:6f:ad:e2:61:3c:4f: de:bc:17:1b:91:67:bc:be:70:50:14:4d:fe:34:a7: aa:58:6c:bd:d6:22:ab:47:39:77:d2:02:9c:ba:b5: a2:4a:e8:91:40:c3:33:0f:6d:fb:62:ff:16:50:5a: 63:72:14:c4:88:ea:f5:43:83:90:54:eb:60:f2:be: 45:fd:46:92:97:c3:88:ab:46:01:6d:d0:e5:a9:9d: d1:38:7f:f9:90:a2:dc:85:a9:8c:69:6d:a3:a8:5a: 59:41:39:27:40:c7:1b:98:86:25:0c:3a:3b:9f:39: 7f:57:1a:10:a3:43:ce:3d:42:cc:16:d5:b8:ec:4c: ce:a3:76:8b:6e:66:f5:6f:a7:6f:66:57:3c:6d:85: eb:53:65:5d:3a:f5:a3:15:c3:d4:f6:b4:04:55:fc: fb:ae:85:f0:6b:15:15:9d:64:eb:61:88:cf:6b:a6: 65:22:8e:46:5b:f8:3f:ea:9c:13:de:3e:76:76:8f: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9F:41:90:8F:1E:93:1D:6A:36:19:9D:DF:71:24:E6:62:0E:B6:83 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.43.0/24 IPv6: 2001:df2:ad40::/48 Signature Algorithm: sha256WithRSAEncryption 6c:d1:5b:53:4e:fe:3e:e7:e9:2a:00:0e:9d:40:75:b3:55:eb: 20:dc:96:b7:21:40:ac:bc:21:b0:c4:70:10:fb:71:bc:ed:fe: 70:cd:f7:9b:1e:53:e0:c6:b3:64:04:36:b7:e4:e6:2a:09:5a: 00:fc:e1:0b:a8:17:da:21:67:c2:8e:f5:e6:4f:09:3e:f0:f7: 4b:71:a9:98:cc:31:05:96:0b:40:ef:fb:23:5d:6a:b8:e0:75: ec:cf:3b:5f:05:f8:15:ed:05:8b:a2:af:42:52:85:e9:6a:e9: 58:71:29:fb:56:e8:bd:43:56:99:8e:05:bb:f3:da:62:3e:41: 58:8e:91:52:e2:a1:a0:06:3c:cb:f0:71:56:a3:7c:5f:e1:aa: 44:4d:5b:79:51:44:6d:4e:a7:0a:f5:74:24:e1:af:ab:0f:35: cc:ef:6f:05:cb:c9:ba:51:89:53:5b:04:b2:54:22:a1:12:3c: e4:5c:20:01:52:7d:74:8e:17:f0:a3:70:19:43:c1:1c:72:2d: 0f:db:be:4a:8b:d5:14:5d:d0:ba:81:80:7f:3d:91:bb:9f:14: 7a:86:6f:a8:38:bb:bf:bd:6d:df:0a:b3:0e:21:69:9b:1f:be: 44:3e:03:ae:a7:6b:bc:91:e8:da:a2:3f:70:bc:b4:6d:49:5c: f4:7e:fb:25 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUO/s2cpTrRfsMe0Lu+EQk9pGt9RswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA1NFoX DTI3MDUwMTA5MjU1NFowMzExMC8GA1UEAxMoMjQ5RjQxOTA4RjFFOTMxRDZBMzYx OTlEREY3MTI0RTY2MjBFQjY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZQ4Eee2xTf9oYo8vGOmwFENNjLecpI4IwjTi6HH01gk8s6X5qVeenFP0pe Gsk1lEFmiaoM6jiLzMqaGWSKEJJyH6xEb63iYTxP3rwXG5FnvL5wUBRN/jSnqlhs vdYiq0c5d9ICnLq1okrokUDDMw9t+2L/FlBaY3IUxIjq9UODkFTrYPK+Rf1GkpfD iKtGAW3Q5amd0Th/+ZCi3IWpjGlto6haWUE5J0DHG5iGJQw6O585f1caEKNDzj1C zBbVuOxMzqN2i25m9W+nb2ZXPG2F61NlXTr1oxXD1Pa0BFX8+66F8GsVFZ1k62GI z2umZSKORlv4P+qcE94+dnaPdlsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQkn0GQ jx6THWo2GZ3fcSTmYg62gzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzg1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAZ6wrMA8EAgACMAkDBwAgAQ3yrUAwDQYJKoZIhvcNAQELBQADggEBAGzR W1NO/j7n6SoADp1AdbNV6yDclrchQKy8IbDEcBD7cbzt/nDN95seU+DGs2QENrfk 5ioJWgD84QuoF9ohZ8KO9eZPCT7w90txqZjMMQWWC0Dv+yNdarjgdezPO18F+BXt BYuir0JShelq6VhxKftW6L1DVpmOBbvz2mI+QViOkVLioaAGPMvwcVajfF/hqkRN W3lRRG1Opwr1dCThr6sPNczvbwXLybpRiVNbBLJUIqESPORcIAFSfXSOF/CjcBlD wRxyLQ/bvkqL1RRd0LqBgH89kbufFHqGb6g4u7+9bd8Ksw4haZsfvkQ+A66na7yR 6NqiP3C8tG1JXPR++yU= -----END CERTIFICATE-----Generated at Sun May 3 00:40:21 2026 by rpki-client