$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142391.roa File: AS142391.roa (raw, json) Hash identifier: 4WsycPgmZBpYfK5S1FskVBu1atA4Inwz3j0g/EfraBw= Subject key identifier: 44:E1:DA:E7:69:7B:55:68:49:FC:A4:E4:1C:B5:6E:70:EA:BD:2C:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6422852D44CF5DEEA7F8B43A9C46EE98122107B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142391.roa Signing time: Sat 02 May 2026 08:36:45 +0000 ROA not before: Sat 02 May 2026 08:31:45 +0000 ROA not after: Sat 01 May 2027 08:36:45 +0000 asID: 142391 IP address blocks: 103.169.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:22:85:2d:44:cf:5d:ee:a7:f8:b4:3a:9c:46:ee:98:12:21:07:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:45 2026 GMT Not After : May 1 08:36:45 2027 GMT Subject: CN=44E1DAE7697B556849FCA4E41CB56E70EABD2C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:3d:05:dc:b1:6f:a1:51:38:10:f7:7f:20: ea:0a:4d:c0:69:cd:9d:90:18:df:1e:70:03:63:a8: 04:e6:fb:11:2e:7d:22:51:dd:b3:e1:94:1a:db:f6: e6:0c:a3:bc:f2:24:f3:bc:cd:fb:4d:21:59:f9:ae: a2:60:d8:26:77:a4:ea:00:e4:cd:83:f4:db:21:9e: 71:02:94:77:4b:bf:1c:eb:a6:c4:5c:d6:34:d2:5c: c6:6d:24:b2:2f:c9:a6:73:46:b1:e0:0f:95:e6:37: f9:5b:18:e3:a0:7a:66:5b:9b:b7:e9:39:ea:81:50: 7d:06:af:55:62:d6:21:0f:04:cf:2b:67:b6:cc:c6: bc:d9:f2:6f:21:34:63:d4:7a:9f:ae:38:07:56:09: a6:d3:0f:0b:7f:37:4f:36:ff:32:d3:a3:a9:32:d7: 22:ae:27:0e:78:e4:8f:db:17:f1:cd:66:da:fc:8c: 36:2e:e6:a4:a0:81:ff:1c:93:06:80:47:38:9d:de: 5e:f2:45:d8:63:30:f4:6e:a2:f6:23:b7:b8:5d:92: 7f:cd:f5:8a:23:9a:90:8a:02:35:7d:9e:19:d6:21: 41:64:14:d4:db:c4:34:6c:e5:d8:d7:4a:2f:5b:9a: d2:48:a3:17:32:8c:64:07:c4:ca:52:66:ad:ce:a6: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E1:DA:E7:69:7B:55:68:49:FC:A4:E4:1C:B5:6E:70:EA:BD:2C:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption a3:8d:70:47:4e:35:f3:17:76:eb:1f:4f:f9:49:e4:75:b2:b8: 8f:fe:db:b0:33:e7:6d:2b:7d:b3:a7:92:57:f2:d2:c2:a3:8f: 0c:dc:9b:c6:7e:f0:69:80:83:b5:68:a4:d4:34:76:33:0c:3c: 91:2d:5e:e1:52:58:3f:7a:92:71:a5:1f:5d:2a:72:17:82:bb: cb:41:6d:10:17:a8:34:90:55:bb:66:20:ae:f7:48:20:aa:96: d9:f3:a0:57:51:ab:ac:2e:28:24:c4:98:74:77:56:e9:ad:84: 60:0b:f3:f3:e4:ee:81:34:62:78:4f:0e:51:d0:0f:c7:64:b0: 85:6e:3c:7f:0e:11:2e:38:d7:1b:67:71:41:82:b1:d1:8d:00: 51:76:7f:bd:57:8d:6f:a6:90:8c:a4:c0:76:41:28:01:2a:99: cf:73:82:5c:1a:86:50:61:8a:0a:6f:79:45:d9:11:f9:12:7a: e5:ee:cd:5c:a8:38:e4:31:4b:cd:17:bf:d8:91:4b:60:1c:31: 87:5e:19:07:9c:95:ce:71:96:2a:88:43:29:11:e3:fb:e2:d7: 41:af:94:c4:15:3e:b2:b5:7b:b5:2a:75:17:22:a7:f9:20:be: cd:06:16:24:02:f0:d6:fd:0f:75:c6:d2:0e:5c:79:fe:6a:cc: 17:53:42:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZCKFLUTPXe6n+LQ6nEbumBIhB7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0NVoX DTI3MDUwMTA4MzY0NVowMzExMC8GA1UEAxMoNDRFMURBRTc2OTdCNTU2ODQ5RkNB NEU0MUNCNTZFNzBFQUJEMkM5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYMPQXcsW+hUTgQ938g6gpNwGnNnZAY3x5wA2OoBOb7ES59IlHds+GUGtv2 5gyjvPIk87zN+00hWfmuomDYJnek6gDkzYP02yGecQKUd0u/HOumxFzWNNJcxm0k si/JpnNGseAPleY3+VsY46B6Zlubt+k56oFQfQavVWLWIQ8EzytntszGvNnybyE0 Y9R6n644B1YJptMPC383Tzb/MtOjqTLXIq4nDnjkj9sX8c1m2vyMNi7mpKCB/xyT BoBHOJ3eXvJF2GMw9G6i9iO3uF2Sf831iiOakIoCNX2eGdYhQWQU1NvENGzl2NdK L1ua0kijFzKMZAfEylJmrc6mIVkCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBRE4drn aXtVaEn8pOQctW5w6r0skDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzkxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ6ksMA0GCSqGSIb3DQEBCwUAA4IBAQCjjXBHTjXzF3brH0/5SeR1sriP /tuwM+dtK32zp5JX8tLCo48M3JvGfvBpgIO1aKTUNHYzDDyRLV7hUlg/epJxpR9d KnIXgrvLQW0QF6g0kFW7ZiCu90ggqpbZ86BXUausLigkxJh0d1bprYRgC/Pz5O6B NGJ4Tw5R0A/HZLCFbjx/DhEuONcbZ3FBgrHRjQBRdn+9V41vppCMpMB2QSgBKpnP c4JcGoZQYYoKb3lF2RH5Enrl7s1cqDjkMUvNF7/YkUtgHDGHXhkHnJXOcZYqiEMp EeP74tdBr5TEFT6ytXu1KnUXIqf5IL7NBhYkAvDW/Q91xtIOXHn+aswXU0KK -----END CERTIFICATE-----Generated at Sun May 3 00:41:41 2026 by rpki-client