$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142381.roa File: AS142381.roa (raw, json) Hash identifier: HK79OXzc7FB8uTY+iFhAxS72H6/Zk89fua7J0tiOR6E= Subject key identifier: AC:92:40:DC:F4:9E:F0:8F:E4:97:D5:7C:4A:A8:69:50:C2:A8:0D:6F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31353C5BDAC5106C1079105AE5C36988ACB16055 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142381.roa Signing time: Mon 29 Sep 2025 07:00:00 +0000 ROA not before: Mon 29 Sep 2025 06:55:00 +0000 ROA not after: Mon 28 Sep 2026 07:00:00 +0000 asID: 142381 IP address blocks: 103.189.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:35:3c:5b:da:c5:10:6c:10:79:10:5a:e5:c3:69:88:ac:b1:60:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 29 06:55:00 2025 GMT Not After : Sep 28 07:00:00 2026 GMT Subject: CN=AC9240DCF49EF08FE497D57C4AA86950C2A80D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:70:cc:6d:50:ee:c0:97:b3:54:09:bd:8d: 46:22:a1:ef:b5:74:e7:5f:12:af:01:47:75:57:1a: 7e:67:46:8d:cb:90:b0:84:6e:02:34:80:58:53:b8: 38:8b:de:2f:e2:61:10:e1:88:3a:62:11:47:41:54: 8d:9a:88:a8:d2:5d:4f:e8:6f:f8:e4:ef:fa:19:70: 6d:5e:14:6a:b5:48:b0:07:37:61:04:6b:08:99:46: 70:51:b0:3c:f8:53:0d:31:8f:09:6a:3a:55:66:5a: 2e:7b:60:00:30:94:07:fa:ae:fe:33:51:7b:83:23: 4f:9f:d3:2d:f9:26:dd:9b:cc:18:27:31:97:34:20: 02:bc:00:2a:2c:f7:9b:59:d8:cf:26:c3:f6:12:61: 2e:3b:dc:20:79:55:9e:f1:96:9e:a3:19:50:20:f2: e9:cc:44:2c:17:c0:97:8b:b9:19:49:ef:8c:b4:33: 0f:aa:42:0f:cc:97:16:31:28:ed:57:a6:30:a1:18: 03:87:ef:26:80:07:d6:3b:cf:0e:e2:f6:33:d8:12: 05:be:cd:0c:9c:97:3d:95:60:12:8e:14:9e:1c:91: 0a:4f:4e:3a:2a:ed:e2:36:4e:4d:2c:4c:bb:07:02: 51:1c:93:8b:99:fe:9a:6a:e2:18:14:a5:bd:08:8a: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:40:DC:F4:9E:F0:8F:E4:97:D5:7C:4A:A8:69:50:C2:A8:0D:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142381.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.231.0/24 Signature Algorithm: sha256WithRSAEncryption 43:f6:6b:89:56:39:d1:58:40:de:6f:13:3a:07:27:88:2a:08: cc:ad:27:b7:ea:91:84:c1:c5:24:09:36:34:48:8c:69:e5:ae: 19:f3:0c:dd:15:01:c5:dc:21:23:dd:9d:39:34:32:b5:ce:53: 98:aa:a5:02:10:cc:6e:f0:e8:7c:92:05:ca:05:b5:9c:0b:6e: d2:9d:4e:73:ff:f1:e7:81:56:39:37:e0:b8:5e:f6:98:cd:67: 36:af:71:62:9e:76:bb:19:db:1c:2f:1b:5c:ec:f2:3d:c3:9f: b9:9d:bc:2b:72:08:2c:cf:d2:71:85:12:4b:56:30:98:19:f9: 04:06:01:77:63:32:0e:59:6d:48:6f:01:e7:db:ad:24:5b:e0: 7f:a3:d0:d2:82:0e:1e:4e:6b:52:4a:87:ef:d7:56:4b:ab:c8: 8c:a9:c5:42:30:32:be:ba:61:9e:2a:93:98:5c:be:c7:ce:39: e0:b7:89:57:aa:92:bf:e7:b7:fa:69:05:4a:f9:b1:b0:ec:8e: 1a:fe:e4:72:ec:5e:3c:ad:31:46:ae:22:b9:bc:64:f9:8d:d1: 09:fd:f2:a4:b8:49:3c:ee:10:a6:f7:b8:12:78:71:25:82:40: 23:33:1f:27:cd:82:30:90:62:b4:74:11:40:b8:d5:2a:99:0e: 68:93:d0:09 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUMTU8W9rFEGwQeRBa5cNpiKyxYFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyOTA2NTUwMFoX DTI2MDkyODA3MDAwMFowMzExMC8GA1UEAxMoQUM5MjQwRENGNDlFRjA4RkU0OTdE NTdDNEFBODY5NTBDMkE4MEQ2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANorcMxtUO7Al7NUCb2NRiKh77V0518SrwFHdVcafmdGjcuQsIRuAjSAWFO4 OIveL+JhEOGIOmIRR0FUjZqIqNJdT+hv+OTv+hlwbV4UarVIsAc3YQRrCJlGcFGw PPhTDTGPCWo6VWZaLntgADCUB/qu/jNRe4MjT5/TLfkm3ZvMGCcxlzQgArwAKiz3 m1nYzybD9hJhLjvcIHlVnvGWnqMZUCDy6cxELBfAl4u5GUnvjLQzD6pCD8yXFjEo 7VemMKEYA4fvJoAH1jvPDuL2M9gSBb7NDJyXPZVgEo4UnhyRCk9OOirt4jZOTSxM uwcCURyTi5n+mmriGBSlvQiKNOsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSskkDc 9J7wj+SX1XxKqGlQwqgNbzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM4MS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGe95zANBgkqhkiG9w0BAQsFAAOCAQEAQ/ZriVY50VhA3m8TOgcn iCoIzK0nt+qRhMHFJAk2NEiMaeWuGfMM3RUBxdwhI92dOTQytc5TmKqlAhDMbvDo fJIFygW1nAtu0p1Oc//x54FWOTfguF72mM1nNq9xYp52uxnbHC8bXOzyPcOfuZ28 K3IILM/ScYUSS1YwmBn5BAYBd2MyDlltSG8B59utJFvgf6PQ0oIOHk5rUkqH79dW S6vIjKnFQjAyvrphniqTmFy+x8454LeJV6qSv+e3+mkFSvmxsOyOGv7kcuxePK0x Rq4iubxk+Y3RCf3ypLhJPO4Qpve4EnhxJYJAIzMfJ82CMJBitHQRQLjVKpkOaJPQ CQ== -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:54 2025 by rpki-client