
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa
File: AS142384.roa (raw, json)
Hash identifier: /jHPInvXWOwOpeaOHfcF2U6HvV8iuAYA03E5MUzpKCY=
Subject key identifier: FE:DB:04:18:F4:59:FA:CA:FF:FE:7D:70:0A:0C:18:85:19:CF:1E:0F
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 44554D5AB866F4081DFB1DC230CD89D95E5E7FD5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa
Signing time: Thu 26 Mar 2026 00:00:00 +0000
ROA not before: Wed 25 Mar 2026 23:55:00 +0000
ROA not after: Thu 25 Mar 2027 00:00:00 +0000
asID: 142384
IP address blocks: 103.184.30.0/24 maxlen: 24
103.225.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 06:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:55:4d:5a:b8:66:f4:08:1d:fb:1d:c2:30:cd:89:d9:5e:5e:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 25 23:55:00 2026 GMT
Not After : Mar 25 00:00:00 2027 GMT
Subject: CN=FEDB0418F459FACAFFFE7D700A0C188519CF1E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:da:b1:11:52:53:4e:f5:72:d8:c4:f8:d1:
72:18:f3:c0:29:b8:7e:fa:9a:b7:9e:de:89:66:1c:
6b:a0:1b:4e:9c:fe:a9:ac:cf:00:a6:f1:48:1a:77:
dd:c9:9c:24:6b:f5:ea:f6:00:50:2f:eb:87:4c:c3:
85:c0:9c:f2:26:f8:06:d3:0b:d7:0a:7c:af:b9:8c:
ab:97:eb:20:e6:68:d3:f7:49:9a:63:0c:d3:95:66:
c3:65:f0:7e:e2:53:7d:c1:ce:1b:9b:b0:68:9f:a8:
64:44:da:6e:de:1d:0e:74:41:0f:bd:e7:6e:48:ef:
b3:73:f6:99:7b:0c:b2:46:23:dc:2b:a0:82:84:d5:
5e:fb:b6:46:f6:5f:a7:c6:5d:56:ff:cf:21:d3:9f:
02:e8:d2:df:a5:2f:20:ba:3a:e2:c1:03:17:a4:97:
31:e1:67:9c:1f:6d:a5:ca:0e:a7:ab:44:ae:45:f6:
7c:f6:40:50:fd:c9:2f:0c:79:e2:09:42:f2:4b:8c:
cd:ba:c5:57:c2:18:70:65:12:94:b7:96:e6:51:90:
58:b5:9f:fa:ae:a2:17:5a:fc:dc:67:4a:a5:5c:d9:
95:e6:15:8e:fb:00:27:50:69:5e:6a:c6:87:11:4a:
e5:3b:d1:47:f7:a4:8b:bd:cf:2f:61:13:c2:0a:16:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:04:18:F4:59:FA:CA:FF:FE:7D:70:0A:0C:18:85:19:CF:1E:0F
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.30.0/24
103.225.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:23:0c:32:6d:0c:fd:ff:4b:41:bf:a4:6b:40:d3:a7:0f:4d:
13:b2:66:33:5b:3e:35:d3:65:e7:28:12:1f:39:c3:f3:55:eb:
91:65:43:2f:5b:6e:20:bf:9c:e6:a2:ff:47:6a:1a:18:45:f6:
55:40:46:5c:1a:7f:f9:3f:a3:84:5a:da:b2:83:e4:12:06:68:
40:2c:ea:bb:3b:2b:06:cf:36:80:3e:a8:c8:4e:ee:34:c0:d6:
d5:c3:6f:ec:e5:c7:08:17:78:b2:18:92:3c:15:a6:c6:b4:4b:
00:d6:ef:f6:a7:50:01:97:4d:c9:30:12:66:d2:1d:5a:f4:c9:
77:0c:f0:b8:59:3d:4e:66:ec:6f:f8:4e:3f:37:87:51:c4:05:
32:8a:a7:e9:e5:fc:e9:5c:ce:eb:8b:c9:0e:ff:01:0e:fd:45:
16:e3:ff:a5:84:9e:29:ba:ad:73:10:73:e7:e6:56:9e:27:be:
fd:b4:9c:4d:10:39:0e:b9:cb:e4:11:a4:11:cc:d1:91:bf:39:
e3:71:ac:34:54:13:60:0d:32:96:14:e2:6e:86:8f:6e:85:aa:
21:a2:f7:79:84:f9:ea:2e:33:b9:60:4d:d4:21:82:32:d2:6f:
17:e4:12:1b:0c:2a:09:d2:7b:54:ce:77:96:b8:44:e5:9b:e4:
45:21:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:01:25 2026 by rpki-client