$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142393.roa File: AS142393.roa (raw, json) Hash identifier: LkzRFg3wQeRAUk0mexUEZXT54GKCwvoj7FraRyOdObo= Subject key identifier: E9:97:49:DE:9D:5B:81:D3:A1:D8:31:1B:36:0D:89:93:6F:09:82:02 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 480E6D9A7C734A410278B90A5D5EAF4704D6D40C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142393.roa Signing time: Tue 14 Oct 2025 05:00:00 +0000 ROA not before: Tue 14 Oct 2025 04:55:00 +0000 ROA not after: Tue 13 Oct 2026 05:00:00 +0000 asID: 142393 IP address blocks: 103.146.38.0/24 maxlen: 24 103.172.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:6d:9a:7c:73:4a:41:02:78:b9:0a:5d:5e:af:47:04:d6:d4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 14 04:55:00 2025 GMT Not After : Oct 13 05:00:00 2026 GMT Subject: CN=E99749DE9D5B81D3A1D8311B360D89936F098202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:25:f1:62:46:b7:4c:e7:dd:b8:fd:ee:86: fc:10:a7:d4:72:57:27:c1:0f:ac:84:66:ff:73:97: c8:60:c4:e3:a6:63:a7:4a:b8:98:74:b9:e4:8a:c2: 93:c1:13:2b:9a:dc:63:49:d1:c7:b5:7e:c3:21:1c: 60:f6:6e:6b:91:b2:60:3b:4f:16:6e:65:76:25:f5: 07:26:2b:42:8f:49:2c:c1:c4:ef:5b:48:4f:07:66: 86:7b:28:b8:39:ab:f8:7d:e5:92:0b:ac:b1:5a:d6: d5:d3:c5:0c:70:6d:15:7d:6c:5a:77:79:e7:5b:8c: 08:0c:b5:18:ba:8b:06:6b:8c:7a:04:be:db:7a:a8: 80:51:f7:99:0f:09:59:aa:77:e8:d6:3f:7b:44:35: 3f:84:0d:13:3c:aa:5f:40:a3:fb:95:ee:b5:e5:5e: f4:01:e4:30:58:e5:30:86:f6:b6:0f:d9:66:51:3b: fa:08:8d:54:c2:2a:b0:3c:e9:1e:45:e9:35:74:b5: 4d:64:e1:50:54:70:22:0a:70:91:3b:b5:36:0d:72: ec:47:2a:31:65:00:f9:92:f2:18:b4:50:21:39:b7: 5d:ac:3a:07:23:fa:d3:0b:ae:3a:50:18:eb:5c:d1: 3a:ca:75:60:d2:63:62:c4:01:bf:59:20:0b:e1:7e: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:97:49:DE:9D:5B:81:D3:A1:D8:31:1B:36:0D:89:93:6F:09:82:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.38.0/24 103.172.42.0/24 Signature Algorithm: sha256WithRSAEncryption 22:91:91:eb:ba:57:b1:df:9d:6c:d3:bc:66:76:3f:e4:51:70: 78:d5:da:a2:43:35:6a:4f:ea:dd:ec:8b:1e:ad:d5:0e:66:71: c1:c5:07:33:25:6a:a9:ec:c2:86:36:f4:b6:8d:a0:39:54:9a: 91:c0:15:44:ae:4c:72:b0:ec:39:72:d0:15:cd:cb:2f:18:09: 66:c0:be:38:88:ee:00:a5:46:12:23:d3:bb:19:a8:14:47:cd: ec:53:c0:d5:f6:75:e5:15:f8:d6:22:35:2e:5a:48:a4:35:4f: e3:a8:ff:61:dd:3b:8d:62:e1:bf:29:b6:21:b6:b7:c9:c4:7a: d2:0d:4b:f4:a6:3e:ee:e9:57:77:79:53:64:bf:d8:c9:e2:c3: cb:99:dd:c9:d6:ac:be:37:80:27:be:0f:48:c3:62:ea:91:8f: c9:48:5e:1a:65:dc:d9:95:90:9a:c4:e7:c5:94:8a:a6:a2:96: 38:77:5a:28:46:8d:7d:b4:f6:a8:a8:bf:e0:96:af:0a:77:66: 46:bc:63:1d:c8:34:80:b8:b9:a6:ea:7f:9e:bc:24:8e:ce:c2: c7:17:70:7d:a0:ab:11:0e:bf:a5:05:92:9c:54:db:4d:03:88: b6:e8:38:44:e0:88:9e:cd:bf:f6:aa:79:6c:3f:35:6e:55:5c: c9:a8:56:08 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUSA5tmnxzSkECeLkKXV6vRwTW1AwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNDA0NTUwMFoX DTI2MTAxMzA1MDAwMFowMzExMC8GA1UEAxMoRTk5NzQ5REU5RDVCODFEM0ExRDgz MTFCMzYwRDg5OTM2RjA5ODIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIpJfFiRrdM5924/e6G/BCn1HJXJ8EPrIRm/3OXyGDE46Zjp0q4mHS55IrC k8ETK5rcY0nRx7V+wyEcYPZua5GyYDtPFm5ldiX1ByYrQo9JLMHE71tITwdmhnso uDmr+H3lkgussVrW1dPFDHBtFX1sWnd551uMCAy1GLqLBmuMegS+23qogFH3mQ8J Wap36NY/e0Q1P4QNEzyqX0Cj+5XuteVe9AHkMFjlMIb2tg/ZZlE7+giNVMIqsDzp HkXpNXS1TWThUFRwIgpwkTu1Ng1y7EcqMWUA+ZLyGLRQITm3Xaw6ByP60wuuOlAY 61zROsp1YNJjYsQBv1kgC+F+0zMCAwEAAaOCAdYwggHSMB0GA1UdDgQWBBTpl0ne nVuB06HYMRs2DYmTbwmCAjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM5My5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAGeSJgMEAGesKjANBgkqhkiG9w0BAQsFAAOCAQEAIpGR67pXsd+d bNO8ZnY/5FFweNXaokM1ak/q3eyLHq3VDmZxwcUHMyVqqezChjb0to2gOVSakcAV RK5McrDsOXLQFc3LLxgJZsC+OIjuAKVGEiPTuxmoFEfN7FPA1fZ15RX41iI1LlpI pDVP46j/Yd07jWLhvym2Iba3ycR60g1L9KY+7ulXd3lTZL/YyeLDy5ndydasvjeA J74PSMNi6pGPyUheGmXc2ZWQmsTnxZSKpqKWOHdaKEaNfbT2qKi/4JavCndmRrxj Hcg0gLi5pup/nrwkjs7CxxdwfaCrEQ6/pQWSnFTbTQOItug4ROCIns2/9qp5bD81 blVcyahWCA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:59:40 2025 by rpki-client