$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142216.roa File: AS142216.roa (raw, json) Hash identifier: DVnos6rkGmGynHfsOHOpaQ4S5LYpuclQ/ri/Sj8pR6U= Subject key identifier: FD:4D:E2:1C:EB:99:FF:BB:22:2B:DF:20:B4:62:5E:07:BD:35:62:39 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 558CD7518E1054667DC9416E585A91666A1C8DC3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142216.roa Signing time: Mon 09 Mar 2026 16:56:18 +0000 ROA not before: Mon 09 Mar 2026 16:51:18 +0000 ROA not after: Mon 08 Mar 2027 16:56:18 +0000 asID: 142216 IP address blocks: 2001:df6:73c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8c:d7:51:8e:10:54:66:7d:c9:41:6e:58:5a:91:66:6a:1c:8d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 9 16:51:18 2026 GMT Not After : Mar 8 16:56:18 2027 GMT Subject: CN=FD4DE21CEB99FFBB222BDF20B4625E07BD356239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:0c:70:02:15:7d:9e:2c:56:01:a9:22:6c: f3:3c:18:89:09:53:ea:9a:ea:7f:52:10:b1:0e:d1: d1:64:7b:a1:d4:6f:5f:96:07:c9:cc:e1:be:81:b5: b1:98:0f:92:d5:95:7b:86:69:eb:36:4e:38:06:6e: 07:8e:a7:38:7d:80:88:86:2b:89:fc:45:2d:88:33: e2:43:f9:6c:53:ba:59:e4:c1:1d:14:ba:17:ad:b4: 8f:4b:01:c4:39:96:89:e0:bd:36:18:10:ed:e4:70: f5:6f:71:68:c3:da:8e:59:a0:20:06:05:1d:86:0b: a3:12:0c:a6:30:d1:5e:b3:f8:cc:6c:aa:36:ec:d0: e9:92:91:8d:ca:82:1d:d5:2d:c1:b6:d9:74:58:7f: 6e:2a:4e:df:ba:46:ce:54:8e:a3:12:28:7f:07:5a: 1f:6d:cc:77:4b:76:0e:0e:53:e8:4f:43:03:fa:74: 84:28:81:c9:ab:b8:2a:cc:a5:2d:a4:0c:f5:83:a7: 9d:68:bf:40:8f:b4:03:00:8f:6e:9c:de:77:3a:11: 05:1d:8a:87:fa:6d:8a:0d:34:73:3c:4a:27:86:e7: e2:82:da:19:49:00:a7:25:c5:93:36:ff:4d:6c:d9: f6:ec:cc:78:ba:80:4c:4e:14:03:b1:5a:b8:78:09: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:E2:1C:EB:99:FF:BB:22:2B:DF:20:B4:62:5E:07:BD:35:62:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142216.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:73c0::/48 Signature Algorithm: sha256WithRSAEncryption 43:24:69:a3:cd:86:65:93:c5:55:42:5a:d3:6b:de:10:ce:58: 87:a0:2d:db:ea:12:59:b9:59:b5:c4:6b:3e:e5:3b:b2:a8:f2: 18:0b:ff:33:1c:e9:8a:81:00:5d:4f:c6:96:58:e2:e6:8a:b1: 3c:6e:90:a8:03:15:0d:3f:32:c7:95:d9:84:ad:87:62:4f:d6: 5b:0b:f7:a2:3f:fa:27:f7:06:f6:78:c3:e2:23:f1:1e:b9:9f: ef:d0:fb:54:28:6f:69:73:01:94:52:da:3c:8d:7c:8b:35:1f: 45:35:1c:23:12:64:d8:f4:c7:42:b3:83:0a:9c:46:78:e6:13: 30:04:e9:f1:87:7a:56:ec:08:73:16:52:c3:5a:d8:88:f3:1e: 2b:3e:7a:a9:bb:65:77:16:32:15:8e:be:d8:18:63:ed:d4:7b: 69:cf:74:2d:39:73:a3:ad:96:9f:92:bc:40:0f:43:ab:4e:70: 0b:d7:46:b3:ea:f6:73:f1:ca:9f:36:64:38:8c:f8:31:b7:20: b6:2f:c2:4a:7e:09:c6:ba:5a:6f:d8:6e:5b:93:7e:1c:fb:4e: ac:52:0f:bd:01:4a:26:51:c9:e4:74:bf:16:e1:c0:b9:66:a4: b2:c7:62:b2:75:f0:bb:9d:a2:b2:ea:63:85:a2:07:d8:ec:dc: 7f:eb:d7:f7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUVYzXUY4QVGZ9yUFuWFqRZmocjcMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwOTE2NTExOFoX DTI3MDMwODE2NTYxOFowMzExMC8GA1UEAxMoRkQ0REUyMUNFQjk5RkZCQjIyMkJE RjIwQjQ2MjVFMDdCRDM1NjIzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/qDHACFX2eLFYBqSJs8zwYiQlT6prqf1IQsQ7R0WR7odRvX5YHyczhvoG1 sZgPktWVe4Zp6zZOOAZuB46nOH2AiIYrifxFLYgz4kP5bFO6WeTBHRS6F620j0sB xDmWieC9NhgQ7eRw9W9xaMPajlmgIAYFHYYLoxIMpjDRXrP4zGyqNuzQ6ZKRjcqC HdUtwbbZdFh/bipO37pGzlSOoxIofwdaH23Md0t2Dg5T6E9DA/p0hCiByau4Ksyl LaQM9YOnnWi/QI+0AwCPbpzedzoRBR2Kh/ptig00czxKJ4bn4oLaGUkApyXFkzb/ TWzZ9uzMeLqATE4UA7FauHgJAxkCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBT9TeIc 65n/uyIr3yC0Yl4HvTViOTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjIxNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfZzwDANBgkqhkiG9w0BAQsFAAOCAQEAQyRpo82GZZPFVUJa 02veEM5Yh6At2+oSWblZtcRrPuU7sqjyGAv/MxzpioEAXU/Gllji5oqxPG6QqAMV DT8yx5XZhK2HYk/WWwv3oj/6J/cG9njD4iPxHrmf79D7VChvaXMBlFLaPI18izUf RTUcIxJk2PTHQrODCpxGeOYTMATp8Yd6VuwIcxZSw1rYiPMeKz56qbtldxYyFY6+ 2Bhj7dR7ac90LTlzo62Wn5K8QA9Dq05wC9dGs+r2c/HKnzZkOIz4Mbcgti/CSn4J xrpab9huW5N+HPtOrFIPvQFKJlHJ5HS/FuHAuWakssdisnXwu52isupjhaIH2Ozc f+vX9w== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:51 2026 by rpki-client