$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa File: AS142264.roa (raw, json) Hash identifier: mqvNgnWs7QbGCiPYdQoleMEkX0ri8GfF9m0yK/0ijzo= Subject key identifier: 1A:38:65:E6:A9:84:89:47:2C:33:24:40:1E:80:1B:AC:F4:BF:9D:E3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 4BB0C7114215A48B3A33DF0EF216BD3A432D6945 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa Signing time: Wed 30 Sep 2026 03:17:15 +0000 ROA not before: Wed 30 Sep 2026 03:12:15 +0000 ROA not after: Wed 29 Sep 2027 03:17:15 +0000 asID: 142264 IP address blocks: 163.52.250.0/24 maxlen: 24 2001:df6:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 04:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b0:c7:11:42:15:a4:8b:3a:33:df:0e:f2:16:bd:3a:43:2d:69:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Sep 30 03:12:15 2026 GMT Not After : Sep 29 03:17:15 2027 GMT Subject: CN=1A3865E6A98489472C3324401E801BACF4BF9DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:9e:6b:02:80:38:2a:b7:06:76:a9:bc:01: 47:58:b0:61:5c:a9:d4:e2:6d:04:60:d5:49:3e:b7: e8:76:36:9a:fa:24:9a:1f:3f:27:74:f3:ef:a6:46: 4d:48:27:c9:86:a6:a1:75:79:73:f2:9e:23:da:56: 2f:9d:e3:fe:5b:a0:72:21:a3:82:68:aa:a9:77:af: 51:c4:08:bb:0c:29:48:27:f6:b2:e8:0d:37:b9:df: 51:1f:26:ab:1f:e6:ee:43:b7:68:0d:2d:64:63:78: f1:06:e2:98:8d:fa:43:a7:3d:40:b4:e5:cc:93:ac: 25:1f:bd:11:21:eb:17:ed:7f:55:f5:00:53:19:e6: e1:90:44:f7:9a:c7:fe:5f:96:4e:55:b5:fe:8a:ba: f6:c4:cd:e0:3f:53:0c:39:0e:54:23:37:bc:12:c4: 72:d1:a5:f8:53:44:37:34:0d:44:e9:f5:30:ad:e8: 55:38:cd:7d:a8:c8:fb:6f:e7:55:10:e7:87:23:3a: f9:7c:52:84:68:16:56:f0:00:6b:a3:9a:f0:bc:73: 82:77:96:75:c4:2d:3e:da:2a:d5:35:86:47:16:77: 14:78:a9:60:fa:12:d3:04:53:68:51:03:f8:ff:ac: e0:12:e2:26:97:c1:75:5e:20:8a:eb:60:4a:9e:26: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:38:65:E6:A9:84:89:47:2C:33:24:40:1E:80:1B:AC:F4:BF:9D:E3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.250.0/24 IPv6: 2001:df6:ac40::/48 Signature Algorithm: sha256WithRSAEncryption 1a:74:04:09:6b:cd:9a:10:c5:42:71:bc:ba:a2:01:27:13:f5: f4:d5:21:56:5c:be:22:da:d0:e3:1a:52:e7:14:30:8c:78:63: 7c:a6:b8:79:a1:72:c8:06:21:ce:fb:dd:5d:c9:41:57:63:52: 24:4e:df:33:06:d9:78:82:4f:3b:cc:62:e5:98:c5:a5:b7:1f: 0a:a6:b4:66:fa:0a:bf:8a:fa:f3:b8:8d:5d:94:59:3a:3f:54: 8e:09:7f:bd:a9:db:78:99:f7:fa:ce:6f:2f:16:ac:5a:85:88: 21:ba:b2:01:fe:27:a9:3b:25:ad:9c:64:0f:f9:46:d2:e6:0e: 23:a9:ac:c4:58:ae:8c:4b:6d:3c:8f:0a:ce:7f:ac:5e:ec:87: 4d:7b:07:ea:9b:e9:ce:d2:fa:8a:88:13:6c:95:6f:64:19:57: 4a:5d:cd:22:fa:7e:54:a8:38:7d:c0:0f:b9:61:e4:f8:2c:5e: 0c:57:5a:d9:a3:2e:a7:b0:cc:a4:1f:0b:1a:06:80:59:37:e0: 59:df:82:de:0c:77:37:bf:7d:65:f0:fd:e7:2d:36:f2:cf:df: 7e:77:8d:a3:73:9a:e5:56:b9:8d:50:f2:39:4e:99:4d:ae:cf: 90:30:77:b4:d3:ac:57:33:9c:9f:22:46:16:2f:5b:03:fd:7e: ad:b8:d8:50 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUS7DHEUIVpIs6M98O8ha9OkMtaUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDkzMDAzMTIxNVoX DTI3MDkyOTAzMTcxNVowMzExMC8GA1UEAxMoMUEzODY1RTZBOTg0ODk0NzJDMzMy NDQwMUU4MDFCQUNGNEJGOURFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPLnmsCgDgqtwZ2qbwBR1iwYVyp1OJtBGDVST636HY2mvokmh8/J3Tz76ZG TUgnyYamoXV5c/KeI9pWL53j/lugciGjgmiqqXevUcQIuwwpSCf2sugNN7nfUR8m qx/m7kO3aA0tZGN48QbimI36Q6c9QLTlzJOsJR+9ESHrF+1/VfUAUxnm4ZBE95rH /l+WTlW1/oq69sTN4D9TDDkOVCM3vBLEctGl+FNENzQNROn1MK3oVTjNfajI+2/n VRDnhyM6+XxShGgWVvAAa6Oa8LxzgneWdcQtPtoq1TWGRxZ3FHipYPoS0wRTaFED +P+s4BLiJpfBdV4giutgSp4msRsCAwEAAaOCAd0wggHZMB0GA1UdDgQWBBQaOGXm qYSJRywzJEAegBus9L+d4zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIA ATAGAwQAozT6MA8EAgACMAkDBwAgAQ32rEAwDQYJKoZIhvcNAQELBQADggEBABp0 BAlrzZoQxUJxvLqiAScT9fTVIVZcviLa0OMaUucUMIx4Y3ymuHmhcsgGIc773V3J QVdjUiRO3zMG2XiCTzvMYuWYxaW3HwqmtGb6Cr+K+vO4jV2UWTo/VI4Jf72p23iZ 9/rOby8WrFqFiCG6sgH+J6k7Ja2cZA/5RtLmDiOprMRYroxLbTyPCs5/rF7sh017 B+qb6c7S+oqIE2yVb2QZV0pdzSL6flSoOH3AD7lh5PgsXgxXWtmjLqewzKQfCxoG gFk34Fnfgt4Mdze/fWXw/ectNvLP3353jaNzmuVWuY1Q8jlOmU2uz5Awd7TTrFcz nJ8iRhYvWwP9fq242FA= -----END CERTIFICATE-----Generated at Thu Nov 5 07:08:10 2026 by rpki-client