$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142322.roa File: AS142322.roa (raw, json) Hash identifier: tMT9wWjcOefiKMncVrKnmLOEVZxU65UVpARrk+WHOWk= Subject key identifier: F7:9D:ED:8F:A8:D9:3E:38:83:69:A0:FC:1A:D9:E9:91:3A:DE:B4:0A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 471E169CE82394FCF646B17EC27027C8F800CB07 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142322.roa Signing time: Fri 09 Oct 2026 02:26:47 +0000 ROA not before: Fri 09 Oct 2026 02:21:47 +0000 ROA not after: Fri 08 Oct 2027 02:26:47 +0000 asID: 142322 IP address blocks: 2001:df1:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:1e:16:9c:e8:23:94:fc:f6:46:b1:7e:c2:70:27:c8:f8:00:cb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 9 02:21:47 2026 GMT Not After : Oct 8 02:26:47 2027 GMT Subject: CN=F79DED8FA8D93E388369A0FC1AD9E9913ADEB40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:48:cf:82:a7:01:6b:38:3b:4c:54:1d:97: 0e:23:b9:5b:a7:8f:40:4b:3a:46:04:59:d9:63:cf: d6:93:ca:91:c9:de:a8:c0:e2:75:38:10:a3:cf:6d: ea:a2:bd:37:d3:1a:5d:70:f3:bf:0e:e2:35:15:7f: 48:0d:6c:6c:6c:57:d9:6f:41:8b:e4:07:40:1a:87: 8b:fe:07:03:ae:ab:da:3c:98:4d:fd:88:4b:bd:1c: 70:76:cc:ff:b2:50:e5:af:a5:65:af:c2:f5:de:f8: 12:c7:b4:3b:7f:a1:a7:31:01:dd:af:65:04:f0:26: 68:d3:d5:d0:d0:d2:75:64:c3:fd:5a:9a:8e:1e:83: 54:aa:b6:dc:e6:07:19:5d:d7:a3:c2:be:25:b3:69: a5:e0:98:ab:c8:30:f0:12:e3:89:57:af:5f:5c:e5: 54:42:2b:f1:ac:b5:f2:ad:ae:f4:4d:64:16:ae:fb: 74:a0:2e:73:5b:6d:0e:07:82:b1:7f:19:9e:22:47: 3f:77:3e:b0:a8:51:b0:28:63:79:be:70:0d:2d:42: 53:7c:b8:11:a3:d7:b6:f8:7c:42:6e:d0:5f:44:84: c5:df:5d:02:7c:4d:d3:9f:c0:f4:b7:29:4f:d1:83: 02:29:b7:b5:3f:7b:25:bb:9d:ed:51:8c:48:21:a0: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9D:ED:8F:A8:D9:3E:38:83:69:A0:FC:1A:D9:E9:91:3A:DE:B4:0A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:840::/48 Signature Algorithm: sha256WithRSAEncryption 2c:75:d8:04:1d:4e:dc:b2:29:2f:d2:b9:63:b1:92:9b:8d:90: 32:6c:ee:0e:20:d0:f3:b1:56:e6:ea:4b:08:68:b4:05:ff:dd: 53:1b:54:89:b9:c0:cc:05:64:30:b1:fb:db:dd:fe:60:b1:e1: 5f:ed:49:41:d3:e3:48:08:f1:80:ec:98:ca:d9:b2:f6:51:d2: 94:7d:b8:f2:4a:b6:e9:4c:b7:ae:bf:10:76:85:8b:66:52:42: 3a:30:79:a4:0b:2c:c4:16:74:d2:f1:d2:21:f3:91:72:16:73: c4:5d:1e:84:32:b4:93:95:27:93:de:a3:af:4c:43:22:73:e3: 67:c5:78:6a:d4:87:28:27:14:02:8b:da:96:a9:47:3b:d9:10: ff:cb:aa:f2:e0:d9:c0:75:03:ff:29:02:6b:98:9e:84:95:49: 45:5d:b4:0b:30:a5:58:24:91:aa:d1:bb:94:1f:49:71:4f:94: 3f:ad:7d:ae:fa:de:8b:c5:d2:c8:42:00:25:07:4d:f9:92:11: 1b:15:ce:ad:3a:f4:d5:8c:7a:91:e9:10:6a:ae:3c:3d:6b:70: 4b:d6:32:2c:3e:4d:90:e2:1d:68:47:d7:67:7b:b1:0a:5d:c8: 16:05:71:e8:c8:9a:08:87:1b:69:5b:10:6c:09:b5:fb:a6:1b: db:ed:75:f9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURx4WnOgjlPz2RrF+wnAnyPgAywcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAwOTAyMjE0N1oX DTI3MTAwODAyMjY0N1owMzExMC8GA1UEAxMoRjc5REVEOEZBOEQ5M0UzODgzNjlB MEZDMUFEOUU5OTEzQURFQjQwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ5jSM+CpwFrODtMVB2XDiO5W6ePQEs6RgRZ2WPP1pPKkcneqMDidTgQo89t 6qK9N9MaXXDzvw7iNRV/SA1sbGxX2W9Bi+QHQBqHi/4HA66r2jyYTf2IS70ccHbM /7JQ5a+lZa/C9d74Ese0O3+hpzEB3a9lBPAmaNPV0NDSdWTD/Vqajh6DVKq23OYH GV3Xo8K+JbNppeCYq8gw8BLjiVevX1zlVEIr8ay18q2u9E1kFq77dKAuc1ttDgeC sX8ZniJHP3c+sKhRsChjeb5wDS1CU3y4EaPXtvh8Qm7QX0SExd9dAnxN05/A9Lcp T9GDAim3tT97Jbud7VGMSCGgmakCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT3ne2P qNk+OINpoPwa2emROt60CjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzIyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8QhAMA0GCSqGSIb3DQEBCwUAA4IBAQAsddgEHU7csikv0rljsZKb jZAybO4OINDzsVbm6ksIaLQF/91TG1SJucDMBWQwsfvb3f5gseFf7UlB0+NICPGA 7JjK2bL2UdKUfbjySrbpTLeuvxB2hYtmUkI6MHmkCyzEFnTS8dIh85FyFnPEXR6E MrSTlSeT3qOvTEMic+NnxXhq1IcoJxQCi9qWqUc72RD/y6ry4NnAdQP/KQJrmJ6E lUlFXbQLMKVYJJGq0buUH0lxT5Q/rX2u+t6LxdLIQgAlB035khEbFc6tOvTVjHqR 6RBqrjw9a3BL1jIsPk2Q4h1oR9dne7EKXcgWBXHoyJoIhxtpWxBsCbX7phvb7XX5 -----END CERTIFICATE-----Generated at Thu Nov 5 02:16:39 2026 by rpki-client