$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142238.roa File: AS142238.roa (raw, json) Hash identifier: qJwB68921khtvMJQibwa5lbyOxlIJAKieFleauqzfRY= Subject key identifier: C4:34:BE:28:23:0D:F0:EE:AB:83:19:02:21:50:8D:BF:7C:34:37:10 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6A7F0EF581EA080FB4CF7F33837832211589B6D9 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142238.roa Signing time: Tue 03 Mar 2026 04:18:35 +0000 ROA not before: Tue 03 Mar 2026 04:13:35 +0000 ROA not after: Tue 02 Mar 2027 04:18:35 +0000 asID: 142238 IP address blocks: 192.203.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7f:0e:f5:81:ea:08:0f:b4:cf:7f:33:83:78:32:21:15:89:b6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 3 04:13:35 2026 GMT Not After : Mar 2 04:18:35 2027 GMT Subject: CN=C434BE28230DF0EEAB83190221508DBF7C343710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:9f:ac:5b:91:e6:2e:ba:a1:4e:6a:45:6f: ed:4d:59:cf:d9:15:a8:5f:df:1a:da:0e:67:90:93: 6d:08:d1:e8:18:46:d7:c2:1c:7c:91:65:cc:d7:e8: c4:8e:90:6d:a5:0c:df:03:9f:13:f2:df:9d:81:37: 92:d0:10:19:01:4b:8c:76:32:e5:3c:e6:13:32:80: e6:a3:1a:76:33:17:c2:44:df:d1:8f:c7:27:cd:f2: cc:f5:3c:8e:3b:ce:3e:a9:a6:ec:d6:81:b5:ef:50: 02:d4:d5:b8:6f:64:e4:2b:4e:ea:b2:65:c3:ec:ff: 69:83:e3:47:1c:91:1d:ce:52:b3:01:10:62:2e:23: 9b:fd:e4:53:9f:d8:f2:b2:c3:de:d0:5b:dd:2a:49: 0c:ac:86:2e:72:52:ea:43:43:26:04:72:23:89:05: 24:3b:db:28:5d:94:d6:6c:81:8d:d4:8d:86:6d:97: ce:76:30:38:78:c7:88:5e:92:b5:56:ae:4c:ed:49: de:dd:8b:71:d5:cc:58:5a:01:ed:e5:32:de:eb:dd: f4:2b:fb:b9:62:8e:db:1f:43:1f:c4:06:ff:04:3a: 38:86:18:5d:0d:cf:53:b1:7a:d6:9f:f0:7d:4b:38: e3:eb:16:fc:ef:32:f5:d1:dc:e2:04:10:62:99:40: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:34:BE:28:23:0D:F0:EE:AB:83:19:02:21:50:8D:BF:7C:34:37:10 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.203.193.0/24 Signature Algorithm: sha256WithRSAEncryption 73:81:7f:3f:74:4f:e9:63:87:ee:d7:3f:bf:0f:dd:66:5c:e2: c8:92:e3:37:3e:e2:30:6a:a5:7c:e6:e5:f7:d2:c6:ad:1d:d0: 19:b6:6c:13:78:cf:b9:81:45:9b:ef:29:9d:ba:fe:75:03:3a: a0:7b:5a:ad:78:d4:7b:bf:31:7d:b7:c5:a9:d1:9f:1e:3c:55: 15:15:47:f1:ae:31:26:2b:0a:43:b5:3d:4d:84:14:1e:91:f1: 00:76:31:df:b9:52:16:fd:c9:de:fa:01:aa:47:3d:e2:57:bf: 4d:ee:15:b2:c2:f9:20:88:f2:3e:b2:d8:1b:b6:b2:98:6d:d3: 47:13:48:fc:22:cb:29:db:be:fa:6f:77:d6:c4:ea:db:4a:33: ee:67:32:9c:0a:54:6a:fa:8e:04:30:bb:0b:8d:61:2f:af:38: 04:72:47:45:28:b5:4a:80:83:ee:41:5a:94:56:10:d6:ca:0f: 36:bf:0f:ee:93:3b:ef:7d:76:b1:46:71:fa:9f:59:56:b2:72: 8d:cf:33:85:0c:ee:f0:e8:bc:1f:eb:3e:43:64:83:1a:83:2e: ec:2e:fc:c6:c0:78:a0:91:bc:a1:8c:98:2d:e9:89:c2:76:6d: 11:48:1d:8c:5b:62:e1:7a:62:11:2f:b0:6a:f4:e2:94:7b:33: 61:7f:98:96 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUan8O9YHqCA+0z38zg3gyIRWJttkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMwMzA0MTMzNVoX DTI3MDMwMjA0MTgzNVowMzExMC8GA1UEAxMoQzQzNEJFMjgyMzBERjBFRUFCODMx OTAyMjE1MDhEQkY3QzM0MzcxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNAn6xbkeYuuqFOakVv7U1Zz9kVqF/fGtoOZ5CTbQjR6BhG18IcfJFlzNfo xI6QbaUM3wOfE/LfnYE3ktAQGQFLjHYy5TzmEzKA5qMadjMXwkTf0Y/HJ83yzPU8 jjvOPqmm7NaBte9QAtTVuG9k5CtO6rJlw+z/aYPjRxyRHc5SswEQYi4jm/3kU5/Y 8rLD3tBb3SpJDKyGLnJS6kNDJgRyI4kFJDvbKF2U1myBjdSNhm2XznYwOHjHiF6S tVauTO1J3t2LcdXMWFoB7eUy3uvd9Cv7uWKO2x9DH8QG/wQ6OIYYXQ3PU7F61p/w fUs44+sW/O8y9dHc4gQQYplAyZsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTENL4o Iw3w7quDGQIhUI2/fDQ3EDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjIzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMDLwTANBgkqhkiG9w0BAQsFAAOCAQEAc4F/P3RP6WOH7tc/vw/d ZlziyJLjNz7iMGqlfObl99LGrR3QGbZsE3jPuYFFm+8pnbr+dQM6oHtarXjUe78x fbfFqdGfHjxVFRVH8a4xJisKQ7U9TYQUHpHxAHYx37lSFv3J3voBqkc94le/Te4V ssL5IIjyPrLYG7aymG3TRxNI/CLLKdu++m931sTq20oz7mcynApUavqOBDC7C41h L684BHJHRSi1SoCD7kFalFYQ1soPNr8P7pM77312sUZx+p9ZVrJyjc8zhQzu8Oi8 H+s+Q2SDGoMu7C78xsB4oJG8oYyYLemJwnZtEUgdjFti4XpiES+wavTilHszYX+Y lg== -----END CERTIFICATE-----Generated at Sat Mar 7 16:06:48 2026 by rpki-client