$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142145.roa File: AS142145.roa (raw, json) Hash identifier: hd7Y5WsihY+9T9+4Sxs9NX+4i3HXJNtLnWmtJkGPuq8= Subject key identifier: B6:7B:83:B7:34:09:46:10:3E:89:16:49:4F:68:18:0F:24:3A:BC:5F Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 340B005AFE62F3675E9A09F3189C06CBD5DAE1C5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142145.roa Signing time: Mon 13 Oct 2025 04:24:44 +0000 ROA not before: Mon 13 Oct 2025 04:19:44 +0000 ROA not after: Mon 12 Oct 2026 04:24:44 +0000 asID: 142145 IP address blocks: 49.213.42.0/23 maxlen: 24 2001:df5:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0b:00:5a:fe:62:f3:67:5e:9a:09:f3:18:9c:06:cb:d5:da:e1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 13 04:19:44 2025 GMT Not After : Oct 12 04:24:44 2026 GMT Subject: CN=B67B83B7340946103E8916494F68180F243ABC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:5b:c0:ea:6d:ee:c2:24:64:13:a3:af:57: de:63:11:f0:3c:09:a1:d9:2b:87:70:c7:7c:ff:80: e7:b7:1d:77:b4:a4:15:9e:b5:f5:9e:c3:75:9f:8f: be:13:38:dc:d9:0e:6e:a6:01:d1:62:e7:f1:87:c9: a2:22:1b:26:f1:07:4e:38:5e:6a:1c:80:ba:02:da: da:a6:52:2d:3f:ff:06:ce:dd:15:73:3f:fc:e1:9b: 95:2c:ad:73:f8:c3:a0:b9:b5:b1:26:32:77:d4:85: c0:d6:8d:4b:b0:d3:3a:18:0b:3d:25:59:ac:0a:16: 04:f8:14:6b:3e:73:95:4f:77:78:89:7f:91:b2:51: 6b:9b:a8:e9:6b:29:38:8b:4b:10:8f:5a:e4:dc:be: 46:73:bc:82:95:63:6e:0e:09:12:6e:a5:70:dc:ba: 8b:fb:42:50:46:4b:57:27:cf:12:7c:23:21:55:b4: a7:b4:d3:93:ba:5e:30:b0:88:24:1d:d8:57:0a:68: fd:9d:bf:c5:f3:95:0e:b7:93:c5:27:69:94:be:c7: 49:5f:4d:7c:72:11:8e:5e:53:e3:2b:49:8e:44:70: 7d:a5:a3:ff:79:06:dc:0c:af:37:40:dd:cc:92:fc: 75:4d:79:db:d0:ac:7d:0f:17:14:7f:66:b1:a0:7a: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:83:B7:34:09:46:10:3E:89:16:49:4F:68:18:0F:24:3A:BC:5F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142145.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.213.42.0/23 IPv6: 2001:df5:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 72:ec:a8:6f:a5:82:0e:74:ce:14:7b:5b:bc:6c:53:2f:7d:4e: f0:a4:24:c2:1d:80:72:bc:67:0e:8e:22:51:51:13:6f:ff:02: 97:67:4d:e2:a5:e1:1e:cc:f6:d1:2c:b6:d0:b0:45:ff:2c:59: 3a:a8:dd:9d:4c:95:61:b9:f6:5a:6b:fb:ba:55:a8:99:e7:b7: 9c:dd:82:66:1d:d3:ed:2a:79:45:ef:bf:3e:33:17:bf:96:45: 6a:2f:3a:4c:7e:e6:9c:67:fd:ae:43:0c:32:9a:01:ad:ee:f4: 49:a7:2c:08:b9:70:3e:53:bb:77:80:88:c5:b9:f0:b4:62:c3: 8a:cf:36:8f:20:a4:9b:ab:f6:d4:bd:40:97:ea:3a:e4:2f:87: 38:9f:2d:7e:48:3a:6d:a9:41:f9:36:3a:2a:ae:9c:b0:21:e3: fa:39:d5:e2:35:72:0e:1d:3e:87:f4:d2:96:c8:25:c2:ec:36: cd:fa:fc:26:b8:22:0c:d5:e3:23:c3:0b:84:19:16:fe:21:69: 8c:0b:cf:28:93:19:9c:0e:4c:fb:8a:78:ca:b1:9d:39:36:4f: 54:3d:5f:85:42:53:4a:95:85:bf:52:d1:a8:2d:fd:c4:5a:14: 6e:a2:d3:76:4b:23:2f:d2:2c:a1:ad:43:47:b7:26:ad:d0:2e: cb:e3:57:d1 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUNAsAWv5i82demgnzGJwGy9Xa4cUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxMzA0MTk0NFoX DTI2MTAxMjA0MjQ0NFowMzExMC8GA1UEAxMoQjY3QjgzQjczNDA5NDYxMDNFODkx NjQ5NEY2ODE4MEYyNDNBQkM1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFhW8Dqbe7CJGQTo69X3mMR8DwJodkrh3DHfP+A57cdd7SkFZ619Z7DdZ+P vhM43NkObqYB0WLn8YfJoiIbJvEHTjheahyAugLa2qZSLT//Bs7dFXM//OGblSyt c/jDoLm1sSYyd9SFwNaNS7DTOhgLPSVZrAoWBPgUaz5zlU93eIl/kbJRa5uo6Wsp OItLEI9a5Ny+RnO8gpVjbg4JEm6lcNy6i/tCUEZLVyfPEnwjIVW0p7TTk7peMLCI JB3YVwpo/Z2/xfOVDreTxSdplL7HSV9NfHIRjl5T4ytJjkRwfaWj/3kG3AyvN0Dd zJL8dU1529CsfQ8XFH9msaB6Vf0CAwEAAaOCAeEwggHdMB0GA1UdDgQWBBS2e4O3 NAlGED6JFklPaBgPJDq8XzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjE0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEATHVKjAPBAIAAjAJAwcAIAEN9fvAMA0GCSqGSIb3DQEBCwUAA4IB AQBy7KhvpYIOdM4Ue1u8bFMvfU7wpCTCHYByvGcOjiJRURNv/wKXZ03ipeEezPbR LLbQsEX/LFk6qN2dTJVhufZaa/u6VaiZ57ec3YJmHdPtKnlF778+Mxe/lkVqLzpM fuacZ/2uQwwymgGt7vRJpywIuXA+U7t3gIjFufC0YsOKzzaPIKSbq/bUvUCX6jrk L4c4ny1+SDptqUH5NjoqrpywIeP6OdXiNXIOHT6H9NKWyCXC7DbN+vwmuCIM1eMj wwuEGRb+IWmMC88okxmcDkz7injKsZ05Nk9UPV+FQlNKlYW/UtGoLf3EWhRuotN2 SyMv0iyhrUNHtyat0C7L41fR -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:28 2025 by rpki-client