$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa File: AS142401.roa (raw, json) Hash identifier: ZMqsArG3gAMQ6jdRH73T+qjF4/hVxYd0tyaH8BHK6d8= Subject key identifier: A7:E1:82:ED:A3:70:32:4F:AE:8F:AD:95:A2:B7:36:5C:60:8F:04:30 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 443F7DACB4A1EB6E160107733CF237B5FD126234 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa Signing time: Fri 12 Sep 2025 09:00:00 +0000 ROA not before: Fri 12 Sep 2025 08:55:00 +0000 ROA not after: Fri 11 Sep 2026 09:00:00 +0000 asID: 142401 IP address blocks: 2001:df1:9840::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3f:7d:ac:b4:a1:eb:6e:16:01:07:73:3c:f2:37:b5:fd:12:62:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 08:55:00 2025 GMT Not After : Sep 11 09:00:00 2026 GMT Subject: CN=A7E182EDA370324FAE8FAD95A2B7365C608F0430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:2d:6e:b5:9e:e3:12:51:66:61:9d:3b:d7: 24:18:7f:84:fe:9f:98:15:eb:5a:cd:8a:c7:4a:4f: a8:e8:de:06:bf:fc:ce:1a:b0:1e:47:41:bd:ee:66: 95:b6:79:e9:39:c9:ad:85:9a:d4:e2:53:e4:fe:22: bd:18:05:44:34:13:13:d0:f0:67:3a:c2:c7:55:bd: d5:1e:63:45:d9:20:ed:9e:42:e5:6f:d0:9c:8a:58: c9:c0:ef:af:42:1c:e3:af:e8:f3:1f:31:c9:79:2c: 35:c1:b1:c1:ea:02:34:93:69:d0:62:a6:ea:1d:bb: 6e:34:05:fc:f8:f4:f1:c9:44:f2:78:35:88:b0:f1: 84:a0:c4:b9:eb:fd:d9:56:a0:2c:d3:4d:9f:6b:82: ea:0a:28:75:16:dd:de:d4:f8:6b:df:97:55:aa:bb: ce:0e:f0:45:8b:a5:59:8d:7c:19:6c:12:ae:99:6f: 29:df:55:1b:f2:10:e1:81:ef:8c:cb:00:94:dd:f7: 96:c6:55:e1:78:a5:a8:c1:f2:65:ea:23:e7:53:7f: 32:36:c0:10:16:48:c2:a5:cc:c4:34:52:73:d2:c3: c8:10:0f:ac:0f:7b:7b:e6:5b:7e:51:15:ba:81:02: e6:f1:b9:af:9e:0d:dd:a6:66:77:eb:e2:26:dc:be: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:82:ED:A3:70:32:4F:AE:8F:AD:95:A2:B7:36:5C:60:8F:04:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9840::/48 Signature Algorithm: sha256WithRSAEncryption 78:d6:e5:b4:21:82:26:47:54:03:4b:cb:0c:44:bc:62:3c:18: 78:99:a6:06:a6:b5:50:da:4e:1e:dc:df:1f:88:4c:31:2b:29: fd:71:32:2c:ab:cf:01:c5:b5:0d:20:f6:df:3d:42:3c:58:7f: 56:7a:16:0a:d7:c7:ba:60:bb:b6:21:6e:b3:bc:1d:7c:0c:cf: c4:e0:35:0b:ef:73:3f:59:87:de:85:24:1c:21:a6:13:6b:27: a2:38:2e:87:2c:f7:8c:f7:a8:ce:9a:3c:b9:80:f5:ac:e9:09: 58:e8:33:1a:59:b3:98:b0:85:ce:5c:7a:9e:c8:4b:15:7f:a5: 2f:f8:22:c4:92:27:2e:b2:7d:7a:2b:e6:60:f7:20:c6:b9:22: bd:27:26:a0:77:b9:6c:ac:09:20:5c:b1:64:ef:bf:67:96:2d: 65:e0:19:89:87:89:c2:0c:09:f5:da:36:bc:6d:2e:28:2b:f5: 38:86:03:92:46:7f:dc:5f:1b:00:7d:14:c8:d7:16:51:ac:b4: 17:e3:f5:01:38:2d:9c:fd:79:9f:5c:31:e7:82:4e:8a:b5:fc: 6e:be:5f:a1:26:0b:56:bb:e6:7f:1b:21:97:34:62:aa:d9:1a: 79:d6:9a:8e:79:a6:e5:ad:7b:6d:26:1e:41:20:99:03:fd:b7: 86:e6:1a:37 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIURD99rLSh624WAQdzPPI3tf0SYjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMjA4NTUwMFoX DTI2MDkxMTA5MDAwMFowMzExMC8GA1UEAxMoQTdFMTgyRURBMzcwMzI0RkFFOEZB RDk1QTJCNzM2NUM2MDhGMDQzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtALW61nuMSUWZhnTvXJBh/hP6fmBXrWs2Kx0pPqOjeBr/8zhqwHkdBve5m lbZ56TnJrYWa1OJT5P4ivRgFRDQTE9DwZzrCx1W91R5jRdkg7Z5C5W/QnIpYycDv r0Ic46/o8x8xyXksNcGxweoCNJNp0GKm6h27bjQF/Pj08clE8ng1iLDxhKDEuev9 2VagLNNNn2uC6goodRbd3tT4a9+XVaq7zg7wRYulWY18GWwSrplvKd9VG/IQ4YHv jMsAlN33lsZV4XilqMHyZeoj51N/MjbAEBZIwqXMxDRSc9LDyBAPrA97e+ZbflEV uoEC5vG5r54N3aZmd+viJty+owECAwEAAaOCAdMwggHPMB0GA1UdDgQWBBSn4YLt o3AyT66PrZWitzZcYI8EMDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjQwMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfGYQDANBgkqhkiG9w0BAQsFAAOCAQEAeNbltCGCJkdUA0vL DES8YjwYeJmmBqa1UNpOHtzfH4hMMSsp/XEyLKvPAcW1DSD23z1CPFh/VnoWCtfH umC7tiFus7wdfAzPxOA1C+9zP1mH3oUkHCGmE2snojguhyz3jPeozpo8uYD1rOkJ WOgzGlmzmLCFzlx6nshLFX+lL/gixJInLrJ9eivmYPcgxrkivScmoHe5bKwJIFyx ZO+/Z5YtZeAZiYeJwgwJ9do2vG0uKCv1OIYDkkZ/3F8bAH0UyNcWUay0F+P1ATgt nP15n1wx54JOirX8br5foSYLVrvmfxshlzRiqtkaedaajnmm5a17bSYeQSCZA/23 huYaNw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:11:09 2025 by rpki-client