$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142566.roa File: AS142566.roa (raw, json) Hash identifier: RUcm3Vj2pCxTUEPqCcn4eV2CHycm3rXMHfgrPStJaPU= Subject key identifier: 44:24:CF:EF:FB:CB:78:4B:1D:60:3E:43:9E:77:59:81:04:0A:A4:F3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 37EC70E1C575C7B3FEE600AAC0422556F6E78F1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142566.roa Signing time: Thu 05 Mar 2026 04:12:41 +0000 ROA not before: Thu 05 Mar 2026 04:07:41 +0000 ROA not after: Thu 04 Mar 2027 04:12:41 +0000 asID: 142566 IP address blocks: 2001:df6:c640::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ec:70:e1:c5:75:c7:b3:fe:e6:00:aa:c0:42:25:56:f6:e7:8f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 04:07:41 2026 GMT Not After : Mar 4 04:12:41 2027 GMT Subject: CN=4424CFEFFBCB784B1D603E439E775981040AA4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:1d:ee:15:93:53:2e:a7:76:cb:1c:8a:0b: 28:2e:93:07:e1:e1:9d:69:71:76:f0:ab:18:8d:5d: a2:04:5e:cc:ff:f1:5d:8d:a4:09:84:02:41:3c:2e: c8:0c:7f:3f:0d:a6:8e:ff:7a:dc:8b:66:73:2d:de: e8:c0:23:78:70:36:7b:3c:7a:78:d3:ee:7a:c4:86: 29:af:fe:e8:32:5a:ac:65:ac:22:a6:22:b9:68:82: 73:45:ba:64:90:8c:dc:e8:5c:d3:63:4b:af:b3:68: 72:c0:a8:3b:73:c1:5f:82:be:46:89:07:82:45:02: c5:8f:01:7f:f5:2e:bb:da:76:7e:bd:0d:fb:fb:23: 17:f7:ad:58:e2:1f:6d:40:1f:ca:e6:f2:e6:ce:7f: 91:31:b6:4b:68:f8:d4:e9:9e:9b:28:51:4c:30:41: db:c3:85:a1:ec:66:7f:99:7f:03:4f:89:95:71:2d: 31:5b:ea:49:f1:3b:61:f3:10:85:0c:e2:12:12:40: 84:32:0c:c1:e4:8b:18:a8:04:b4:55:a4:bc:fb:4c: d9:31:b4:69:65:34:05:5c:4d:15:1d:ec:39:a7:82: fd:f9:f4:89:9e:50:ad:fa:f0:b7:23:2f:53:83:e8: d8:7f:44:f6:0c:4f:e6:cc:2f:63:f8:13:24:42:c2: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:24:CF:EF:FB:CB:78:4B:1D:60:3E:43:9E:77:59:81:04:0A:A4:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:c640::/48 Signature Algorithm: sha256WithRSAEncryption 91:95:a4:bc:06:4a:9e:c0:14:3d:1a:8d:a7:26:eb:9b:15:ad: 1d:47:c0:69:e7:a8:70:3f:25:3d:ea:fe:52:49:42:84:09:0f: 0c:5e:29:80:c1:9a:db:be:a9:50:bf:53:bd:b8:09:47:40:1f: 5a:cb:17:34:c8:11:81:3e:ef:31:5e:dc:58:9f:90:d8:7e:90: 9d:e8:c0:33:01:ae:d0:38:c3:c9:7c:b9:db:cf:59:70:b0:d3: de:98:56:b9:ae:01:a6:0d:ea:22:17:12:48:be:13:e5:3e:95: d5:cd:68:23:80:61:f7:b1:2d:37:eb:7e:22:ed:f9:25:f7:a4: 58:1b:95:73:43:fd:3f:cd:eb:b1:59:a5:44:ee:8b:23:ff:3c: b6:86:4b:77:a1:85:31:22:ab:17:fd:9a:14:2c:ab:9a:d6:f2: 9a:b8:1b:07:cb:d0:02:51:da:88:53:2f:8c:8c:dd:7f:69:c4: d9:57:e7:8b:f6:f2:58:58:10:7b:fb:02:4c:e3:30:9e:3d:a8: ba:17:4a:d1:18:98:66:6b:5a:07:a7:1e:b8:79:2c:a1:4b:af: 80:3e:b1:df:de:29:5d:1b:04:1f:dc:bc:3a:ae:a3:a0:7b:d4: d8:1f:3e:0a:f8:8c:c3:bd:0a:e3:fe:77:29:f0:91:95:48:f4: 97:cd:42:e7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUN+xw4cV1x7P+5gCqwEIlVvbnjxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNTA0MDc0MVoX DTI3MDMwNDA0MTI0MVowMzExMC8GA1UEAxMoNDQyNENGRUZGQkNCNzg0QjFENjAz RTQzOUU3NzU5ODEwNDBBQTRGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8OHe4Vk1Mup3bLHIoLKC6TB+HhnWlxdvCrGI1dogRezP/xXY2kCYQCQTwu yAx/Pw2mjv963Itmcy3e6MAjeHA2ezx6eNPuesSGKa/+6DJarGWsIqYiuWiCc0W6 ZJCM3Ohc02NLr7NocsCoO3PBX4K+RokHgkUCxY8Bf/Uuu9p2fr0N+/sjF/etWOIf bUAfyuby5s5/kTG2S2j41OmemyhRTDBB28OFoexmf5l/A0+JlXEtMVvqSfE7YfMQ hQziEhJAhDIMweSLGKgEtFWkvPtM2TG0aWU0BVxNFR3sOaeC/fn0iZ5QrfrwtyMv U4Po2H9E9gxP5swvY/gTJELCEh0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBREJM/v +8t4Sx1gPkOed1mBBAqk8zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjU2Ni5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfbGQDANBgkqhkiG9w0BAQsFAAOCAQEAkZWkvAZKnsAUPRqN pybrmxWtHUfAaeeocD8lPer+UklChAkPDF4pgMGa276pUL9TvbgJR0AfWssXNMgR gT7vMV7cWJ+Q2H6QnejAMwGu0DjDyXy5289ZcLDT3phWua4Bpg3qIhcSSL4T5T6V 1c1oI4Bh97EtN+t+Iu35JfekWBuVc0P9P83rsVmlRO6LI/88toZLd6GFMSKrF/2a FCyrmtbymrgbB8vQAlHaiFMvjIzdf2nE2Vfni/byWFgQe/sCTOMwnj2ouhdK0RiY ZmtaB6ceuHksoUuvgD6x394pXRsEH9y8Oq6joHvU2B8+CviMw70K4/53KfCRlUj0 l81C5w== -----END CERTIFICATE-----Generated at Sat Mar 7 19:14:08 2026 by rpki-client