$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142201.roa File: AS142201.roa (raw, json) Hash identifier: v+uUG9/0SWjU4/c64wYbcd1RXSr4Ozu7SpqEZAiDvLk= Subject key identifier: 1C:E9:48:B5:B1:8A:4E:70:BA:3D:D0:ED:7D:D9:87:CD:6E:4D:10:DD Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Certificate serial: 6522B464036AD8D38C5155E5308D313E1567228F Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142201.roa Signing time: Sat 02 May 2026 09:25:02 +0000 ROA not before: Sat 02 May 2026 09:20:02 +0000 ROA not after: Sat 01 May 2027 09:25:02 +0000 asID: 142201 IP address blocks: 192.232.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 20:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:22:b4:64:03:6a:d8:d3:8c:51:55:e5:30:8d:31:3e:15:67:22:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362 Validity Not Before: May 2 09:20:02 2026 GMT Not After : May 1 09:25:02 2027 GMT Subject: CN=1CE948B5B18A4E70BA3DD0ED7DD987CD6E4D10DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:8b:21:9d:a7:b0:06:9e:0f:10:53:66:db: 96:9e:d5:1f:7f:7e:c1:fe:18:35:fe:98:8c:5e:11: 4c:77:47:d1:7b:25:8c:f3:b0:8f:3f:7e:c0:89:d0: 70:ba:a3:33:f2:36:e0:63:4c:b8:fc:4a:fe:48:08: b4:c4:f5:7f:fa:da:a8:ba:af:c1:f8:05:b3:05:48: 98:34:d6:86:bc:b8:76:40:1e:d8:fc:44:5a:26:cc: bb:16:ca:80:0b:ed:31:05:6e:cc:ab:25:43:e3:88: 23:03:c1:3c:d7:a9:b9:03:5d:6b:48:10:b2:73:1b: fe:91:32:1a:9d:24:35:bb:d6:04:ed:04:1b:82:72: 01:7b:20:de:d2:3a:a4:a7:87:b0:57:cb:06:73:b8: 47:b1:c0:9b:04:8d:ec:4a:72:b7:11:9f:a7:c3:a2: 5c:0b:3e:ba:c2:ca:ec:a6:32:14:4b:56:9c:75:96: 60:59:74:3b:b1:49:24:0f:4c:d7:0f:b6:1c:3a:9f: 78:df:99:82:e4:77:1b:47:e4:1c:37:f5:13:32:b9: 40:7e:e6:aa:23:9f:91:f5:ec:d9:ca:3b:6f:5b:e1: df:78:4e:8a:67:f0:54:7f:b9:24:76:87:e9:b4:02: d7:10:9a:b5:5f:04:6c:2e:44:6d:f3:11:92:4f:1d: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E9:48:B5:B1:8A:4E:70:BA:3D:D0:ED:7D:D9:87:CD:6E:4D:10:DD X509v3 Authority Key Identifier: keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.232.48.0/23 Signature Algorithm: sha256WithRSAEncryption 88:06:7e:b8:67:c3:ca:0d:f8:ba:6a:e2:ac:27:12:10:d8:97: 37:5e:f3:73:ac:13:71:7e:6e:56:f7:50:62:37:09:48:27:e9: 2b:a6:f5:67:1a:f9:50:00:4d:b8:75:79:b5:93:f3:c3:07:fb: ea:32:b5:f0:13:e4:b5:87:5d:47:db:2e:67:ca:8a:55:93:1e: 8d:44:ee:29:0c:10:8f:9a:bf:aa:a5:77:13:ca:ec:83:2c:62: f8:5b:75:f5:0e:30:6f:64:d6:1e:59:f8:fa:da:35:7a:dd:b8: 6d:11:92:db:b8:67:7f:8f:10:2c:82:2d:5d:2c:53:a0:b4:f6: 2d:ef:87:df:92:65:ed:83:27:e2:d4:65:2d:b5:37:3e:e1:e9: 67:c0:2a:e0:50:b4:44:82:47:2d:f0:09:30:12:f4:50:fa:75: 68:2c:9d:d2:a6:c7:8c:69:2c:08:1e:1d:3a:88:bf:59:1e:3e: de:10:56:d4:ee:31:ce:4a:b3:dd:5f:9a:80:cb:32:37:3d:1d: e5:97:50:fc:35:6f:87:55:54:60:05:9d:d1:7b:54:44:81:ba: f3:8d:33:44:ad:b4:82:fe:87:81:61:58:14:68:96:05:5e:03: c7:ad:a6:16:40:cc:16:35:f4:16:50:10:5d:4f:15:08:dc:b8: 41:cb:32:d0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZSK0ZANq2NOMUVXlMI0xPhVnIo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg3REY0MzQ5NTM0 NDQxQUYxMUE2NURERDM1ODhGNzREQzU5QzJEMzYyMB4XDTI2MDUwMjA5MjAwMloX DTI3MDUwMTA5MjUwMlowMzExMC8GA1UEAxMoMUNFOTQ4QjVCMThBNEU3MEJBM0RE MEVEN0REOTg3Q0Q2RTREMTBERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFTiyGdp7AGng8QU2bblp7VH39+wf4YNf6YjF4RTHdH0XsljPOwjz9+wInQ cLqjM/I24GNMuPxK/kgItMT1f/raqLqvwfgFswVImDTWhry4dkAe2PxEWibMuxbK gAvtMQVuzKslQ+OIIwPBPNepuQNda0gQsnMb/pEyGp0kNbvWBO0EG4JyAXsg3tI6 pKeHsFfLBnO4R7HAmwSN7EpytxGfp8OiXAs+usLK7KYyFEtWnHWWYFl0O7FJJA9M 1w+2HDqfeN+ZguR3G0fkHDf1EzK5QH7mqiOfkfXs2co7b1vh33hOimfwVH+5JHaH 6bQC1xCatV8EbC5EbfMRkk8d9gcCAwEAAaOCAcwwggHIMB0GA1UdDgQWBBQc6Ui1 sYpOcLo90O192YfNbk0Q3TAfBgNVHSMEGDAWgBR99DSVNEQa8Rpl3dNYj3TcWcLT YjAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzAvN0RGNDM0OTUzNDQ0MUFGMTFB NjVEREQzNTg4Rjc0REM1OUMyRDM2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRG MjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvZmZRMGxUUkVHdkVhWmQzVFdJOTAz Rm5DMDJJLmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8wL0FTMTQyMjAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBwOgwMA0GCSqGSIb3DQEBCwUAA4IBAQCIBn64Z8PKDfi6auKsJxIQ2Jc3 XvNzrBNxfm5W91BiNwlIJ+krpvVnGvlQAE24dXm1k/PDB/vqMrXwE+S1h11H2y5n yopVkx6NRO4pDBCPmr+qpXcTyuyDLGL4W3X1DjBvZNYeWfj62jV63bhtEZLbuGd/ jxAsgi1dLFOgtPYt74ffkmXtgyfi1GUttTc+4elnwCrgULREgkct8AkwEvRQ+nVo LJ3SpseMaSwIHh06iL9ZHj7eEFbU7jHOSrPdX5qAyzI3PR3ll1D8NW+HVVRgBZ3R e1REgbrzjTNErbSC/oeBYVgUaJYFXgPHraYWQMwWNfQWUBBdTxUI3LhByzLQ -----END CERTIFICATE-----Generated at Sat May 2 21:03:36 2026 by rpki-client