$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142183.roa File: AS142183.roa (raw, json) Hash identifier: EYxtVNOwSgqJFqv131wyg7G6jMEYs/57jql6T78mjR8= Subject key identifier: 7D:6A:2F:2F:D4:DA:1C:DC:44:1E:27:AF:84:66:13:CB:80:BC:30:F3 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 28AF46A99F807F42F634BD6F4802C50274752BC3 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142183.roa Signing time: Sat 02 May 2026 09:27:16 +0000 ROA not before: Sat 02 May 2026 09:22:16 +0000 ROA not after: Sat 01 May 2027 09:27:16 +0000 asID: 142183 IP address blocks: 2001:df6:8940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:af:46:a9:9f:80:7f:42:f6:34:bd:6f:48:02:c5:02:74:75:2b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:16 2026 GMT Not After : May 1 09:27:16 2027 GMT Subject: CN=7D6A2F2FD4DA1CDC441E27AF846613CB80BC30F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:96:0a:a4:64:79:11:4a:40:72:ff:f4:6f: 4e:7f:8c:cf:42:a7:5b:3f:22:4b:1a:bf:7d:9c:ea: 26:0c:60:9d:1a:e4:2d:59:54:de:db:ae:7f:06:be: cb:85:d1:e0:b3:d6:0d:51:38:9d:bc:2b:e4:80:1e: c6:11:9d:a9:97:8d:4d:3e:64:99:ee:52:e0:af:7d: d2:3e:c2:a0:52:d7:39:d8:37:8e:52:56:3f:62:1f: 38:cb:ef:9d:e8:96:60:97:f2:30:24:87:67:3a:cc: 96:b0:62:1d:bd:de:a8:de:3c:ee:b9:1e:cd:39:14: ae:5f:72:06:c3:06:b8:43:49:43:cb:04:ca:23:71: be:d5:66:42:ed:c1:61:3e:b1:cf:7d:d4:8b:78:2c: 87:08:a2:b0:f4:b1:6a:98:97:d7:b0:2d:9a:cc:46: 26:84:01:bb:bd:93:50:ef:1f:dd:f1:af:9c:4a:3c: bf:56:90:32:dd:fb:11:f1:9d:3c:0e:da:da:9e:1a: 5d:4c:97:0b:08:bb:89:f1:4c:44:93:b9:20:75:3b: 5c:53:0b:d1:8f:76:f3:81:6b:f8:14:9c:5c:66:5e: 76:0c:9d:d0:c5:96:36:f7:e4:fb:d4:82:ed:2a:4d: ff:9b:93:54:67:a7:cf:71:b8:bb:83:9e:06:62:5d: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:2F:2F:D4:DA:1C:DC:44:1E:27:AF:84:66:13:CB:80:BC:30:F3 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142183.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:8940::/48 Signature Algorithm: sha256WithRSAEncryption 01:76:11:98:10:88:09:6a:fe:b1:2e:d2:3d:8e:2f:1a:8b:69: 42:29:63:18:cd:05:ab:78:2e:a5:68:4f:df:25:48:bc:be:0d: 1e:44:61:78:5c:1b:2c:f7:31:3f:b0:71:c1:ba:8b:64:c2:52: 45:62:3c:f1:87:e7:00:de:05:bb:ce:8f:d2:2d:a8:e1:85:8c: 7b:e1:f9:3c:40:85:09:36:fe:39:5f:e3:d9:5e:b4:d4:0e:45: b0:61:c6:7a:d6:8c:ec:c3:3a:08:25:59:59:02:30:60:5c:20: ce:fb:f9:55:cb:57:7d:40:80:72:bf:44:e8:b0:5a:18:ac:cb: c6:52:83:f6:59:c8:26:4e:d1:98:42:7f:dd:d4:2c:37:50:2d: 62:00:ed:3e:95:2d:1d:a9:da:05:43:e9:a2:0e:cc:16:07:5d: 9c:1a:ad:00:b2:40:1f:54:07:28:0e:b0:fc:04:e0:d5:c8:98: 9e:ad:a9:dc:3c:87:ba:cb:c0:d0:88:25:99:cf:26:bb:9d:38: ee:3f:63:71:ef:45:7f:b2:55:d1:47:32:8f:9f:c2:38:ca:e9: cc:83:3a:7c:af:1f:e9:c9:4a:8c:ee:24:26:a5:fc:5d:dd:53: 9b:7d:b0:16:0c:28:f3:00:e2:65:10:04:99:8a:76:3a:75:2b: 7c:bc:9b:d0 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUKK9GqZ+Af0L2NL1vSALFAnR1K8MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxNloX DTI3MDUwMTA5MjcxNlowMzExMC8GA1UEAxMoN0Q2QTJGMkZENERBMUNEQzQ0MUUy N0FGODQ2NjEzQ0I4MEJDMzBGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg0lgqkZHkRSkBy//RvTn+Mz0KnWz8iSxq/fZzqJgxgnRrkLVlU3tuufwa+ y4XR4LPWDVE4nbwr5IAexhGdqZeNTT5kme5S4K990j7CoFLXOdg3jlJWP2IfOMvv neiWYJfyMCSHZzrMlrBiHb3eqN487rkezTkUrl9yBsMGuENJQ8sEyiNxvtVmQu3B YT6xz33Ui3gshwiisPSxapiX17AtmsxGJoQBu72TUO8f3fGvnEo8v1aQMt37EfGd PA7a2p4aXUyXCwi7ifFMRJO5IHU7XFML0Y9284Fr+BScXGZedgyd0MWWNvfk+9SC 7SpN/5uTVGenz3G4u4OeBmJdyTMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR9ai8v 1Noc3EQeJ6+EZhPLgLww8zAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMTgzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9olAMA0GCSqGSIb3DQEBCwUAA4IBAQABdhGYEIgJav6xLtI9ji8a i2lCKWMYzQWreC6laE/fJUi8vg0eRGF4XBss9zE/sHHBuotkwlJFYjzxh+cA3gW7 zo/SLajhhYx74fk8QIUJNv45X+PZXrTUDkWwYcZ61ozswzoIJVlZAjBgXCDO+/lV y1d9QIByv0TosFoYrMvGUoP2WcgmTtGYQn/d1Cw3UC1iAO0+lS0dqdoFQ+miDswW B12cGq0AskAfVAcoDrD8BODVyJierancPIe6y8DQiCWZzya7nTjuP2Nx70V/slXR RzKPn8I4yunMgzp8rx/pyUqM7iQmpfxd3VObfbAWDCjzAOJlEASZinY6dSt8vJvQ -----END CERTIFICATE-----Generated at Sun May 3 00:39:44 2026 by rpki-client