$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142184.roa File: AS142184.roa (raw, json) Hash identifier: +XflgrRcnLKfYz7LszqT8s9F/0NJXTPQCMt5muXo8s8= Subject key identifier: 0C:F2:8E:72:05:B8:19:73:43:CF:C5:C0:7F:36:57:24:BD:01:B0:F9 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 20A3EF42920AEC05644BF17FCF26FA294F2063DA Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142184.roa Signing time: Sat 02 May 2026 09:27:22 +0000 ROA not before: Sat 02 May 2026 09:22:22 +0000 ROA not after: Sat 01 May 2027 09:27:22 +0000 asID: 142184 IP address blocks: 2001:df6:8740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:ef:42:92:0a:ec:05:64:4b:f1:7f:cf:26:fa:29:4f:20:63:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:22 2026 GMT Not After : May 1 09:27:22 2027 GMT Subject: CN=0CF28E7205B8197343CFC5C07F365724BD01B0F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:ed:55:c2:89:bb:bb:30:6c:65:ff:e0:13: 81:5f:4c:30:3e:17:94:aa:ac:6b:c1:9c:5c:e9:da: f3:22:8d:60:8e:ac:66:90:67:9c:63:97:e5:08:27: 20:5a:5e:3e:83:ca:70:e7:2c:f7:63:e0:b4:62:4d: dd:f7:3d:f0:27:da:eb:07:56:27:19:bf:31:9f:01: 5c:5a:ce:b2:bf:b8:6a:37:c7:9e:ee:45:a3:67:9e: bb:32:c9:3d:0b:16:d0:e5:d6:3a:23:4f:59:70:a8: b0:d2:dc:24:89:c7:39:b3:59:19:31:a4:35:e4:60: 83:e0:95:df:fe:2b:14:b3:47:3a:95:cc:df:b4:e5: e2:47:ef:7e:80:95:46:ba:e0:b1:6d:1d:ea:ab:04: 03:e0:ad:c7:b0:c8:9f:44:5f:ab:d8:9a:cb:e9:0c: 1b:1f:cf:65:7b:16:17:7e:75:76:5a:75:3c:04:8c: 06:7f:01:a2:95:ef:68:64:07:a7:44:c3:4e:f9:71: 51:28:30:b9:45:95:b1:92:ec:51:44:69:cb:a9:7b: 88:91:64:ca:ee:aa:c3:87:ad:43:7e:8c:93:eb:af: b7:29:be:1b:02:d2:b1:fe:64:5c:a9:81:71:19:9c: 41:50:28:4e:d3:7a:d7:af:4e:51:5f:7a:71:40:c1: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:8E:72:05:B8:19:73:43:CF:C5:C0:7F:36:57:24:BD:01:B0:F9 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142184.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:8740::/48 Signature Algorithm: sha256WithRSAEncryption 24:f9:8f:5a:f2:bc:b2:4d:09:04:80:82:ec:03:6b:02:16:c8: 28:14:90:78:7d:83:be:e9:1b:aa:6a:38:04:d4:8e:75:cf:e1: 14:3a:65:a5:4c:ff:2d:7f:0b:47:3c:a6:e5:2a:4a:31:c4:88: b2:37:ea:59:c8:b4:3b:ba:10:fd:73:5e:f4:67:c7:8a:b7:0b: ca:c9:0f:22:ae:72:03:b4:5b:3b:85:23:6b:29:41:d8:23:f9: 20:49:19:99:dc:7f:45:4f:8c:dc:b1:12:54:03:2e:ff:d5:d2: c2:a2:92:59:6b:d8:57:fa:20:de:bb:6e:24:9b:cc:89:75:1e: 95:da:d2:88:41:d8:68:cb:a5:aa:90:ad:f0:62:15:18:22:8b: c9:7d:b5:ec:30:d0:eb:81:26:8e:34:fd:03:42:28:98:e2:de: d9:fa:bb:23:74:19:b2:27:4a:5f:35:a3:47:be:ca:d8:27:52: 09:7c:ee:b0:da:44:77:27:b8:75:24:1b:7d:aa:d2:03:7b:e1: 30:9b:7e:3b:c0:5c:8a:e0:47:12:a2:80:c4:ff:37:f4:f2:ec: 76:42:a1:2d:28:cd:88:02:6d:0d:a7:cf:8e:ca:6a:9f:34:01: 8c:e7:ec:48:51:df:1c:ff:0b:33:60:7c:11:03:57:dd:7d:04: 3d:30:d4:60 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUIKPvQpIK7AVkS/F/zyb6KU8gY9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIyMloX DTI3MDUwMTA5MjcyMlowMzExMC8GA1UEAxMoMENGMjhFNzIwNUI4MTk3MzQzQ0ZD NUMwN0YzNjU3MjRCRDAxQjBGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLP7VXCibu7MGxl/+ATgV9MMD4XlKqsa8GcXOna8yKNYI6sZpBnnGOX5Qgn IFpePoPKcOcs92PgtGJN3fc98Cfa6wdWJxm/MZ8BXFrOsr+4ajfHnu5Fo2eeuzLJ PQsW0OXWOiNPWXCosNLcJInHObNZGTGkNeRgg+CV3/4rFLNHOpXM37Tl4kfvfoCV RrrgsW0d6qsEA+Ctx7DIn0Rfq9iay+kMGx/PZXsWF351dlp1PASMBn8BopXvaGQH p0TDTvlxUSgwuUWVsZLsUURpy6l7iJFkyu6qw4etQ36Mk+uvtym+GwLSsf5kXKmB cRmcQVAoTtN6169OUV96cUDB/xMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQM8o5y BbgZc0PPxcB/NlckvQGw+TAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMTg0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9odAMA0GCSqGSIb3DQEBCwUAA4IBAQAk+Y9a8ryyTQkEgILsA2sC FsgoFJB4fYO+6RuqajgE1I51z+EUOmWlTP8tfwtHPKblKkoxxIiyN+pZyLQ7uhD9 c170Z8eKtwvKyQ8irnIDtFs7hSNrKUHYI/kgSRmZ3H9FT4zcsRJUAy7/1dLCopJZ a9hX+iDeu24km8yJdR6V2tKIQdhoy6WqkK3wYhUYIovJfbXsMNDrgSaONP0DQiiY 4t7Z+rsjdBmyJ0pfNaNHvsrYJ1IJfO6w2kR3J7h1JBt9qtIDe+Ewm347wFyK4EcS ooDE/zf08ux2QqEtKM2IAm0Np8+OymqfNAGM5+xIUd8c/wszYHwRA1fdfQQ9MNRg -----END CERTIFICATE-----Generated at Sun May 3 00:39:50 2026 by rpki-client