$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142201.roa File: AS142201.roa (raw, json) Hash identifier: FnH3ZEVHDPxeiqLjpfGaezt0x3fOFgrkQ6jHOyylVEw= Subject key identifier: C5:0A:DF:F6:3D:32:59:02:E6:36:13:F1:87:4B:FD:3A:90:1D:73:80 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2DDE49E172AAEE9AD2390DD03C93B328DA23221F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142201.roa Signing time: Sat 02 May 2026 09:26:58 +0000 ROA not before: Sat 02 May 2026 09:21:58 +0000 ROA not after: Sat 01 May 2027 09:26:58 +0000 asID: 142201 IP address blocks: 2001:df6:8cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:de:49:e1:72:aa:ee:9a:d2:39:0d:d0:3c:93:b3:28:da:23:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:21:58 2026 GMT Not After : May 1 09:26:58 2027 GMT Subject: CN=C50ADFF63D325902E63613F1874BFD3A901D7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:cc:33:88:c4:52:ff:8b:e2:3a:51:c1:36: f7:a0:f2:32:2b:9f:7e:f1:e9:32:44:e4:1c:f5:62: c9:69:88:7b:17:27:df:ad:a0:39:cf:ae:67:2e:3e: 32:14:56:4b:81:58:cb:41:56:1f:dd:31:61:4d:99: 55:4c:a7:b3:55:77:9c:c0:db:99:33:f8:6a:f5:c1: 04:7a:1c:0d:68:d4:ad:c8:d9:55:80:03:36:18:69: 3f:28:77:dc:8e:9e:23:c7:d9:52:67:8f:ea:10:9e: 27:da:e7:81:73:bb:52:9f:3f:4c:97:ff:36:29:36: 06:44:46:fe:92:14:49:3d:84:ce:70:71:d7:42:2b: 78:7c:2e:40:b8:6a:fd:0c:0c:66:ad:d9:3d:38:f6: 1e:42:ec:7c:f1:7f:91:a6:d3:50:48:d5:93:8a:4b: 6c:41:a6:5d:8c:bc:2f:97:9a:a7:29:9f:da:78:90: 6e:bf:83:91:df:47:d0:19:e2:84:00:50:a3:7e:63: 97:73:f9:65:6f:16:d0:34:b7:43:e7:2a:32:ba:7b: b4:27:2d:50:74:5f:78:c4:09:ee:76:39:9d:cf:59: 70:e5:d9:76:e9:7a:4f:82:98:6b:c5:67:92:ef:5c: f9:82:28:08:3b:cc:eb:52:3a:8a:52:07:5d:59:83: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0A:DF:F6:3D:32:59:02:E6:36:13:F1:87:4B:FD:3A:90:1D:73:80 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption 94:76:3a:01:0c:8c:cb:2e:dc:66:64:79:1d:fe:fc:42:be:1d: c6:af:9b:79:68:e8:85:7d:b4:d7:be:87:6a:e7:66:ec:70:22: 9d:e3:e4:db:0a:63:c9:08:16:90:61:cd:63:65:43:db:8c:69: d3:c3:fa:24:38:7a:2e:61:e8:ac:c6:2a:bb:07:03:e0:37:14: aa:2a:53:b4:32:06:20:4f:8e:15:91:59:89:eb:b0:f3:73:27: 51:41:43:f5:b0:0b:02:af:04:48:67:c1:ae:b9:46:dc:8c:a5: 56:44:b1:22:d4:34:23:e7:dc:b3:d3:7d:23:62:e5:41:05:9e: be:19:76:d7:86:de:05:8a:b7:49:a9:b9:2d:22:31:32:9d:c2: 19:8b:63:3d:6b:2d:27:be:ea:e2:03:28:fc:db:44:2d:f0:8a: cb:31:2d:32:b8:a2:a1:b2:79:d5:87:af:2f:ed:31:ed:a4:36: fa:50:e8:07:b3:86:ff:26:ce:19:05:6f:1a:1f:70:95:25:88: 56:2b:79:75:c3:97:17:b7:65:7c:cf:17:74:61:58:57:3b:5a: 57:b8:30:28:cf:46:24:8e:9d:c1:0b:3f:80:b6:c0:b7:a9:31: 82:8e:bc:70:a5:23:ba:41:93:4a:67:06:18:ff:96:71:b9:de: 6f:48:a4:65 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIULd5J4XKq7prSOQ3QPJOzKNojIh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjE1OFoX DTI3MDUwMTA5MjY1OFowMzExMC8GA1UEAxMoQzUwQURGRjYzRDMyNTkwMkU2MzYx M0YxODc0QkZEM0E5MDFENzM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCRzDOIxFL/i+I6UcE296DyMiuffvHpMkTkHPViyWmIexcn362gOc+uZy4+ MhRWS4FYy0FWH90xYU2ZVUyns1V3nMDbmTP4avXBBHocDWjUrcjZVYADNhhpPyh3 3I6eI8fZUmeP6hCeJ9rngXO7Up8/TJf/Nik2BkRG/pIUST2EznBx10IreHwuQLhq /QwMZq3ZPTj2HkLsfPF/kabTUEjVk4pLbEGmXYy8L5eapymf2niQbr+Dkd9H0Bni hABQo35jl3P5ZW8W0DS3Q+cqMrp7tCctUHRfeMQJ7nY5nc9ZcOXZdul6T4KYa8Vn ku9c+YIoCDvM61I6ilIHXVmDaZMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTFCt/2 PTJZAuY2E/GHS/06kB1zgDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9ozAMA0GCSqGSIb3DQEBCwUAA4IBAQCUdjoBDIzLLtxmZHkd/vxC vh3Gr5t5aOiFfbTXvodq52bscCKd4+TbCmPJCBaQYc1jZUPbjGnTw/okOHouYeis xiq7BwPgNxSqKlO0MgYgT44VkVmJ67DzcydRQUP1sAsCrwRIZ8GuuUbcjKVWRLEi 1DQj59yz030jYuVBBZ6+GXbXht4FirdJqbktIjEyncIZi2M9ay0nvuriAyj820Qt 8IrLMS0yuKKhsnnVh68v7THtpDb6UOgHs4b/Js4ZBW8aH3CVJYhWK3l1w5cXt2V8 zxd0YVhXO1pXuDAoz0Ykjp3BCz+AtsC3qTGCjrxwpSO6QZNKZwYY/5Zxud5vSKRl -----END CERTIFICATE-----Generated at Sun May 3 00:39:45 2026 by rpki-client