$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142206.roa File: AS142206.roa (raw, json) Hash identifier: epYfTASfM7ra4wiumZElwl/hMNq92W5/+xRxSBwbl6E= Subject key identifier: 7F:C2:90:E1:B5:12:65:AA:05:22:4E:0B:51:1F:CD:4B:7B:A1:A2:24 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 334FF7ADF62F6E2A00B9A2D20B2F644333EC8108 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142206.roa Signing time: Sat 02 May 2026 09:27:16 +0000 ROA not before: Sat 02 May 2026 09:22:16 +0000 ROA not after: Sat 01 May 2027 09:27:16 +0000 asID: 142206 IP address blocks: 2001:df6:8c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4f:f7:ad:f6:2f:6e:2a:00:b9:a2:d2:0b:2f:64:43:33:ec:81:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:16 2026 GMT Not After : May 1 09:27:16 2027 GMT Subject: CN=7FC290E1B51265AA05224E0B511FCD4B7BA1A224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:ee:60:5e:fc:4f:23:59:f9:85:56:c9:9e: db:f0:cd:0b:f6:17:a1:97:2f:95:22:34:78:d8:d3: 00:e5:d2:4d:96:d8:6e:53:d8:47:28:e2:1d:ec:e3: db:2b:58:82:c3:13:62:51:dd:8d:1f:7c:85:69:7b: f8:e3:c2:9e:c7:b3:e9:fb:63:f5:4c:f7:12:ce:cb: 7b:19:01:23:18:42:60:21:82:b8:76:6f:4f:8c:b0: 0a:a4:2d:75:9a:44:85:14:83:54:0f:60:af:a8:61: 2c:7e:b0:65:06:e9:d8:95:1c:1f:92:7e:6a:39:01: 40:13:b9:a2:c2:ff:86:8a:1a:cb:1f:26:b3:58:a9: 3a:dd:86:2b:ae:fa:aa:46:e3:e1:f5:ca:31:d2:9d: b7:f9:f5:e6:73:3e:bf:ef:50:7d:94:b2:5c:99:c6: b4:29:e2:b9:dc:d7:cd:ae:0e:16:1d:de:e3:b3:38: 04:7f:ca:10:7f:5c:93:ca:82:3e:0c:b6:44:07:64: 56:04:10:55:c0:28:0e:58:8a:25:f0:b8:82:c3:b9: 5c:1c:ae:37:79:ca:ed:37:73:2b:f4:b1:57:85:b6: 56:f4:18:9b:ab:7e:df:87:ea:01:00:d5:7c:5f:a6: fe:6d:03:18:86:ce:54:a5:ef:ac:cb:a6:96:6e:a2: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C2:90:E1:B5:12:65:AA:05:22:4E:0B:51:1F:CD:4B:7B:A1:A2:24 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142206.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:8c40::/48 Signature Algorithm: sha256WithRSAEncryption 62:37:18:d7:a5:70:a8:ad:d4:4a:01:bf:c0:91:e2:e2:9e:f8: 5f:34:20:4d:d8:e6:d8:cf:5a:08:fb:e4:5f:76:fb:09:5c:34: f0:d6:ff:da:6f:5c:f8:b5:b2:c8:12:ac:07:b4:72:4d:7d:74: 33:1c:5f:d0:c4:0c:d7:88:64:4b:ce:67:65:f3:6a:d6:41:23: 82:bc:c0:cb:6f:7e:d3:fb:5d:14:86:43:d9:e3:00:b5:f0:d2: 2b:fd:03:ba:1e:84:73:a1:e6:1e:54:f0:58:1a:5d:49:65:4b: 7b:6a:94:f4:b1:73:b3:9a:aa:e6:a3:a2:78:9e:fc:22:d4:ec: c8:3c:31:22:7f:cf:66:f4:6f:6b:2a:13:f7:b1:83:56:60:87: c3:b7:2a:4a:9a:ad:e7:db:10:f5:fa:05:77:6a:32:0c:4c:30: e5:2e:24:e9:ca:21:ce:1e:3c:15:97:17:b2:23:0c:84:e8:9d: dd:fb:0c:5f:c0:9a:77:4b:ca:c9:e8:7b:57:ab:65:46:9f:ca: 1d:2c:04:c8:7b:80:08:3c:3d:a2:41:e4:27:b0:e3:ef:e8:a7: 7a:2b:b0:58:29:97:72:be:d3:b9:12:bf:c4:94:9a:1a:26:16: 0d:1e:a1:8d:a1:08:f0:d8:a0:9f:63:ea:f6:3f:d2:3f:39:f0: b2:2b:e3:65 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUM0/3rfYvbioAuaLSCy9kQzPsgQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxNloX DTI3MDUwMTA5MjcxNlowMzExMC8GA1UEAxMoN0ZDMjkwRTFCNTEyNjVBQTA1MjI0 RTBCNTExRkNENEI3QkExQTIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODI7mBe/E8jWfmFVsme2/DNC/YXoZcvlSI0eNjTAOXSTZbYblPYRyjiHezj 2ytYgsMTYlHdjR98hWl7+OPCnsez6ftj9Uz3Es7LexkBIxhCYCGCuHZvT4ywCqQt dZpEhRSDVA9gr6hhLH6wZQbp2JUcH5J+ajkBQBO5osL/hooayx8ms1ipOt2GK676 qkbj4fXKMdKdt/n15nM+v+9QfZSyXJnGtCniudzXza4OFh3e47M4BH/KEH9ck8qC Pgy2RAdkVgQQVcAoDliKJfC4gsO5XByuN3nK7TdzK/SxV4W2VvQYm6t+34fqAQDV fF+m/m0DGIbOVKXvrMumlm6ijCkCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR/wpDh tRJlqgUiTgtRH81Le6GiJDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjA2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9oxAMA0GCSqGSIb3DQEBCwUAA4IBAQBiNxjXpXCordRKAb/AkeLi nvhfNCBN2ObYz1oI++RfdvsJXDTw1v/ab1z4tbLIEqwHtHJNfXQzHF/QxAzXiGRL zmdl82rWQSOCvMDLb37T+10UhkPZ4wC18NIr/QO6HoRzoeYeVPBYGl1JZUt7apT0 sXOzmqrmo6J4nvwi1OzIPDEif89m9G9rKhP3sYNWYIfDtypKmq3n2xD1+gV3ajIM TDDlLiTpyiHOHjwVlxeyIwyE6J3d+wxfwJp3S8rJ6HtXq2VGn8odLATIe4AIPD2i QeQnsOPv6Kd6K7BYKZdyvtO5Er/ElJoaJhYNHqGNoQjw2KCfY+r2P9I/OfCyK+Nl -----END CERTIFICATE-----Generated at Sun May 3 00:42:21 2026 by rpki-client