$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142212.roa File: AS142212.roa (raw, json) Hash identifier: JRB1pTKjvYyyzauMV/u6VmaGeAHmmH+fLzlhPyLknwc= Subject key identifier: 71:B6:D5:83:B9:BE:2F:CA:2D:DE:8F:6B:00:FF:2B:E3:DC:00:A4:21 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3B669077472C0CA7F8ECB7C9B679F0D8260EDCA0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142212.roa Signing time: Sat 02 May 2026 09:27:11 +0000 ROA not before: Sat 02 May 2026 09:22:11 +0000 ROA not after: Sat 01 May 2027 09:27:11 +0000 asID: 142212 IP address blocks: 2001:df6:8ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:90:77:47:2c:0c:a7:f8:ec:b7:c9:b6:79:f0:d8:26:0e:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:11 2026 GMT Not After : May 1 09:27:11 2027 GMT Subject: CN=71B6D583B9BE2FCA2DDE8F6B00FF2BE3DC00A421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:07:db:56:ff:eb:93:08:92:cc:2d:25:55: fc:c2:4e:85:6c:06:c5:df:e6:ba:ee:9c:db:5f:d2: d6:84:74:0a:51:2b:c4:66:f2:61:70:af:27:05:6c: b9:c1:d4:60:5a:87:db:c2:04:16:e0:69:0d:7d:fa: 17:b0:bb:e3:18:54:07:73:67:c6:b1:04:c5:34:2f: 39:c9:d5:6a:00:90:b7:51:67:d8:de:82:b5:3c:70: 0f:f4:a7:54:b1:e8:22:13:d0:e2:a8:2b:81:87:da: df:79:94:39:a5:a3:4b:06:2f:10:f3:30:af:2e:79: 2a:dc:9d:ad:20:6b:d9:60:73:21:42:c4:e3:7a:af: af:8d:31:b8:21:78:d3:9b:e1:c5:8c:88:ff:90:83: a0:15:78:26:10:00:18:85:42:0a:df:66:15:b1:26: c1:b1:aa:69:a0:d5:7b:61:b6:d0:49:58:71:80:d5: 92:a9:e1:74:ae:3b:34:f6:71:84:67:2e:84:78:6c: 86:9b:b1:6a:cc:9f:32:d8:21:75:e7:63:a4:1b:6a: c0:66:d6:28:b3:0f:1d:92:49:3c:c3:d3:06:5c:6d: 8d:c5:79:62:dd:24:14:83:dc:54:ca:bb:f6:ea:ed: 2f:67:d7:75:4c:1c:ee:ce:9a:14:6a:8e:06:12:b2: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B6:D5:83:B9:BE:2F:CA:2D:DE:8F:6B:00:FF:2B:E3:DC:00:A4:21 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:8ac0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:8e:44:9a:c5:69:2b:1f:a8:19:50:a0:dd:81:e6:10:01:8a: 1a:74:2d:8c:8f:d5:77:b7:ab:60:53:21:b7:7d:0c:c9:3c:0e: f2:74:00:6f:89:53:1e:4f:72:7f:4c:18:b4:25:a6:8c:26:95: 2d:85:0d:85:90:32:2b:a4:27:5b:64:94:6a:8f:cf:79:25:05: bf:d5:ad:47:12:85:ae:d1:b0:08:3d:52:31:20:13:db:84:83: cc:9f:6a:5f:5e:af:0e:3b:5c:22:12:97:40:e1:06:3f:8b:36: ec:05:e2:1f:22:9f:fd:4a:ec:a4:b1:7f:0e:40:e1:ee:f6:33: fa:91:2e:df:87:d6:95:c4:4f:37:21:a8:b4:5b:e7:7f:81:0b: 53:3a:b2:ea:9e:4b:84:94:56:4b:ab:2f:de:86:34:52:28:5c: 4d:85:99:0b:b6:dd:ed:e8:e5:83:33:01:41:40:07:aa:01:b0: 80:fa:b5:02:8e:13:39:f5:51:f4:c4:8e:e1:0e:c7:8c:f4:bb: 70:a5:ff:1d:83:b2:65:4c:85:15:35:63:64:8a:d0:3f:2e:8b: 77:6c:b0:ae:43:bf:0c:ad:70:21:af:d0:7d:ac:56:58:56:d3: 90:b9:06:0d:85:0b:2c:c2:1f:04:81:e8:ff:69:c7:a6:32:04: 0c:06:8e:cd -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUO2aQd0csDKf47LfJtnnw2CYO3KAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxMVoX DTI3MDUwMTA5MjcxMVowMzExMC8GA1UEAxMoNzFCNkQ1ODNCOUJFMkZDQTJEREU4 RjZCMDBGRjJCRTNEQzAwQTQyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9YB9tW/+uTCJLMLSVV/MJOhWwGxd/muu6c21/S1oR0ClErxGbyYXCvJwVs ucHUYFqH28IEFuBpDX36F7C74xhUB3NnxrEExTQvOcnVagCQt1Fn2N6CtTxwD/Sn VLHoIhPQ4qgrgYfa33mUOaWjSwYvEPMwry55KtydrSBr2WBzIULE43qvr40xuCF4 05vhxYyI/5CDoBV4JhAAGIVCCt9mFbEmwbGqaaDVe2G20ElYcYDVkqnhdK47NPZx hGcuhHhshpuxasyfMtghdedjpBtqwGbWKLMPHZJJPMPTBlxtjcV5Yt0kFIPcVMq7 9urtL2fXdUwc7s6aFGqOBhKyUkcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRxttWD ub4vyi3ej2sA/yvj3ACkITAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9orAMA0GCSqGSIb3DQEBCwUAA4IBAQA/jkSaxWkrH6gZUKDdgeYQ AYoadC2Mj9V3t6tgUyG3fQzJPA7ydABviVMeT3J/TBi0JaaMJpUthQ2FkDIrpCdb ZJRqj895JQW/1a1HEoWu0bAIPVIxIBPbhIPMn2pfXq8OO1wiEpdA4QY/izbsBeIf Ip/9SuyksX8OQOHu9jP6kS7fh9aVxE83Iai0W+d/gQtTOrLqnkuElFZLqy/ehjRS KFxNhZkLtt3t6OWDMwFBQAeqAbCA+rUCjhM59VH0xI7hDseM9Ltwpf8dg7JlTIUV NWNkitA/Lot3bLCuQ78MrXAhr9B9rFZYVtOQuQYNhQsswh8Egej/acemMgQMBo7N -----END CERTIFICATE-----Generated at Sun May 3 00:42:14 2026 by rpki-client