$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142221.roa File: AS142221.roa (raw, json) Hash identifier: oY0hxXJ/RhQw/NbGNApLmbtcmo1AMEwCycocQtwnyVw= Subject key identifier: E2:AA:8E:AA:A9:C0:AB:0E:44:AD:D4:AA:41:F0:8D:A3:15:19:41:8D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 30AAE975315A5E8A682466E9DB24D971B16F37B0 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142221.roa Signing time: Sat 02 May 2026 08:37:17 +0000 ROA not before: Sat 02 May 2026 08:32:17 +0000 ROA not after: Sat 01 May 2027 08:37:17 +0000 asID: 142221 IP address blocks: 2001:df6:9540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:aa:e9:75:31:5a:5e:8a:68:24:66:e9:db:24:d9:71:b1:6f:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:32:17 2026 GMT Not After : May 1 08:37:17 2027 GMT Subject: CN=E2AA8EAAA9C0AB0E44ADD4AA41F08DA31519418D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:0f:72:17:fc:6c:37:32:dc:0b:f2:e9:fe: 10:3c:50:c3:ec:7c:7d:be:04:d5:47:e9:8a:fe:6b: 2b:b5:ab:bf:f8:fd:90:e3:4f:4b:85:48:62:f8:ef: 82:3c:2a:99:47:ac:32:85:39:d4:08:41:e2:92:f3: 30:19:ff:9a:c2:68:53:e6:09:dd:2f:ff:31:54:6c: c6:7a:d2:4c:12:22:73:c4:cc:a5:38:cd:ef:e9:26: 1b:3d:80:13:00:02:87:16:23:f6:3b:5e:24:f6:aa: aa:e0:eb:0a:12:2e:eb:a9:b1:df:60:37:c0:d4:54: 4b:42:ed:45:8d:e0:68:f2:1d:be:08:ca:97:f8:0b: d3:f4:df:fc:34:95:d6:f8:0b:1a:3c:23:a4:75:df: f3:8d:7e:19:2c:33:b1:32:4c:bb:fe:df:a1:83:66: b1:2d:b6:2c:de:62:35:66:a9:02:07:44:5e:0c:13: 94:e4:53:81:f2:bb:24:74:af:19:8d:2e:4d:57:d2: 2b:42:86:68:64:96:2e:b3:fa:b8:b9:e3:cf:05:71: ca:3d:9f:1f:99:5d:6a:f3:6e:31:05:47:05:a7:e1: 18:46:5f:f2:53:7f:09:cd:e2:65:9b:87:57:d5:5d: 8c:46:37:8c:5b:37:bd:cb:13:87:ef:8e:79:e7:b5: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:8E:AA:A9:C0:AB:0E:44:AD:D4:AA:41:F0:8D:A3:15:19:41:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9540::/48 Signature Algorithm: sha256WithRSAEncryption 42:b5:f2:80:23:bb:36:da:b0:8a:4f:e7:58:c6:79:d7:05:01: ef:02:f7:67:98:99:66:76:cc:c6:a0:54:30:96:b0:c0:c6:fc: ac:e1:13:02:b8:db:f7:2f:54:60:af:b9:0c:19:4c:3a:11:8d: 3d:cd:bb:ce:8e:a0:28:9b:ac:a6:6a:99:78:d5:f5:93:63:0c: a8:b8:8f:9b:d0:4b:e2:40:25:c5:33:38:14:52:59:c3:a6:fd: 8f:bd:e6:98:2c:05:42:bb:54:43:ff:b6:fa:a3:a7:d4:57:51: eb:e3:0e:1e:71:1c:84:b2:9a:38:fa:02:69:07:ff:8d:3d:55: 36:18:d2:12:9b:20:05:82:02:87:d1:14:54:17:af:16:01:34: 8d:ae:03:9b:3f:90:2b:9c:fd:a3:28:c9:1f:5a:d1:d3:df:6d: 8c:2b:90:41:2e:0d:f1:ac:2f:e1:d8:28:f7:6b:74:32:ec:65: 9b:46:c7:b7:88:28:d7:6c:27:0c:65:8a:be:cb:54:2d:c7:41: 2d:13:1c:54:e1:77:9c:0b:37:6d:1e:7c:78:48:6a:35:4c:2d: 05:c7:d6:7f:35:bd:99:5a:73:1f:ce:47:6a:e3:7d:29:f8:5e: bd:4d:d3:77:d4:43:90:3c:8e:0e:79:69:73:98:aa:68:85:fb: 5f:42:76:a0 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMKrpdTFaXopoJGbp2yTZcbFvN7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzIxN1oX DTI3MDUwMTA4MzcxN1owMzExMC8GA1UEAxMoRTJBQThFQUFBOUMwQUIwRTQ0QURE NEFBNDFGMDhEQTMxNTE5NDE4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAITZD3IX/Gw3MtwL8un+EDxQw+x8fb4E1Ufpiv5rK7Wrv/j9kONPS4VIYvjv gjwqmUesMoU51AhB4pLzMBn/msJoU+YJ3S//MVRsxnrSTBIic8TMpTjN7+kmGz2A EwAChxYj9jteJPaqquDrChIu66mx32A3wNRUS0LtRY3gaPIdvgjKl/gL0/Tf/DSV 1vgLGjwjpHXf841+GSwzsTJMu/7foYNmsS22LN5iNWapAgdEXgwTlORTgfK7JHSv GY0uTVfSK0KGaGSWLrP6uLnjzwVxyj2fH5ldavNuMQVHBafhGEZf8lN/Cc3iZZuH V9VdjEY3jFs3vcsTh++Oeee1IoMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTiqo6q qcCrDkSt1KpB8I2jFRlBjTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjIxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9pVAMA0GCSqGSIb3DQEBCwUAA4IBAQBCtfKAI7s22rCKT+dYxnnX BQHvAvdnmJlmdszGoFQwlrDAxvys4RMCuNv3L1Rgr7kMGUw6EY09zbvOjqAom6ym apl41fWTYwyouI+b0EviQCXFMzgUUlnDpv2PveaYLAVCu1RD/7b6o6fUV1Hr4w4e cRyEspo4+gJpB/+NPVU2GNISmyAFggKH0RRUF68WATSNrgObP5ArnP2jKMkfWtHT 322MK5BBLg3xrC/h2Cj3a3Qy7GWbRse3iCjXbCcMZYq+y1Qtx0EtExxU4XecCzdt Hnx4SGo1TC0Fx9Z/Nb2ZWnMfzkdq430p+F69TdN31EOQPI4OeWlzmKpohftfQnag -----END CERTIFICATE-----Generated at Sun May 3 00:42:33 2026 by rpki-client