$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa File: AS142264.roa (raw, json) Hash identifier: kjtF8n9ybT00N5Z4nVPAdhdVo5oHbZUDA587aD4LkAE= Subject key identifier: 86:A1:69:B9:75:F8:78:8C:2E:89:05:68:94:48:52:07:C4:06:B7:10 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3EB5E7F9A309CDD6A443557D29FBCA716E7AA76B Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa Signing time: Sat 02 May 2026 09:27:14 +0000 ROA not before: Sat 02 May 2026 09:22:14 +0000 ROA not after: Sat 01 May 2027 09:27:14 +0000 asID: 142264 IP address blocks: 2001:df6:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b5:e7:f9:a3:09:cd:d6:a4:43:55:7d:29:fb:ca:71:6e:7a:a7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:14 2026 GMT Not After : May 1 09:27:14 2027 GMT Subject: CN=86A169B975F8788C2E89056894485207C406B710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:64:ff:58:e6:ae:b8:5b:de:38:c6:5a:50: 55:47:f1:41:39:01:85:ed:28:df:97:42:83:00:36: d0:fe:52:e0:70:42:4f:c2:bc:85:77:cd:58:21:29: 5d:cc:2d:cd:82:99:fe:68:bb:11:54:0f:18:47:19: 60:dc:de:df:81:32:56:e8:04:0c:2c:42:b7:4a:61: f4:fe:34:f0:9d:0b:6b:2b:3e:fd:c9:2a:4f:75:21: 45:0d:e7:25:38:f9:7f:5c:35:d6:eb:2b:31:2c:5f: ce:23:c0:a7:96:0c:ae:50:2e:73:88:28:1e:cc:b5: 0c:34:59:e8:99:28:17:57:86:42:0b:14:73:7e:65: bd:bc:7a:9c:0c:5f:e9:1d:3f:95:fa:70:23:13:e4: 96:8d:c9:ca:db:51:78:d4:fe:8b:ee:96:68:26:79: f5:bf:a6:b4:e1:d7:53:cc:8c:b8:9b:d1:fa:c0:ca: 47:b4:71:38:b2:23:67:b7:28:05:d2:22:ed:4c:77: c9:25:d0:83:aa:93:7d:7b:7c:38:cf:ab:d4:f8:d8: 29:0a:2f:f2:6b:dd:da:4c:fb:2d:ca:56:d4:d7:69: 3a:8e:68:44:06:57:a6:ee:57:7e:69:72:b8:eb:a9: 63:32:16:b8:72:6e:59:97:b4:73:8a:76:55:c3:6b: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:69:B9:75:F8:78:8C:2E:89:05:68:94:48:52:07:C4:06:B7:10 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142264.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:ac40::/48 Signature Algorithm: sha256WithRSAEncryption 83:d0:65:33:cb:e2:76:e5:9f:f5:43:85:cc:14:37:84:fc:e0: 97:49:ee:4c:25:92:25:1b:33:80:75:57:fe:00:84:6b:4c:4c: 35:93:e7:65:c6:d4:80:b0:91:56:25:ed:2a:6c:ce:55:f0:56: 95:1b:3d:00:50:96:1e:bf:4c:ff:c1:b8:23:91:2c:98:1c:71: ac:2a:cb:79:e6:28:7c:e1:67:47:d1:93:1d:f2:8e:8a:fd:93: ba:11:b6:06:49:3a:24:07:6d:f7:13:d6:4c:da:a5:a2:3b:c0: 59:13:07:64:78:c1:7e:78:8f:9f:00:8f:09:f2:07:77:09:44: fa:df:f1:e0:75:86:4c:81:93:28:0c:49:3e:b7:0c:a7:6d:d2: 7e:01:9c:20:33:93:81:1c:ad:7e:c1:ee:66:16:ab:f3:c4:db: b2:fa:af:16:98:98:55:ea:f9:6a:06:fe:a6:02:83:11:3b:f5: d5:1b:3b:ff:61:99:47:72:67:ef:f6:3c:77:d2:fb:83:6e:a6: c0:ee:d9:02:52:b9:af:e1:14:47:82:ea:14:a4:ef:d9:4b:d0: 49:a8:35:0d:8b:ae:a2:d5:f9:15:50:3e:0c:3f:5f:30:00:04: e1:af:b1:d0:8b:95:cd:96:2d:61:e6:02:8c:b0:56:44:3a:7e: 80:22:2c:f1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUPrXn+aMJzdakQ1V9KfvKcW56p2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxNFoX DTI3MDUwMTA5MjcxNFowMzExMC8GA1UEAxMoODZBMTY5Qjk3NUY4Nzg4QzJFODkw NTY4OTQ0ODUyMDdDNDA2QjcxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJCgZP9Y5q64W944xlpQVUfxQTkBhe0o35dCgwA20P5S4HBCT8K8hXfNWCEp XcwtzYKZ/mi7EVQPGEcZYNze34EyVugEDCxCt0ph9P408J0Lays+/ckqT3UhRQ3n JTj5f1w11usrMSxfziPAp5YMrlAuc4goHsy1DDRZ6JkoF1eGQgsUc35lvbx6nAxf 6R0/lfpwIxPklo3JyttReNT+i+6WaCZ59b+mtOHXU8yMuJvR+sDKR7RxOLIjZ7co BdIi7Ux3ySXQg6qTfXt8OM+r1PjYKQov8mvd2kz7LcpW1NdpOo5oRAZXpu5Xfmly uOupYzIWuHJuWZe0c4p2VcNrjD8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSGoWm5 dfh4jC6JBWiUSFIHxAa3EDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMjY0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9qxAMA0GCSqGSIb3DQEBCwUAA4IBAQCD0GUzy+J25Z/1Q4XMFDeE /OCXSe5MJZIlGzOAdVf+AIRrTEw1k+dlxtSAsJFWJe0qbM5V8FaVGz0AUJYev0z/ wbgjkSyYHHGsKst55ih84WdH0ZMd8o6K/ZO6EbYGSTokB233E9ZM2qWiO8BZEwdk eMF+eI+fAI8J8gd3CUT63/HgdYZMgZMoDEk+twynbdJ+AZwgM5OBHK1+we5mFqvz xNuy+q8WmJhV6vlqBv6mAoMRO/XVGzv/YZlHcmfv9jx30vuDbqbA7tkCUrmv4RRH guoUpO/ZS9BJqDUNi66i1fkVUD4MP18wAAThr7HQi5XNli1h5gKMsFZEOn6AIizx -----END CERTIFICATE-----Generated at Sun May 3 00:41:13 2026 by rpki-client