$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142310.roa File: AS142310.roa (raw, json) Hash identifier: 1ufqFNnZdXmGVord4gz56UJHDHI2TxmDrAV0MhrZ4fA= Subject key identifier: C3:5E:83:84:9E:C9:7F:99:8D:AA:8B:E1:0A:C5:27:7D:0D:CC:68:31 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F5673027524BBBF58C23525C98AD8078C21BC9F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142310.roa Signing time: Sat 02 May 2026 08:36:40 +0000 ROA not before: Sat 02 May 2026 08:31:40 +0000 ROA not after: Sat 01 May 2027 08:36:40 +0000 asID: 142310 IP address blocks: 2407:a540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:56:73:02:75:24:bb:bf:58:c2:35:25:c9:8a:d8:07:8c:21:bc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:31:40 2026 GMT Not After : May 1 08:36:40 2027 GMT Subject: CN=C35E83849EC97F998DAA8BE10AC5277D0DCC6831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:c3:a1:38:6e:92:0a:52:ae:bf:6b:ed:6a:66: 6d:96:dc:fd:bc:7c:f9:55:54:ff:91:7d:57:41:1a: 05:27:7a:76:95:9c:f2:86:82:b6:0d:eb:47:bd:b6: 42:0f:fa:ab:5a:ef:e4:b1:f0:19:72:80:93:11:96: 37:a2:a7:f8:29:15:83:40:07:d1:08:39:6d:31:2e: b1:50:8b:90:9d:fa:06:21:28:79:d0:79:85:9c:f1: ad:77:2c:54:b8:19:65:b0:19:04:45:8e:f1:98:be: 07:e0:1c:67:ba:48:e0:28:a1:8f:d1:74:5a:20:8c: a0:4f:a9:cc:c1:a0:fc:2b:f6:24:81:1e:c7:17:a5: 80:3f:a4:b0:a8:b9:a6:a0:68:96:b2:fe:22:63:7b: 26:16:7f:d0:a7:83:14:1f:e9:12:4a:98:46:c2:fe: 51:3f:56:9c:8b:9f:16:d9:93:24:35:28:3f:c6:b8: c8:85:68:56:57:f9:5b:d9:1c:38:73:6c:2b:e6:2b: bd:03:ab:e9:ed:b4:a3:3d:d8:b3:85:8d:05:17:f3: 18:f5:1d:bd:de:7e:ad:dd:f6:81:6d:78:4f:75:ed: df:43:ad:bc:af:26:be:dd:82:56:a4:b3:8e:dd:fc: 8d:e1:9d:47:3b:3e:6f:94:41:7a:c7:fa:ca:59:db: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:83:84:9E:C9:7F:99:8D:AA:8B:E1:0A:C5:27:7D:0D:CC:68:31 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142310.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a540::/32 Signature Algorithm: sha256WithRSAEncryption 33:c2:87:ad:c0:da:f0:b0:0a:dc:ae:ef:6d:4d:2e:c3:13:66: 2a:3b:a0:a5:d8:19:fc:f5:dd:8a:97:b4:a8:fb:d5:3d:03:55: 5f:5f:ba:ca:1c:d9:97:a4:da:31:cb:3a:b0:3a:ac:21:a5:cd: ca:97:62:51:55:c9:f5:07:3f:b3:8f:0c:67:9c:03:cd:4a:aa: 01:7d:20:40:6a:d2:c1:de:db:6c:5a:b4:4f:fd:36:d0:78:32: 38:a6:5d:ef:63:d6:6b:3b:68:da:b5:c7:74:fb:4b:45:ad:6d: 2d:98:e5:87:ca:28:cf:9d:3e:d5:00:d4:47:d2:3e:6c:13:09: 9c:10:a5:97:5b:51:00:bb:11:f6:31:3b:ee:6f:b7:4b:85:8c: ef:54:2a:9c:15:a6:0f:ad:3e:98:ff:12:85:f3:81:12:65:b7: 58:e4:29:71:c6:bb:91:8e:6a:92:08:0c:95:b9:cc:e9:df:52: f6:c0:ea:a5:9b:39:d5:62:9c:36:76:75:0e:9e:e9:4f:28:48: ab:c1:09:04:af:b3:e0:a4:f6:d9:47:d0:ad:b2:90:41:dc:aa: 32:76:8d:8f:3f:fd:4d:2e:c5:9f:6b:7e:e6:9a:4b:e9:a8:a5: 0b:d2:51:ee:52:80:09:c3:f1:88:2e:10:44:2d:d1:2a:30:1e: 49:db:01:9b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUL1ZzAnUku79YwjUlyYrYB4whvJ8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzE0MFoX DTI3MDUwMTA4MzY0MFowMzExMC8GA1UEAxMoQzM1RTgzODQ5RUM5N0Y5OThEQUE4 QkUxMEFDNTI3N0QwRENDNjgzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPzDoThukgpSrr9r7WpmbZbc/bx8+VVU/5F9V0EaBSd6dpWc8oaCtg3rR722 Qg/6q1rv5LHwGXKAkxGWN6Kn+CkVg0AH0Qg5bTEusVCLkJ36BiEoedB5hZzxrXcs VLgZZbAZBEWO8Zi+B+AcZ7pI4Cihj9F0WiCMoE+pzMGg/Cv2JIEexxelgD+ksKi5 pqBolrL+ImN7JhZ/0KeDFB/pEkqYRsL+UT9WnIufFtmTJDUoP8a4yIVoVlf5W9kc OHNsK+YrvQOr6e20oz3Ys4WNBRfzGPUdvd5+rd32gW14T3Xt30OtvK8mvt2CVqSz jt38jeGdRzs+b5RBesf6ylnbY7ECAwEAAaOCAc0wggHJMB0GA1UdDgQWBBTDXoOE nsl/mY2qi+EKxSd9DcxoMTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzEwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAelQDANBgkqhkiG9w0BAQsFAAOCAQEAM8KHrcDa8LAK3K7vbU0uwxNm KjugpdgZ/PXdipe0qPvVPQNVX1+6yhzZl6TaMcs6sDqsIaXNypdiUVXJ9Qc/s48M Z5wDzUqqAX0gQGrSwd7bbFq0T/020HgyOKZd72PWazto2rXHdPtLRa1tLZjlh8oo z50+1QDUR9I+bBMJnBCll1tRALsR9jE77m+3S4WM71QqnBWmD60+mP8ShfOBEmW3 WOQpcca7kY5qkggMlbnM6d9S9sDqpZs51WKcNnZ1Dp7pTyhIq8EJBK+z4KT22UfQ rbKQQdyqMnaNjz/9TS7Fn2t+5ppL6ailC9JR7lKACcPxiC4QRC3RKjAeSdsBmw== -----END CERTIFICATE-----Generated at Sun May 3 00:42:23 2026 by rpki-client