$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142346.roa File: AS142346.roa (raw, json) Hash identifier: XqEtxInJSsHb7eyFXJtxqDHEbgPH9SDKzJxstRdwCmM= Subject key identifier: 4A:AE:A7:E6:8E:BF:D4:EF:72:C2:BC:BA:0B:35:F5:FF:32:0A:70:66 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2C8FD6F679312382D36A944A7FD20411515B39CF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142346.roa Signing time: Sat 02 May 2026 21:25:55 +0000 ROA not before: Sat 02 May 2026 21:20:55 +0000 ROA not after: Sat 01 May 2027 21:25:55 +0000 asID: 142346 IP address blocks: 2001:df1:cc40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8f:d6:f6:79:31:23:82:d3:6a:94:4a:7f:d2:04:11:51:5b:39:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:55 2026 GMT Not After : May 1 21:25:55 2027 GMT Subject: CN=4AAEA7E68EBFD4EF72C2BCBA0B35F5FF320A7066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:f7:c0:17:bf:c3:3e:31:25:f5:1e:84:5f: ab:b7:85:ce:df:9b:b0:5c:2e:21:f9:77:58:89:e3: 1f:83:ee:fe:26:d2:d8:ac:2a:61:5d:f7:fb:b6:3b: 4c:09:54:22:76:8f:dd:7c:e6:17:cb:07:c1:7e:cf: cc:a4:80:f9:c2:34:09:2a:5f:a7:e5:ab:67:09:08: 23:40:3e:c9:98:6a:bb:f7:3f:ba:16:5d:b6:8d:96: 60:ea:16:46:2f:a5:5b:f9:b6:b5:79:0d:06:05:1d: 53:db:ef:15:b9:59:11:de:ea:87:ab:2d:d8:67:01: 50:85:e3:4c:b0:8e:77:3f:30:1d:f7:bb:a3:e3:34: 21:07:b0:f1:35:18:e6:7d:5d:b7:ad:2e:93:eb:01: d5:33:75:62:a3:d2:05:62:01:34:c1:cc:64:9e:67: f3:0d:80:74:70:bb:b3:23:f1:24:44:6d:8f:65:ab: 07:a3:9d:fd:01:cf:ba:02:be:51:c9:17:9f:cb:d7: f5:ae:5c:61:3e:9f:d2:2f:19:3c:8a:f3:8d:ed:36: 06:62:90:73:a8:7d:37:61:5e:fb:a3:03:02:68:47: 11:6a:8e:c6:cb:96:10:80:0d:b1:92:67:a5:d7:7c: 4c:73:3c:3e:c1:5e:ef:c0:18:b6:c3:87:6d:6a:a6: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:A7:E6:8E:BF:D4:EF:72:C2:BC:BA:0B:35:F5:FF:32:0A:70:66 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142346.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:cc40::/48 Signature Algorithm: sha256WithRSAEncryption 3a:66:85:c3:0c:28:ef:a0:9c:5c:86:c6:78:4f:76:6d:a2:e9: 84:70:dd:22:a6:c0:f0:30:b2:fe:be:a7:57:7a:84:7b:f7:fc: c9:f0:ac:23:fd:b6:a2:55:10:b3:ff:a9:2c:0c:0c:07:2c:ac: 4f:60:e3:a1:e1:e8:1e:11:1e:f6:f4:ca:6c:40:6f:13:0a:35: c9:f7:a9:f8:22:90:64:91:d1:a0:84:bd:b0:5d:7d:ff:35:90: 6f:97:71:9e:48:f5:fc:35:9f:1c:87:5a:f5:36:a2:60:69:df: 65:fb:5d:76:b5:c6:ee:c8:cf:52:b5:50:45:9c:bb:5c:29:19: cc:92:e0:76:58:59:5b:61:f8:38:df:51:d6:71:bd:31:05:79: 76:17:d4:30:03:2b:97:2a:1d:ab:90:79:f1:0a:75:ba:2f:fe: bd:bd:46:28:c7:75:b7:e0:e1:82:66:5f:cd:44:65:b8:7f:6e: 9f:65:d8:ef:fd:56:d9:6a:0f:e0:59:03:c1:38:56:46:f8:fd: bb:aa:82:f2:c9:4a:c7:e8:6a:9d:47:01:d0:53:79:c9:17:22: db:b7:fb:be:e5:cd:41:79:90:4e:99:5e:cf:0b:85:f9:0a:06: 27:2c:fd:2f:9b:08:da:d2:21:e3:1a:25:aa:ec:ab:50:e9:40: 19:84:fb:56 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIULI/W9nkxI4LTapRKf9IEEVFbOc8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjA1NVoX DTI3MDUwMTIxMjU1NVowMzExMC8GA1UEAxMoNEFBRUE3RTY4RUJGRDRFRjcyQzJC Q0JBMEIzNUY1RkYzMjBBNzA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqT98AXv8M+MSX1HoRfq7eFzt+bsFwuIfl3WInjH4Pu/ibS2KwqYV33+7Y7 TAlUInaP3XzmF8sHwX7PzKSA+cI0CSpfp+WrZwkII0A+yZhqu/c/uhZdto2WYOoW Ri+lW/m2tXkNBgUdU9vvFblZEd7qh6st2GcBUIXjTLCOdz8wHfe7o+M0IQew8TUY 5n1dt60uk+sB1TN1YqPSBWIBNMHMZJ5n8w2AdHC7syPxJERtj2WrB6Od/QHPugK+ UckXn8vX9a5cYT6f0i8ZPIrzje02BmKQc6h9N2Fe+6MDAmhHEWqOxsuWEIANsZJn pdd8THM8PsFe78AYtsOHbWqm1EcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRKrqfm jr/U73LCvLoLNfX/MgpwZjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzQ2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8cxAMA0GCSqGSIb3DQEBCwUAA4IBAQA6ZoXDDCjvoJxchsZ4T3Zt oumEcN0ipsDwMLL+vqdXeoR79/zJ8Kwj/baiVRCz/6ksDAwHLKxPYOOh4egeER72 9MpsQG8TCjXJ96n4IpBkkdGghL2wXX3/NZBvl3GeSPX8NZ8ch1r1NqJgad9l+112 tcbuyM9StVBFnLtcKRnMkuB2WFlbYfg431HWcb0xBXl2F9QwAyuXKh2rkHnxCnW6 L/69vUYox3W34OGCZl/NRGW4f26fZdjv/VbZag/gWQPBOFZG+P27qoLyyUrH6Gqd RwHQU3nJFyLbt/u+5c1BeZBOmV7PC4X5CgYnLP0vmwja0iHjGiWq7KtQ6UAZhPtW -----END CERTIFICATE-----Generated at Sun May 3 01:44:17 2026 by rpki-client