$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142347.roa File: AS142347.roa (raw, json) Hash identifier: sc2t9kJ6ROLc9GvSp9+1WE/5asWks+bmKZRdKsWWWvc= Subject key identifier: 67:38:1F:33:8E:EC:D2:B0:61:99:92:73:67:C7:EF:7D:07:48:7E:90 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1961A658394B2D996596854ADE5CBDE6388E2997 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142347.roa Signing time: Sat 02 May 2026 21:31:48 +0000 ROA not before: Sat 02 May 2026 21:26:48 +0000 ROA not after: Sat 01 May 2027 21:31:48 +0000 asID: 142347 IP address blocks: 2400:e520::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:61:a6:58:39:4b:2d:99:65:96:85:4a:de:5c:bd:e6:38:8e:29:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:26:48 2026 GMT Not After : May 1 21:31:48 2027 GMT Subject: CN=67381F338EECD2B06199927367C7EF7D07487E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:6a:1e:ef:4a:ae:db:1d:db:87:12:7e:20: 0a:55:76:7a:05:ea:de:e4:cb:7d:61:21:54:fd:55: ce:96:a0:2f:a0:40:ca:29:a3:a4:78:35:7e:2a:48: 9f:43:16:c3:29:17:12:00:98:78:87:9e:81:0b:14: f1:9d:a8:58:79:51:5f:17:86:ce:a9:62:51:24:8a: b6:2c:85:4c:93:d9:75:10:d6:f0:63:09:1f:74:a3: 9f:80:ce:10:21:88:7a:4e:a6:47:ad:52:1c:31:7b: 42:b2:b8:01:02:7e:f3:c9:4b:66:37:af:71:b7:3e: a6:c5:2a:87:e8:a6:e7:23:14:d3:10:e0:d3:3e:38: d6:90:ba:40:20:14:a2:4b:2c:53:23:1f:66:58:1d: 5b:92:29:f4:19:5f:a1:a6:77:bc:af:fd:ae:71:f7: fb:4a:32:96:28:8d:06:a6:c9:37:80:dc:05:43:af: f6:c2:44:0e:3f:80:0a:c0:ac:3d:9d:fe:d9:12:fc: 64:20:bf:4f:5b:93:96:76:4a:93:50:01:60:22:2e: a8:4d:dd:94:4b:63:86:37:94:bc:85:7c:a7:99:01: 42:0c:15:07:46:fc:8d:13:28:35:86:01:7f:a1:f9: 34:1a:39:ba:47:f0:7a:31:96:b1:b7:47:83:f5:00: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:38:1F:33:8E:EC:D2:B0:61:99:92:73:67:C7:EF:7D:07:48:7E:90 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142347.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:e520::/32 Signature Algorithm: sha256WithRSAEncryption 3a:ac:fe:9e:aa:b8:07:bf:67:e9:81:ea:23:16:a5:e6:e8:e8: 44:9a:2d:5a:31:b4:82:8b:a6:56:ab:77:26:48:9c:e0:23:5d: 97:42:31:88:e5:77:7f:92:1e:04:b5:92:29:e1:e5:ff:8a:6e: 79:1f:3c:d1:db:fc:b1:d5:c4:00:2c:9e:02:60:77:1f:cb:23: d0:09:fa:6d:39:46:d0:64:ec:52:f7:fc:17:6b:18:8b:29:f5: c1:97:bd:5c:92:21:d6:aa:b5:c9:ef:d9:95:bb:4d:e6:61:33: 3f:a3:2c:7b:54:fb:ec:56:3c:06:3c:87:9d:74:60:cf:f9:c6: ad:57:6b:14:d7:c0:72:53:69:39:69:9c:04:f6:e4:e1:04:a6: a2:01:04:ac:e3:5c:40:82:55:b9:4e:1c:cc:ac:e0:e3:54:66: c5:99:98:76:87:d6:6b:7d:c5:c9:37:6b:38:34:89:3b:8a:a2: 50:2e:d0:2c:19:f2:1b:19:d1:bd:67:55:01:62:53:a4:dc:00: 11:58:35:b0:d3:2a:72:e5:29:b2:40:2f:a5:f3:7d:fd:88:43: 66:09:d4:b9:1e:e5:90:cf:49:3b:4d:ae:07:cf:e4:39:98:c9: de:1d:8c:2e:71:9a:8f:c8:30:9b:73:05:7c:f9:8a:69:e8:2b: 8e:e1:62:73 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUGWGmWDlLLZllloVK3ly95jiOKZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjY0OFoX DTI3MDUwMTIxMzE0OFowMzExMC8GA1UEAxMoNjczODFGMzM4RUVDRDJCMDYxOTk5 MjczNjdDN0VGN0QwNzQ4N0U5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANmQah7vSq7bHduHEn4gClV2egXq3uTLfWEhVP1VzpagL6BAyimjpHg1fipI n0MWwykXEgCYeIeegQsU8Z2oWHlRXxeGzqliUSSKtiyFTJPZdRDW8GMJH3Sjn4DO ECGIek6mR61SHDF7QrK4AQJ+88lLZjevcbc+psUqh+im5yMU0xDg0z441pC6QCAU okssUyMfZlgdW5Ip9BlfoaZ3vK/9rnH3+0oyliiNBqbJN4DcBUOv9sJEDj+ACsCs PZ3+2RL8ZCC/T1uTlnZKk1ABYCIuqE3dlEtjhjeUvIV8p5kBQgwVB0b8jRMoNYYB f6H5NBo5ukfwejGWsbdHg/UAhSsCAwEAAaOCAc0wggHJMB0GA1UdDgQWBBRnOB8z juzSsGGZknNnx+99B0h+kDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzQ3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJADlIDANBgkqhkiG9w0BAQsFAAOCAQEAOqz+nqq4B79n6YHqIxal5ujo RJotWjG0goumVqt3Jkic4CNdl0IxiOV3f5IeBLWSKeHl/4pueR880dv8sdXEACye AmB3H8sj0An6bTlG0GTsUvf8F2sYiyn1wZe9XJIh1qq1ye/ZlbtN5mEzP6Mse1T7 7FY8BjyHnXRgz/nGrVdrFNfAclNpOWmcBPbk4QSmogEErONcQIJVuU4czKzg41Rm xZmYdofWa33FyTdrODSJO4qiUC7QLBnyGxnRvWdVAWJTpNwAEVg1sNMqcuUpskAv pfN9/YhDZgnUuR7lkM9JO02uB8/kOZjJ3h2MLnGaj8gwm3MFfPmKaegrjuFicw== -----END CERTIFICATE-----Generated at Sun May 3 00:42:16 2026 by rpki-client