$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142369.roa File: AS142369.roa (raw, json) Hash identifier: dB5RN5tvf/ClKpPDEILURxGSaXmGNt6cngAeuAOJ9nI= Subject key identifier: 67:37:70:83:04:E6:05:BE:44:0D:85:8E:0D:F0:D0:97:8C:37:A1:4A Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 15D88684052E04881D9B4F225B6DC1FF478ECE1F Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142369.roa Signing time: Sat 02 May 2026 21:23:19 +0000 ROA not before: Sat 02 May 2026 21:18:19 +0000 ROA not after: Sat 01 May 2027 21:23:19 +0000 asID: 142369 IP address blocks: 2001:df0:1740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d8:86:84:05:2e:04:88:1d:9b:4f:22:5b:6d:c1:ff:47:8e:ce:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:18:19 2026 GMT Not After : May 1 21:23:19 2027 GMT Subject: CN=6737708304E605BE440D858E0DF0D0978C37A14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:80:24:4a:8d:95:c4:3b:4e:dd:13:ca:26: 7a:2d:c1:92:8e:c3:cb:0a:7c:fe:d1:38:d4:33:4c: 7d:f2:88:f7:7c:55:45:d8:9a:46:60:a0:5a:c2:4c: a7:c3:e5:29:31:b2:c4:28:a1:47:19:8a:2c:11:df: 3a:4f:1b:4d:17:a3:3c:98:0c:d4:f6:4f:af:59:2f: 42:73:21:db:f8:1b:4d:d5:b4:eb:06:f9:6d:a6:87: f9:3d:ac:00:1f:c4:47:32:ec:0c:ee:0a:65:ee:a0: 03:5e:ba:ac:f1:e2:b7:60:0e:84:25:ac:70:09:ac: e7:1c:b7:88:ef:04:06:4b:62:3a:d8:1e:67:b0:e4: 67:78:24:14:e3:56:b2:00:bc:c9:6d:7d:22:f0:0d: 36:32:3b:c7:e5:70:b0:8c:a4:61:4e:dd:90:2a:0e: 88:04:60:8d:b2:ad:8a:bf:4e:b4:bc:97:49:82:a1: 80:5f:4a:9c:fa:68:eb:57:53:99:a7:aa:62:7c:c4: ce:52:b4:06:e6:77:ec:3c:6b:3f:a0:34:4e:6e:d0: 51:8f:11:f1:4e:0c:0e:5d:69:d4:57:ad:76:57:43: c7:e5:e1:59:74:d9:ab:88:b4:fc:a4:4a:8e:ee:fe: 7b:29:02:31:17:c5:be:5c:ea:5f:cc:8d:5a:92:aa: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:70:83:04:E6:05:BE:44:0D:85:8E:0D:F0:D0:97:8C:37:A1:4A X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:1740::/48 Signature Algorithm: sha256WithRSAEncryption 14:49:ea:ca:9e:fe:8c:ee:a7:f7:24:1a:6b:16:67:2c:7f:5d: 33:2f:35:e4:72:d3:d2:9b:05:01:3f:73:7f:35:c7:c9:62:a4: a1:b6:1d:a6:25:d1:63:b1:b0:c4:03:95:b8:f6:c6:35:3d:05: 00:0f:7f:0d:aa:b8:49:79:9f:24:3a:16:22:9f:32:53:26:44: 1e:f8:23:cb:1b:ef:84:93:6a:06:f6:81:2e:9c:2c:98:42:9c: 89:ec:aa:cf:96:4f:ef:60:32:fb:03:de:b6:f0:8c:cb:78:c2: 2a:63:66:33:58:28:f3:0c:0c:51:00:b7:3d:12:e7:42:41:3e: aa:54:b2:ab:c6:6a:ea:98:12:54:6e:b5:b7:ef:6d:e3:e4:f7: 94:56:24:cf:82:a4:25:b9:70:d4:86:82:f0:8d:ec:92:76:16: 55:27:0b:29:d7:f1:20:72:8a:78:5f:dc:85:50:e7:85:c1:cb: 8a:2d:a1:2a:85:92:07:83:a8:ec:03:fc:f2:d5:51:ff:e6:22: 3c:9f:e8:ac:15:ed:b4:d4:8d:35:b0:ce:07:2c:56:71:2c:02: 52:56:66:ce:dc:8b:41:be:0f:fe:d3:92:82:2b:66:d7:03:53: 69:d3:2d:72:34:43:83:41:80:17:a2:9c:69:7f:9e:07:3b:6c: 82:f2:67:d2 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUFdiGhAUuBIgdm08iW23B/0eOzh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMTgxOVoX DTI3MDUwMTIxMjMxOVowMzExMC8GA1UEAxMoNjczNzcwODMwNEU2MDVCRTQ0MEQ4 NThFMERGMEQwOTc4QzM3QTE0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB3gCRKjZXEO07dE8omei3Bko7Dywp8/tE41DNMffKI93xVRdiaRmCgWsJM p8PlKTGyxCihRxmKLBHfOk8bTRejPJgM1PZPr1kvQnMh2/gbTdW06wb5baaH+T2s AB/ERzLsDO4KZe6gA166rPHit2AOhCWscAms5xy3iO8EBktiOtgeZ7DkZ3gkFONW sgC8yW19IvANNjI7x+VwsIykYU7dkCoOiARgjbKtir9OtLyXSYKhgF9KnPpo61dT maeqYnzEzlK0BuZ37DxrP6A0Tm7QUY8R8U4MDl1p1FetdldDx+XhWXTZq4i0/KRK ju7+eykCMRfFvlzqX8yNWpKq2wcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRnN3CD BOYFvkQNhY4N8NCXjDehSjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzY5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8BdAMA0GCSqGSIb3DQEBCwUAA4IBAQAUSerKnv6M7qf3JBprFmcs f10zLzXkctPSmwUBP3N/NcfJYqShth2mJdFjsbDEA5W49sY1PQUAD38NqrhJeZ8k OhYinzJTJkQe+CPLG++Ek2oG9oEunCyYQpyJ7KrPlk/vYDL7A9628IzLeMIqY2Yz WCjzDAxRALc9EudCQT6qVLKrxmrqmBJUbrW3723j5PeUViTPgqQluXDUhoLwjeyS dhZVJwsp1/Egcop4X9yFUOeFwcuKLaEqhZIHg6jsA/zy1VH/5iI8n+isFe201I01 sM4HLFZxLAJSVmbO3ItBvg/+05KCK2bXA1Np0y1yNEODQYAXopxpf54HO2yC8mfS -----END CERTIFICATE-----Generated at Sun May 3 01:44:45 2026 by rpki-client