$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142370.roa File: AS142370.roa (raw, json) Hash identifier: 2xG2AC3KUEluV/cLMvJg+5oz31OYAyeW90v+GtieXD0= Subject key identifier: E1:95:00:58:E3:FF:55:5C:B7:5E:43:44:0F:1D:B8:A5:80:51:1A:48 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 041EBBDE4846D8FE1C5732496B18714F835A3255 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142370.roa Signing time: Sat 02 May 2026 21:25:53 +0000 ROA not before: Sat 02 May 2026 21:20:53 +0000 ROA not after: Sat 01 May 2027 21:25:53 +0000 asID: 142370 IP address blocks: 2001:df1:c1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1e:bb:de:48:46:d8:fe:1c:57:32:49:6b:18:71:4f:83:5a:32:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:53 2026 GMT Not After : May 1 21:25:53 2027 GMT Subject: CN=E1950058E3FF555CB75E43440F1DB8A580511A48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:87:cc:e3:ba:ed:c9:6e:92:c4:99:5c:e6: 65:db:21:ef:4b:f2:a0:61:89:83:76:3d:ae:00:af: 64:26:45:24:77:03:20:40:f3:b4:89:93:81:b4:3f: 65:05:e9:4d:dc:57:67:f1:4a:18:43:23:4a:39:cb: c3:77:af:b2:a9:b8:c2:68:1f:90:0f:8c:15:9d:56: a9:d5:8a:a8:99:94:0b:16:87:3d:7b:1c:33:9d:01: db:1d:dc:95:c1:0a:7f:29:e5:af:d6:c5:0c:c6:d0: 04:34:7e:11:09:be:56:8e:31:ee:a3:0a:0a:88:ff: 82:76:88:3a:d9:94:28:de:30:2c:1a:ca:e3:09:11: a3:59:0d:6a:06:3b:53:31:10:a3:42:3f:d2:de:23: 85:aa:af:af:9d:72:72:7b:81:ac:f0:9b:30:53:ad: 46:99:39:50:61:97:16:da:1e:f8:47:23:01:76:f2: 8f:51:54:f6:d4:d7:1d:f0:49:eb:44:3d:64:6f:2c: 76:5f:15:a8:d4:4b:f2:3f:b2:2a:cc:c6:88:c4:31: 8d:bb:6b:0d:92:fb:bd:60:b8:61:2e:53:10:30:b2: 3d:88:e7:fa:44:7a:f8:46:1c:2a:d9:56:29:5a:f6: b0:da:88:ba:23:83:14:04:e6:97:3f:3c:58:bb:0b: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:00:58:E3:FF:55:5C:B7:5E:43:44:0F:1D:B8:A5:80:51:1A:48 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:c1c0::/48 Signature Algorithm: sha256WithRSAEncryption a7:51:27:1a:b1:62:fa:a0:72:91:8c:27:b8:73:25:6f:ef:26: a3:05:68:68:cb:c0:e1:6a:7b:b4:2a:d3:80:88:93:02:36:32: 28:a6:5b:c6:9d:d8:48:2b:d7:33:fa:94:08:73:2c:db:f6:00: 27:e9:e6:1c:45:38:75:be:b1:74:ea:68:e7:95:35:ef:82:54: 81:10:ea:df:65:19:b5:f1:d9:b8:a5:62:a2:db:88:97:4c:6c: be:fa:bf:38:fb:0c:c3:a1:25:b6:05:72:d7:61:8b:45:40:a0: 20:1f:79:c5:71:e5:73:46:7d:38:33:56:26:77:65:8f:3e:3b: 5b:6e:5c:f7:5e:c5:a9:68:97:0f:40:5f:ca:a9:cd:cf:0c:5b: ac:43:fb:2f:7a:39:ae:74:6d:1f:a6:44:e6:7e:f7:47:6e:d2: de:cf:ea:24:73:3a:1e:b4:47:09:52:ca:0b:64:7e:22:9b:ae: db:81:04:3d:6d:2b:76:f2:48:60:36:29:77:8a:c4:c2:31:9b: 35:33:8d:dc:d4:b4:db:03:7e:18:6a:ba:4b:cf:12:b3:ff:a1: b3:93:ea:3a:2a:a3:f0:d2:3b:08:d7:09:c5:86:96:aa:c1:48: 85:71:85:97:e3:ac:03:3f:4c:de:71:47:5a:42:20:f1:d1:b4: 50:d4:f7:db -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUBB673khG2P4cVzJJaxhxT4NaMlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjA1M1oX DTI3MDUwMTIxMjU1M1owMzExMC8GA1UEAxMoRTE5NTAwNThFM0ZGNTU1Q0I3NUU0 MzQ0MEYxREI4QTU4MDUxMUE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbmh8zjuu3JbpLEmVzmZdsh70vyoGGJg3Y9rgCvZCZFJHcDIEDztImTgbQ/ ZQXpTdxXZ/FKGEMjSjnLw3evsqm4wmgfkA+MFZ1WqdWKqJmUCxaHPXscM50B2x3c lcEKfynlr9bFDMbQBDR+EQm+Vo4x7qMKCoj/gnaIOtmUKN4wLBrK4wkRo1kNagY7 UzEQo0I/0t4jhaqvr51ycnuBrPCbMFOtRpk5UGGXFtoe+EcjAXbyj1FU9tTXHfBJ 60Q9ZG8sdl8VqNRL8j+yKszGiMQxjbtrDZL7vWC4YS5TEDCyPYjn+kR6+EYcKtlW KVr2sNqIuiODFATmlz88WLsLAA8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBThlQBY 4/9VXLdeQ0QPHbilgFEaSDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzcwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8cHAMA0GCSqGSIb3DQEBCwUAA4IBAQCnUScasWL6oHKRjCe4cyVv 7yajBWhoy8Dhanu0KtOAiJMCNjIoplvGndhIK9cz+pQIcyzb9gAn6eYcRTh1vrF0 6mjnlTXvglSBEOrfZRm18dm4pWKi24iXTGy++r84+wzDoSW2BXLXYYtFQKAgH3nF ceVzRn04M1Ymd2WPPjtbblz3XsWpaJcPQF/Kqc3PDFusQ/svejmudG0fpkTmfvdH btLez+okczoetEcJUsoLZH4im67bgQQ9bSt28khgNil3isTCMZs1M43c1LTbA34Y arpLzxKz/6Gzk+o6KqPw0jsI1wnFhpaqwUiFcYWX46wDP0zecUdaQiDx0bRQ1Pfb -----END CERTIFICATE-----Generated at Sun May 3 00:42:04 2026 by rpki-client