$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142377.roa File: AS142377.roa (raw, json) Hash identifier: ut8TWf5n6gQ9wL4CAUPOW0KCV8B5e2hSO4rxpDrR/2M= Subject key identifier: 79:65:13:5E:6E:82:FF:03:7F:A7:D9:C5:BB:8C:46:BD:58:87:BB:60 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 1B716A265ADADEF41AB9D77BDF4F36796B84F4F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142377.roa Signing time: Sat 02 May 2026 09:25:40 +0000 ROA not before: Sat 02 May 2026 09:20:40 +0000 ROA not after: Sat 01 May 2027 09:25:40 +0000 asID: 142377 IP address blocks: 2001:df2:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:71:6a:26:5a:da:de:f4:1a:b9:d7:7b:df:4f:36:79:6b:84:f4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:20:40 2026 GMT Not After : May 1 09:25:40 2027 GMT Subject: CN=7965135E6E82FF037FA7D9C5BB8C46BD5887BB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:18:e7:eb:87:27:aa:39:96:c7:f4:59:9b: 22:c3:61:70:c6:39:5d:77:c9:32:79:ec:6d:94:88: 68:ca:e9:58:ba:13:ad:1d:93:88:ab:e5:1e:0d:fb: 5b:33:5e:49:d5:f7:23:89:1f:44:ba:63:fa:bb:7f: 8f:98:bd:d6:34:ef:49:67:ee:8f:85:26:39:30:9c: 69:d9:bf:e7:97:11:2d:bb:e5:7f:5b:54:a5:5a:2a: be:f1:1a:62:a1:d3:0f:04:64:d0:a3:9d:bc:ec:76: 16:35:96:0c:41:b5:2a:6f:a4:73:89:de:a9:4c:bb: fc:0f:aa:b8:3f:b0:1e:e2:0d:85:d4:a8:c0:42:ed: 40:d2:5f:ed:b0:c1:74:7a:0f:e7:f9:e7:3e:c4:39: ae:03:ad:1d:d9:33:6c:7d:62:85:e7:b7:5f:b6:24: c1:33:57:45:b8:e2:59:a9:11:11:91:69:5c:1e:4d: 59:a0:74:fd:4e:4f:a5:73:f9:64:48:cf:5a:4f:b2: 89:2f:c3:a8:b4:9e:fd:fa:4c:aa:01:8b:4b:3b:79: 4f:0a:b7:c7:37:ae:68:af:25:ef:43:49:e3:40:7a: a3:e3:4c:07:71:f7:78:d6:07:e0:b6:34:8e:53:d9: a3:d7:4c:f5:cb:9a:a5:50:4f:29:b1:a8:2d:65:c0: 14:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:13:5E:6E:82:FF:03:7F:A7:D9:C5:BB:8C:46:BD:58:87:BB:60 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 38:5b:ff:fc:f9:5e:94:35:08:85:a6:7b:45:1f:ca:49:c7:13: bc:6f:c1:15:6b:48:fe:b5:e9:fe:9e:27:b6:74:f1:15:5e:02: 03:bd:83:d8:f4:7a:95:bd:0d:a5:84:d1:4d:ca:48:92:52:4a: d1:bc:e5:91:ab:4b:5a:bb:08:87:9f:f1:65:30:4e:c3:1f:0d: e0:d1:88:ee:b1:f4:00:8b:3d:25:1c:15:6c:bb:ad:6a:84:de: a4:ed:73:c0:fe:c3:5a:0d:fa:27:ef:d6:ba:1c:ce:1f:b6:e8: 28:9c:c5:8c:ac:a4:7e:f3:85:36:df:06:e1:04:06:e3:9c:7d: cf:e8:48:d5:ed:ed:70:f4:5b:b0:7f:c2:bf:e7:d5:bd:a6:d0: f1:08:54:71:52:fd:1b:62:a5:7e:fa:c8:b4:e0:af:0d:0b:46: a1:e0:85:32:67:61:c6:fa:06:b9:b8:03:f9:f2:dc:45:2b:e1: b5:ba:46:0a:5e:ae:b2:81:b2:4d:6e:bc:61:8a:d4:38:34:02: 69:88:0e:e6:3f:27:14:09:6e:c8:62:f0:8a:9c:f9:ac:b2:6b: aa:e1:8a:7d:d5:9c:b1:27:40:3d:9d:73:3c:62:57:87:1f:f8: 0c:d2:e3:c6:75:19:5f:78:4e:16:06:9f:88:83:c1:fc:6a:0a: 79:2c:c8:bb -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUG3FqJlra3vQaudd73082eWuE9PQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjA0MFoX DTI3MDUwMTA5MjU0MFowMzExMC8GA1UEAxMoNzk2NTEzNUU2RTgyRkYwMzdGQTdE OUM1QkI4QzQ2QkQ1ODg3QkI2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTkGOfrhyeqOZbH9FmbIsNhcMY5XXfJMnnsbZSIaMrpWLoTrR2TiKvlHg37 WzNeSdX3I4kfRLpj+rt/j5i91jTvSWfuj4UmOTCcadm/55cRLbvlf1tUpVoqvvEa YqHTDwRk0KOdvOx2FjWWDEG1Km+kc4neqUy7/A+quD+wHuINhdSowELtQNJf7bDB dHoP5/nnPsQ5rgOtHdkzbH1ihee3X7YkwTNXRbjiWakREZFpXB5NWaB0/U5PpXP5 ZEjPWk+yiS/DqLSe/fpMqgGLSzt5Twq3xzeuaK8l70NJ40B6o+NMB3H3eNYH4LY0 jlPZo9dM9cuapVBPKbGoLWXAFPcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBR5ZRNe boL/A3+n2cW7jEa9WIe7YDAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyMzc3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8njAMA0GCSqGSIb3DQEBCwUAA4IBAQA4W//8+V6UNQiFpntFH8pJ xxO8b8EVa0j+ten+nie2dPEVXgIDvYPY9HqVvQ2lhNFNykiSUkrRvOWRq0tauwiH n/FlME7DHw3g0YjusfQAiz0lHBVsu61qhN6k7XPA/sNaDfon79a6HM4ftugonMWM rKR+84U23wbhBAbjnH3P6EjV7e1w9Fuwf8K/59W9ptDxCFRxUv0bYqV++si04K8N C0ah4IUyZ2HG+ga5uAP58txFK+G1ukYKXq6ygbJNbrxhitQ4NAJpiA7mPycUCW7I YvCKnPmssmuq4Yp91ZyxJ0A9nXM8YleHH/gM0uPGdRlfeE4WBp+Ig8H8agp5LMi7 -----END CERTIFICATE-----Generated at Sun May 3 00:41:50 2026 by rpki-client