$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142401.roa File: AS142401.roa (raw, json) Hash identifier: N1mFDTKgeNCS/AQl2EA8xEaJQa43D7MlSp60uzbTieI= Subject key identifier: 1C:00:D0:31:2D:F1:B4:ED:BC:C5:12:E7:38:98:08:35:D5:99:5D:8D Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 658649331888B8CFB99125BE92ECC28F0CB1ACFD Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142401.roa Signing time: Sat 02 May 2026 21:25:25 +0000 ROA not before: Sat 02 May 2026 21:20:25 +0000 ROA not after: Sat 01 May 2027 21:25:25 +0000 asID: 142401 IP address blocks: 2001:df1:9840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:86:49:33:18:88:b8:cf:b9:91:25:be:92:ec:c2:8f:0c:b1:ac:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:20:25 2026 GMT Not After : May 1 21:25:25 2027 GMT Subject: CN=1C00D0312DF1B4EDBCC512E738980835D5995D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:07:ce:64:32:d0:61:bb:47:69:60:fd:26: 1b:ca:98:01:89:af:ac:bf:b4:74:75:18:29:01:ab: e3:f8:45:eb:ed:50:b8:19:d8:ea:13:d2:f2:0a:dc: cb:c7:45:d7:a1:4f:ff:99:50:9c:da:eb:70:c3:52: 0d:fd:62:18:db:4c:53:84:ba:38:d8:d6:a4:4f:ab: 8b:e5:39:63:41:19:15:1e:a6:ce:c4:ef:2b:bf:11: b3:75:3b:00:b5:63:f0:50:0e:ef:66:94:61:9b:6a: 68:82:d4:7b:60:fb:19:87:ac:d0:d1:ce:aa:d0:c6: 8e:ef:7e:1a:b1:f7:02:a2:55:9e:5b:a0:63:99:6b: 3f:e6:0f:36:11:dc:0a:ce:fb:e5:1b:a0:db:82:57: ea:14:90:15:24:9c:b5:9f:6d:52:7e:15:fc:aa:37: 67:af:23:ab:11:33:cc:28:08:b2:de:0d:d6:3d:56: c2:56:a8:14:86:5a:4f:07:8d:96:a7:59:5f:c9:86: 2a:98:8a:4c:e0:ff:7d:64:86:3c:92:3a:b9:3c:cf: c5:da:33:8b:06:df:5e:20:3a:93:30:30:e4:ce:98: 87:46:e2:00:e1:4a:ae:e4:b6:80:63:b7:33:1e:b6: 81:12:40:50:64:53:af:cd:de:ca:ae:02:28:a0:61: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:00:D0:31:2D:F1:B4:ED:BC:C5:12:E7:38:98:08:35:D5:99:5D:8D X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142401.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9840::/48 Signature Algorithm: sha256WithRSAEncryption 9f:c0:78:27:28:1c:5f:d0:32:09:a6:f5:41:8c:40:a9:ad:f1: 60:2b:39:fe:da:f5:ce:15:94:15:0a:b7:bd:6e:ff:fc:d5:8a: 3b:f6:41:16:86:67:05:0d:ba:80:53:48:f8:f9:78:e6:26:4d: 96:6d:ee:3f:72:2b:7b:2d:f4:f4:87:b7:96:eb:fb:c6:a9:34: e5:d6:ac:71:ae:fc:28:c6:78:88:eb:2a:5b:ef:a9:5f:75:b1: 35:da:af:25:e0:c7:ec:ab:86:a8:0b:8f:8c:f3:92:6e:8c:f7: 87:57:4f:8b:98:b0:05:54:61:76:97:dc:50:b1:26:1b:87:83: d4:b7:13:ec:6d:21:79:df:33:ff:a5:e3:ab:e4:13:c3:a2:7d: 71:3a:4e:99:a9:37:9d:8f:26:91:73:cc:b3:ab:71:03:9b:9a: 99:89:79:77:a3:25:1a:7c:d3:af:31:2e:58:a9:7d:79:3d:d7: fd:5a:33:23:a6:4c:c0:1b:03:c8:cf:75:0b:c4:98:f5:b3:6d: c8:af:70:54:be:35:03:55:6f:ef:4f:57:39:58:17:22:e0:86: 85:7d:8d:28:49:71:f5:c8:11:34:44:88:9d:eb:a4:c1:f0:c3: 6e:ef:90:2a:c7:95:68:96:4f:89:eb:98:78:01:8e:a2:22:ca: ce:fd:9d:aa -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZYZJMxiIuM+5kSW+kuzCjwyxrP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjAyNVoX DTI3MDUwMTIxMjUyNVowMzExMC8GA1UEAxMoMUMwMEQwMzEyREYxQjRFREJDQzUx MkU3Mzg5ODA4MzVENTk5NUQ4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBBB85kMtBhu0dpYP0mG8qYAYmvrL+0dHUYKQGr4/hF6+1QuBnY6hPS8grc y8dF16FP/5lQnNrrcMNSDf1iGNtMU4S6ONjWpE+ri+U5Y0EZFR6mzsTvK78Rs3U7 ALVj8FAO72aUYZtqaILUe2D7GYes0NHOqtDGju9+GrH3AqJVnlugY5lrP+YPNhHc Cs775Rug24JX6hSQFSSctZ9tUn4V/Ko3Z68jqxEzzCgIst4N1j1WwlaoFIZaTweN lqdZX8mGKpiKTOD/fWSGPJI6uTzPxdoziwbfXiA6kzAw5M6Yh0biAOFKruS2gGO3 Mx62gRJAUGRTr83eyq4CKKBhGWcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQcANAx LfG07bzFEuc4mAg11ZldjTAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyNDAxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8ZhAMA0GCSqGSIb3DQEBCwUAA4IBAQCfwHgnKBxf0DIJpvVBjECp rfFgKzn+2vXOFZQVCre9bv/81Yo79kEWhmcFDbqAU0j4+XjmJk2Wbe4/cit7LfT0 h7eW6/vGqTTl1qxxrvwoxniI6ypb76lfdbE12q8l4Mfsq4aoC4+M85JujPeHV0+L mLAFVGF2l9xQsSYbh4PUtxPsbSF53zP/peOr5BPDon1xOk6ZqTedjyaRc8yzq3ED m5qZiXl3oyUafNOvMS5YqX15Pdf9WjMjpkzAGwPIz3ULxJj1s23Ir3BUvjUDVW/v T1c5WBci4IaFfY0oSXH1yBE0RIid66TB8MNu75Aqx5Volk+J65h4AY6iIsrO/Z2q -----END CERTIFICATE-----Generated at Sun May 3 01:44:16 2026 by rpki-client