$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS142566.roa File: AS142566.roa (raw, json) Hash identifier: X+k1W6YUCQxNbX/6r6S8aCbUsuNELVvF50XIzVB/xfQ= Subject key identifier: 05:1D:BA:CB:10:52:0A:62:73:BC:05:60:FA:AE:27:9A:C6:F9:AA:1F Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 0A0089428AD386E269175044A34844F358D94DB4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142566.roa Signing time: Sat 02 May 2026 09:27:17 +0000 ROA not before: Sat 02 May 2026 09:22:17 +0000 ROA not after: Sat 01 May 2027 09:27:17 +0000 asID: 142566 IP address blocks: 2001:df6:c640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:00:89:42:8a:d3:86:e2:69:17:50:44:a3:48:44:f3:58:d9:4d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 09:22:17 2026 GMT Not After : May 1 09:27:17 2027 GMT Subject: CN=051DBACB10520A6273BC0560FAAE279AC6F9AA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:0d:99:00:a9:9a:b3:f7:e5:30:59:cd:48: 5f:45:50:4e:c0:08:7c:dd:23:61:ca:20:3f:a4:9e: 19:e9:ef:d1:db:53:e2:ad:4b:74:04:bf:ca:5b:c3: 9a:93:62:f0:31:72:e1:fc:2b:5d:02:f2:36:a7:fb: b1:38:d7:af:69:f8:95:4f:e1:2b:c6:8d:a6:a4:05: 10:8b:fb:86:6b:83:b2:cb:3d:b8:3e:0e:36:be:da: ae:3f:9a:2c:ab:02:b1:3c:b6:41:7a:ae:9d:e9:8e: 8a:3d:8d:62:35:e3:9a:6e:9f:4a:8c:8d:19:40:f7: c4:5c:32:52:d1:0f:1a:ef:e2:f8:47:27:a2:75:f5: d6:0e:78:40:96:75:25:ba:68:35:11:fa:c8:2e:65: 7e:dd:1b:97:8e:24:4d:2f:cc:ca:ac:5b:55:d6:c8: c6:f1:12:f1:04:4a:57:ce:42:c7:32:de:3d:75:3c: ab:36:e1:4e:94:9d:db:fa:cc:7f:d4:c4:8d:a6:03: 76:92:34:e0:ff:e4:aa:c7:d4:be:38:10:48:d2:b4: 0f:73:33:53:d1:68:47:c8:af:fd:c3:d4:2e:04:ac: cd:b5:5c:38:89:7a:71:33:e5:8f:63:7f:ca:86:10: f9:d2:b7:e9:7d:d9:7d:cd:71:db:de:59:ae:dc:34: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1D:BA:CB:10:52:0A:62:73:BC:05:60:FA:AE:27:9A:C6:F9:AA:1F X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS142566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:c640::/48 Signature Algorithm: sha256WithRSAEncryption 41:68:73:b3:d4:40:fa:04:81:4c:8f:7c:c4:b1:3b:d7:91:57: 76:31:f3:2c:95:26:01:1d:69:2e:fe:b6:2a:36:f8:22:f5:0f: f2:e8:e7:8b:68:e5:1a:9b:5a:9c:33:1c:8c:9d:09:f9:cc:a7: c8:87:5a:2c:a0:ca:51:b0:9a:17:4d:c0:b6:b9:ce:9b:9f:d5: c4:ec:42:52:e8:51:29:c4:92:34:f7:a6:05:76:9b:84:35:3f: e5:42:6b:f5:50:30:f5:36:5f:d1:7a:bf:05:00:8a:2e:32:c3: 8e:dd:10:d9:c7:93:61:3b:e1:0e:19:c2:54:df:91:7c:c9:f2: f8:e8:5a:cf:c4:52:03:1e:9d:49:c5:55:ad:3a:d3:b4:16:ad: 56:a9:b2:b3:ae:da:71:7c:dc:65:ab:46:31:cc:6e:61:6e:16: 7c:61:6b:a4:3b:0b:6e:56:30:83:da:fe:25:af:64:78:78:2f: e1:99:9c:9e:d9:df:55:6b:92:c8:d8:7c:3b:7e:04:26:75:05: 22:36:9a:90:c0:99:e1:fe:4e:cd:a9:10:0e:40:c7:99:4f:05: 5a:47:f0:f6:5c:b5:6c:51:5b:d8:a0:ab:ae:9b:42:19:93:cd: 8d:de:be:65:cd:7e:82:41:06:3d:ec:09:91:d1:52:4b:07:b3: a4:2d:13:0b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUCgCJQorThuJpF1BEo0hE81jZTbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA5MjIxN1oX DTI3MDUwMTA5MjcxN1owMzExMC8GA1UEAxMoMDUxREJBQ0IxMDUyMEE2MjczQkMw NTYwRkFBRTI3OUFDNkY5QUExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKbDZkAqZqz9+UwWc1IX0VQTsAIfN0jYcogP6SeGenv0dtT4q1LdAS/ylvD mpNi8DFy4fwrXQLyNqf7sTjXr2n4lU/hK8aNpqQFEIv7hmuDsss9uD4ONr7arj+a LKsCsTy2QXqunemOij2NYjXjmm6fSoyNGUD3xFwyUtEPGu/i+EcnonX11g54QJZ1 JbpoNRH6yC5lft0bl44kTS/MyqxbVdbIxvES8QRKV85CxzLePXU8qzbhTpSd2/rM f9TEjaYDdpI04P/kqsfUvjgQSNK0D3MzU9FoR8iv/cPULgSszbVcOIl6cTPlj2N/ yoYQ+dK36X3Zfc1x295Zrtw0hFMCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBQFHbrL EFIKYnO8BWD6rieaxvmqHzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQyNTY2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN9sZAMA0GCSqGSIb3DQEBCwUAA4IBAQBBaHOz1ED6BIFMj3zEsTvX kVd2MfMslSYBHWku/rYqNvgi9Q/y6OeLaOUam1qcMxyMnQn5zKfIh1osoMpRsJoX TcC2uc6bn9XE7EJS6FEpxJI096YFdpuENT/lQmv1UDD1Nl/Rer8FAIouMsOO3RDZ x5NhO+EOGcJU35F8yfL46FrPxFIDHp1JxVWtOtO0Fq1WqbKzrtpxfNxlq0YxzG5h bhZ8YWukOwtuVjCD2v4lr2R4eC/hmZye2d9Va5LI2Hw7fgQmdQUiNpqQwJnh/k7N qRAOQMeZTwVaR/D2XLVsUVvYoKuum0IZk82N3r5lzX6CQQY97AmR0VJLB7OkLRML -----END CERTIFICATE-----Generated at Sun May 3 00:42:36 2026 by rpki-client