$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147097.roa File: AS147097.roa (raw, json) Hash identifier: EJvGn0MCYEX+tCXaKpmKlmlmSeLxiGVCegfItc+Wi9g= Subject key identifier: DD:7F:C4:19:60:78:9C:6D:CC:07:31:99:4E:ED:1C:D4:CF:CD:18:CA Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 082CB0162638E491F6E79999E0C109A2015483EF Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147097.roa Signing time: Sat 02 May 2026 21:26:42 +0000 ROA not before: Sat 02 May 2026 21:21:42 +0000 ROA not after: Sat 01 May 2027 21:26:42 +0000 asID: 147097 IP address blocks: 2001:df2:4640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2c:b0:16:26:38:e4:91:f6:e7:99:99:e0:c1:09:a2:01:54:83:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 21:21:42 2026 GMT Not After : May 1 21:26:42 2027 GMT Subject: CN=DD7FC41960789C6DCC0731994EED1CD4CFCD18CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:72:cf:be:36:55:f4:20:b9:10:78:8c:c6: 38:cc:e4:b5:c4:90:1c:c6:13:36:f7:61:43:52:33: 7d:99:2a:a2:a5:17:05:7b:dc:d0:88:8f:ca:bf:ec: de:2c:c3:c9:dd:34:fd:b0:2e:ed:ee:da:39:3b:5c: 94:f6:e1:1c:10:5c:7d:06:65:99:bc:17:78:35:f3: df:91:f6:10:a8:a7:e7:fc:59:87:38:a4:76:7e:f3: d8:01:32:ff:29:9c:04:2d:42:b9:64:f3:ac:b3:5d: 0c:80:ea:4a:b9:98:06:6e:1c:f2:44:8c:91:25:10: d4:30:cf:42:9d:2e:d2:d9:07:ec:a3:18:a0:15:6c: eb:6d:c0:da:66:fb:5f:6e:f2:12:cb:27:2b:5f:ca: d0:db:6b:4d:fe:26:6a:84:bc:94:5d:75:b9:61:27: 9a:24:36:15:21:24:90:8b:5d:b5:6e:72:02:6f:b5: 81:ed:68:b7:95:94:db:1b:8c:72:0a:2f:f7:76:45: ab:45:fb:ef:2b:58:a5:c4:2c:49:2a:24:4d:e5:c1: 6d:2d:7a:02:62:c4:83:18:60:12:97:85:91:4a:c4: 37:48:e6:57:13:2c:de:19:fc:45:0e:bc:f0:50:b1: 99:36:ff:c6:0f:55:67:bd:3f:44:3c:c3:f0:ec:19: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:C4:19:60:78:9C:6D:CC:07:31:99:4E:ED:1C:D4:CF:CD:18:CA X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147097.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:4640::/48 Signature Algorithm: sha256WithRSAEncryption 9f:5e:87:0c:d9:81:be:07:85:bd:19:57:5d:a9:cb:4d:d9:ea: df:33:b8:f9:2e:70:78:f6:73:0f:05:14:d2:68:ce:02:a1:75: 30:4e:92:68:80:2a:88:2e:9f:25:60:2c:37:27:b3:3b:dc:ed: 3b:38:84:b4:37:7f:ad:7f:21:43:34:c8:b1:15:e0:5d:4e:4f: 5f:90:68:0f:7c:b2:af:b2:13:35:c6:1c:85:ef:81:8e:6a:05: ef:1e:11:29:9c:83:fe:c7:a4:f2:c9:01:3c:42:41:d0:b3:34: 60:a2:35:07:38:0a:fd:a6:37:f8:5d:41:d0:04:a6:0a:03:8d: 35:24:2e:8c:49:ef:d8:9e:47:21:e9:99:91:1a:f2:73:76:26: e7:f8:f8:aa:f3:11:c9:9e:65:00:b4:8f:ac:63:89:30:98:16: 16:53:c9:91:9a:5e:1b:9c:2b:92:ab:c4:5b:fe:86:0e:52:d8: 51:c6:ef:37:5b:06:fa:d5:96:74:88:d2:8a:b1:a3:5c:9e:6e: d6:44:d4:0f:61:29:63:34:2b:f2:9a:1d:f7:95:26:40:46:d7: 69:e1:01:db:2d:23:1e:86:71:b0:65:ce:cc:67:05:87:a0:9b: 22:09:ee:5d:f1:f3:2a:c7:c9:32:10:85:4e:f5:d0:39:39:1b: 64:59:bd:f1 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUCCywFiY45JH255mZ4MEJogFUg+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjIxMjE0MloX DTI3MDUwMTIxMjY0MlowMzExMC8GA1UEAxMoREQ3RkM0MTk2MDc4OUM2RENDMDcz MTk5NEVFRDFDRDRDRkNEMThDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqRcs++NlX0ILkQeIzGOMzktcSQHMYTNvdhQ1IzfZkqoqUXBXvc0IiPyr/s 3izDyd00/bAu7e7aOTtclPbhHBBcfQZlmbwXeDXz35H2EKin5/xZhzikdn7z2AEy /ymcBC1CuWTzrLNdDIDqSrmYBm4c8kSMkSUQ1DDPQp0u0tkH7KMYoBVs623A2mb7 X27yEssnK1/K0NtrTf4maoS8lF11uWEnmiQ2FSEkkItdtW5yAm+1ge1ot5WU2xuM cgov93ZFq0X77ytYpcQsSSokTeXBbS16AmLEgxhgEpeFkUrEN0jmVxMs3hn8RQ68 8FCxmTb/xg9VZ70/RDzD8OwZXp8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBTdf8QZ YHicbcwHMZlO7RzUz80YyjAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MDk3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8kZAMA0GCSqGSIb3DQEBCwUAA4IBAQCfXocM2YG+B4W9GVddqctN 2erfM7j5LnB49nMPBRTSaM4CoXUwTpJogCqILp8lYCw3J7M73O07OIS0N3+tfyFD NMixFeBdTk9fkGgPfLKvshM1xhyF74GOagXvHhEpnIP+x6TyyQE8QkHQszRgojUH OAr9pjf4XUHQBKYKA401JC6MSe/Ynkch6ZmRGvJzdibn+Piq8xHJnmUAtI+sY4kw mBYWU8mRml4bnCuSq8Rb/oYOUthRxu83Wwb61ZZ0iNKKsaNcnm7WRNQPYSljNCvy mh33lSZARtdp4QHbLSMehnGwZc7MZwWHoJsiCe5d8fMqx8kyEIVO9dA5ORtkWb3x -----END CERTIFICATE-----Generated at Sun May 3 00:40:40 2026 by rpki-client