$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS147165.roa File: AS147165.roa (raw, json) Hash identifier: nLaGcclBQ90r81v1CzdEEluK9CZdQOPCXglyx3SJkZg= Subject key identifier: FA:8A:7B:E8:07:3F:6A:28:53:33:AC:B0:51:D1:5E:BA:DD:C5:C8:8B Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 2F1565D84D790C2D70DF8D974DCED97F250501F4 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147165.roa Signing time: Sat 02 May 2026 08:35:26 +0000 ROA not before: Sat 02 May 2026 08:30:26 +0000 ROA not after: Sat 01 May 2027 08:35:26 +0000 asID: 147165 IP address blocks: 2001:df2:6140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:15:65:d8:4d:79:0c:2d:70:df:8d:97:4d:ce:d9:7f:25:05:01:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 2 08:30:26 2026 GMT Not After : May 1 08:35:26 2027 GMT Subject: CN=FA8A7BE8073F6A285333ACB051D15EBADDC5C88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:b4:56:29:f1:80:97:52:a9:94:df:c6:96: 0b:3e:9f:b1:2c:db:7b:bf:f4:80:7e:b0:db:ac:6a: c5:88:42:e4:0b:31:45:2f:46:d1:e9:7d:96:8f:00: a4:96:12:28:4e:d6:2e:38:1b:6f:cb:da:0d:ab:b8: 98:b9:a2:5c:04:ec:f5:07:08:a1:f8:10:6c:ec:89: 6d:fc:62:6b:85:58:c6:63:14:69:88:c1:bb:ba:e5: d1:4e:5a:d2:d8:7b:68:e1:0b:80:22:f8:d5:08:af: 20:8e:b6:7a:a6:9f:eb:b8:b7:9d:fe:d1:ec:dd:82: 49:4d:48:31:6e:5d:e2:a5:e5:85:15:3c:28:90:3c: 79:c3:28:89:69:63:ff:89:fe:08:07:d0:34:88:ff: 40:17:f0:95:e7:d2:17:7c:a0:40:31:10:89:2d:d9: 49:b8:a4:0b:d1:d3:08:48:56:8f:ce:77:c2:c2:f1: b1:e0:8d:6d:92:ae:b2:a1:79:e6:7c:39:77:7a:8d: d3:01:06:cd:a8:60:fd:f7:86:25:1c:9b:5e:f0:75: 06:ad:dc:4a:9d:b1:9e:07:ca:c0:8d:70:3d:6c:d2: 88:68:3e:5b:dd:9a:ac:a9:bd:b4:82:53:e0:8c:4d: 58:30:92:f0:d9:7b:cb:3d:a6:ba:e9:bf:dc:68:69: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:7B:E8:07:3F:6A:28:53:33:AC:B0:51:D1:5E:BA:DD:C5:C8:8B X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS147165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:6140::/48 Signature Algorithm: sha256WithRSAEncryption 4a:5f:e8:d1:0d:92:6d:a4:d3:c4:84:27:63:5e:b2:74:4d:85: 30:06:13:63:3e:c1:b3:61:6a:fe:a2:30:1f:1c:68:12:b0:19: ff:19:1c:91:9a:37:89:b5:16:ce:2b:84:68:a9:e5:42:37:05: ba:2f:88:39:8d:cd:ab:21:03:0f:f1:52:9d:ca:40:87:c0:0b: 1a:aa:75:12:c7:44:9c:ad:1d:54:e7:60:cc:39:30:6d:58:e2: 5f:81:84:77:de:1b:1b:22:76:b9:39:76:e7:15:3b:95:b5:b0: 77:41:db:48:0c:eb:19:c6:8b:06:83:e7:15:9c:d4:55:84:d1: 6a:d1:7f:d8:9c:2c:a6:3e:a8:d9:d9:41:fb:29:2e:ad:5f:0a: 5b:d3:6c:fb:b3:e9:8c:01:0a:91:a8:5c:9f:ad:e3:89:b3:85: fe:4a:0d:56:4c:ad:ec:95:29:b8:93:00:7c:ce:00:1a:34:7f: 59:72:cf:12:d9:a1:17:d7:2a:09:c0:02:9b:d3:9d:85:e1:e4: 90:54:2c:33:75:5a:ca:79:f2:a9:e9:2a:1f:cc:c6:b9:c5:e5: ee:76:04:83:b1:75:71:8a:4d:24:70:3c:47:e5:af:fd:5a:f9: bf:d0:9d:ce:1a:70:bd:24:f5:84:4e:48:4a:a7:9b:d0:b1:85: 9f:02:36:61 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIULxVl2E15DC1w342XTc7ZfyUFAfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMjA4MzAyNloX DTI3MDUwMTA4MzUyNlowMzExMC8GA1UEAxMoRkE4QTdCRTgwNzNGNkEyODUzMzNB Q0IwNTFEMTVFQkFEREM1Qzg4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIggtFYp8YCXUqmU38aWCz6fsSzbe7/0gH6w26xqxYhC5AsxRS9G0el9lo8A pJYSKE7WLjgbb8vaDau4mLmiXATs9QcIofgQbOyJbfxia4VYxmMUaYjBu7rl0U5a 0th7aOELgCL41QivII62eqaf67i3nf7R7N2CSU1IMW5d4qXlhRU8KJA8ecMoiWlj /4n+CAfQNIj/QBfwlefSF3ygQDEQiS3ZSbikC9HTCEhWj853wsLxseCNbZKusqF5 5nw5d3qN0wEGzahg/feGJRybXvB1Bq3cSp2xngfKwI1wPWzSiGg+W92arKm9tIJT 4IxNWDCS8Nl7yz2muum/3GhpJ7UCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT6invo Bz9qKFMzrLBR0V663cXIizAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQ3MTY1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAIAEN8mFAMA0GCSqGSIb3DQEBCwUAA4IBAQBKX+jRDZJtpNPEhCdjXrJ0 TYUwBhNjPsGzYWr+ojAfHGgSsBn/GRyRmjeJtRbOK4RoqeVCNwW6L4g5jc2rIQMP 8VKdykCHwAsaqnUSx0ScrR1U52DMOTBtWOJfgYR33hsbIna5OXbnFTuVtbB3QdtI DOsZxosGg+cVnNRVhNFq0X/YnCymPqjZ2UH7KS6tXwpb02z7s+mMAQqRqFyfreOJ s4X+Sg1WTK3slSm4kwB8zgAaNH9Zcs8S2aEX1yoJwAKb052F4eSQVCwzdVrKefKp 6SofzMa5xeXudgSDsXVxik0kcDxH5a/9Wvm/0J3OGnC9JPWETkhKp5vQsYWfAjZh -----END CERTIFICATE-----Generated at Sun May 3 00:40:30 2026 by rpki-client