$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142370.roa File: AS142370.roa (raw, json) Hash identifier: cOzHfeEZSbfNOBYbs0zyAK6BR6CCGLe/KIqpDJK5Pxo= Subject key identifier: B8:80:2E:3E:36:C5:94:AF:91:A1:5D:AB:E9:4A:96:AC:16:1E:1A:32 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2CAD11500A7A6E21D28138B323AAEBF78C8EA935 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142370.roa Signing time: Mon 06 Oct 2025 04:00:00 +0000 ROA not before: Mon 06 Oct 2025 03:55:00 +0000 ROA not after: Mon 05 Oct 2026 04:00:00 +0000 asID: 142370 IP address blocks: 2001:df1:c1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:11:50:0a:7a:6e:21:d2:81:38:b3:23:aa:eb:f7:8c:8e:a9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 6 03:55:00 2025 GMT Not After : Oct 5 04:00:00 2026 GMT Subject: CN=B8802E3E36C594AF91A15DABE94A96AC161E1A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:a6:f8:5c:a7:8c:3e:60:fa:9d:58:ef:c9: 1b:b1:b0:8e:05:a0:89:1c:2c:0d:8b:f2:8a:17:d3: 91:19:a3:39:df:31:3e:7a:87:0b:2e:74:ed:7e:ce: 99:75:48:27:fb:bd:d5:2a:ac:bf:0b:e6:13:1a:11: 15:a1:1a:4e:28:de:f2:dc:97:1f:8c:4a:05:5f:4c: a0:a4:22:4a:05:8b:1f:1c:e2:f0:16:26:c5:7d:79: 68:b6:e6:bd:e6:15:8d:76:62:83:2e:71:e0:30:66: 84:c3:c6:d9:5b:49:40:b6:64:db:fc:b0:4e:b2:f6: 11:25:94:d5:59:50:6f:02:b8:75:37:6f:c9:0e:ce: 78:8e:80:36:7d:ef:8f:93:14:9a:b0:39:57:fe:d3: 14:df:46:91:20:f6:9d:1f:90:14:62:61:67:19:d7: 7f:e9:9a:4f:58:b3:33:e5:4b:c3:6e:84:dc:b5:93: 80:9c:2a:99:83:86:dd:04:ae:17:26:65:9b:33:8e: 73:c6:7c:28:6d:71:5c:99:9a:4b:57:6c:99:82:ce: 6d:b1:df:25:fd:32:0f:c6:60:30:de:9a:70:9e:b5: d7:86:4d:ab:05:8c:40:b8:9c:c6:3f:00:90:4c:78: 2e:6a:bb:27:8c:ea:f3:71:ab:c7:4d:37:30:09:c5: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:2E:3E:36:C5:94:AF:91:A1:5D:AB:E9:4A:96:AC:16:1E:1A:32 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:c1c0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:75:f3:7e:ad:42:e5:82:ef:f6:97:c9:43:b5:32:af:1b:b2: 50:75:35:3b:12:38:3f:5e:b7:96:05:21:21:58:04:ed:e1:e2: e8:15:52:06:f0:f7:1e:42:36:e9:05:f7:e5:c5:81:cd:07:60: f4:14:05:75:9b:f0:5d:bb:ef:a0:f4:cc:9d:39:b6:d4:57:b4: f4:82:ad:a8:3d:4b:f5:33:26:e9:b0:a4:7c:30:c2:75:29:44: 48:42:b3:ee:32:43:d0:47:0b:c7:76:12:7a:4b:03:e7:e7:a0: d9:ff:6d:a2:38:9f:a7:0f:7f:8d:ad:7c:96:f9:10:aa:a1:9d: 1e:e6:90:87:23:b8:01:28:3c:69:aa:b9:ff:1b:14:f0:d0:cb: 46:0d:ee:8b:5d:c7:45:57:25:94:8b:3e:01:7f:3a:59:41:ea: 25:a1:1a:0e:3e:19:b1:b9:be:0b:02:85:28:32:6a:6c:29:bc: 4b:17:65:ae:93:6f:20:0d:7e:04:53:5a:80:1a:75:b3:69:03: d1:91:94:9d:ed:85:a7:b1:4c:69:09:95:6b:1c:15:44:21:fe: a1:bb:04:f8:c6:d8:7b:cb:73:66:4f:53:a6:a4:04:c5:ff:97: 2f:1f:d9:16:e0:f1:5b:18:65:e6:40:59:70:66:7f:d1:70:4f: f6:ce:56:e5 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIULK0RUAp6biHSgTizI6rr94yOqTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwNjAzNTUwMFoX DTI2MTAwNTA0MDAwMFowMzExMC8GA1UEAxMoQjg4MDJFM0UzNkM1OTRBRjkxQTE1 REFCRTk0QTk2QUMxNjFFMUEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9Apvhcp4w+YPqdWO/JG7GwjgWgiRwsDYvyihfTkRmjOd8xPnqHCy507X7O mXVIJ/u91SqsvwvmExoRFaEaTije8tyXH4xKBV9MoKQiSgWLHxzi8BYmxX15aLbm veYVjXZigy5x4DBmhMPG2VtJQLZk2/ywTrL2ESWU1VlQbwK4dTdvyQ7OeI6ANn3v j5MUmrA5V/7TFN9GkSD2nR+QFGJhZxnXf+maT1izM+VLw26E3LWTgJwqmYOG3QSu FyZlmzOOc8Z8KG1xXJmaS1dsmYLObbHfJf0yD8ZgMN6acJ6114ZNqwWMQLicxj8A kEx4Lmq7J4zq83Grx003MAnFlzcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBS4gC4+ NsWUr5GhXavpSpasFh4aMjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3MC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfHBwDANBgkqhkiG9w0BAQsFAAOCAQEACnXzfq1C5YLv9pfJ Q7UyrxuyUHU1OxI4P163lgUhIVgE7eHi6BVSBvD3HkI26QX35cWBzQdg9BQFdZvw XbvvoPTMnTm21Fe09IKtqD1L9TMm6bCkfDDCdSlESEKz7jJD0EcLx3YSeksD5+eg 2f9tojifpw9/ja18lvkQqqGdHuaQhyO4ASg8aaq5/xsU8NDLRg3ui13HRVcllIs+ AX86WUHqJaEaDj4Zsbm+CwKFKDJqbCm8SxdlrpNvIA1+BFNagBp1s2kD0ZGUne2F p7FMaQmVaxwVRCH+obsE+MbYe8tzZk9TpqQExf+XLx/ZFuDxWxhl5kBZcGZ/0XBP 9s5W5Q== -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:48 2025 by rpki-client