
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa
File: AS142264.roa (raw, json)
Hash identifier: xEXXgTH3Q3RbSWxUO03MLjFw8KO2OWK9YSzQ0ZqdyRs=
Subject key identifier: 02:C9:6D:F3:F2:2A:8B:AD:92:76:52:62:92:63:71:52:64:73:2A:8A
Certificate issuer: /CN=A91862140000/serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Certificate serial: 717301376799D7C8C6FF95163081CEAB9721C929
Authority key identifier: 7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa
Signing time: Sat 02 May 2026 21:23:08 +0000
ROA not before: Sat 02 May 2026 21:18:08 +0000
ROA not after: Sat 01 May 2027 21:23:08 +0000
asID: 142264
IP address blocks: 198.15.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:73:01:37:67:99:d7:c8:c6:ff:95:16:30:81:ce:ab:97:21:c9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=7DF4349534441AF11A65DDD3588F74DC59C2D362
Validity
Not Before: May 2 21:18:08 2026 GMT
Not After : May 1 21:23:08 2027 GMT
Subject: CN=02C96DF3F22A8BAD927652629263715264732A8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:ca:4c:52:13:82:ae:9a:9d:93:4f:6d:67:
ce:4b:bd:c2:69:e3:4f:66:2b:ba:6c:3b:ce:eb:a5:
3c:18:e6:eb:05:2e:10:be:ba:10:97:1e:3b:62:f0:
40:51:64:de:99:a1:57:32:92:ce:7e:ab:b9:1b:14:
8a:48:d3:d5:95:e7:a4:c9:4d:fc:46:d3:5d:fb:ff:
d9:d8:af:62:17:f1:bd:7f:9b:72:db:dc:b2:d6:a3:
c8:d1:5e:e2:6b:45:f4:98:f4:ef:31:f0:48:e2:dd:
16:7a:71:40:f3:13:0d:69:55:71:ed:86:3c:3d:bc:
0b:58:b0:28:a6:4d:cf:82:ab:06:7a:37:56:00:27:
8a:b4:79:c8:8b:f0:7d:54:35:65:97:ac:de:39:c0:
c8:b4:2e:5f:03:72:9b:38:47:1c:cc:9e:3a:06:18:
b4:58:aa:a9:ea:25:b3:17:7d:c0:22:e7:36:a7:52:
ca:20:56:93:a3:fc:6c:f1:e0:7a:0e:bd:f1:8f:51:
6c:66:32:28:ee:8a:2f:4b:38:45:da:26:e7:42:cc:
2e:8f:ae:d9:a6:59:c1:ca:9e:1c:57:67:c1:f7:84:
cb:1f:39:7b:c3:37:65:6b:81:2b:c6:40:0e:08:43:
29:72:60:50:1a:d3:67:62:3c:66:9e:96:56:c6:e8:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:6D:F3:F2:2A:8B:AD:92:76:52:62:92:63:71:52:64:73:2A:8A
X509v3 Authority Key Identifier:
keyid:7D:F4:34:95:34:44:1A:F1:1A:65:DD:D3:58:8F:74:DC:59:C2:D3:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AS142264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
61:89:83:f2:64:45:19:f8:13:5e:68:e8:42:db:27:bf:cd:b6:
f8:de:40:34:4e:da:3f:fb:27:63:30:44:33:78:a2:7b:c3:9b:
38:2f:30:70:63:31:44:ce:19:31:fc:f9:b3:97:82:00:7d:1e:
21:9c:a0:7a:88:00:d7:2c:d4:df:ed:b7:89:e2:70:b3:ad:10:
30:c2:0a:88:dd:6d:47:01:cd:6b:b2:10:46:1d:3d:74:d5:37:
03:de:2d:31:f3:02:41:1f:f4:b1:c0:86:ef:0d:f7:7e:fa:ab:
68:00:44:16:33:23:72:ad:60:ac:6d:bd:5a:01:43:41:e2:73:
65:c2:5b:45:4c:e4:87:1f:4b:4e:9e:48:79:1f:04:23:03:f6:
b0:be:62:e4:88:10:fb:40:28:73:25:11:b0:ff:96:c4:55:0f:
31:86:b4:dc:d0:74:b6:b2:86:b0:9c:c9:13:6c:09:d3:b7:07:
ed:6b:ef:7f:20:32:9d:af:1c:35:06:69:77:60:63:ea:db:65:
1f:48:63:e2:a1:c2:a4:2d:b6:32:0f:ba:4c:a5:59:9f:9f:cc:
90:f8:17:4c:c4:01:17:3b:ef:9d:45:55:03:8a:18:99:32:08:
83:fa:d6:02:2e:db:ed:96:52:d0:09:55:35:a6:0b:17:e7:c5:
83:07:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:24 2026 by rpki-client