
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa
File: AS142167.roa (raw, json)
Hash identifier: 6STG56RXYNKr/O24RjrJlSbLSu9yi+WMbWe1EgqLxyY=
Subject key identifier: A5:6A:5A:D4:DE:DD:D6:91:26:BA:B1:56:94:CB:41:02:05:39:07:98
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7C26BFE042FB6131077D692E3D51E4ED1C886C22
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa
Signing time: Wed 18 Feb 2026 15:37:11 +0000
ROA not before: Wed 18 Feb 2026 15:32:11 +0000
ROA not after: Wed 17 Feb 2027 15:37:11 +0000
asID: 142167
IP address blocks: 144.79.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:26:bf:e0:42:fb:61:31:07:7d:69:2e:3d:51:e4:ed:1c:88:6c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Feb 18 15:32:11 2026 GMT
Not After : Feb 17 15:37:11 2027 GMT
Subject: CN=A56A5AD4DEDDD69126BAB15694CB410205390798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:96:0c:7f:01:df:ae:94:ac:aa:d5:ba:c1:
a2:21:bf:e1:45:5b:e4:51:05:4d:52:e3:0b:90:6b:
3b:d8:43:50:61:6b:bb:b8:c0:f5:c8:ac:90:f3:c2:
d4:3c:75:23:58:8d:7c:4b:23:cd:72:3e:c3:26:c5:
bc:e1:a3:b4:ec:95:9e:19:35:7f:bf:c9:54:b4:d8:
53:b1:46:bd:08:55:2f:3d:a7:16:6c:8c:99:85:b4:
3c:e8:58:b4:11:05:c4:e9:b8:d8:3b:d0:e3:ef:87:
d2:22:66:8d:61:41:64:22:f6:63:2b:12:d0:69:51:
0e:2d:1c:d9:ac:66:33:06:b9:a2:03:9b:01:ed:27:
56:ae:7e:ca:55:db:e2:0c:8b:aa:96:96:63:08:d7:
ca:dd:49:f2:b2:81:6e:03:7c:0e:64:eb:b9:64:55:
94:fc:58:0a:cb:56:02:96:92:77:70:ee:ec:f2:92:
af:59:3d:21:1e:ff:ac:c1:df:43:f6:ea:82:15:05:
e9:21:e5:8f:de:63:ed:b0:f7:38:99:85:16:7e:a4:
b9:e2:0c:f8:76:6e:38:7b:d9:58:c2:ce:9c:38:a0:
c8:32:86:da:1f:20:8e:2b:f0:c2:66:e7:fa:83:29:
03:bb:c8:e6:f4:94:6e:65:eb:63:39:60:96:5c:8e:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:5A:D4:DE:DD:D6:91:26:BA:B1:56:94:CB:41:02:05:39:07:98
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:65:36:45:1b:e5:dc:a6:af:6d:ed:a4:00:1f:32:1d:9d:d1:
b4:e6:5b:21:34:d7:da:35:4b:28:58:c6:13:fb:d5:7e:80:5f:
0a:1e:5c:04:45:ed:e4:f4:29:8a:52:1e:de:ad:d4:92:a0:da:
f5:75:f1:94:83:97:0a:bf:8f:8e:ae:f4:15:18:63:89:7e:a8:
40:a4:a3:db:88:b4:0d:cc:b8:9e:a4:18:e0:fd:cd:29:5a:3e:
9b:05:79:e3:b4:b3:79:0e:b5:5d:92:76:4b:ce:c4:b0:0a:a9:
8f:37:de:a6:ca:6f:8e:38:37:f6:a2:92:3b:70:8a:7b:41:07:
db:5c:ef:13:d6:88:78:4a:46:10:d4:6d:4c:fb:88:17:ca:06:
c2:c3:9e:52:b4:40:7f:68:6d:f3:99:a2:c3:a6:a9:7b:4c:d7:
e9:a6:e7:be:35:9c:b6:19:1e:b8:a0:1f:7c:f2:12:89:97:4c:
98:2d:29:e2:c2:b9:fe:a2:aa:ad:56:1c:44:07:f3:2f:1b:79:
16:eb:f3:b2:5e:ef:31:84:26:18:68:5c:db:b3:65:ce:e0:45:
91:f9:5d:bf:35:38:09:9d:de:ce:52:0a:fa:65:02:10:e7:45:
15:57:c2:39:21:96:c3:1d:89:c8:3f:06:73:99:48:3e:c8:2d:
b7:35:0a:ec
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUfCa/4EL7YTEHfWkuPVHk7RyIbCIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIxODE1MzIxMVoX
DTI3MDIxNzE1MzcxMVowMzExMC8GA1UEAxMoQTU2QTVBRDRERURERDY5MTI2QkFC
MTU2OTRDQjQxMDIwNTM5MDc5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALkilgx/Ad+ulKyq1brBoiG/4UVb5FEFTVLjC5BrO9hDUGFru7jA9ciskPPC
1Dx1I1iNfEsjzXI+wybFvOGjtOyVnhk1f7/JVLTYU7FGvQhVLz2nFmyMmYW0POhY
tBEFxOm42DvQ4++H0iJmjWFBZCL2YysS0GlRDi0c2axmMwa5ogObAe0nVq5+ylXb
4gyLqpaWYwjXyt1J8rKBbgN8DmTruWRVlPxYCstWApaSd3Du7PKSr1k9IR7/rMHf
Q/bqghUF6SHlj95j7bD3OJmFFn6kueIM+HZuOHvZWMLOnDigyDKG2h8gjivwwmbn
+oMpA7vI5vSUbmXrYzlgllyOywsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSlalrU
3t3WkSa6sVaUy0ECBTkHmDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjE2Ny5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJBPETANBgkqhkiG9w0BAQsFAAOCAQEALmU2RRvl3Kavbe2kAB8y
HZ3RtOZbITTX2jVLKFjGE/vVfoBfCh5cBEXt5PQpilIe3q3UkqDa9XXxlIOXCr+P
jq70FRhjiX6oQKSj24i0Dcy4nqQY4P3NKVo+mwV547SzeQ61XZJ2S87EsAqpjzfe
pspvjjg39qKSO3CKe0EH21zvE9aIeEpGENRtTPuIF8oGwsOeUrRAf2ht85miw6ap
e0zX6abnvjWcthkeuKAffPISiZdMmC0p4sK5/qKqrVYcRAfzLxt5Fuvzsl7vMYQm
GGhc27NlzuBFkfldvzU4CZ3ezlIK+mUCEOdFFVfCOSGWwx2JyD8Gc5lIPsgttzUK
7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:49 2026 by rpki-client