
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa
File: AS142231.roa (raw, json)
Hash identifier: nNYUO3F+MbLZiXnZByaukB29DixH+7DpWUTGTlI0/pg=
Subject key identifier: 33:1F:07:9F:2B:1E:F3:27:C8:7A:A8:21:83:B2:5C:03:43:5A:4F:FF
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 79051F5671512DBCC931D2A4932EA283E910BF89
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa
Signing time: Fri 06 Feb 2026 08:07:42 +0000
ROA not before: Fri 06 Feb 2026 08:02:42 +0000
ROA not after: Fri 05 Feb 2027 08:07:42 +0000
asID: 142231
IP address blocks: 144.79.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:05:1f:56:71:51:2d:bc:c9:31:d2:a4:93:2e:a2:83:e9:10:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Feb 6 08:02:42 2026 GMT
Not After : Feb 5 08:07:42 2027 GMT
Subject: CN=331F079F2B1EF327C87AA82183B25C03435A4FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:4e:c4:8f:9c:d8:c1:46:97:7a:1a:ed:ed:
99:79:b0:6d:c4:c0:0e:4a:49:a8:f2:dc:6d:dd:fb:
57:97:15:d4:df:10:49:07:61:bb:9e:cc:f8:86:18:
9f:dc:9e:a0:d5:33:87:c4:6d:2a:27:3e:f2:4e:fa:
29:df:1f:c3:fe:0c:e5:2e:7b:84:70:40:fb:5a:0f:
6a:20:22:99:66:f6:b4:0b:a7:0a:e5:dc:3b:67:db:
6e:92:07:00:6a:f6:8e:94:05:ed:fc:32:5d:79:b7:
31:2f:09:59:03:80:26:ed:5f:79:16:00:4e:eb:52:
6a:19:6d:7a:f4:e6:7d:94:e9:63:75:c4:ff:a3:2b:
ed:ee:5b:5e:ec:e9:f5:cd:e5:d9:2a:b3:1e:02:77:
42:56:c3:5f:8d:c8:2b:65:5e:13:dc:99:70:1d:01:
ab:17:17:2e:1f:1e:32:7f:21:55:c9:2b:3b:55:63:
1c:84:32:94:8c:bd:66:5c:a1:ea:ea:89:e1:50:15:
98:9d:d3:c1:12:aa:dc:96:59:e4:73:2a:df:d3:da:
09:e8:1e:f5:04:4e:61:3d:c8:00:2a:6a:74:2e:7a:
19:76:32:8d:8d:af:5e:f9:30:c7:f5:8b:78:3c:0f:
3d:46:76:e9:40:d6:84:e0:ae:ed:d6:31:18:8a:df:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:07:9F:2B:1E:F3:27:C8:7A:A8:21:83:B2:5C:03:43:5A:4F:FF
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.142.0/24
Signature Algorithm: sha256WithRSAEncryption
84:90:68:43:d1:08:18:e9:1f:27:7f:9d:2d:b2:4f:a2:c3:4b:
44:de:cf:1b:47:8c:4b:93:cd:df:5d:66:5e:01:bd:e7:08:27:
8d:86:15:c4:10:8b:fb:a1:54:b8:70:a2:41:98:4f:91:33:e2:
ba:b5:21:33:33:37:5e:8c:76:f3:b3:0e:6a:29:78:41:a8:3b:
13:a1:f0:c3:95:36:b1:5b:0d:34:6e:3e:44:ae:d5:2e:89:2e:
9a:c6:77:cb:26:cc:ea:7c:bd:09:94:a0:2b:c5:36:67:43:0d:
24:b1:be:9b:94:68:e3:ad:24:c9:eb:74:2a:70:0d:60:01:e1:
2f:10:ed:b3:dc:b4:cb:15:ef:b0:bc:5e:1b:36:5f:c4:47:41:
87:4a:ab:49:ff:8d:70:5b:96:50:ee:db:6e:f0:d9:83:85:a6:
4d:7a:19:00:66:c9:c4:39:a4:42:e1:59:3c:6d:1d:17:e3:25:
dd:4c:1f:42:8f:81:c9:7d:90:44:ae:5b:70:40:b5:9d:cd:01:
c8:0e:49:ed:d6:47:e1:bd:19:cc:13:17:09:bd:e7:f5:2f:7c:
ea:f8:5d:49:e1:59:c8:a6:82:a6:64:0c:c9:c8:8c:0e:34:72:
52:78:b6:a4:a7:73:29:2f:64:e8:d2:54:1f:e5:6f:cc:36:9e:
56:15:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:51 2026 by rpki-client