$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142257.roa File: AS142257.roa (raw, json) Hash identifier: k1yL9uHemUGBybCdXZ2wVyndqVzcv4PMb4VEWwCzEas= Subject key identifier: 41:DE:66:AE:B3:B1:10:0E:6D:3C:2C:D0:87:CD:21:2C:30:D8:CB:64 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0A1D1119286203D4128451920C4301F87131DA77 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142257.roa Signing time: Wed 04 Feb 2026 02:50:58 +0000 ROA not before: Wed 04 Feb 2026 02:45:58 +0000 ROA not after: Wed 03 Feb 2027 02:50:58 +0000 asID: 142257 IP address blocks: 192.189.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1d:11:19:28:62:03:d4:12:84:51:92:0c:43:01:f8:71:31:da:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 4 02:45:58 2026 GMT Not After : Feb 3 02:50:58 2027 GMT Subject: CN=41DE66AEB3B1100E6D3C2CD087CD212C30D8CB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:a3:ed:d5:35:30:18:b8:a2:a4:97:91:14: 6c:a4:8b:b6:a6:83:7f:43:fb:88:8a:0b:07:1a:bb: 41:23:9f:3f:73:a9:b8:9b:fc:bd:31:50:c4:8c:5d: e8:76:7b:d4:5c:ad:86:a4:c0:44:f8:0b:fb:22:df: 36:fd:a4:4a:21:22:3f:af:32:66:43:d6:ef:7a:19: 71:37:dd:84:47:8c:51:87:80:4c:4f:47:8e:98:65: d7:0e:a5:12:18:f5:9d:bf:9f:f3:49:e9:80:6e:53: 01:c2:3e:6b:0f:b2:59:ea:b7:25:91:3c:2c:81:f3: 22:65:c3:90:a1:f0:02:6e:ce:ac:a5:c0:a7:05:f8: 75:af:6b:ea:0c:c4:b7:70:59:86:4d:64:3f:5c:ed: fa:98:e4:61:19:8f:c7:7c:a7:34:d7:3e:11:90:93: 48:c2:59:37:a1:df:24:67:1e:94:9d:a9:e0:43:11: cb:d0:e7:48:09:50:0e:dc:ba:a5:9c:cd:70:4d:71: 05:0b:58:4b:f2:92:11:8a:84:14:f0:6e:4c:6f:c7: 86:a1:1c:37:bc:b9:de:eb:fe:a3:5a:0b:5a:11:84: de:6a:04:f9:d1:18:03:39:19:5c:93:e2:78:1e:b9: 73:2b:ca:d4:91:09:ff:ae:61:b1:f5:5d:ae:29:42: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:66:AE:B3:B1:10:0E:6D:3C:2C:D0:87:CD:21:2C:30:D8:CB:64 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.189.94.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:84:95:a7:ef:c5:8a:70:1e:8d:df:72:80:ee:5e:5a:79:62: 46:55:0c:cc:98:77:2c:be:df:9f:65:76:7e:1f:65:4b:bb:61: 2d:62:ee:90:41:d8:40:06:d5:43:a1:e5:36:0b:bf:36:e2:9e: 31:28:4b:f4:ca:4a:d7:41:ee:be:4d:19:cb:ec:8c:7c:b6:83: ea:aa:c0:01:e2:d3:e0:51:28:60:02:a0:0b:27:b5:a1:95:dd: 87:07:6b:87:3f:47:f8:45:d0:9b:03:7d:70:1b:44:bc:8e:a4: 93:35:4d:88:da:6b:22:4d:83:67:39:ab:51:de:d6:6c:92:96: 66:0f:d8:e5:40:11:57:bb:28:ff:82:0e:fc:f4:d2:bd:07:85: d4:39:be:5b:4a:de:3a:2a:fe:8e:33:da:21:49:e4:ac:24:4c: dd:a0:a6:25:f7:13:f3:df:f6:65:57:ed:e7:bf:51:6c:31:a4: 43:a4:3e:15:ce:bb:7d:72:14:88:19:d0:83:ec:ee:34:4c:cd: bf:97:37:3f:55:10:59:90:50:79:9d:46:37:b0:14:6c:99:00: ed:d5:d7:53:f4:da:3e:9c:f3:59:68:40:fd:bd:fa:e3:9d:1b: c9:0e:c9:b5:77:0c:91:08:4e:f1:d0:5a:38:fa:1e:c1:4b:4b: 1e:7c:3e:a2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUCh0RGShiA9QShFGSDEMB+HEx2ncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwNDAyNDU1OFoX DTI3MDIwMzAyNTA1OFowMzExMC8GA1UEAxMoNDFERTY2QUVCM0IxMTAwRTZEM0My Q0QwODdDRDIxMkMzMEQ4Q0I2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8co+3VNTAYuKKkl5EUbKSLtqaDf0P7iIoLBxq7QSOfP3OpuJv8vTFQxIxd 6HZ71FythqTARPgL+yLfNv2kSiEiP68yZkPW73oZcTfdhEeMUYeATE9Hjphl1w6l Ehj1nb+f80npgG5TAcI+aw+yWeq3JZE8LIHzImXDkKHwAm7OrKXApwX4da9r6gzE t3BZhk1kP1zt+pjkYRmPx3ynNNc+EZCTSMJZN6HfJGcelJ2p4EMRy9DnSAlQDty6 pZzNcE1xBQtYS/KSEYqEFPBuTG/HhqEcN7y53uv+o1oLWhGE3moE+dEYAzkZXJPi eB65cyvK1JEJ/65hsfVdrilCaN8CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRB3mau s7EQDm08LNCHzSEsMNjLZDAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzE0MjI1Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMC9XjANBgkqhkiG9w0BAQsFAAOCAQEAL4SVp+/FinAejd9ygO5e WnliRlUMzJh3LL7fn2V2fh9lS7thLWLukEHYQAbVQ6HlNgu/NuKeMShL9MpK10Hu vk0Zy+yMfLaD6qrAAeLT4FEoYAKgCye1oZXdhwdrhz9H+EXQmwN9cBtEvI6kkzVN iNprIk2DZzmrUd7WbJKWZg/Y5UARV7so/4IO/PTSvQeF1Dm+W0reOir+jjPaIUnk rCRM3aCmJfcT89/2ZVft579RbDGkQ6Q+Fc67fXIUiBnQg+zuNEzNv5c3P1UQWZBQ eZ1GN7AUbJkA7dXXU/TaPpzzWWhA/b36450byQ7JtXcMkQhO8dBaOPoewUtLHnw+ og== -----END CERTIFICATE-----Generated at Mon Mar 2 09:34:49 2026 by rpki-client