$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa File: AS142325.roa (raw, json) Hash identifier: 0/HGRW9TmbELlJOJkbbuvFZnB7qpI4I3IJYhqRab9tY= Subject key identifier: D6:81:CF:28:83:1F:2D:7F:C2:34:F8:29:38:90:B3:AC:5A:D8:44:E3 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7DBA71DB187049B3520D7E35633E72A14614A20C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa Signing time: Wed 04 Feb 2026 09:00:00 +0000 ROA not before: Wed 04 Feb 2026 08:55:00 +0000 ROA not after: Wed 03 Feb 2027 09:00:00 +0000 asID: 142325 IP address blocks: 2001:df1:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ba:71:db:18:70:49:b3:52:0d:7e:35:63:3e:72:a1:46:14:a2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 4 08:55:00 2026 GMT Not After : Feb 3 09:00:00 2027 GMT Subject: CN=D681CF28831F2D7FC234F8293890B3AC5AD844E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:5e:6c:e9:b4:68:d3:6c:65:b9:48:45:dc: 38:1b:6f:7a:21:50:2d:ab:34:15:b1:cd:cb:15:c0: 98:73:a6:e0:33:be:b7:ea:52:d3:aa:8e:99:36:76: 3d:c8:19:a3:9b:46:f4:fc:f0:73:95:79:ac:e6:5f: c2:fa:8a:b1:86:aa:37:29:29:c1:ad:46:91:f0:1d: 52:b2:30:39:ca:06:e9:1c:2e:c5:ae:49:c1:b2:68: 90:a2:86:cc:1b:03:1a:c7:3f:dc:8a:f7:29:fd:b5: 63:fb:b1:e6:ab:53:09:b5:08:d2:54:81:72:29:4b: 25:a6:9c:db:50:21:31:34:15:67:12:b4:06:c6:69: 65:b2:72:9d:22:f6:bd:77:52:06:3b:8d:30:fc:ec: 5d:91:31:cb:00:79:9d:66:51:27:ae:c1:a5:52:fb: eb:ec:02:ef:64:4a:ba:b5:d7:f6:ed:ce:af:c5:01: 6e:52:23:a3:de:ed:4f:02:74:c7:c7:72:fc:a4:54: 10:7a:ef:7c:e0:0c:53:53:b2:76:bd:ec:ad:01:35: 09:99:44:1e:f7:fc:a0:f3:6a:7e:19:e8:73:8b:91: cb:98:99:b3:84:a0:ee:19:7b:73:42:bf:d1:c2:ef: 0a:e9:96:93:d3:69:b8:f5:6f:d5:33:1f:7c:65:75: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:81:CF:28:83:1F:2D:7F:C2:34:F8:29:38:90:B3:AC:5A:D8:44:E3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 28:0b:7b:70:a5:50:19:c4:02:05:8d:fe:df:fd:bb:45:e6:07: 45:c7:34:f7:8a:f1:f6:5b:4e:e6:7c:11:af:f8:0a:2b:03:5e: 3a:a2:c4:df:c9:7f:33:a0:f4:d1:0f:31:da:6b:8b:94:6c:2a: 9a:26:2b:49:72:60:f4:51:94:6f:11:d0:1b:3c:5d:bc:49:84: dc:85:ff:86:d7:33:95:1c:f4:86:93:9a:6b:25:60:b9:2f:72: f8:26:ba:b1:5b:6d:45:9d:cf:a4:da:95:73:67:1a:ef:fa:1d: 1c:25:b3:c5:9f:9c:24:e9:ef:8b:89:68:77:69:24:44:21:07: e2:1c:33:12:4f:52:a9:4f:ef:a2:51:48:1a:e4:7e:01:ff:bd: ce:27:1c:ba:6f:fa:1e:7e:73:62:ba:5b:6c:41:d9:08:b8:6d: 65:9e:ec:96:e1:2c:0e:7d:ed:e4:1a:db:e8:06:ec:87:70:3b: 08:75:63:72:dd:ca:30:b3:e1:d2:8b:76:19:ea:1a:ae:98:be: 1d:4c:5c:49:74:41:bf:ca:1f:64:0f:8d:af:fa:1c:c9:b3:b7: 70:7a:b3:8c:9e:9f:1d:eb:f6:0e:f9:4e:46:f3:5d:1d:68:8d: b1:56:0f:82:6c:c6:f0:22:20:50:54:ae:2c:36:6c:24:08:69: 37:7f:5f:b7 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUfbpx2xhwSbNSDX41Yz5yoUYUogwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNDA4NTUwMFoX DTI3MDIwMzA5MDAwMFowMzExMC8GA1UEAxMoRDY4MUNGMjg4MzFGMkQ3RkMyMzRG ODI5Mzg5MEIzQUM1QUQ4NDRFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOwXmzptGjTbGW5SEXcOBtveiFQLas0FbHNyxXAmHOm4DO+t+pS06qOmTZ2 PcgZo5tG9Pzwc5V5rOZfwvqKsYaqNykpwa1GkfAdUrIwOcoG6Rwuxa5JwbJokKKG zBsDGsc/3Ir3Kf21Y/ux5qtTCbUI0lSBcilLJaac21AhMTQVZxK0BsZpZbJynSL2 vXdSBjuNMPzsXZExywB5nWZRJ67BpVL76+wC72RKurXX9u3Or8UBblIjo97tTwJ0 x8dy/KRUEHrvfOAMU1Oydr3srQE1CZlEHvf8oPNqfhnoc4uRy5iZs4Sg7hl7c0K/ 0cLvCumWk9NpuPVv1TMffGV1iQcCAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTWgc8o gx8tf8I0+Ck4kLOsWthE4zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMyNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfE0wDANBgkqhkiG9w0BAQsFAAOCAQEAKAt7cKVQGcQCBY3+ 3/27ReYHRcc094rx9ltO5nwRr/gKKwNeOqLE38l/M6D00Q8x2muLlGwqmiYrSXJg 9FGUbxHQGzxdvEmE3IX/htczlRz0hpOaayVguS9y+Ca6sVttRZ3PpNqVc2ca7/od HCWzxZ+cJOnvi4lod2kkRCEH4hwzEk9SqU/volFIGuR+Af+9ziccum/6Hn5zYrpb bEHZCLhtZZ7sluEsDn3t5Brb6Absh3A7CHVjct3KMLPh0ot2Geoarpi+HUxcSXRB v8ofZA+Nr/ocybO3cHqzjJ6fHev2DvlORvNdHWiNsVYPgmzG8CIgUFSuLDZsJAhp N39ftw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:00:24 2026 by rpki-client