$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa File: AS142377.roa (raw, json) Hash identifier: EsziBrod7DLYTGtbXzcNoJNYepLy8ZnIea3V7wQV/Ts= Subject key identifier: E6:5E:33:86:30:A6:2B:C6:76:19:F4:48:0D:D0:19:C9:BC:BD:68:50 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0830523ECD70DA0EBB9595424E80E5F98F25D9F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa Signing time: Mon 06 Apr 2026 07:00:00 +0000 ROA not before: Mon 06 Apr 2026 06:55:00 +0000 ROA not after: Mon 05 Apr 2027 07:00:00 +0000 asID: 142377 IP address blocks: 2001:df2:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:30:52:3e:cd:70:da:0e:bb:95:95:42:4e:80:e5:f9:8f:25:d9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 06:55:00 2026 GMT Not After : Apr 5 07:00:00 2027 GMT Subject: CN=E65E338630A62BC67619F4480DD019C9BCBD6850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:ad:87:d5:f3:d8:34:4f:66:4b:9b:a2:b7: 79:52:c6:5d:8d:31:b5:08:3b:0c:99:49:ce:41:79: 3a:a8:65:04:ef:11:bc:8b:40:75:97:04:b4:15:b2: bf:54:ca:6f:83:c7:7a:c6:eb:d4:6e:c7:3e:55:77: 75:e5:38:a0:4a:2e:ab:aa:6a:16:51:bc:df:c6:66: 6a:91:12:13:17:e0:db:c5:df:b4:1e:4e:72:e3:99: fc:13:18:e9:0a:01:47:de:14:d1:b4:0d:12:e8:5f: 83:07:49:92:bc:b4:46:34:e5:16:2e:6e:d0:c2:3b: e4:b9:06:3c:5c:ea:c5:ac:dc:7f:7e:b9:f3:6f:57: 12:45:af:db:46:1e:4d:d0:a5:fc:62:84:53:92:dd: 5e:22:68:0e:51:31:6d:e3:d7:44:5a:7d:e7:8e:3e: b3:59:e9:45:80:74:ea:aa:88:5c:75:38:fb:98:42: 06:2b:af:c3:06:59:87:c7:50:8e:27:06:a3:69:e0: ab:fa:7d:18:52:ba:64:d9:93:ec:73:d8:60:c9:62: b6:3a:6a:93:2f:13:61:c4:b9:3e:3e:64:aa:c8:32: 3d:94:fa:d3:c1:19:e7:39:91:60:ed:64:bf:28:4f: 49:4d:e7:dc:fd:28:0c:fa:29:f3:4a:9a:54:14:1c: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5E:33:86:30:A6:2B:C6:76:19:F4:48:0D:D0:19:C9:BC:BD:68:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:49:7e:7d:3a:8e:59:f5:8a:6f:f9:23:a2:b3:64:81:32:08: b3:9d:ec:b5:08:84:57:a0:60:d7:35:b1:f9:fc:7d:bd:c9:24: 16:28:57:02:86:e9:75:1f:fb:14:a9:e5:4d:05:9e:2f:0d:8a: 11:3f:ec:98:b0:0c:15:79:5c:12:29:3e:29:13:a7:c5:45:0f: 35:24:7e:92:dc:fd:6a:47:aa:ca:b4:01:02:23:da:f6:9f:33: 55:54:fa:9c:9e:1e:63:d7:65:a1:20:4d:fc:c5:81:50:43:30: 8a:94:aa:15:2e:4b:8b:33:c2:15:f6:74:21:cf:e2:d1:e9:2b: 0d:bf:54:7c:4a:6f:43:e7:0e:68:24:e2:50:53:cc:b4:07:8f: bf:9d:52:d4:8d:84:f8:68:00:7a:3b:27:d1:ca:1b:61:2c:d9: 29:a3:32:83:97:e2:e7:f1:5a:5d:95:52:d8:0e:36:72:3e:c7: d7:85:94:f5:ba:17:b8:93:2a:d5:a0:be:e7:23:0f:e2:06:5a: bf:f6:1e:56:86:e4:6e:99:25:08:cd:07:77:6b:e0:3e:0a:f6: a5:fa:e0:cc:8a:84:cd:09:29:4f:e9:95:f2:85:56:9f:d6:c1: 7d:58:8c:aa:4c:16:98:71:c7:ba:79:1d:76:3e:6b:44:49:0e: fc:61:a9:40 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUCDBSPs1w2g67lZVCToDl+Y8l2fMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjA2NTUwMFoX DTI3MDQwNTA3MDAwMFowMzExMC8GA1UEAxMoRTY1RTMzODYzMEE2MkJDNjc2MTlG NDQ4MEREMDE5QzlCQ0JENjg1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuxrYfV89g0T2ZLm6K3eVLGXY0xtQg7DJlJzkF5OqhlBO8RvItAdZcEtBWy v1TKb4PHesbr1G7HPlV3deU4oEouq6pqFlG838ZmapESExfg28XftB5OcuOZ/BMY 6QoBR94U0bQNEuhfgwdJkry0RjTlFi5u0MI75LkGPFzqxazcf365829XEkWv20Ye TdCl/GKEU5LdXiJoDlExbePXRFp9544+s1npRYB06qqIXHU4+5hCBiuvwwZZh8dQ jicGo2ngq/p9GFK6ZNmT7HPYYMlitjpqky8TYcS5Pj5kqsgyPZT608EZ5zmRYO1k vyhPSU3n3P0oDPop80qaVBQcV+0CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBTmXjOG MKYrxnYZ9EgN0BnJvL1oUDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM3Ny5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfJ4wDANBgkqhkiG9w0BAQsFAAOCAQEAlEl+fTqOWfWKb/kj orNkgTIIs53stQiEV6Bg1zWx+fx9vckkFihXAobpdR/7FKnlTQWeLw2KET/smLAM FXlcEik+KROnxUUPNSR+ktz9akeqyrQBAiPa9p8zVVT6nJ4eY9dloSBN/MWBUEMw ipSqFS5LizPCFfZ0Ic/i0ekrDb9UfEpvQ+cOaCTiUFPMtAePv51S1I2E+GgAejsn 0cobYSzZKaMyg5fi5/FaXZVS2A42cj7H14WU9boXuJMq1aC+5yMP4gZav/YeVobk bpklCM0Hd2vgPgr2pfrgzIqEzQkpT+mV8oVWn9bBfViMqkwWmHHHunkddj5rREkO /GGpQA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:11:19 2026 by rpki-client