$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147165.roa File: AS147165.roa (raw, json) Hash identifier: vedSq81dbxoKeRhNNK4eCamrvck36SWkpi/qbbzax4Q= Subject key identifier: 00:1C:39:0F:3D:75:59:0F:4F:C2:3E:BE:30:D3:96:48:00:8B:7C:97 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D4D11D7FE971B9A6FEBF35AF980BBEE1F76CECA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147165.roa Signing time: Wed 25 Feb 2026 04:00:00 +0000 ROA not before: Wed 25 Feb 2026 03:55:00 +0000 ROA not after: Wed 24 Feb 2027 04:00:00 +0000 asID: 147165 IP address blocks: 2001:df2:6140::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4d:11:d7:fe:97:1b:9a:6f:eb:f3:5a:f9:80:bb:ee:1f:76:ce:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 03:55:00 2026 GMT Not After : Feb 24 04:00:00 2027 GMT Subject: CN=001C390F3D75590F4FC23EBE30D39648008B7C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4d:15:1f:b2:38:1e:a2:50:a8:4d:ab:c5:dc: 2b:f7:37:7d:44:a5:64:cc:23:1c:b1:2c:84:94:d6: f3:00:7d:9a:73:06:ce:97:8e:6d:78:90:e3:b1:9f: 5d:b7:a0:b9:33:3c:2e:63:3e:a1:3c:bb:31:e8:dd: 2f:a1:bc:93:24:6a:09:c7:1a:30:61:20:84:ef:80: 7e:20:fd:76:b2:2d:f8:28:a5:30:1a:df:0d:4c:57: 2a:73:1b:d8:db:5f:20:5d:f4:ee:4a:26:bc:f2:c6: 30:98:e3:95:76:67:6a:2c:05:35:91:76:dc:e9:60: bc:88:dd:b9:43:1e:12:bf:c3:50:f7:76:6a:70:81: 37:be:a2:c8:d6:db:23:3e:20:b4:40:a2:03:66:9e: 93:5c:7c:79:31:5d:98:81:98:79:17:c2:ec:bb:24: 77:d9:05:85:a4:1b:c3:9d:6c:12:fb:49:f8:dc:6f: d2:76:f5:07:79:be:4a:40:f9:98:23:00:5e:58:47: 9a:de:97:c3:4e:4e:97:b0:1b:a0:ac:d7:7a:dc:a2: 43:f1:a1:5d:68:e2:56:b5:21:3e:69:c9:02:0b:24: 19:7d:62:23:bd:fd:72:6a:24:09:f3:df:3f:0d:a3: 6b:db:64:6e:bc:32:ef:26:21:e5:4c:5b:9c:7a:7e: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:39:0F:3D:75:59:0F:4F:C2:3E:BE:30:D3:96:48:00:8B:7C:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:6140::/48 Signature Algorithm: sha256WithRSAEncryption 34:ac:15:57:db:da:1b:e1:94:56:cc:a3:79:65:37:55:1e:f4: e3:bf:ed:cc:95:95:12:9a:12:a7:e8:74:cb:22:2e:6c:b8:11: 15:84:f6:cf:b6:da:8a:ac:69:e5:46:8d:9d:c9:92:b9:1d:ec: 7d:61:20:e1:96:ac:eb:12:59:d5:16:4c:d3:46:cd:dd:76:c0: d0:16:91:b7:7f:de:0b:9f:0c:69:3e:c3:df:f0:6a:93:84:a3: 65:f3:b7:4a:74:1e:80:49:74:9d:e8:e6:35:9f:f5:c5:ad:99: 83:71:3e:1c:06:5f:21:e8:aa:db:ad:87:d4:f8:f3:bb:57:27: bb:ee:a1:81:ea:bf:3e:ad:60:bf:1b:dc:fc:73:42:50:3d:43: 9b:4c:41:72:d5:ee:83:6a:1f:7a:6c:e2:a7:b8:a7:c1:02:ed: 16:8d:87:81:4a:a3:9c:7c:f6:d7:06:fe:a6:03:08:97:fb:62: 4d:f4:79:fb:a6:e9:c8:e7:d4:34:5d:8d:54:7f:de:97:a2:eb: 3d:7a:e0:89:f1:ee:ae:5b:de:68:2b:4d:5d:b0:d6:99:0c:5f: 45:70:60:14:85:e5:44:e9:ec:34:e0:4e:5a:9d:48:70:98:aa: 94:12:dd:fe:1b:2e:3d:da:4d:f2:00:0e:96:47:a7:75:0e:e5: da:ef:c6:80 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUXU0R1/6XG5pv6/Na+YC77h92zsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTAzNTUwMFoX DTI3MDIyNDA0MDAwMFowMzExMC8GA1UEAxMoMDAxQzM5MEYzRDc1NTkwRjRGQzIz RUJFMzBEMzk2NDgwMDhCN0M5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5NFR+yOB6iUKhNq8XcK/c3fUSlZMwjHLEshJTW8wB9mnMGzpeObXiQ47Gf XbeguTM8LmM+oTy7MejdL6G8kyRqCccaMGEghO+AfiD9drIt+CilMBrfDUxXKnMb 2NtfIF307komvPLGMJjjlXZnaiwFNZF23OlgvIjduUMeEr/DUPd2anCBN76iyNbb Iz4gtECiA2aek1x8eTFdmIGYeRfC7Lskd9kFhaQbw51sEvtJ+Nxv0nb1B3m+SkD5 mCMAXlhHmt6Xw05Ol7AboKzXetyiQ/GhXWjiVrUhPmnJAgskGX1iI739cmokCfPf Pw2ja9tkbrwy7yYh5UxbnHp+qK8CAwEAAaOCAdMwggHPMB0GA1UdDgQWBBQAHDkP PXVZD0/CPr4w05ZIAIt8lzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0NzE2NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACABDfJhQDANBgkqhkiG9w0BAQsFAAOCAQEANKwVV9vaG+GUVsyj eWU3VR7047/tzJWVEpoSp+h0yyIubLgRFYT2z7baiqxp5UaNncmSuR3sfWEg4Zas 6xJZ1RZM00bN3XbA0BaRt3/eC58MaT7D3/Bqk4SjZfO3SnQegEl0nejmNZ/1xa2Z g3E+HAZfIeiq262H1Pjzu1cnu+6hgeq/Pq1gvxvc/HNCUD1Dm0xBctXug2ofemzi p7inwQLtFo2HgUqjnHz21wb+pgMIl/tiTfR5+6bpyOfUNF2NVH/el6LrPXrgifHu rlveaCtNXbDWmQxfRXBgFIXlROnsNOBOWp1IcJiqlBLd/hsuPdpN8gAOlkendQ7l 2u/GgA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:01:13 2026 by rpki-client