$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139384.roa File: AS139384.roa (raw, json) Hash identifier: MXWvNsIjvtb7rgWRDpFMkhk5FfqjlLOa5l4l0Co8eVw= Subject key identifier: 98:CC:AF:88:92:E2:C6:B9:78:69:41:63:3F:F3:6F:FB:5A:53:60:30 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 592268C2C54CC48DED8CB00E23E1E2C7888EB905 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139384.roa Signing time: Wed 04 Mar 2026 03:50:40 +0000 ROA not before: Wed 04 Mar 2026 03:45:40 +0000 ROA not after: Wed 03 Mar 2027 03:50:40 +0000 asID: 139384 IP address blocks: 103.142.224.0/24 maxlen: 24 2001:df1:5c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:22:68:c2:c5:4c:c4:8d:ed:8c:b0:0e:23:e1:e2:c7:88:8e:b9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 4 03:45:40 2026 GMT Not After : Mar 3 03:50:40 2027 GMT Subject: CN=98CCAF8892E2C6B9786941633FF36FFB5A536030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:fb:2f:be:6d:c3:d7:d6:d5:cc:1f:63:17: 1d:07:33:31:d5:96:4d:e2:84:51:55:29:ca:21:8d: 45:d3:bb:18:83:c0:cf:7e:39:61:64:20:5f:80:1e: 3f:8a:10:bb:2d:e0:51:f5:25:17:15:a6:23:e8:7b: 06:8c:6d:c9:60:1b:1c:c2:40:47:a8:1f:e5:ca:d2: 83:7e:41:55:46:b7:ba:a3:33:21:b0:4c:89:fa:53: 70:40:3b:a6:b6:12:d9:15:c9:4f:3f:da:71:31:e6: 21:76:39:ba:47:85:67:6c:43:d8:19:31:6c:ea:ce: a3:3c:f5:1e:e8:81:80:60:5a:25:5c:b0:c4:89:89: bf:69:51:2a:5b:87:33:6f:51:80:d6:30:80:3e:d5: 10:e9:d0:73:21:d8:37:a4:0f:14:6b:15:f8:19:dd: e1:41:b6:dc:a3:d0:60:8b:79:a8:ed:02:65:ad:98: 85:9e:da:93:0b:d0:9b:8f:fc:b9:9e:b9:24:5b:5e: fc:7a:26:31:a8:a1:32:3b:42:dc:f0:62:3f:ba:c2: 80:19:9c:b5:a8:78:39:d2:06:17:a4:d9:f4:a4:c6: a2:ea:3d:ec:12:41:be:13:31:3c:ae:b8:6c:79:b2: 65:6c:46:f2:8e:c4:4d:e2:a4:fc:53:8b:b9:be:28: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CC:AF:88:92:E2:C6:B9:78:69:41:63:3F:F3:6F:FB:5A:53:60:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.224.0/24 IPv6: 2001:df1:5c80::/48 Signature Algorithm: sha256WithRSAEncryption 08:cd:6e:69:61:ad:0e:01:50:dc:54:86:76:05:11:be:7a:90: fb:1d:d5:c5:6a:8e:d8:46:d4:4c:6f:4b:df:15:42:d9:8e:27: 05:1a:a6:99:f5:e1:78:77:0d:7b:c8:d1:06:6f:5d:2d:c8:84: 39:36:a3:a5:9c:a3:6e:c0:f7:67:4f:75:bb:6a:d9:12:3d:f6: 71:5c:b2:70:91:8c:f7:fb:0b:c3:7b:8d:02:f3:01:84:a3:34: ba:37:14:f8:78:31:5e:e6:5d:b7:f5:74:75:b0:1e:14:f5:f9: bd:aa:0c:3d:68:48:2c:3f:b2:bc:88:b5:84:05:91:4a:5c:5c: 3f:42:f9:1b:28:fe:a9:c7:6f:1c:4d:a6:41:2d:30:7a:f1:a9: 99:b1:20:7d:3d:80:2c:5e:26:0b:5d:35:26:ab:29:9d:55:2b: 82:77:71:74:30:d0:25:a9:00:05:73:37:da:bd:df:78:5e:00: fa:68:ce:f2:50:dd:cf:c7:58:14:81:a5:d9:19:7c:b2:d4:51: 67:c1:48:0d:21:4a:e5:76:23:e2:60:f9:07:c6:5d:a5:42:c8: 1f:b7:45:64:19:a2:e0:e0:37:e4:a9:57:d8:3f:6d:79:62:61: 38:98:46:6d:3e:ac:4e:f9:d0:b6:59:76:c0:00:99:45:b3:bb: c8:c2:09:95 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUWSJowsVMxI3tjLAOI+Hix4iOuQUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNDAzNDU0MFoX DTI3MDMwMzAzNTA0MFowMzExMC8GA1UEAxMoOThDQ0FGODg5MkUyQzZCOTc4Njk0 MTYzM0ZGMzZGRkI1QTUzNjAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9q+y++bcPX1tXMH2MXHQczMdWWTeKEUVUpyiGNRdO7GIPAz345YWQgX4Ae P4oQuy3gUfUlFxWmI+h7BoxtyWAbHMJAR6gf5crSg35BVUa3uqMzIbBMifpTcEA7 prYS2RXJTz/acTHmIXY5ukeFZ2xD2BkxbOrOozz1HuiBgGBaJVywxImJv2lRKluH M29RgNYwgD7VEOnQcyHYN6QPFGsV+Bnd4UG23KPQYIt5qO0CZa2YhZ7akwvQm4/8 uZ65JFte/HomMaihMjtC3PBiP7rCgBmctah4OdIGF6TZ9KTGouo97BJBvhMxPK64 bHmyZWxG8o7ETeKk/FOLub4oVDUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSYzK+I kuLGuXhpQWM/82/7WlNgMDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTM4NC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAGeO4DAPBAIAAjAJAwcAIAEN8VyAMA0GCSqGSIb3DQEBCwUAA4IB AQAIzW5pYa0OAVDcVIZ2BRG+epD7HdXFao7YRtRMb0vfFULZjicFGqaZ9eF4dw17 yNEGb10tyIQ5NqOlnKNuwPdnT3W7atkSPfZxXLJwkYz3+wvDe40C8wGEozS6NxT4 eDFe5l239XR1sB4U9fm9qgw9aEgsP7K8iLWEBZFKXFw/QvkbKP6px28cTaZBLTB6 8amZsSB9PYAsXiYLXTUmqymdVSuCd3F0MNAlqQAFczfavd94XgD6aM7yUN3Px1gU gaXZGXyy1FFnwUgNIUrldiPiYPkHxl2lQsgft0VkGaLg4DfkqVfYP215YmE4mEZt PqxO+dC2WXbAAJlFs7vIwgmV -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:52 2026 by rpki-client