
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139426.roa
File: AS139426.roa (raw, json)
Hash identifier: bDEeJr/qRzKMiALN4Ja2V4IQtumXMWVR9t3DBxFWpE4=
Subject key identifier: 68:A2:A7:00:CD:3C:D2:0D:3A:5A:1A:87:C1:88:F1:1F:7D:44:44:C1
Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial: 49E30F955190A609E95161B333E429A0430471C3
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139426.roa
Signing time: Mon 03 Aug 2026 06:17:49 +0000
ROA not before: Mon 03 Aug 2026 06:12:49 +0000
ROA not after: Mon 02 Aug 2027 06:17:49 +0000
asID: 139426
IP address blocks: 103.144.144.0/23 maxlen: 24
2405:6ec0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e3:0f:95:51:90:a6:09:e9:51:61:b3:33:e4:29:a0:43:04:71:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Validity
Not Before: Aug 3 06:12:49 2026 GMT
Not After : Aug 2 06:17:49 2027 GMT
Subject: CN=68A2A700CD3CD20D3A5A1A87C188F11F7D4444C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:19:bf:0b:00:69:d8:4f:6a:a6:23:92:f9:
17:86:b4:a4:c4:7d:42:fb:bc:17:8b:6c:03:bb:66:
aa:aa:56:16:c9:b7:c4:87:df:0e:b4:d3:91:04:95:
a0:62:ab:b1:84:66:cf:57:a3:5c:a5:2c:1a:84:c3:
80:6b:70:ac:5d:53:29:4a:90:19:6e:fe:80:43:68:
62:8d:7c:d5:d3:ab:27:e3:c3:4e:77:f6:12:2c:56:
ff:68:20:6f:09:48:93:85:f1:8d:8c:de:3d:00:8c:
05:c6:34:c3:de:fa:55:c4:2a:1c:53:9b:c2:54:8f:
4f:9b:a7:4a:da:26:fe:92:b0:03:eb:ee:b2:53:21:
6e:0d:48:32:81:2c:d9:63:3b:eb:89:5d:8b:b4:15:
9a:ba:37:7d:4b:cb:80:89:04:6f:10:0a:01:f2:65:
45:ae:94:3a:0c:ef:6b:0b:6f:ca:ba:cc:37:de:9a:
cc:a5:73:96:cc:67:42:e7:60:df:3f:ea:06:48:b9:
31:d5:6b:7d:21:e1:d2:8c:36:3a:15:b4:c7:c0:dd:
f3:96:d7:ad:d5:d7:b4:8b:e6:72:58:f3:fe:95:0b:
a2:7e:55:19:e8:94:b3:58:5f:aa:8a:83:31:d3:30:
5e:02:17:92:cd:cd:5e:42:6b:ef:87:10:64:04:78:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:A7:00:CD:3C:D2:0D:3A:5A:1A:87:C1:88:F1:1F:7D:44:44:C1
X509v3 Authority Key Identifier:
keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.144.0/23
IPv6:
2405:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
87:e3:de:e2:63:52:00:10:4e:29:57:2d:c4:0b:bf:a6:f2:bb:
80:5d:66:ec:c1:66:19:8b:0e:33:a1:88:e2:3e:6d:32:4c:70:
89:4e:d8:d2:dd:de:6e:bd:18:c9:19:52:fc:5d:48:70:35:e9:
2c:aa:aa:3e:88:24:8a:5e:dd:e6:34:97:46:4a:52:ab:71:82:
5d:29:ae:3b:85:d9:ca:7c:07:2b:7b:f6:18:cf:03:4d:cf:32:
18:8d:19:92:43:12:06:23:f9:c3:0e:28:40:96:e9:8f:1c:0b:
f3:80:df:85:1d:4e:41:fc:0a:4e:b8:f5:a1:41:16:19:aa:cd:
18:d7:c0:a6:d0:06:60:46:6c:bf:11:ab:a5:1c:37:93:26:e8:
e7:54:16:4e:0a:77:ad:46:0b:72:10:e7:2e:c9:b2:cf:22:e7:
04:b6:f1:13:1a:1d:63:7e:e7:58:bf:30:5b:22:83:b3:f5:01:
26:bf:a3:7b:48:a8:0f:ac:15:bb:78:e7:36:9a:60:c9:e3:cc:
2d:b2:89:a2:14:a5:73:65:44:f1:48:42:ff:e2:83:83:2e:c4:
93:39:51:2f:12:c9:30:02:64:58:30:04:ba:73:9f:12:da:a5:
ff:04:e0:bc:b6:76:f2:6e:5f:ab:fb:07:6c:2c:a6:43:04:44:
f8:8a:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:45:12 2026 by rpki-client