$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa File: AS139981.roa (raw, json) Hash identifier: W3es2gsqWfc+n63zccoBx5az3+VuXtFinRQw7Qr7u40= Subject key identifier: 91:24:78:0C:8A:10:32:14:25:6C:AE:21:4E:F3:14:A4:A7:C7:3C:D2 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 71FBEA9CC9D60506C61760E16C1A71B4C298FD75 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa Signing time: Mon 19 Oct 2026 10:03:08 +0000 ROA not before: Mon 19 Oct 2026 09:58:08 +0000 ROA not after: Mon 18 Oct 2027 10:03:08 +0000 asID: 139981 IP address blocks: 103.71.160.0/22 maxlen: 24 103.148.24.0/23 maxlen: 24 202.74.72.0/23 maxlen: 24 2405:c8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fb:ea:9c:c9:d6:05:06:c6:17:60:e1:6c:1a:71:b4:c2:98:fd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Oct 19 09:58:08 2026 GMT Not After : Oct 18 10:03:08 2027 GMT Subject: CN=9124780C8A103214256CAE214EF314A4A7C73CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:05:f1:5e:4b:0b:82:71:26:d7:15:2b:9e: 83:31:f9:c5:54:db:9c:f6:87:d5:98:b3:ab:9e:a6: 87:84:9d:82:c0:40:ff:b1:01:ca:9a:8c:f1:63:8c: ff:7b:88:8e:af:54:97:a4:5e:07:c7:b9:00:95:19: 2e:d1:a9:70:dc:34:3a:ff:53:9a:74:f4:cb:8b:0b: a6:8f:51:b5:fc:49:ad:ac:dd:ac:88:88:08:41:5d: f4:69:f4:ea:39:f2:02:a5:fd:2c:7b:90:5e:a4:79: 19:3c:fd:ba:fc:cc:38:db:c3:ee:56:bb:90:2e:58: 65:72:96:88:9d:8c:ef:60:66:48:56:8a:94:a8:3f: d3:44:2d:17:27:2a:93:da:3c:38:37:df:3f:c7:01: 4e:b8:5c:34:bd:08:c5:30:94:ab:96:e4:89:45:12: 60:4b:09:23:da:ec:f1:57:7f:f6:52:6b:46:ba:88: 1a:1e:78:0c:cf:07:4e:af:5b:dd:08:20:b0:09:c3: 0a:c8:97:33:89:43:f3:b3:04:c3:21:45:74:3e:82: 75:6a:e7:57:d2:77:a3:cd:30:1a:0c:29:c8:21:57: e5:03:fd:33:63:08:ca:7a:2d:45:75:18:55:46:e4: ad:6f:df:76:6b:40:64:9d:b1:80:52:2a:ea:dd:06: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:78:0C:8A:10:32:14:25:6C:AE:21:4E:F3:14:A4:A7:C7:3C:D2 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS139981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.160.0/22 103.148.24.0/23 202.74.72.0/23 IPv6: 2405:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:c3:9e:06:3c:a4:ee:f5:b8:37:b9:6a:b1:02:f2:07:56:b3: 75:ae:4c:fa:f1:b1:88:f9:ee:c3:c8:07:6e:d5:67:51:5f:a5: 12:96:3c:80:07:58:29:7f:ba:45:82:72:be:41:c5:5f:5d:25: ad:e1:da:17:c4:cf:76:00:a8:2d:d3:3d:68:78:b8:47:69:8d: d8:77:dd:ed:c2:3a:85:e9:76:d2:60:c2:25:85:47:26:c9:41: ff:79:85:f2:05:e2:68:2f:32:66:36:ce:75:e3:a3:c2:27:3a: 57:41:a8:ae:50:3b:a6:36:1c:58:30:df:9c:98:fa:e0:96:00: e2:3d:66:df:b1:c0:e5:aa:03:f9:82:63:06:8f:3d:69:ad:28: 33:61:1d:69:38:a6:42:91:86:57:88:ae:29:73:c4:7f:35:fb: 98:cf:e7:22:ee:93:a5:9e:5f:50:b7:64:91:e2:de:59:9d:d1: da:5d:ab:54:59:4e:e2:72:fb:bd:09:6a:3d:23:30:b7:c1:19: fd:f3:ef:1d:df:7f:00:28:74:ab:59:73:a0:e8:f0:1b:48:c8: c0:f8:51:b2:87:a2:c2:f9:23:8a:72:2a:03:3e:ad:ad:c5:3c: 4c:c6:13:9c:7e:59:3d:fe:1c:a2:20:5f:72:4f:f8:05:e0:b6: 9d:4b:57:fd -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUcfvqnMnWBQbGF2DhbBpxtMKY/XUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MTAxOTA5NTgwOFoX DTI3MTAxODEwMDMwOFowMzExMC8GA1UEAxMoOTEyNDc4MEM4QTEwMzIxNDI1NkNB RTIxNEVGMzE0QTRBN0M3M0NEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVBBfFeSwuCcSbXFSuegzH5xVTbnPaH1Zizq56mh4SdgsBA/7EBypqM8WOM /3uIjq9Ul6ReB8e5AJUZLtGpcNw0Ov9TmnT0y4sLpo9RtfxJrazdrIiICEFd9Gn0 6jnyAqX9LHuQXqR5GTz9uvzMONvD7la7kC5YZXKWiJ2M72BmSFaKlKg/00QtFycq k9o8ODffP8cBTrhcNL0IxTCUq5bkiUUSYEsJI9rs8Vd/9lJrRrqIGh54DM8HTq9b 3QggsAnDCsiXM4lD87MEwyFFdD6CdWrnV9J3o80wGgwpyCFX5QP9M2MIynotRXUY VUbkrW/fdmtAZJ2xgFIq6t0Go8kCAwEAAaOCAecwggHjMB0GA1UdDgQWBBSRJHgM ihAyFCVsriFO8xSkp8c80jAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTM5OTgxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIA ATASAwQCZ0egAwQBZ5QYAwQBykpIMA0EAgACMAcDBQAkBcjAMA0GCSqGSIb3DQEB CwUAA4IBAQBuw54GPKTu9bg3uWqxAvIHVrN1rkz68bGI+e7DyAdu1WdRX6USljyA B1gpf7pFgnK+QcVfXSWt4doXxM92AKgt0z1oeLhHaY3Yd93twjqF6XbSYMIlhUcm yUH/eYXyBeJoLzJmNs5146PCJzpXQaiuUDumNhxYMN+cmPrglgDiPWbfscDlqgP5 gmMGjz1prSgzYR1pOKZCkYZXiK4pc8R/NfuYz+ci7pOlnl9Qt2SR4t5ZndHaXatU WU7icvu9CWo9IzC3wRn98+8d338AKHSrWXOg6PAbSMjA+FGyh6LC+SOKcioDPq2t xTxMxhOcflk9/hyiIF9yT/gF4LadS1f9 -----END CERTIFICATE-----Generated at Mon Nov 2 08:29:04 2026 by rpki-client