$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/1/AS140012.roa File: AS140012.roa (raw, json) Hash identifier: 4fu7Pgln8cm8ZSCrJU3BynlvanP4XumXVTXV8xmFoZ8= Subject key identifier: 0B:F7:94:F1:D3:10:B5:FA:EA:AA:54:52:F8:3C:49:64:CD:B5:6B:A7 Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 3CF6609418CC7CE9B13826E22A5DA4A6C581BDF5 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140012.roa Signing time: Tue 18 Aug 2026 04:02:34 +0000 ROA not before: Tue 18 Aug 2026 03:57:34 +0000 ROA not after: Tue 17 Aug 2027 04:02:34 +0000 asID: 140012 IP address blocks: 2405:c940:1::/48 maxlen: 48 2405:c940:2::/48 maxlen: 48 2405:c940:3::/48 maxlen: 48 2405:c940:4::/48 maxlen: 48 2405:c940:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:60:94:18:cc:7c:e9:b1:38:26:e2:2a:5d:a4:a6:c5:81:bd:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: Aug 18 03:57:34 2026 GMT Not After : Aug 17 04:02:34 2027 GMT Subject: CN=0BF794F1D310B5FAEAAA5452F83C4964CDB56BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:03:7c:fe:75:7c:74:b7:08:b0:80:3a:67: 94:18:9e:36:13:21:5d:c3:d8:c7:ff:2e:45:5d:e8: da:7c:6d:9d:14:35:1e:cd:37:48:6a:51:c1:9d:be: d4:cd:37:67:ce:43:8d:ed:4e:5e:28:5b:e1:58:8f: ee:c8:0d:12:2b:f4:72:42:49:81:9d:1f:aa:75:b8: d0:ef:b4:6d:79:f9:04:1f:9f:6e:72:72:5d:9d:79: 40:94:d6:ba:7a:12:03:32:81:1c:d2:14:6b:a4:94: 80:fb:21:be:86:20:fa:ac:3d:2b:c4:45:02:7f:c1: 0d:e4:71:fc:46:a0:3a:06:f7:ce:cc:f4:50:c4:71: 78:de:f6:ec:85:92:10:68:04:b8:25:f4:1d:ca:5c: 29:6a:c3:ed:cd:9c:a2:2c:49:86:70:13:ac:7a:4d: e9:d8:28:d2:88:a8:a6:5d:97:b6:03:30:57:17:63: aa:57:b3:17:5d:23:c9:79:96:23:e5:a6:d1:be:a2: 2d:0f:52:f1:10:7a:34:f8:a2:e7:ff:55:50:29:eb: a2:ec:f9:dd:47:d5:a1:1b:73:eb:44:92:36:3b:54: f7:f0:c2:51:9a:8b:f4:7b:a1:1f:9f:45:bd:f7:05: fb:ab:f7:fb:0c:96:e3:eb:d3:da:f6:e4:47:ee:56: d4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F7:94:F1:D3:10:B5:FA:EA:AA:54:52:F8:3C:49:64:CD:B5:6B:A7 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS140012.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c940:1::-2405:c940:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 97:9f:a7:3f:b8:7b:49:52:80:54:f8:1d:63:17:7b:c9:e7:d9: 5e:1a:d9:b9:2c:d0:f3:cd:15:7f:90:d4:53:9c:ba:97:40:0c: 85:83:33:78:86:fb:5f:aa:43:83:96:88:de:42:a3:70:36:1f: d2:c9:15:15:e0:87:24:76:ff:e2:ba:e3:4b:49:70:d2:ba:9c: 3b:d8:be:38:e8:42:4a:ff:bf:10:64:dd:9e:33:9f:a9:0e:59: e0:13:6e:c2:61:64:a3:4d:ed:c5:4c:51:17:af:d0:22:0e:e5: 30:5f:6d:45:8b:81:85:b3:32:08:47:57:95:f1:c1:ff:b2:dc: 7f:01:d9:51:e5:69:8d:d5:46:91:f7:b3:53:bb:4a:0a:46:17: 80:54:a5:7d:ad:f2:f7:6e:e2:d3:07:a6:14:5f:fd:ce:4d:64: fc:ec:94:9d:01:3b:90:e9:b6:48:9e:3a:cc:16:72:2f:37:2c: 89:9d:bf:3c:1a:cf:b1:e2:0e:da:e7:57:8c:da:e8:78:ee:13: 67:f5:fb:4b:9c:d6:1a:9e:e3:3b:41:51:76:08:eb:b9:32:84: a2:0d:96:51:5a:fb:0d:34:66:a4:c9:d0:2e:1d:c6:10:e6:db: 70:f5:0a:7d:7c:1f:7c:8f:75:1e:60:fa:37:7e:ec:be:2f:07: ea:47:0d:22 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUPPZglBjMfOmxOCbiKl2kpsWBvfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDgxODAzNTczNFoX DTI3MDgxNzA0MDIzNFowMzExMC8GA1UEAxMoMEJGNzk0RjFEMzEwQjVGQUVBQUE1 NDUyRjgzQzQ5NjRDREI1NkJBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM68A3z+dXx0twiwgDpnlBieNhMhXcPYx/8uRV3o2nxtnRQ1Hs03SGpRwZ2+ 1M03Z85Dje1OXihb4ViP7sgNEiv0ckJJgZ0fqnW40O+0bXn5BB+fbnJyXZ15QJTW unoSAzKBHNIUa6SUgPshvoYg+qw9K8RFAn/BDeRx/EagOgb3zsz0UMRxeN727IWS EGgEuCX0HcpcKWrD7c2coixJhnATrHpN6dgo0oiopl2XtgMwVxdjqlezF10jyXmW I+Wm0b6iLQ9S8RB6NPii5/9VUCnrouz53UfVoRtz60SSNjtU9/DCUZqL9HuhH59F vfcF+6v3+wyW4+vT2vbkR+5W1JkCAwEAAaOCAdowggHWMB0GA1UdDgQWBBQL95Tx 0xC1+uqqVFL4PElkzbVrpzAfBgNVHSMEGDAWgBRBmoXN+KQwUWlGhp0cSSA31rxu njAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzEvNDE5QTg1Q0RGOEE0MzA1MTY5 NDY4NjlEMUM0OTIwMzdENkJDNkU5RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUVpxRnpmaWtNRkZwUm9hZEhFa2dO OWE4YnA0LmNlcjBSBggrBgEFBQcBCwRGMEQwQgYIKwYBBQUHMAuGNnJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy8xL0FTMTQwMDEyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIA AjAUMBIDBwAkBclAAAEDBwEkBclAAAQwDQYJKoZIhvcNAQELBQADggEBAJefpz+4 e0lSgFT4HWMXe8nn2V4a2bks0PPNFX+Q1FOcupdADIWDM3iG+1+qQ4OWiN5Co3A2 H9LJFRXghyR2/+K640tJcNK6nDvYvjjoQkr/vxBk3Z4zn6kOWeATbsJhZKNN7cVM URev0CIO5TBfbUWLgYWzMghHV5Xxwf+y3H8B2VHlaY3VRpH3s1O7SgpGF4BUpX2t 8vdu4tMHphRf/c5NZPzslJ0BO5DptkieOswWci83LImdvzwaz7HiDtrnV4za6Hju E2f1+0uc1hqe4ztBUXYI67kyhKINllFa+w00ZqTJ0C4dxhDm23D1Cn18H3yPdR5g +jd+7L4vB+pHDSI= -----END CERTIFICATE-----Generated at Thu Sep 3 21:55:24 2026 by rpki-client